Privacy Policy -

Introduction and Overview

We have prepared this privacy policy (version 30.12.2025-113092826) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (hereinafter referred to as „data“) we, as data controllers – and the data processors we have engaged (e.g., providers) – process, will process in the future, and what legal options you have. The terms used are to be understood as gender-neutral.
In short: We will provide you with comprehensive information about the data we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, however, aims to describe the most important aspects as simply and transparently as possible. Where it promotes transparency, technical terms are explained in a reader-friendly way , links to further information are provided, and graphics are used. We inform you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible if one provides the briefest, unclear, and overly technical legal explanations that are often standard practice on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps you will discover some information that you were not previously aware of.
If you still have questions, please contact the responsible party listed below or in the legal notice, follow the provided links, and consult further information on third-party websites. Our contact details can also be found in the legal notice.

scope

This privacy policy applies to all personal data processed by us within our company and to all personal data processed by companies commissioned by us (data processors). Personal data, as defined in Article 4 No. 1 GDPR, refers to information such as a person’s name, email address, and postal address. The processing of personal data enables us to offer and bill for our services and products, whether online or offline. The scope of this privacy policy includes:

all online presences (websites, online shops) that we operate
Social media presence and email communication
mobile apps for smartphones and other devices

In short: This privacy policy applies to all areas where personal data is processed in a structured manner within the company via the aforementioned channels. Should we enter into a legal relationship with you outside of these channels, we will inform you separately if necessary.

Legal basis

In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, that allow us to process personal data.
Regarding EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can, of course, read this EU General Data Protection Regulation online at EUR-Lex, the access point to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 .

We only process your data if at least one of the following conditions applies:

Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of your entered data from a contact form.
Contract (Article 6 paragraph 1 lit. b GDPR): We process your data to fulfill a contract or pre-contractual obligations with you. For example, if we conclude a purchase agreement with you, we need personal information beforehand.
Legal obligation (Article 6 paragraph 1 lit. c GDPR): We process your data when we are subject to a legal obligation. For example, we are legally required to retain invoices for accounting purposes. These typically contain personal data.
Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not infringe your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data to operate our website securely and economically. This processing therefore constitutes a legitimate interest.

Other conditions, such as the recording of images in the public interest, the exercise of public authority, or the protection of vital interests, do not generally apply in our case. If such a legal basis should apply, it will be indicated at the relevant point.

In addition to the EU regulation, national laws also apply:

In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data ( Data Protection Act ), abbreviated DSG .
In Germany , the Federal Data Protection Act ( BDSG) applies.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the responsible party

Should you have any questions regarding data protection or the processing of personal data, you will find the contact details of the controller below in accordance with Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR):
barista.tools
Otto Hauck
Fraham 18,
5273 Roßbach near Mauerkirchen,
Austria

Authorized representative: Otto Hauck
Email: info@barista.tools
Telephone: +43 650 944 00 50
Legal notice: https://www.barista.tools/pages/impressum

Storage duration

We generally adhere to the principle that we only store personal data for as long as is absolutely necessary for providing our services and products. This means that we delete personal data as soon as the reason for processing it no longer exists. In some cases, we are legally obligated to retain certain data even after the original purpose has ceased to exist, for example, for accounting purposes.

Should you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and provided there is no obligation to store it.

We will inform you about the specific duration of the respective data processing below, provided we have further information on this.

Rights under the General Data Protection Regulation

In accordance with Articles 13 and 14 of the GDPR, we inform you about the following rights to which you are entitled, in order to ensure fair and transparent data processing:

According to Article 15 of the GDPR, you have the right to information about whether we process your data. If this is the case, you have the right to receive a copy of the data and the following information:
- for what purpose we carry out the processing;
- the categories, i.e. the types of data that are processed;
- who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
- how long the data will be stored;
- the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
- that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);
- the origin of the data if we did not collect it from you;
- whether profiling is carried out, i.e., whether data is automatically evaluated to create a personal profile of you.
According to Article 16 of the GDPR, you have a right to rectification of your data, which means that we must correct any data you find.
According to Article 17 of the GDPR, you have the right to erasure (“right to be forgotten”), which specifically means that you can request the deletion of your data.
According to Article 18 GDPR, you have the right to restrict processing, which means that we may only store the data but not use it further.
According to Article 20 of the GDPR, you have the right to data portability, which means that we will provide you with your data in a commonly used format upon request.
According to Article 21 GDPR, you have the right to object, which, if exercised, will result in a change to the processing.
- If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then examine as quickly as possible whether we can legally comply with this objection.
- If your data is used for direct marketing purposes, you can object to this type of data processing at any time. We will then no longer be permitted to use your data for direct marketing.
- If data is used for profiling, you can object to this type of data processing at any time. We will then no longer be permitted to use your data for profiling.
According to Article 22 of the GDPR, you may have the right not to be subject to a decision based solely on automated processing (for example, profiling).
According to Article 77 of the GDPR, you have the right to lodge a complaint. This means you can lodge a complaint with the data protection authority at any time if you believe that the processing of your personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority, whose website can be found at https://www.dsb.gv.at/ . In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) . The following local data protection authority is responsible for our company:

Austrian Data Protection Authority

Head: Dr. Matthias Schmidl
Address: Barichgasse 40-42, 1030 Vienna
Telephone number: +43 1 52 152-0
Email address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

Data transfer to third countries

We only transfer or process data in countries outside the scope of the GDPR (third countries) if you consent to this processing or if there is another legal basis for doing so. This applies in particular if the processing is required by law or necessary for the performance of a contract, and in any case only to the extent that this is generally permitted. In most cases, your consent is the primary reason why we process data in third countries. Processing personal data in third countries such as the USA, where many software companies offer services and have their servers, can mean that personal data is processed and stored in unexpected ways.

We would like to expressly point out that, according to the European Court of Justice, an adequate level of protection for data transfers to the USA currently only exists if a US company processing personal data of EU citizens in the USA is an active participant in the EU-US Data Privacy Framework. More information can be found at: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Data processing by US services that are not active participants in the EU-US Data Privacy Framework may result in data not being processed and stored anonymously. Furthermore, US government authorities may potentially access individual data points. Additionally, collected data may be linked to data from other services offered by the same provider, provided you have a corresponding user account. Where possible, we strive to use server locations within the EU, if available.
We will inform you in more detail about data transfers to third countries at the relevant points in this privacy policy, if applicable.

Data processing security

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. This makes it as difficult as possible, within our means, for third parties to infer personal information from our data.

Article 25 of the GDPR refers to „data protection by design and by default,“ meaning that security must always be considered and appropriate measures implemented for both software (e.g., forms) and hardware (e.g., access to the server room). We will discuss specific measures below, if necessary.

TLS encryption with https

TLS, encryption, and HTTPS sound very technical, and they are. We use HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely over the internet.
This means that the entire transmission of all data from your browser to our web server is secure – nobody can “listen in”.

This introduces an additional layer of security, allowing us to comply with data protection by design ( Article 25 Paragraph 1 GDPR ). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data.
You can recognize the use of this data transmission protection by the small lock symbol. top left in the browser, to the left of the internet address (e.g. examplepage.de) and the use of the scheme https (instead of http) as part of our internet address.
If you would like to learn more about encryption, we recommend searching Google for “Hypertext Transfer Protocol Secure wiki” to find good links to further information.

communication

Communication Summary
👥 Affected: Everyone who communicates with us by phone, email or online form
📓 Data processed: e.g., telephone number, name, email address, form data entered. More details can be found under the respective contact method used.
🤝 Purpose: Handling communication with customers, business partners, etc.
📅 Storage period: Duration of the business transaction and legal regulations
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract), Art. 6 para. 1 lit. f GDPR (legitimate interests)

When you contact us and communicate via telephone, email or online form, personal data may be processed.

The data will be processed for the handling and processing of your inquiry and the associated business transaction. The data will be stored for as long as required by law.

Affected persons

The aforementioned processes affect everyone who contacts us via the communication channels we provide.

phone

When you call us, the call data is stored pseudonymously on your device and with your telecommunications provider. Additionally, data such as your name and phone number may be sent via email and stored for the purpose of responding to your inquiry. This data will be deleted as soon as the matter is resolved and legal requirements permit.

e-mail

When you communicate with us via email, data may be stored on your device (computer, laptop, smartphone, etc.) and on our email server. This data will be deleted once the business transaction is complete and legal requirements permit.

Online forms

When you communicate with us via online form, data is stored on our web server and may be forwarded to an email address provided by us. The data is deleted as soon as the business transaction has been completed and legal requirements permit.

Chatbot

We provide you with an AI-powered chat operated via Shopify Inbox.
The chat is used to efficiently respond to your inquiries and to support our customer service.

Processed Data
When using the chat, the following data may be processed in particular:

Content of your messages (chat history)
Contact details provided by you (e.g. name, email address)
Order or customer data, if you share this information in the chat or if it is required to process your request
Technical metadata (e.g. timestamps, device and browser information)

Please do not transmit any sensitive or special categories of personal data via the chat.

Purposes of Processing
The data is processed for the purpose of:

Responding to your support and service inquiries
Improving service quality and the efficient handling of customer requests

Legal Basis
Your data is processed on the basis of:

Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
Art. 6(1)(f) GDPR (legitimate interest in providing efficient customer support)

Recipients and Data Processors
For the technical provision of the chat, we use Shopify Inbox, a service of the Shopify Group.
Shopify processes the data on our behalf as a data processor in accordance with Art. 28 GDPR and may use affiliated companies and sub-processors for this purpose.

Third-Country Transfers
When using Shopify Inbox, data may be processed in countries outside the EU or the EEA (e.g. Canada or the United States). Shopify provides appropriate data protection safeguards for such transfers.

Data Retention
We store chat content only for as long as necessary to process your request.
Chat histories are regularly deleted or anonymized, unless statutory retention obligations require longer storage. Technical system and log data may be subject to different retention periods.

Automated Processing
Responses in the chat may be generated automatically using artificial intelligence.
However, no exclusively automated decision-making with legal effect or similarly significant impact on you takes place.

Legal basis

The processing of the data is based on the following legal grounds:

Article 6 paragraph 1 letter a GDPR (consent): You give us your consent to store your data and to use it further for purposes relating to the business transaction;
Article 6 paragraph 1 letter b GDPR (contract): The processing is necessary for the performance of a contract with you or a data processor such as the telephone provider, or we need to process the data for pre-contractual activities, such as preparing an offer;
Article 6 paragraph 1 letter f GDPR (Legitimate Interests): We want to handle customer inquiries and business communication in a professional manner. This requires certain technical equipment such as email programs, Exchange servers, and mobile network operators to ensure efficient communication.

Data Processing Agreement (DPA)

In this section, we would like to explain what a data processing agreement (DPA) is and why it is necessary. Because the term „data processing agreement“ is quite a mouthful, we will often use the acronym DPA in this text. Like most companies, we don’t work alone, but also utilize the services of other companies or individuals. By involving various companies or service providers, we may transfer personal data for processing. These partners then act as data processors, with whom we conclude a contract, the so-called data processing agreement (DPA). Most importantly for you to know is that the processing of your personal data must be carried out exclusively according to our instructions and must be regulated by the DPA.

Who are data processors?

As a company and website owner, we are responsible for all data we process from you. In addition to the data controller, there may also be so-called data processors. This includes any company or individual that processes personal data on our behalf. More precisely, and according to the GDPR definition: any natural or legal person, public authority, agency, or other body that processes personal data on our behalf is considered a data processor. Data processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

To better understand the terminology, here is an overview of the three roles in the GDPR:

Data subject (you as a customer or prospective customer) → Controller (we as a company and client) → Processor (service providers such as web hosts or cloud providers)

Content of a data processing agreement

As mentioned above, we have concluded a data processing agreement (DPA) with our partners who act as data processors. This agreement stipulates, above all, that the data processor will process the data to be processed exclusively in accordance with the GDPR. The agreement must be in writing; however, in this context, an electronic agreement is also considered „in writing.“ Personal data will only be processed on the basis of this agreement. The agreement must contain the following:

Loyalty to us as the responsible party
Duties and rights of the controller
Categories of affected persons
Type of personal data
Type and purpose of data processing
Subject matter and duration of data processing
Location of data processing

Furthermore, the contract contains all the obligations of the data processor. The most important obligations are:

To ensure data security measures
to take possible technical and organizational measures to protect the rights of the data subject
to maintain a data processing directory
to cooperate with the data protection supervisory authority upon request.
to conduct a risk analysis regarding the personal data received
Sub-processors may only be commissioned with the written consent of the data controller.

You can see an example of what such a data processing agreement (DPA) looks like at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html . A sample contract is presented there.

Cookies

Cookies Summary
👥 Affected: Visitors to the website
🤝 Purpose: depends on the specific cookie. More details can be found below or on the website of the software provider that sets the cookie.
📓 Data processed: Depends on the specific cookie used. More details can be found below or on the website of the software provider that sets the cookie.
📅 Storage duration: depends on the specific cookie and can vary from hours to years.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used, so that you can better understand the following privacy policy.

Whenever you browse the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing is undeniable: cookies are truly useful tools. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other types of cookies for different applications. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically placed in the cookie folder, essentially the „brain“ of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data, such as your language preferences or personal website settings. When you revisit our site, your browser sends this user-related information back to us. Thanks to cookies, our website recognizes you and provides your preferred settings. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.

The following graphic illustrates a possible interaction between a web browser, such as Chrome, and a web server. The web browser requests a website and receives a cookie from the server, which the browser then reuses whenever another page is requested.

HTTP cookie interaction between browser and web server

There are both first-party and third-party cookies. First-party cookies are created directly by our website, while third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to several years. Cookies are not software programs and do not contain viruses, Trojans, or other malware. Cookies cannot access information on your computer.

This is what cookie data might look like, for example:

Name: _ga
Value: GA1.2.1326744211.152113092826-9
Purpose: Differentiating website visitors
Expiry date: after 2 years

These are the minimum sizes a browser should be able to support:

At least 4096 bytes per cookie
At least 50 cookies per domain
At least 3000 cookies in total

What types of cookies are there?

The specific cookies we use depend on the services used and are explained in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

There are four types of cookies:

Essential cookies
These cookies are necessary to ensure the basic functionality of the website. For example, these cookies are needed when a user adds a product to their shopping cart, then continues browsing other pages, and only later proceeds to checkout. These cookies prevent the shopping cart from being emptied, even if the user closes their browser window.

Functional cookies
These cookies collect information about user behavior and whether the user receives any error messages. They also measure loading times and the website’s performance across different browsers.

Targeted cookies
These cookies improve user-friendliness. For example, they save entered locations, font sizes, or form data.

Advertising cookies
These cookies are also called targeting cookies. They are used to deliver individually tailored advertising to the user. This can be very convenient, but also very annoying.

Typically, when you first visit a website, you will be asked which types of cookies you wish to allow. And of course, this decision is also stored in a cookie.

If you would like to learn more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265 , the Internet Engineering Task Force (IETF) Request for Comments entitled “HTTP State Management Mechanism”.

Purpose of processing via cookies

The purpose ultimately depends on the specific cookie. More details can be found below or on the website of the software provider that sets the cookie.

What data is processed?

Cookies are small tools that help with many different tasks. Unfortunately, it’s impossible to generalize about what data is stored in cookies, but we will inform you about the data processed and stored in the following privacy policy.

Storage duration of cookies

The storage duration depends on the specific cookie and is further specified below. Some cookies are deleted after less than an hour, while others can remain stored on a computer for several years.

You also have control over the storage duration. You can manually delete all cookies at any time via your browser (see also “Right to object” below). Furthermore, cookies based on consent will be deleted at the latest after you withdraw your consent, whereby the lawfulness of the storage remains unaffected until then.

Right to object – how can I delete cookies?

You decide how and whether you want to use cookies. Regardless of the service or website the cookies originate from, you always have the option to delete, disable, or partially allow cookies. For example, you can block third-party cookies but allow all others.

If you want to see which cookies have been stored in your browser, or if you want to change or delete cookie settings, you can find this information in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing cookies and website data with Safari

Firefox: Clear cookies to remove data that websites have stored on your computer.

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally don’t want to allow cookies, you can configure your browser to always notify you when a cookie is about to be set. This allows you to decide whether to allow each individual cookie. The procedure varies depending on the browser. The best way to find instructions is to search on Google using the keywords „delete cookies Chrome“ or „disable cookies Chrome“ if you are using the Chrome browser.

Legal basis

Since 2009, the so-called „Cookie Directive“ has been in effect. It stipulates that storing cookies requires your consent (Article 6(1)(a) GDPR). However, reactions to this directive vary considerably across EU countries. In Austria, the directive was implemented in Section 165(3) of the Telecommunications Act (2021). In Germany, the Cookie Directive was not transposed into national law. Instead, it was largely implemented in Section 15(3) of the Telemedia Act (TMG), which was replaced by the Digital Services Act (DDG) in May 2024.

For strictly necessary cookies, even where no consent has been given, there are legitimate interests (Article 6(1)(f) GDPR) which are in most cases of an economic nature. We want to provide visitors to the website with a pleasant user experience, and certain cookies are often essential for this.

Unless strictly necessary, cookies are only used with your consent. The legal basis for this is Article 6(1)(a) GDPR.

The following sections will provide you with more detailed information about the use of cookies, if the software used employs cookies.

Web hosting introduction

Web hosting summary
👥 Affected: Visitors to the website
🤝 Purpose: professional website hosting and operational security
📓 Data processed: IP address, time of website visit, browser used, and other data. More details can be found below or on the website of your web hosting provider.
📅 Storage duration: depends on the respective provider, but usually 2 weeks
⚖️ Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is web hosting?

When you visit websites these days, certain information – including personal data – is automatically generated and stored, and this website is no exception. This data should be processed as sparingly as possible and only with justification. By „website,“ we mean all web pages on a domain, i.e., everything from the homepage to the very last subpage (like this one). By „domain,“ we mean, for example, example.de or sample.com.

If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You’re probably familiar with some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We simply call them browsers or web browsers.

To display the website, the browser needs to connect to another computer where the website’s code is stored: the web server. Operating a web server is a complex and resource-intensive task, which is why it’s usually handled by professional providers. These providers offer web hosting and ensure the reliable and error-free storage of website data. A lot of technical terms, but please bear with us, it gets better!

When your browser connects to the web server (desktop, laptop, tablet, or smartphone) and during data transmission to and from the web server, personal data may be processed. On the one hand, your computer stores data; on the other hand, the web server also needs to store data for a certain period of time to ensure proper operation.

A picture is worth a thousand words, therefore the following graphic illustrates the interaction between browser, the internet and the hosting provider.

Why do we process personal data?

The purposes of data processing are:

Professional website hosting and operational security
to maintain operational and IT security
Anonymous analysis of access behavior to improve our services and, if necessary, for law enforcement or pursuit of claims.

What data is processed?

Even while you are currently visiting our website, our web server, that is the computer on which this website is stored, usually automatically saves data such as

the complete internet address (URL) of the accessed website
Browser and browser version (e.g. Chrome 87)
the operating system used (e.g. Windows 10)
the address (URL) of the previously visited page (referrer URL) (e.g. https://www.examplesourcesite.de/fromwhereIcame/ )
the hostname and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
Date and time
in files, the so-called web server log files

How long is data stored?

The data mentioned above is generally stored for two weeks and then automatically deleted. We do not share this data, but we cannot rule out the possibility that authorities may access it in the event of unlawful activity.

In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we will not share your data without your consent!

Legal basis

The lawfulness of processing personal data in the context of web hosting is based on Art. 6 para. 1 lit. f GDPR (safeguarding legitimate interests), because the use of professional hosting from a provider is necessary to present the company securely and user-friendly on the internet and to be able to pursue attacks and claims arising therefrom.

We and the hosting provider usually have a data processing agreement in accordance with Art. 28 f. GDPR, which ensures compliance with data protection and guarantees data security.

External web hosting provider privacy policy

Below you will find the contact details of our external hosting provider, where you can find out more about data processing in addition to the information above:

help.shopify.com

You can find out more about data processing at this provider in the privacy policy .

Web Analytics Introduction

Web Analytics Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the website.
📓 Data processed: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found in the documentation for the respective web analytics tool used.
📅 Storage duration: depends on the web analytics tool used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is web analytics?

We use software on our website to analyze visitor behavior, commonly known as web analytics. This involves collecting data that is stored, managed, and processed by the respective analytics tool provider (also called a tracking tool). This data is used to create analyses of user behavior on our website and made available to us as the website operator. Most tools also offer various testing options. For example, we can test which offers or content resonate best with our visitors. To do this, we display two different offers for a limited time. After the test (known as an A/B test), we know which product or content our website visitors find more interesting. For such testing procedures, as well as other analytics methods, user profiles can be created and the data stored in cookies.

Why do we use web analytics?

With our website, we have a clear goal in mind: to deliver the best online offering on the market for our industry. To achieve this, we aim to provide the best and most engaging content while ensuring you feel completely comfortable on our website. Web analytics tools allow us to closely examine the behavior of our website visitors and then improve our online offerings accordingly, benefiting both you and ourselves. For example, we can determine the average age of our visitors, their geographical origin, peak traffic times, and which content or products are particularly popular. All this information helps us optimize the website and tailor it perfectly to your needs, interests, and preferences.

What data is processed?

Exactly which data is stored depends, of course, on the analytics tools used. However, it typically includes information such as which content you view on our website, which buttons or links you click, when you access a page, which browser you use, which device (PC, tablet, smartphone, etc.) you use to visit the website, and which computer system you are using. If you have consented to the collection of location data, this may also be processed by the web analytics tool provider.

Your IP address will also be stored. According to the General Data Protection Regulation (GDPR), IP addresses are considered personal data. However, your IP address is generally stored in pseudonymized form (i.e., in an unidentifiable and shortened form). For the purposes of testing, web analytics, and web optimization, no direct data such as your name, age, address, or email address is stored. All such data, if collected, is stored pseudonymously. This ensures that you cannot be identified as an individual.

The following example schematically illustrates how Google Analytics works as an example of client-based web tracking using JavaScript code.

How long the respective data is stored always depends on the provider. Some cookies only store data for a few minutes or until you leave the website, while other cookies can store data for several years.

Duration of data processing

Right to object

Legal basis

The use of web analytics requires your consent, which we obtained via our cookie popup. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by web analytics tools.

In addition to obtaining your consent, we have a legitimate interest in analyzing website visitor behavior to improve our services both technically and economically. Web analytics helps us identify website errors, detect attacks, and improve efficiency. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests) . However, we only use these tools if you have given your consent.

Since web analytics tools use cookies, we also recommend that you read our general privacy policy regarding cookies. To learn exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Information on specific web analytics tools can be found – if available – in the following sections.

Google Analytics Privacy Policy

Google Analytics Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the website.
📓 Data processed: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, and click behavior. More details can be found below in this privacy policy.
📅 Storage duration: individually adjustable; by default, Google Analytics stores 4 data points for 14 months.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Analytics?

We use the Google Analytics tracking tool, version 4 (GA4), from the American company Google Inc. on our website. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your activity on our website. By combining various technologies such as cookies, device IDs, and login information, you as a user can be identified across different devices. This allows your activity to be analyzed across platforms.

For example, when you click a link, this event is stored in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us to better tailor our website and services to your needs. Below, we explain the tracking tool in more detail, focusing on what data is processed and how you can prevent this.

Google Analytics is a tracking tool used to analyze website traffic. These measurements and analyses are based on a pseudonymous user identification number. This number does not contain any personal data such as name or address, but rather serves to assign events to a specific device. GA4 uses an event-based model that captures detailed information about user interactions such as page views, clicks, scrolling, and conversion events. Furthermore, GA4 incorporates various machine learning functions to better understand user behavior and certain trends. GA4 uses machine learning to generate models. This means that, based on the collected data, missing data can be extrapolated to optimize the analysis and enable forecasting.

For Google Analytics to function correctly, a tracking code is embedded in our website’s code. When you visit our website, this code records various actions you perform on our site. Using GA4’s event-driven data model, we, as website operators, can define and track specific events to analyze user interactions. This allows us to track not only general information like clicks and page views, but also specific events that are important to our business. These specific events might include submitting a contact form or purchasing a product.

As soon as you leave our website, this data will be sent to and stored on Google Analytics servers.

Google processes the data and we receive reports about your user behavior. These may include, among other things, the following reports:

Target group reports: Through target group reports, we get to know our users better and know more precisely who is interested in our service.
Ad reports: Ad reports help us to analyze and improve our online advertising more easily.
Acquisition reports: Acquisition reports give us helpful information about how we can attract more people to our service.
Behavior reports: Here we learn how you interact with our website. We can track your path on our site and which links you click.
Conversion reports: A conversion is a process where you perform a desired action as a result of a marketing message. For example, when you go from being a website visitor to a customer or newsletter subscriber. These reports help us understand how our marketing efforts are performing for you, which is how we aim to increase our conversion rate.
Real-time reports: Here we always know immediately what is happening on our website. For example, we can see how many users are currently reading this text.

In addition to the above-mentioned analysis reports, Google Analytics 4 also offers the following features:

Event-based data model: This model captures very specific events that can occur on our website. For example, playing a video, purchasing a product, or subscribing to our newsletter.
Advanced analytics features: These features allow us to better understand your behavior on our website and certain general trends. For example, we can segment user groups, conduct comparative analyses of target groups, or track your journey through our website.
Predictive modeling: Based on collected data, machine learning can extrapolate missing data to predict future events and trends. This can help us develop better marketing strategies.
Cross-platform analysis: Data can be collected and analyzed from both websites and apps. This allows us to analyze user behavior across platforms, provided, of course, that you have consented to the data processing.

Why do we use Google Analytics on our website?

Our goal with this website is clear: We want to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal.

The statistically analyzed data gives us a clear picture of our website’s strengths and weaknesses. On the one hand, we can optimize our site so that it’s easier for interested people to find it on Google. On the other hand, the data helps us understand you, our visitors, better. We therefore know exactly what we need to improve on our website to offer you the best possible service. The data also helps us to make our advertising and marketing efforts more targeted and cost-effective. After all, it only makes sense to show our products and services to people who are interested in them.

What data does Google Analytics store?

Google Analytics uses a tracking code to create a random, unique ID that is linked to your browser cookie. This allows Google Analytics to recognize you as a new user and assign you a user ID. The next time you visit our site, you will be recognized as a returning user. All collected data is stored along with this user ID. This is the only way to analyze pseudonymous user profiles.

To analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. The Google Analytics 4 property is the default for every newly created property. Data is stored for varying lengths of time depending on the property used.

Your interactions are measured across platforms using identifiers such as cookies, app instance IDs, user IDs, or custom event parameters, provided you have consented. Interactions are all types of actions you perform on our website. If you also use other Google systems (such as a Google account), data generated via Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, authorize it. Exceptions may occur if required by law.

According to Google, Google Analytics 4 does not log or store IP addresses. However, Google uses IP address data to derive location data and deletes it immediately afterward. Therefore, all IP addresses collected from users in the EU are deleted before the data is stored in a data center or on a server.

Since Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies compared to earlier versions (such as Google Universal Analytics). However, there are some specific cookies used by GA4. These include, for example:

Name: _ga
Value: 2.1326744211.152113092826-5
Purpose: By default, analytics.js uses the _ga cookie to store the user ID. Its primary function is to distinguish website visitors.
Expiry date: after 2 years

Name: _gid
Value: 2.1687193234.152113092826-1
Purpose: The cookie also serves to distinguish website visitors.
Expiry date: after 24 hours

Name: _gat_gtag_UA_<property-id>
Value: 1
Purpose: Used to reduce the request rate. If Google Analytics is deployed via Google Tag Manager, this cookie is named _dc_gtm_ <property-id>.
Expiry date: after 1 minute

Note: This list is not exhaustive, as Google frequently changes its cookie selection. GA4 also aims to improve data privacy. Therefore, the tool offers several options for controlling data collection. For example, we can define the storage duration and control data collection itself.

Here we show you an overview of the most important types of data collected with Google Analytics:

Heatmaps: Google creates so-called heatmaps. These heatmaps show exactly which areas you click on. This gives us information about where you are on our website.

Session duration: Google defines session duration as the time you spend on our site without leaving the page. If you have been inactive for 20 minutes, the session ends automatically.

Bounce rate : A bounce occurs when you view only one page on our website and then leave our website.

Account creation: When you create an account or place an order on our website, Google Analytics collects this data.

Location: IP addresses are not logged or stored in Google Analytics. However, inferences are used to determine location data shortly before the IP address is deleted.

Technical information: This includes, among other things, your browser type, your internet service provider, and your screen resolution.

Source of origin: Google Analytics; we are of course also interested in which website or advertisement you came to our site via.

Other data collected includes contact information, any ratings, media playback (e.g., when you play a video on our site), sharing content via social media, or adding items to your favorites. This list is not exhaustive and serves only as a general guide to data storage by Google Analytics.

How long and where will the data be stored?

Google has distributed its servers all over the world. You can find out exactly where Google’s data centers are located here: https://datacenters.google/

Your data is distributed across various physical storage devices. This has the advantage of faster data retrieval and better protection against manipulation. Each Google data center has corresponding emergency backup programs for your data. Even if, for example, Google’s hardware fails or natural disasters disable servers, the risk of a service interruption at Google remains low.

The data retention period depends on the properties used. The storage duration is always set individually for each property. Google Analytics offers four options for controlling the storage duration:

2 months: that is the shortest storage period.
14 months: by default, data is stored for 14 months in GA4.
26 months: the data can also be stored for 26 months.
Data is only deleted when we delete it manually.

Additionally, there is the option to have data deleted only if you do not visit our website within the period we have selected. In this case, the retention period will be reset each time you visit our website again within the specified period.

Once the specified period has expired, the data is deleted once a month. This retention period applies to your data that is linked to cookies, user recognition, and advertising IDs (e.g., cookies from the DoubleClick domain). Report results are based on aggregated data and are stored separately from user data. Aggregated data is a combination of individual data points into a larger unit.

How can I delete my data or prevent data storage?

Under European Union data protection law, you have the right to access, update, delete, or restrict the processing of your data. By using the browser add-on to deactivate Google Analytics JavaScript (analytics.js, gtag.js), you can prevent Google Analytics 4 from using your data. You can download and install the browser add-on from https://tools.google.com/dlpage/gaoptout?hl=de . Please note that this add-on only deactivates data collection by Google Analytics.

If you wish to disable, delete or manage cookies in general, you will find the corresponding links to the respective instructions for the most well-known browsers under the section „Cookies“.

Legal basis

The use of Google Analytics requires your consent, which we obtained via our cookie popup. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by web analytics tools.

In addition to your consent, we have a legitimate interest in analyzing website visitor behavior to improve our services both technically and economically. Using Google Analytics, we can identify website errors, detect attacks, and improve efficiency. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we only use Google Analytics if you have given your consent.

Google processes your data, among other things, in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, Google uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/ .

We hope we have provided you with the most important information regarding data processing by Google Analytics. If you would like to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de .

If you would like to learn more about data processing, please refer to Google’s privacy policy at https://policies.google.com/privacy?hl=de .

Data Processing Agreement (DPA) Google Analytics

In accordance with Article 28 of the General Data Protection Regulation (GDPR), we have concluded a data processing agreement (DPA) with Google. You can find out exactly what a DPA is and, above all, what it must contain in our general section „Data Processing Agreement (DPA).“

This agreement is legally required because Google processes personal data on our behalf. It stipulates that Google may only process data received from us according to our instructions and must comply with the GDPR. You can find the link to the data processing agreement at https://business.safety.google/intl/de/adsprocessorterms/

Google Analytics reports on demographics and interests

We have enabled advertising reporting features in Google Analytics. The demographic and interest reports contain information about age, gender, and interests. This allows us to gain a better understanding of our users without being able to attribute this data to individual persons. You can learn more about the advertising features at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad .

You can opt out of the use of your Google account activity and information by unchecking the box under “Ad settings” at https://adssettings.google.com/authenticated .

Google Analytics in consent mode

Depending on your consent, Google Analytics will process your personal data in so-called consent mode. You can choose whether or not to allow Google Analytics cookies. This also determines which of your data Google Analytics is permitted to process. This collected data is primarily used to measure user behavior on the website, display targeted advertising, and provide us with web analytics reports. You typically consent to data processing by Google via a cookie consent tool. If you do not consent to data processing, only aggregated data will be collected and processed. This means that data cannot be associated with individual users, and therefore no user profile is created. You can also choose to consent only to statistical measurement. In this case, no personal data is processed and consequently it is not used for advertising or advertising success measurement.

Google Analytics IP anonymization

We have implemented IP address anonymization for Google Analytics on this website. This feature was developed by Google to ensure that this website complies with applicable data protection regulations and the recommendations of local data protection authorities, particularly where the storage of complete IP addresses is prohibited. The anonymization or masking of the IP address takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any data is stored or processed.

More information about IP anonymization can be found at https://support.google.com/analytics/answer/2763052?hl=de .

Google Optimize Privacy Policy

We use Google Optimize, a website optimization tool, on our website. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/ .

You can find out more about the data processed through the use of Google Optimize in the Privacy Policy at https://policies.google.com/privacy?hl=de .

Data Processing Agreement (DPA) Google Optimize

Google Site Kit Privacy Policy

Google Site Kit Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the website.
📓 Data processed: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found below and in the Google Analytics privacy policy.
📅 Storage duration: depends on the properties used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Site Kit?

We have integrated the WordPress plugin Google Site Kit from the American company Google Inc. into our website. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google Site Kit allows us to quickly and easily view statistics from various Google products, such as Google Analytics, directly in our WordPress dashboard. This tool, or rather the tools integrated into Google Site Kit, also collect your personal data. In this privacy policy, we explain why we use Google Site Kit, how long and where data is stored, and what other data protection information is relevant to you in this context.

Google Site Kit is a plugin for the WordPress content management system. With this plugin, we can view important website analytics statistics directly in our dashboard. These statistics are collected by other Google products, primarily Google Analytics. In addition to Google Analytics, Google Site Kit can also be integrated with Google Search Console, PageSpeed Insights, Google AdSense, Google Optimize, and Google Tag Manager.

Why do we use Google Site Kit on our website?

As a service provider, our goal is to offer you the best possible experience on our website. We want you to feel comfortable and quickly and easily find exactly what you’re looking for. Statistical analyses help us understand you better and tailor our offerings to your needs and interests. We use various Google tools for these analyses. Site Kit greatly simplifies our work in this regard because we can view and analyze the statistics from Google products directly in the dashboard. This eliminates the need to register separately for each tool. Site Kit thus always provides a clear overview of the most important analytical data.

What data does Google Site Kit store?

If you have actively consented to tracking tools in the cookie notice (also called script or banner), Google products such as Google Analytics will set cookies and send data about you, such as your user behavior, to Google, where it is stored and processed. This includes personal data such as your IP address.

For more detailed information about each service, we have dedicated sections within this privacy policy. For example, please see our privacy policy for Google Analytics. Here, we discuss the data collected in detail. You will learn how long Google Analytics stores, manages, and processes data, which cookies may be used, and how you can prevent data storage. We also have separate privacy policies with comprehensive information for other Google services, such as Google Tag Manager and Google AdSense.

Below, we show you examples of Google Analytics cookies that may be set in your browser, provided you have generally consented to data processing by Google. Please note that this is only a selection of cookies:

Name: _ga
Value: 2.1326744211.152113092826-2
Purpose: By default, analytics.js uses the _ga cookie to store the user ID. Its primary function is to distinguish website visitors.
Expiry date: after 2 years

Name: _gid
Value: 2.1687193234.152113092826-7
Purpose: This cookie also serves to distinguish website visitors.
Expiry date: after 24 hours

Name: _gat_gtag_UA_<property-id>
Value: 1
Purpose: This cookie is used to reduce the request rate.
Expiry date: after 1 minute

How long and where will the data be stored?

Google stores collected data on its own Google servers, which are distributed worldwide. Most of these servers are located in the United States, so it’s quite possible that your data is also stored there. You can see exactly where the company provides servers at https://datacenters.google/ .

Data collected through Google Analytics is stored for a standard period of 26 months. After this time, your user data is deleted. This retention period applies to all data associated with cookies, user recognition, and advertising IDs.

How can I delete my data or prevent data storage?

You always have the right to access, delete, correct, or restrict your data. Furthermore, you can disable, delete, or manage cookies in your browser at any time.

If you wish to disable, delete or manage cookies in general, you will find the corresponding links to the respective instructions for the most well-known browsers under the section „Cookies“.

Legal basis

The use of Google Site Kit requires your consent, which we obtained via our cookie popup. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by web analytics tools.

In addition to obtaining your consent, we have a legitimate interest in analyzing website visitor behavior to improve our services both technically and economically. Using Google Site Kit, we can identify website errors, detect attacks, and improve efficiency. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests) . However, we only use Google Site Kit if you have given your consent.

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/ .

To learn more about data processing by Google, we recommend that you read Google’s comprehensive privacy policy at https://policies.google.com/privacy?hl=de .

GoSquared Analytics Privacy Policy

GoSquared Analytics Privacy Policy Summary
👥 Affected: Companies that visit our website
🤝 Purpose: Evaluation of visitor information to optimize the website.
📓 Data processed: technical information about browser, operating system and device, time spent on the website, interactions on the website
📅 Storage duration: as long as the data is needed for the intended purposes.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is GoSquared Analytics?

We use GoSquared Analytics, a website analytics software, on our website. The service provider is the British company Go Squared Ltd, 3 Barn Hawe, High Street, Edenbridge, Kent, UK.

GoSquared Analytics was founded in 2006 with the goal of offering a simpler alternative to Google Analytics. GoSquared Analytics is also software that collects and analyzes data about your activity on our website. With GoSquared, data collection occurs in real time. We receive direct analytics reports on how you use our website, allowing us to continuously improve our offerings to better meet your needs. In this privacy policy, we will explain the analytics tool in more detail and, in particular, show you what data is stored, when, how, and where.

Why do we use GoSquared Analytics?

We use this software tool to improve the quality of our website and our offerings. Our goal is to provide you with the best possible service. We want you to feel comfortable on our website and get exactly what you expect. To achieve this, we naturally need to tailor our offerings to your wishes and requirements as closely as possible. The data also helps us to make our online marketing and advertising efforts more cost-effective and personalized. After all, we only want to show our offerings to people who are genuinely interested in them.

What data is stored by GoSquared Analytics?

GoSquared Analytics is an analytics tool that measures and analyzes the performance of our website and online campaigns. The software uses cookies to collect data such as how long you stay on our website, how many users visit, and where you came from. We also receive detailed reports on visitor behavior on our website. For example, we can see which buttons you click most often, which subpages you like, and which you tend to avoid. Your IP address, location data, device type, and operating system are also stored and processed. Through real-time analysis, the software provides up-to-date information on visitor behavior. The specific data processed depends on your individual settings within the tool.

How long and where will the data be stored?

The data may also be transferred to servers in the USA, i.e., outside the European Economic Area (EEA). According to GoSquared, however, appropriate security procedures are in place to protect your personal data. Generally, GoSquared stores data for as long as necessary for business purposes and as long as GoSquared is contractually and legally obligated to do so. Unfortunately, we cannot specify exact retention periods here, as these also depend on individual configurations.

How can I delete my data or prevent data storage?

You have the right to access, rectify, erase, and restrict the processing of your personal data at any time. You can also withdraw your consent to data processing at any time.

If you wish to disable, delete or manage cookies in general, you will find the corresponding links to the respective instructions for the most well-known browsers under the section „Cookies“.

Legal basis

The use of GoSquared requires your consent, which we obtained via our cookie popup. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by web analytics tools.

In addition to your consent, we have a legitimate interest in analyzing website visitor behavior to improve our services both technically and economically. GoSquared helps us identify website optimization potential, detect possible attacks, and improve efficiency. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests) . However, we only use GoSquared if you have given your consent.

With the UK’s withdrawal from the European Union, the GDPR no longer applies to data transfers to the UK. However, the European Commission has decided, based on Article 45 of the GDPR, that the UK offers an adequate level of protection compared to the GDPR. Data transfers to the UK are therefore permissible. You can view the decision here (download): https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32021D1772

For more information about the data processed through the use of GoSquared Analytics, please see the Privacy Policy at https://www.gosquared.com/legal/privacy/ .

Email Marketing Introduction

Email Marketing Summary
👥 Affected: Newsletter subscribers
🤝 Purpose: Direct marketing via email, notification of system-relevant events
📓 Data processed: Data entered during registration, but at least the email address. More details can be found in the documentation for the respective email marketing tool used.
📅 Storage period: Duration of the subscription
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is email marketing?

To keep you up to date, we also use email marketing. If you have consented to receive our emails or newsletters, your data will be processed and stored. Email marketing is a sub-area of online marketing. It involves sending news or general information about a company, products, or services via email to a specific group of people who are interested in them.

If you would like to participate in our email marketing (usually via newsletter), you normally only need to register with your email address. To do this, you fill out an online form and submit it. However, we may also ask you for information such as your title and name so that we can address you personally.

Newsletter subscriptions generally work using the so-called „double opt-in“ process. After you register for our newsletter on our website, you will receive an email to confirm your subscription. This ensures that the email address belongs to you and that no one has registered using someone else’s email address. We, or a notification tool we use, logs each individual registration. This is necessary so that we can prove the legally compliant registration process. Typically, the time of registration, the time of confirmation, and your IP address are recorded. Additionally, any changes you make to your saved data are also logged.

Why do we use email marketing?

We naturally want to stay in touch with you and keep you up-to-date on the latest news about our company. For this, we use email marketing – often simply called a „newsletter“ – as a key component of our online marketing strategy. If you consent or if it is legally permitted, we will send you newsletters, system emails, or other notifications via email. When we use the term „newsletter“ in the following text, we primarily mean regularly sent emails. Of course, we don’t want to bother you with our newsletters in any way. That’s why we always strive to offer only relevant and interesting content. For example, you’ll learn more about our company, our services, or our products. Since we are constantly improving our offerings, our newsletter will also keep you informed about any new developments or special, attractive promotions. If we use a service provider with a professional email marketing tool, we do so to ensure we can deliver our newsletters to you quickly and securely. The purpose of our email marketing is basically to inform you about new offers and also to get closer to our business goals.

What data is processed?

When you subscribe to our newsletter via our website, you confirm your membership in an email list via email. In addition to your IP address and email address, your title, name, address, and telephone number may also be stored. However, this only happens if you consent to this data storage. The data marked as such is necessary for you to participate in the offered service. Providing this information is voluntary; however, failure to provide it will prevent you from using the service. Information about your device or your preferred content on our website may also be stored. You can find more information about data storage when you visit a website in the section „Automatic Data Storage.“ We record your declaration of consent so that we can always demonstrate that it complies with our legal obligations.

Duration of data processing

If you unsubscribe from our email/newsletter mailing list, we may store your address for up to three years based on our legitimate interests so that we can still prove your consent at the time. We may only process this data if we need to defend ourselves against potential claims.

However, if you confirm that you have given us your consent to subscribe to our newsletter, you can submit an individual deletion request at any time. If you permanently withdraw your consent, we reserve the right to store your email address on a suppression list. As long as you have voluntarily subscribed to our newsletter, we will, of course, retain your email address.

Right to object

You can unsubscribe from our newsletter at any time. Simply withdraw your consent to receive it. This usually only takes a few seconds or one or two clicks. You’ll typically find an unsubscribe link at the bottom of every email. If you can’t find the link in the newsletter, please contact us by email and we’ll unsubscribe you immediately.

Legal basis

We send our newsletter based on your consent (Article 6(1)(a) GDPR). This means we can only send you a newsletter if you have actively subscribed beforehand. We may also send you promotional messages if you have become our customer and have not objected to the use of your email address for direct marketing.

Information on specific email marketing services and how they process personal data can be found – if available – in the following sections.

Push notifications introduction

Push notification summary
👥 Affected: Push notification subscribers
🤝 Purpose: Notification of system-relevant and interesting events
📓 Data processed: Data entered during registration, usually also location data. More details can be found in the documentation for the respective push notification tool.
📅 Storage duration: Data is usually stored for as long as necessary to provide the services.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract)

What are push notifications?

We also use push notification services on our website to keep our users up to date. This means that if you have consented to receiving push notifications, we can send you short news updates using a software tool. Push notifications are a form of text message that appears directly on your smartphone or other devices such as tablets or PCs, provided you have subscribed to them. You will receive these messages even if you are not on our website or actively using our services. Data about your location and usage patterns may also be collected and stored.

Why do we use push notifications?

On the one hand, we use push notifications to fully deliver the services we have contractually agreed upon with you. On the other hand, these notifications also serve our online marketing purposes. We can use them to introduce you to our services and products. In particular, we can inform you immediately about any news from our company. We want to understand the preferences and habits of all our users as well as possible in order to continuously improve our offerings.

What data is processed?

To receive push notifications, you must also confirm that you want to receive them. The data collected during the consent process is stored, managed, and processed. This is necessary to prove and verify that a user has agreed to receive push notifications. For this purpose, a so-called device token or push token is stored in your browser. Typically, your location data, or the location of the device you are using, is also stored.

To ensure we always send you interesting and important push notifications, we statistically analyze how you interact with these notifications. This allows us to see, for example, if and when you open the message. Using these insights, we can tailor our communication strategy to your preferences and interests. Although this stored data can be associated with you, we do not intend to monitor you as an individual. Rather, we are interested in the data collected from all our users so that we can make improvements. You can find out exactly what data is stored in the privacy policies of the respective service providers.

Duration of data processing

How long the data is processed and stored depends primarily on the tool we use. You can find more information about the data processing practices of each tool below. The providers‘ privacy policies usually specify exactly which data is stored and processed, and for how long. Generally, personal data is only processed for as long as necessary to provide our services. If data is stored in cookies, the storage duration varies considerably. The data may be deleted immediately after leaving a website, or it may remain stored for several years. Therefore, you should examine each individual cookie in detail if you want to know more about data storage. You will usually find informative details about the individual cookies in the privacy policies of the respective providers.

Legal basis

Push notifications may also be necessary to fulfill certain contractual obligations, such as informing you of technical or organizational updates. In this case, the legal basis is Article 6(1)(b) GDPR.

If this is not the case, push notifications will only be sent with your consent. Our push notifications may contain advertising content. Push notifications may also be sent based on your location as displayed by your device. The aforementioned analytical evaluations are also based on your consent to receive such notifications. The legal basis for this is Article 6(1)(a) GDPR. You can, of course, withdraw your consent or change various settings at any time in your device settings.

Push notifications introduction

Messenger & Communication Introduction

Messenger & Communication Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Contact requests and general communication between us and you
📓 Data processed: Data such as name, address, email address, telephone number, general content data, and, if applicable, IP address.
More details can be found in the descriptions of the respective tools used.
📅 Storage duration: depends on the messenger & communication functions used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests), Art. 6 para. 1 sentence 1 lit. b GDPR (contractual or pre-contractual obligations)

What are messenger and communication functions?

We offer various ways to communicate with us on our website (such as messenger and chat functions, online and contact forms, email, and telephone). Your data will also be processed and stored to the extent necessary to answer your inquiry and for our subsequent actions.

In addition to traditional communication methods such as email, contact forms, and telephone, we also use chat and messaging apps. Currently, WhatsApp is the most frequently used messaging service, but there are, of course, many different providers offering messaging features specifically for websites. If content is end-to-end encrypted, this will be indicated in the individual privacy policies or data protection statements of the respective provider. End-to-end encryption simply means that the content of a message is not visible even to the provider. However, information about your device, location settings, and other technical data may still be processed and stored.

Why do we use messenger and communication functions?

Communication options with you are very important to us. We want to talk to you and answer any questions you may have about our service as best we can. Effective communication is a key part of what we offer. With our convenient messenger and communication features, you can choose the method that suits you best. However, in exceptional cases, we may not be able to answer certain questions via chat or messenger. This is the case, for example, when it comes to internal contractual matters. In these situations, we recommend using other communication methods such as email or telephone.

We generally assume that we remain responsible under data protection law even when using the services of a social media platform. However, the European Court of Justice has ruled that in certain cases, the operator of the social media platform may be jointly responsible with us within the meaning of Article 26 GDPR. Where this is the case, we will indicate this separately and operate on the basis of a corresponding agreement. The key points of the agreement are summarized below under the relevant platform.

Please note that when using our built-in features, your data may also be processed outside the European Union, as many providers, such as Facebook Messenger or WhatsApp, are American companies. This may make it more difficult for you to assert or enforce your rights regarding your personal data.

What data is processed?

Exactly which data is stored and processed depends on the respective provider of the messenger and communication functions. Generally, this includes data such as name, address, telephone number, email address, and content data, such as all the information you enter into a contact form. Information about your device and IP address is usually also stored. Data collected via a messenger and communication function is also stored on the providers‘ servers.

If you want to know exactly what data is stored and processed by the respective providers and how you can object to data processing, you should carefully read the respective privacy policy of the company.

How long is data stored?

How long data is processed and stored depends primarily on the tools we use. You can find more information about the data processing practices of each tool below. The providers‘ privacy policies typically specify exactly which data is stored and processed, and for how long. Generally, personal data is only processed for as long as necessary to provide our services. When data is stored in cookies, the storage duration varies considerably. The data may be deleted immediately after leaving a website, or it may remain stored for several years. Therefore, you should examine each individual cookie in detail if you want to know more about data storage. You will usually find informative details about the individual cookies in the privacy policies of the respective providers.

Right to object

Since messenger and communication functions may use cookies, we also recommend that you read our general privacy policy about cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

If you have consented to the processing and storage of your data through integrated messenger and communication functions, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR) . We process your request and manage your data within the framework of contractual or pre-contractual relationships in order to fulfill our pre-contractual and contractual obligations and/or to answer inquiries. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR . In principle, if consent has been given, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners.

Facebook Messenger Privacy Policy

Facebook Messenger Privacy Policy Summary
👥 Affected: Facebook Messenger users
🤝 Purpose: Communication
📓 Data processed: Contact details, messages, media
📅 Storage duration: after account deletion
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Facebook Messenger?

We use the Facebook Messenger instant messaging service on our website. The service provider is the American company Meta Platforms Inc. For the European region, Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is responsible.

Facebook Messenger is a chat messaging feature developed by Facebook that allows you to send and receive text messages, voice and video calls, photos and other media files to other Facebook users.
When you use Facebook Messenger, your personal data is also processed on Facebook servers. This includes, in addition to your phone number and chat messages, sent photos, videos, profile data, your address, and your location.

Why do we use Facebook Messenger?

We want to stay in touch with you, and the best way to do that is through messaging services like Facebook Messenger. Firstly, because the service works flawlessly, and secondly, because Facebook is still one of the most popular social media platforms. The service is convenient and allows for quick and easy communication with you.

What data is processed by Facebook Messenger?

Using Facebook Messenger may result in the processing of various types of data, including personal data. This includes account information such as your phone number, profile picture, username, and other information you provide to Facebook when creating and managing your account. Facebook also stores the content of your messages (text, photos, videos, voice messages). Facebook also stores metadata, such as the date and time a message was sent or received. Facebook Messenger can also access your contacts to facilitate communication with them. Furthermore, technical data such as device type, operating system, and location data are also stored.

How long and where will the data be stored?

Generally, Facebook stores data until it is no longer needed for its own services and products. Facebook has servers distributed around the world where its data is stored. However, customer data is deleted within 48 hours after it has been matched with the company’s own user data.

How can I delete my data or prevent data storage?

You have the right to access, correct, delete, and restrict the processing of your personal data at any time. You can also withdraw your consent to data processing at any time. Your data will only be permanently deleted if you delete your Facebook account.

Follow these steps to completely delete your Facebook account:

1) Log in to Facebook and then click on “Settings” in the top right corner.

2) Next, click on “Your Facebook Information” in the left column.

3) Now click “Deactivation and Deletion”.

4) Now select “Delete account” and then click “Next and delete account”.

5) Now enter your password, click „Next“ and then „Delete account“

Legal basis

The use of Facebook Messenger requires your consent, which we have obtained using our consent tool (popup). According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by Facebook Messenger.

In addition to your consent, we have a legitimate interest in improving our service. Using Facebook Messenger allows us to communicate with you more quickly and effectively. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we only use Facebook Messenger if you have given your consent.

Facebook processes your data, among other places, in the USA. Facebook, or rather Meta Platforms, is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, Facebook uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Facebook commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

Facebook’s data processing terms, which refer to the standard contractual clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing .

You can find out more about the data processed through the use of Facebook in the Privacy Policy at https://www.facebook.com/about/privacy .

Chatbots Introduction

Chatbot Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Contact requests and general communication between us and you
📓 Data processed: Data such as name, address, email address, telephone number, general content data, and, if applicable, IP address.
More details can be found in the descriptions of the respective tools used.
📅 Storage duration: depends on the chatbots and chat functions used.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests), Art. 6 para. 1 sentence 1 lit. b GDPR (contractual or pre-contractual obligations)

What are chatbots?

You can also communicate with us via chatbots or similar chat functions. A chat offers the possibility of writing or speaking to each other with very little delay. A chatbot is software that attempts to answer your question and may inform you about news. By using these communication methods, your personal data may also be processed and stored.

Why do we use chatbots?

Communication with you is important to us. We want to talk to you and answer all your questions about our service as best we can. Effective communication is a key part of what we do. Chatbots offer the significant advantage of allowing us to automatically answer frequently asked questions. This saves us time, while still providing you with comprehensive and helpful answers. Of course, if the chatbot can’t help, you can always contact us directly.

Please note that when using our built-in elements, your data may also be processed outside the European Union, as many providers are American companies. This may make it more difficult for you to assert or enforce your rights regarding your personal data.

What data is processed?

It’s possible that you might use the chat services on other websites/platforms as well. In this case, your user ID will also be stored on the servers of this website. We may also be informed which user used the chat and when. The content of the conversations will also be stored. The exact data stored depends on the specific service. However, it generally includes contact information such as email address or phone number, IP address, and various usage data.

If you have consented to the use of the chat function, this consent, along with any registration, will also be stored and logged. We do this so that we can provide proof of registration or consent if legally required.

The provider of a chat platform can also know when you are chatting and receives technical information about the device you are using. Exactly which information is stored and processed depends on your computer settings. In many cases, data about your approximate location may be collected. This is done, on the one hand, to optimize the chat services and, on the other hand, to ensure greater security. Furthermore, the information can also be used to implement personalized advertising and marketing measures.

If you have consented to receive messages from a chatbot, you can, of course, deactivate this feature at any time. The chatbot will guide you through the process and show you how to unsubscribe. All your related data will then be deleted from the recipient list.

We use the data mentioned above to, for example, address you personally via chat, answer your questions and inquiries, or send you relevant content. This also allows us to improve our chat services in general.

How long is data stored?

Right to object

Since chat services may use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly what data is stored and processed about you, you should read the privacy policies of the respective tools.

Legal basis

We will ask for your permission via a pop-up window to process your data within the context of our chat services. If you consent, this consent also serves as the legal basis (Art. 6 para. 1 lit. a GDPR) for data processing. Furthermore, we process your inquiries and manage your data within the framework of contractual or pre-contractual relationships in order to fulfill our pre-contractual and contractual obligations and/or to answer inquiries. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR . In principle, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. However, we only use these tools if you have given your consent.

LiveChat Privacy Policy

We use the LiveChat chat software for our website. The service provider is the American company LiveChat Inc., 101 Arch Street, 8th Floor, Boston MA 02110, USA.

What is LiveChat?

This tool allows us to communicate with you via a chat interface. LiveChat can be used on both websites and mobile applications, providing you and us with a user-friendly platform for marketing, customer support, and sales. Furthermore, it integrates with many other platforms and tools, such as project management or CRM systems. According to the company, security and data protection are also top priorities.

Why do we use LiveChat?

We chose LiveChat because protecting personal data is important to us. LiveChat allows you to quickly and easily ask us questions, resolve issues, or obtain general information about our services or products. The user interface is easy to use, and our support team is readily available to answer any questions.

How secure is data transfer with LiveChat?

LiveChat processes your data, among other things, in the USA. LiveChat is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, LiveChat uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, LiveChat commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

Further information on the standard contractual clauses at LiveChat can be found at https://www.livechat.com/legal/gdpr-faq/ .

You can find out more about the data processed through the use of LiveChat in the Privacy Policy at https://www.livechat.com/legal/privacy-policy/ .

Social Media Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To present and optimize our services, to contact visitors, potential customers, etc., and to advertise.
📓 Data processed: Data such as telephone numbers, email addresses, contact details, user behavior data, information about your device and your IP address.
More details can be found in the respective social media tool used.
📅 Storage duration: depends on the social media platforms used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is social media?

In addition to our website, we are also active on various social media platforms. This may involve processing user data so that we can specifically target users who are interested in our content via social networks. Furthermore, elements of a social media platform may be directly embedded in our website. This is the case, for example, when you click a „social button“ on our website and are redirected directly to our social media profile. Social media platforms are websites and apps through which registered members can create content, share content openly or within specific groups, and connect with other members.

Why do we use social media?

For years, social media platforms have been the place where people communicate and connect online. Our social media presence allows us to introduce our products and services to potential customers. The social media elements integrated into our website help you quickly and easily access our social media content.

The data collected and processed through your use of a social media channel primarily serves the purpose of web analytics. The goal of these analyses is to develop more precise and personalized marketing and advertising strategies. Depending on your behavior on a social media platform, the analyzed data can be used to draw conclusions about your interests and create user profiles. This allows the platforms to present you with tailored advertisements. Cookies are usually placed in your browser for this purpose, storing data about your browsing behavior.

We generally assume that we remain responsible under data protection law even when using the services of a social media platform. However, the European Court of Justice has ruled that in certain cases, the operator of the social media platform may be jointly responsible with us within the meaning of Article 26 GDPR. Where this is the case, we will indicate this separately and operate on the basis of a corresponding agreement. The essential elements of the agreement are then reproduced below under the relevant platform.

Please note that when using social media platforms or our embedded elements, your data may also be processed outside the European Union, as many social media channels, such as Facebook or Twitter, are American companies. This may make it more difficult for you to assert or enforce your rights regarding your personal data.

What data is processed?

Exactly which data is stored and processed depends on the respective social media platform provider. However, it typically includes data such as phone numbers, email addresses, information you enter into a contact form, user data such as which buttons you click, whom you like or follow, when you visited which pages, information about your device, and your IP address. Most of this data is stored in cookies. Specifically, if you have a profile on the social media channel you are visiting and are logged in, data can be linked to your profile.

All data collected via a social media platform is also stored on the provider’s servers. Therefore, only the providers have access to the data and can provide you with the relevant information or make changes.

If you want to know exactly what data is stored and processed by social media providers and how you can object to this data processing, you should carefully read the respective company’s privacy policy. If you have any questions about data storage and processing or wish to exercise your rights, we also recommend contacting the provider directly.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information. For example, the social media platform Facebook stores data until it is no longer needed for its own purposes. However, customer data that is matched with our own user data is deleted within two days. Generally, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If legally required, as in the case of accounting, this storage period may be exceeded.

Right to object

You also have the right and the option to withdraw your consent to the use of cookies or third-party services such as embedded social media elements at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Since social media tools may use cookies, we also recommend that you read our general privacy policy about cookies. To find out exactly what data is stored and processed about you, you should read the privacy policies of the respective tools.

Legal basis

If you have consented to the processing and storage of your data through integrated social media elements, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR) . In principle, if consent has been given, your data will also be stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. However, we only use these tools if you have given your consent. Most social media platforms also use cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review the privacy statement or cookie policy of the respective service provider.

Information on specific social media platforms – if available – can be found in the following sections.

AddThis Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as user behavior data, information about your device and your IP address.
You can find more details below in the privacy policy.
📅 Storage period: the collected data is stored for 13 months from the date of data collection.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is AddThis?

We use AddThis plugins from Oracle America, Inc. (500 Oracle Parkway, Redwood Shores, CA 94065, USA) on our website. These plugins allow you to quickly and easily share content from our website with others. When you visit a webpage with an AddThis function, your data may be transferred to, stored by, and processed by AddThis. This privacy policy explains why we use AddThis, what data is processed, and how you can prevent this data transfer.

AddThis develops software tools that are integrated into websites to allow users to share content on various social media channels or via email. In addition, AddThis offers website analytics features. The collected data is also used to provide internet users with interest-based advertising. The service is used by more than 15 million website operators worldwide.

Why do we use AddThis on our website?

By using the AddThis buttons, you can share interesting content from our website on various social media channels such as Facebook, Twitter, Instagram, or Pinterest. If you like our content, we’d be delighted if you shared it with your social media community. And the easiest way to do that is via the AddThis buttons.

What data does AddThis store?

If you share content with AddThis and are logged into the respective social media account, data such as your visit to our website and the sharing of content can be associated with the user account of the corresponding social media channel. AddThis uses cookies, pixels, HTTP headers, and browser identifiers to collect data about your browsing behavior. Furthermore, some of this data is shared with third parties after pseudonymization.
Here is an example list of the data that may be processed:

Unique ID of a cookie placed in the web browser
Address of the visited website
Time of website visit
Search queries that led a visitor to the page with AddThis
Time spent on a website
The IP address of the computer or mobile device
Mobile advertising IDs (Apple IDFA or Google AAID)
Information contained in HTTP headers or other transmission protocols used
Which program was used on the computer (browser) or which operating system (iOS)

AddThis uses cookies, some of which we list below as examples. You can find more information about AddThis cookies at https://www.oracle.com/legal/privacy/addthis-privacy-policy.html .

Name: bt2
Value: 8961a7f179d87qq69V69113092826-3
Purpose : This cookie is used to record parts of the visited website in order to recommend other parts of the website.
Expiry date: after 255 days

Name: bku
Value: ra/99nTmYN+fZWX7113092826-4
Purpose: This cookie registers anonymized user data such as your IP address, geographic location, websites visited, and which ads you clicked on.
Expiry date: after 179 days

Note: Please bear in mind that this is an example list and we cannot claim it to be exhaustive.

AddThis also shares collected information with other companies. Further details can be found at https://www.oracle.com/legal/privacy/addthis-privacy-policy.html . AddThis also uses the data to create target audiences and interest profiles and to offer users interest-based advertising within the same advertising network.

How long and where will the data be stored?

AddThis stores the collected data for 13 months from the date of collection. One percent of the data is retained as a „template“ for a maximum of 24 months to maintain the business relationship. However, in this „template,“ direct and indirect identifiers (such as your IP address and cookie ID) are hashed. This means that without additional information, the personal data can no longer be linked to you. Since AddThis is headquartered in the USA, the collected data is also stored on American servers.

How can I delete my data or prevent data storage?

You have the right to access and delete your personal data at any time. If you no longer wish to see advertising based on data collected by AddThis, you can use the opt-out button at https://datacloudoptout.oracle.com/?tid=113092826 . This will set an opt-out cookie, which you must not delete in order to maintain this setting.

You can also set your preferences for usage-based online advertising via https://www.youronlinechoices.com/at/ in the preference management section.

Your browser offers one way to prevent data processing or manage it according to your preferences. Data processing works slightly differently depending on the browser. Under the „Cookies“ section, you will find links to the instructions for the most common browsers.

Legal basis

If you have consented to the processing and storage of your data through embedded social media elements, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR) . In principle, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. However, we only use the embedded social media elements if you have given your consent. Most social media platforms also use cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review the privacy statement or cookie policy of the respective service provider.

AddThis also processes data in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks to the lawfulness and security of data processing.

As a basis for data processing by recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e., in particular the USA) or data transfers to such countries, AddThis uses standard contractual clauses approved by the EU Commission (Article 46, paragraphs 2 and 3 GDPR). These clauses oblige AddThis to maintain the EU level of data protection when processing relevant data even outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

If you would like to know more about how AddThis processes your data, you can find further information at https://www.oracle.com/legal/privacy/ .

Facebook Privacy Policy

Facebook Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as customer data, user behavior data, information about your device and your IP address.
You can find more details below in the privacy policy.
📅 Storage period: until the data is no longer useful for Facebook’s purposes
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are Facebook tools?

We use selected tools from Facebook on our website. Facebook is a social media network operated by Meta Platforms Inc., or, for the European region, by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These tools allow us to offer you and people interested in our products and services the best possible experience.

If your data is collected and forwarded via our embedded Facebook elements or our Facebook page (fan page), both we and Facebook Ireland Ltd. are responsible for this. Facebook alone is responsible for the further processing of this data. Our joint obligations are also enshrined in a publicly accessible agreement at https://www.facebook.com/legal/controller_addendum . This agreement stipulates, for example, that we must clearly inform you about the use of Facebook tools on our site. Furthermore, we are also responsible for ensuring that the tools are integrated into our website in a data protection-compliant manner. Facebook, on the other hand, is responsible for the data security of Facebook products. If you have any questions about data collection and processing by Facebook, you can contact the company directly. If you direct your question to us, we are obligated to forward it to Facebook.

Below we provide an overview of the various Facebook tools, what data is sent to Facebook, and how you can delete this data.

In addition to many other products, Facebook also offers the so-called „Facebook Business Tools.“ This is Facebook’s official name. However, since the term is hardly known, we have decided to simply call them Facebook Tools. These include, among other things:

Facebook Pixel
social plug-ins (such as the „Like“ or „Share“ button)
Facebook Login
Account Kit
APIs (Application Programming Interfaces)
SDKs (Collection of programming tools)
Platform integrations
Plugins
Codes
Specifications
Documentation
Technologies and services

These tools allow Facebook to expand its services and obtain information about user activity outside of Facebook.

Why do we use Facebook tools on our website?

We only want to show our services and products to people who are genuinely interested. Facebook ads allow us to reach precisely these people. However, to show users relevant ads, Facebook needs information about their needs and desires. Therefore, we provide the company with information about user behavior (and contact details) on our website. This allows Facebook to gather better user data and show interested people relevant ads for our products and services. These tools thus enable tailored advertising campaigns on Facebook.

Facebook refers to data about your behavior on our website as „event data.“ This data is also used for measurement and analytics services. Facebook can then create „campaign reports“ on our behalf about the effectiveness of our advertising campaigns. Furthermore, these analyses give us a better understanding of how you use our services, website, or products. We use some of these tools to optimize your user experience on our website. For example, you can use social plugins to share content from our site directly on Facebook.

What data is stored by Facebook tools?

Using certain Facebook tools may result in personal data (customer data) being sent to Facebook. Depending on the tools used, customer data such as name, address, telephone number, and IP address may be transmitted.

Facebook uses this information to match the data it already holds about you (if you are a Facebook member). Before customer data is transmitted to Facebook, it undergoes a process called „hashing.“ This means that any data set of any size is transformed into a string of characters. This also serves to encrypt the data.

In addition to contact information, „event data“ is also transmitted. „Event data“ refers to information we receive about you on our website, such as which subpages you visit or which products you purchase. Facebook does not share this information with third parties (such as advertisers) unless it has explicit permission or is legally obligated to do so. „Event data“ can also be linked to contact information. This allows Facebook to offer more personalized advertising. After the aforementioned matching process, Facebook deletes the contact data.

To optimize ad delivery, Facebook uses event data only when it has been combined with other data (collected by Facebook through other means). Facebook also uses this event data for security, protection, development, and research purposes. Much of this data is transferred to Facebook via cookies. Cookies are small text files used to store data and information in browsers. Depending on the tools used and whether you are a Facebook member, a varying number of cookies will be placed in your browser. We provide more detailed information about individual Facebook cookies in the descriptions of the individual Facebook tools. You can also find general information about the use of Facebook cookies at https://www.facebook.com/policies/cookies .

How long and where will the data be stored?

How can I delete my data or prevent data storage?

In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectification, portability and erasure of your data.

Your data will only be completely deleted if you delete your Facebook account entirely. Here’s how to delete your Facebook account:

1) Click on Settings on the right side of Facebook.

2) Next, click on “Your Facebook Information” in the left column.

3) Now click “Deactivation and Deletion”.

4) Now select “Delete account” and then click “Next and delete account”.

5) Now enter your password, click „Next“ and then „Delete account“

The data that Facebook receives through our site is stored, among other things, via cookies (e.g., for social plugins). You can disable, delete, or manage individual or all cookies in your browser. Depending on which browser you use, this works differently. Under the „Cookies“ section, you will find links to the instructions for the most common browsers.

If you generally do not want to allow cookies, you can configure your browser to always notify you when a cookie is about to be set. This allows you to decide whether to allow each individual cookie or not.

Legal basis

If you have consented to the processing and storage of your data by integrated Facebook tools, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR) . In principle, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. However, we only use these tools if you have given your consent. Most social media platforms also use cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review Facebook’s privacy statement or cookie policy.

Facebook’s data processing terms, which refer to the standard contractual clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing .

We hope we have provided you with the most important information about the use and processing of data by Facebook tools. If you would like to learn more about how Facebook uses your data, we recommend that you read the data policy at https://www.facebook.com/privacy/policy/ .

We’ve integrated the convenient Facebook Login into our website. This allows you to easily log in with your Facebook account without having to create a separate user account. If you choose to register via Facebook Login, you will be redirected to the Facebook social media network. There, you will be logged in using your Facebook user credentials. This login process involves the storage and transmission of data about you and your user behavior to Facebook.

To store data, Facebook uses various cookies. Below, we show you the most important cookies that are set in your browser or already exist when you log in to our site via Facebook:

Name: fr
Value: 0jieyh4c2GnlufEJ9..Bde09j…1.0.Bde09j
Purpose: This cookie is used to ensure that the social plugin on our website functions optimally.
Expiry date: after 3 months

Name: datr
Value: 4Jh7XUA2113092826SEmPsSfzCOO4JFFl
Purpose: Facebook sets the “datr” cookie when a web browser accesses facebook.com, and the cookie helps to identify login activity and protect users.
Expiry date: after 2 years

Name: _js_datr
Value: deleted
Purpose: This session cookie is set by Facebook for tracking purposes, even if you do not have a Facebook account or are logged out.
Expiry date: after the end of the session

Note: The cookies listed are only a small selection of the cookies available to Facebook. Other cookies include, for example, _fbp, sb, or wd. A complete list is not possible because Facebook has a large number of cookies and uses them variably.

Facebook Login offers you a quick and easy registration process, while also allowing us to share data with Facebook. This enables us to better tailor our offers and promotions to your interests and needs. The data we receive from Facebook in this way is public data such as…

Your Facebook name
Your profile picture
a registered email address
Friend lists
Button information (e.g., „Like“ button)
Date of birth
Language
Place of residence

In return, we provide Facebook with information about your activity on our website. This includes information about your device, which subpages you visit, and which products you have purchased from us.

By using Facebook Login, you consent to the processing of your data. You can revoke this consent at any time. If you would like more information about data processing by Facebook, we recommend that you read the Facebook Data Policy at https://www.facebook.com/privacy/policy/ .

If you are logged into Facebook, you can change your ad settings yourself at https://www.facebook.com/adpreferences/advertisers/?entry_product=ad_settings_screen .

Facebook Social Plugins Privacy Policy

Our website uses social plugins from Meta Platforms Inc. You can recognize these buttons by the classic Facebook logo, such as the „Like“ button (the hand with a raised thumb), or by a clear „Facebook Plugin“ label. A social plugin is a small part of Facebook that is integrated into our site. Each plugin has its own function. The most frequently used functions are the familiar „Like“ and „Share“ buttons.

The following social plugins are offered by Facebook:

“Save” button
“Like” button, share, send and quote
Page plug-in
Comments
Messenger plug-in
Embedded posts and video players
Group plug-in

You can find more information on how to use the individual plugins at https://developers.facebook.com/docs/plugins . We use social plugins both to offer you a better user experience on our site and because Facebook can use them to optimize our advertising.

If you have a Facebook account or have previously visited https://www.facebook.com/ , Facebook has already placed at least one cookie in your browser. In this case, your browser sends information to Facebook via this cookie as soon as you visit our site or interact with social plugins (e.g., the „Like“ button).

The information collected will be deleted or anonymized within 90 days. According to Facebook, this data includes your IP address, the website you visited, the date, the time, and other information relating to your browser.

To prevent Facebook from collecting and linking a lot of data during your visit to our website, you must log out of Facebook during your visit to the website.

If you are not logged into Facebook or do not have a Facebook account, your browser will send less information to Facebook because you have fewer Facebook cookies. However, data such as your IP address or which website you visit may still be transmitted to Facebook. We would like to explicitly point out that we do not have precise knowledge of the exact content of this data. However, we are trying to inform you about data processing to the best of our current knowledge. You can also read about how Facebook uses the data in the company’s data policy at https://www.facebook.com/about/privacy/update .

The following cookies will be set in your browser at a minimum when you visit a website with social plugins from Facebook:

Name: dpr
Value: not specified
Purpose: This cookie is used to make the social plugins on our website work.
Expiry date: after the end of the session

Name: fr
Value: 0jieyh4113092826c2GnlufEJ9..Bde09j…1.0.Bde09j
Purpose: The cookie is also necessary for the plug-ins to function properly.
Expiry date: after 3 months

Note: These cookies were set after a test, even if you are not a Facebook member.

If you are logged into Facebook, you can change your ad preferences yourself at https://www.facebook.com/adpreferences/advertisers/ . If you are not a Facebook user, you can generally manage your online behavioral advertising at https://www.youronlinechoices.com/de/praferenzmanagement/?tid=113092826 . There you have the option to deactivate or activate providers.

If you would like to learn more about Facebook’s privacy practices, we recommend that you consult the company’s own data policy at https://www.facebook.com/privacy/policy/ .

Instagram Privacy Policy

Instagram Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as user behavior data, information about your device and your IP address.
You can find more details below in the privacy policy.
📅 Storage period: until Instagram no longer needs the data for its purposes
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Instagram?

We have integrated Instagram features into our website. Instagram is a social media platform operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. Since 2012, Instagram has been a subsidiary of Meta Platforms Inc. and is part of the Facebook group. Embedding Instagram content on our website allows us to display content such as buttons, photos, or videos from Instagram directly on our site. When you visit pages on our website that have an integrated Instagram feature, data is transmitted to, stored by, and processed by Instagram. Instagram uses the same systems and technologies as Facebook. Therefore, your data is processed across all Facebook companies.

Below, we’ll give you a more detailed look at why Instagram collects data, what data it collects, and how you can largely control its processing. Since Instagram belongs to Meta Platforms Inc., we draw our information from both Instagram’s policies and Meta’s own privacy policy.

Instagram is one of the most popular social media networks worldwide. It combines the advantages of a blog with those of audiovisual platforms like YouTube or Vimeo. On „Insta“ (as many users casually call the platform), you can upload photos and short videos, edit them with various filters, and share them on other social networks. And if you don’t want to be active yourself, you can simply follow other interesting users.

Why do we use Instagram on our website?

Instagram is the social media platform that has truly exploded in popularity in recent years. And of course, we’ve responded to this boom. We want you to feel as comfortable as possible on our website. That’s why a diverse presentation of our content is a given for us. The embedded Instagram features allow us to enrich our content with helpful, funny, or exciting material from the Instagram world. Since Instagram is a subsidiary of Facebook, the data collected can also be used for personalized advertising on Facebook. This ensures that our ads are only shown to people who are genuinely interested in our products or services.

Instagram also uses the collected data for measurement and analysis purposes. We receive aggregated statistics, giving us more insight into your preferences and interests. It’s important to note that these reports do not personally identify you.

What data does Instagram store?

When you visit one of our pages that includes Instagram features (such as Instagram images or plugins), your browser automatically connects to Instagram’s servers. Data is then sent to, stored, and processed by Instagram, regardless of whether you have an Instagram account or not. This includes information about your visit to our website, your computer, purchases you’ve made, advertisements you see, and how you use our services. The date and time of your interaction with Instagram are also recorded. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.

Facebook distinguishes between customer data and event data. We assume that Instagram does the same. Customer data includes, for example, name, address, phone number, and IP address. This customer data will only be transmitted to Instagram after it has been hashed. Hashing means that a data record is transformed into a string of characters. This allows contact information to be encrypted. In addition, the aforementioned „event data“ is also transmitted. Facebook—and consequently Instagram—understands „event data“ as data about your user behavior. It is also possible that contact information may be combined with event data. The collected contact information is then compared with the data that Instagram already holds about you.

Small text files (cookies), usually placed in your browser, transmit the collected data to Facebook. The amount of data stored varies depending on the Instagram features you use and whether you have an Instagram account.

We assume that Instagram’s data processing works the same way as Facebook’s. This means that if you have an Instagram account or have visited www.instagram.com , Instagram has set at least one cookie. If this is the case, your browser sends information to Instagram via the cookie as soon as you interact with an Instagram feature. This data is deleted or anonymized after a maximum of 90 days (after reconciliation). Although we have thoroughly examined Instagram’s data processing practices, we cannot say exactly which data Instagram collects and stores.

Below, we show you the minimum number of cookies that are set in your browser when you click on an Instagram feature (such as a button or an Instagram image). For our test, we assume you do not have an Instagram account. If you are logged into Instagram, significantly more cookies will be set in your browser.

These cookies were used in our test:

Name: csrftoken
Value: „“
Purpose: This cookie is most likely set for security reasons, to prevent request forgery. However, we were unable to determine this more precisely.
Expiry date: after one year

Name: mid
Value: „“
Purpose: Instagram sets this cookie to optimize its own services and offers both on and off Instagram. The cookie establishes a unique user ID.
Expiry date: after the end of the session

Name: fbsr_113092826124024
Value: not specified
Purpose: This cookie stores the login request for users of the Instagram app.
Expiry date: after the end of the session

Name: rur
Value: ATN
Purpose: This is an Instagram cookie that ensures functionality on Instagram.
Expiry date: after the end of the session

Name: urlgen
Value: “{”194.96.75.33”: 1901}:1iEtYv:Y833k2_UjKvXgYe113092826”
Purpose: This cookie is used for Instagram’s marketing purposes.
Expiry date: after the end of the session

Note: This list is not exhaustive. Which cookies are set in each individual case depends on the embedded functions and your use of Instagram.

How long and where will the data be stored?

Instagram shares the information it receives between Facebook companies, external partners, and people you connect with worldwide. Data processing is carried out in accordance with its own data policy. Your data is distributed across Facebook servers around the world, partly for security reasons. Most of these servers are located in the USA.

How can I delete my data or prevent data storage?

Thanks to the General Data Protection Regulation (GDPR), you have the right to access, transfer, rectify, and erase your data. You can manage your data in your Instagram settings. If you want to completely delete your data on Instagram, you must permanently delete your Instagram account.

And this is how you delete your Instagram account:

First, open the Instagram app. On your profile page, scroll down and tap „Help Center.“ This will take you to the company’s website. On the website, tap „Manage your account“ and then „Delete your account.“

If you delete your account entirely, Instagram will delete posts such as your photos and status updates. Information that other people have shared about you is not part of your account and will therefore not be deleted.

As mentioned above, Instagram primarily stores your data using cookies. You can manage, disable, or delete these cookies in your browser. The process varies slightly depending on your browser. In the „Cookies“ section, you’ll find links to instructions for the most popular browsers.

You can also configure your browser to always notify you when a cookie is about to be set. This allows you to decide individually whether or not to allow the cookie.

Legal basis

Instagram processes your data, among other places, in the USA. Instagram, or rather Meta Platforms, is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, Instagram uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Instagram commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

We have tried to provide you with the most important information about data processing by Instagram. You can find more detailed information about Instagram’s data policy at https://privacycenter.instagram.com/policy/ .

Instagram Lookalike Audience Privacy Policy

We also use the advertising tool Instagram Lookalike Audience. The service provider is the American company Meta Platforms Inc. For the European region, the company responsible is Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

Instagram and Meta process your data, among other things, in the USA. Facebook and Meta Platforms are active participants in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, Meta Platforms uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Meta Platforms commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Instagram and Meta data processing terms, which refer to the standard contractual clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing .

You can find out more about the data processed through the use of Instagram Lookalike Audience in the privacy policy at https://privacycenter.instagram.com/policy/ .

XING Privacy Policy

Xing Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: This may include your IP address, browser data, date and time of your page visit.
You can find more details below in the privacy policy.
📅 Storage period: Data from Xing users is stored until a deletion request is made.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Xing?

We use social plugins from the social media network Xing, operated by Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany, on our website. These plugins allow you, for example, to share content directly from our website on Xing, log in to Xing, or follow interesting content. You can recognize the plugins by the company name or the Xing logo. When you visit a website that uses a Xing plugin, data may be transmitted to, stored on, and analyzed by Xing’s servers. This privacy policy explains what data is involved and how you can manage or prevent this data storage.

Xing is a social network headquartered in Hamburg. The company specializes in managing professional contacts. This means that, unlike other networks, Xing focuses primarily on professional networking. The platform is often used for job searches or to find employees for one’s own company. In addition, Xing offers interesting content on various professional topics. Its global counterpart is the American company LinkedIn.

Why do we use Xing on our website?

There’s a flood of social media channels these days, and we’re well aware that your time is valuable. It’s impossible to scrutinize every single company’s social media channel. That’s why we want to make things as easy as possible for you, so you can share or follow interesting content directly from our website on Xing. These „social plugins“ expand the services we offer on our website. Furthermore, the data collected by Xing helps us to implement targeted advertising on the platform. This means our services are only shown to people who are genuinely interested in them.

What data does Xing store?

Xing offers the share button, the follow button, and the login button as plugins for websites. As soon as you open a page with a Xing social plugin, your browser connects to servers in a data center used by Xing. According to Xing, no data is stored in connection with the share button that could directly identify an individual. In particular, Xing does not store your IP address. Furthermore, no cookies are set in connection with the share button. Therefore, your user behavior is not analyzed. You can find more information at https://dev.xing.com/plugins/share_button/privacy_policy

With the other Xing plugins, cookies are only set in your browser when you interact with the plugin or click on it. In this case, personal data such as your IP address, browser data, and the date and time of your page visit to Xing may be stored. If you have a Xing account and are logged in, the collected data will be associated with your personal account and the data stored therein.

The following cookies will be set in your browser if you click the „Follow“ or „Log in“ button and are not yet logged in to Xing. Please note that this is an example list and we cannot claim it to be exhaustive:

Name: AMCVS_0894FF2554F733210A4C98C6%40AdobeOrg
Value: 1
Purpose: This cookie is used to create and store identifications of website visitors.
Expiry date: after the end of the session

Name: c_
Value: 157c609dc9fe7d7ff56064c6de87b019113092826-8
Purpose: We were unable to find any further information about this cookie.
Expiry date: after one day

Name: prevPage
Value: wbm%2FWelcome%2Flogin
Purpose: This cookie stores the URL of the previous website you visited.
Expiry date: after 30 minutes

Name: s_cc
Value: true
Purpose: This Adobe Site Catalyst cookie determines whether cookies are generally enabled in the browser.
Expiry date: after the end of the session

Name: s_fid
Value: 6897CDCD1013221C-39DDACC982217CD1113092826-2
Purpose: This cookie is used to identify a unique visitor.
Expiry date: after 5 years

Name: visitor_id
Value: fe59fbe5-e9c6-4fca-8776-30d0c1a89c32
Purpose: The visitor cookie contains a unique visitor ID and the unique identifier for your account.
Expiry date: after 2 years

Name: _session_id
Value: 533a0a6641df82b46383da06ea0e84e7113092826-2
Purpose: This cookie creates a temporary session ID, which is used as the in-session user ID. This cookie is absolutely necessary to provide Xing’s functionality.
Expiry date: after the end of the session

Once you are logged in to Xing or become a member, further personal data will definitely be collected, processed, and stored. Xing also shares personal data with third parties if this is necessary for fulfilling its own business purposes, if you have given your consent, or if there is a legal obligation to do so.

How long and where will the data be stored?

Xing stores data on various servers in different data centers. The company retains this data until you delete it or until your user account is deleted. This only applies to users who are already Xing members.

How can I delete my data or prevent data storage?

You have the right to access and delete your personal data at any time. Even if you are not a Xing member, you can prevent potential data processing or manage it according to your preferences via your browser. Most data is stored using cookies. Depending on your browser, managing cookies varies slightly. In the „Cookies“ section, you will find links to instructions for the most common browsers.

You can also configure your browser to always notify you when a cookie is about to be set. This allows you to decide individually whether or not to allow the cookie.

Legal basis

We have tried to provide you with the most important information about data processing by Xing. You can find out more about the data processing practices of the social media network Xing at https://privacy.xing.com/de/datenschutzerklaerung .

Blogs and Publication Media Introduction

Blogs and publication media Privacy policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Presentation and optimization of our service, communication between website visitors, security measures, and administration
📓 Data processed: Data such as contact details, IP address and published content.
More details can be found in the section on the tools used.
📅 Storage duration: depends on the tools used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests), Art. 6 para. 1 sentence 1 lit. b GDPR (contract)

What are blogs and publication media?

We use blogs and other communication tools on our website to allow us to communicate with you and vice versa. In doing so, we may store and process your data. This may be necessary to ensure proper content display, effective communication, and enhanced security. Our privacy policy provides general information about what data we may process. Specific details regarding data processing always depend on the tools and functions used. You can find detailed information about data processing in the privacy policies of the individual providers.

Why do we use blogs and publication media?

Our primary goal with this website is to offer you interesting and engaging content, and your opinions and contributions are equally important to us. Therefore, we aim to foster a positive and interactive exchange between us and you. Various blogs and publication options allow us to achieve precisely this. For example, you can write comments on our content, respond to other comments, or, in some cases, even create your own posts.

What data is processed?

The exact data processed always depends on the communication functions we use. Very often, IP address, username, and published content are stored. This is primarily done to ensure security, prevent spam, and take action against illegal content. Cookies may also be used for data storage. These are small text files that contain information stored in your browser. You can find more details about the data collected and stored in our individual sections and in the privacy policy of the respective provider.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. For example, posting and commenting functions store data until you revoke your consent. Generally, personal data is only stored for as long as it is absolutely necessary for the provision of our services.

Right to object

You also have the right and the option to withdraw your consent to the use of cookies or third-party communication tools at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Since publication media may also use cookies, we recommend that you also read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

We primarily use these communication tools based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers, business partners, and visitors. Insofar as the use serves the purpose of processing or initiating contractual relationships, the legal basis is also Art. 6 para. 1 sentence 1 lit. b GDPR.

Certain data processing activities, in particular the use of cookies and the use of comment or messaging functions, require your consent. If and to the extent that you have consented to the processing and storage of your data by embedded publication media, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Most of the communication functions we use place cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review the privacy statement or cookie policy of the respective service provider.

Information on specific tools – if available – can be found in the following sections.

Online Marketing Introduction

Online Marketing Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the website.
📓 Data processed: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. Personal data such as name or email address may also be processed. Further details can be found in the documentation for the respective online marketing tool used.
📅 Storage duration: depends on the online marketing tools used.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is online marketing?

Online marketing encompasses all measures taken online to achieve marketing goals such as increasing brand awareness or closing a sale. Furthermore, our online marketing efforts aim to drive traffic to our website. We engage in online marketing to showcase our offerings to a wide audience of interested individuals. This typically involves online advertising, content marketing, and search engine optimization (SEO). To ensure our online marketing is efficient and targeted, we also store and process personal data. This data helps us to show our content only to those who are genuinely interested in it, and it also allows us to measure the success of our online marketing campaigns.

Why do we use online marketing tools?

We want to show our website to everyone who is interested in our offerings. We understand that this isn’t possible without deliberate measures. That’s why we engage in online marketing. Various tools are available to simplify our online marketing efforts and provide us with ongoing data-driven suggestions for improvement. This allows us to target our campaigns more precisely to our audience. Ultimately, the purpose of these online marketing tools is to optimize our offerings.

What data is processed?

To ensure our online marketing works effectively and the success of our campaigns can be measured, user profiles are created and data is stored, for example, in cookies (small text files). This data allows us not only to display traditional advertising but also to personalize the content on our website to your liking. Various third-party tools offer these functions and, accordingly, collect and store your data. These cookies store information such as which pages you visited on our website, how long you viewed them, which links or buttons you clicked, and which website referred you to us. Technical information may also be stored, such as your IP address, the browser you are using, the device you are using to access our website, and the time you entered and left our site. If you have consented to us determining your location, we can also store and process this information.

Your IP address is stored in pseudonymized (i.e., shortened) form. Unique data that directly identifies you as an individual, such as your name, address, or email address, is also stored only in pseudonymized form for advertising and online marketing purposes. Therefore, we cannot identify you as an individual; we only store the pseudonymized information in the user profiles.

The cookies may also be used, analyzed, and used for advertising purposes on other websites that use the same advertising tools. The data may then also be stored on the servers of the advertising tool providers.

In exceptional cases, unique identifiers (names, email addresses, etc.) may also be stored in user profiles. This occurs, for example, if you are a member of a social media channel that we use for our online marketing activities and the network links previously received data to the user profile.

With all the advertising tools we use that store your data on their servers, we only ever receive aggregated information and never data that identifies you as an individual. The data simply shows how well our advertising campaigns performed. For example, we can see which measures motivated you or other users to visit our website and purchase a service or product. Based on these analyses, we can improve our advertising in the future and tailor it even more precisely to the needs and desires of interested individuals.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information. Generally, we only process personal data for as long as is absolutely necessary for providing our services and products. Data stored in cookies is stored for varying lengths of time. Some cookies are deleted as soon as you leave the website, while others can remain stored in your browser for several years. You can usually find detailed information about the specific cookies used by each provider in their respective privacy policies.

Right to object

Since online marketing tools typically use cookies, we also recommend that you read our general privacy policy about cookies. To find out exactly what data is stored and processed about you, you should read the privacy policies of the respective tools.

Legal basis

If you have consented to the use of third-party providers, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by online marketing tools.

We also have a legitimate interest in measuring online marketing activities in anonymized form in order to optimize our offerings and measures using the data obtained. The corresponding legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests) . However, we only use these tools if you have given your consent.

Information on specific online marketing tools can be found – if available – in the following sections.

LinkedIn Insight Tag Privacy Policy

LinkedIn Insight Tag Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the website.
📓 Data processed: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found below and in LinkedIn’s privacy policy.
📅 Storage period: Direct identifiers via LinkedIn Insight Tag are removed within seven days.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is LinkedIn Insight Tag?

We use the LinkedIn Insight Tag conversion tracking tool on our website. The service provider is the American company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Ireland Unlimited (Wilton Place, Dublin 2, Ireland) is responsible for data protection aspects within the European Economic Area (EEA), the EU, and Switzerland.

By embedding the tracking tool, data can be sent to, stored by, and processed by LinkedIn. In this privacy policy, we want to inform you about the data involved, how the network uses this data, and how you can manage or prevent data storage.

LinkedIn is the largest social network for business contacts. Unlike Facebook, for example, the company focuses exclusively on building professional connections. Businesses can present their services and products on the platform and establish business relationships. Many people also use LinkedIn for job searches or to find suitable employees for their own companies. In Germany alone, the network has over 11 million members. In Austria, there are approximately 1.3 million.

LinkedIn’s conversion tracking tool is a small piece of JavaScript code that we’ve integrated into our website. This feature helps us better tailor our advertising to your interests and needs. In the following article, we’ll explain in more detail why we use the LinkedIn Insight Tag, what data is stored, and how you can prevent this data storage.

Why do we use the LinkedIn Insight Tag on our website?

We use the LinkedIn Insight Tag to promote our offerings. Our goal is to ensure that our advertising campaigns only reach people who are genuinely interested in what we offer. The LinkedIn Insight Tag allows us to collect detailed information about your website behavior, provided you are also a LinkedIn member. This enables us to see which keywords, ads, ad groups, and campaigns on LinkedIn lead to the desired customer actions. We can see how many customers interact with our ads on a single device and then complete a conversion. This data allows us to calculate our cost-benefit ratio, measure the success of individual advertising campaigns, and consequently optimize our online marketing efforts. Furthermore, we can use the data we gather to make our website more engaging for you and tailor our advertising even more precisely to your needs.

What data is stored by the LinkedIn Insight Tag?

As mentioned above, we have integrated a conversion tracking tag or code snippet into our website to better analyze certain user actions. When you click on one of our LinkedIn ads, a cookie may be stored on your computer (usually in your browser) or mobile device. LinkedIn generally processes data using a combination of cookies and server-side functions.

As soon as you complete an action on the website, LinkedIn recognizes the cookie and saves your action as a so-called conversion. While you are browsing our website, we and LinkedIn recognize that you found us via our LinkedIn ad. The cookie is read and sent back to LinkedIn along with the conversion data. It is also possible that other cookies are used to measure conversions.

In addition to your IP address, the URL, referrer URL, device and browser properties, and the timestamp are also stored. The IP address is considered personal data and is shortened or hashed by LinkedIn.

You might be wondering what conversions actually are. A conversion occurs when you go from being a purely interested website visitor to taking action. This happens whenever you click on our ad and then perform another action, such as visiting our website or purchasing a product. With LinkedIn’s conversion tracking tool, we record what happens after a user clicks on our LinkedIn ad. For example, we can see whether products are purchased, services are used, or whether you subscribe to our newsletter.

Furthermore, demographic data that you have provided in your LinkedIn profile may also be processed. This could include information about your profession, geographic location, industry, or company.

We receive a report from LinkedIn with statistical analyses. This tells us, for example, the total number of users who clicked on our ad and we can see which advertising measures were successful.

How long and where will the data be stored?

Generally, LinkedIn retains your personal data for as long as the company deems necessary to provide its services. However, LinkedIn deletes your personal data when you delete your account. In some exceptional cases, LinkedIn may retain some data in aggregated and anonymized form even after your account has been deleted.

Direct identifiers from the LinkedIn Insight Tag are removed within seven days to pseudonymize the data. The resulting pseudonymized data is deleted within 180 days.

The data is stored on various servers in America and presumably also in Europe.

How can I delete my data or prevent data storage?

You have the right to access and delete your personal data at any time.

You have the option to opt out of LinkedIn’s conversion tracking. If you disable the Google conversion tracking cookie in your browser or do not consent to data processing via the consent manager (pop-up), you will block conversion tracking. In this case, you will not be included in the tracking tool’s statistics. You can change your browser’s cookie settings at any time. The process varies slightly depending on the browser. Under the „Cookies“ section, you will find links to instructions for the most common browsers.

In your LinkedIn account, you can also manage, change, and delete your data. You can also request a copy of your personal data from LinkedIn.

Here’s how to access the account details in your LinkedIn profile:

In LinkedIn, click your profile icon and select „Settings and privacy.“ Then click „Privacy“ and, in the „How LinkedIn uses your data“ section, click „Change.“ You can then download selected data about your web activity and account history.

Legal basis

If you have consented to the use of the LinkedIn Insight Tag, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur during data collection by the LinkedIn Insight Tag.

We also have a legitimate interest in using the LinkedIn Insight Tag to optimize our online services and marketing activities. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests). However, we only use the LinkedIn Insight Tag if you have given your consent.

LinkedIn also processes your data in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks to the lawfulness and security of data processing.

LinkedIn uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR) as the basis for processing data with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, and especially the USA) or for transferring data to such countries. Standard Contractual Clauses (SCCs) are template agreements provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). These clauses oblige LinkedIn to maintain the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More information about LinkedIn’s standard contractual clauses can be found at https://de.linkedin.com/legal/l/dpa or https://www.linkedin.com/legal/l/eu-sccs

You can find more information about the LinkedIn Insight Tag at https://www.linkedin.com/help/linkedin/answer/a427660 . Further information about the data processed through the use of the LinkedIn Insight Tag can also be found in the privacy policy at https://de.linkedin.com/legal/privacy-policy .

Microsoft Advertising Privacy Statement

Microsoft Advertising Privacy Statement Summary
👥 Affected: Visitors to the website
🤝 Purpose: economic success and the optimization of our service performance.
📓 Data processed: Access statistics, which include data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. Personal data such as name or email address may also be processed.
📅 Storage period: Microsoft stores the data until it is no longer needed to fulfill its purposes.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Microsoft Advertising?

For our online marketing efforts, we also use the Microsoft Advertising program from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. With the help of Microsoft Advertising, we aim to raise awareness among many people about the high quality of our products and/or services. For this purpose, we use a Microsoft technology (conversion tracking tool) on our website, which also stores your data. This privacy policy explains this service in more detail, showing you what data is stored, managed, and processed, and how you can prevent this data storage.

You might know Microsoft Advertising by its former name, „Bing Ads.“ It’s a Microsoft advertising program based on a pay-per-click system. This means advertisers can place ads on the Bing and Yahoo! search engines and only pay when a user clicks on the ad.

Why do we use Microsoft Advertising?

We are confident in our products and services and naturally want to present them to a wide audience. Microsoft Advertising allows us to reach precisely those people who are genuinely interested in them. We want to showcase our products not only on the renowned search engine Google, but also on Bing and Yahoo! Microsoft Advertising also gives us the opportunity to place ads within the Microsoft Audience Network. This allows us, for example, to advertise on LinkedIn. Conversion tracking tells us, for instance, which ad led you to us, which subpages you particularly like, and what actions you take on our website. This data enables us to tailor our website, our ads, and our offers much more effectively to your needs.

What data does Microsoft Advertising store?

We have integrated a conversion tracking tag (a small code snippet) from Microsoft Advertising into our website. This is the so-called Universal Event Tracking (UET) tag. If you arrive at our website via a Microsoft ad, this tracking tool allows us to learn more about your user behavior on our site. For example, we learn which keyword or ad led you to us, what you click on, how many people visit our website via Microsoft Ads, and how long you stay on our site. All this data relates to user behavior and not to personally identifiable information. We only receive data and analyses about your web behavior, but no personally identifiable information. Microsoft uses the data to optimize its own advertising and other services. If you have a Microsoft account, the collected data can be linked to your account. This means that Microsoft may also recognize and store your IP address. To store all this data about your user behavior, the following cookie is set in your browser after you arrive at our website via a Microsoft ad:

Name: MUIDB
Value: 08A53CA3313F6255044C307E353F61CD
Purpose: This cookie is set by our embedded Microsoft tag (UET tag) and is used for synchronization across different Microsoft websites. This allows users to be recognized across different domains.
Expiry date: after one year

If you access our website via a Bing ad, for example, other cookies may be set in your browser. Here is a selection of other cookies:

Name: ABDEF
Value: V=0&ABDV=0&MRNB=1594294373452&MRB=0113092826-7
Purpose: We were unable to find any more detailed information about this cookie.
Expiry date: after one year

Name: SRCHD
Value: AF=NOFORM
Purpose: This cookie is responsible for the functionality of the tracking and/or the website.
Expiry date: after one year

Name: SRCHHPGUSR
Value: WTS=63729889193&HV=1594294374&CW=1920&CH=937&DPR=1&UTC=120&DM=0
Purpose: This cookie tracks and stores your user behavior on our website and your interaction with the Bing Maps interface.
Expiry date: after one year

Name: SRCHUID
Value: V=2&GUID=157B20CCF36A43F3A4AE9790346EB7A7&dmnchg=1
Purpose: This cookie tracks and stores your user behavior on our website and your interaction with the Bing Map API.
Expiry date: after one year

Name: _EDGE_S
Value: mkt=de-at&SID=2EE7002D956A61511D280F2F9474607113092826-2
Purpose: This cookie collects and stores your user behavior across multiple websites. The goal of targeting is to better tailor advertising measures to the interests of our target group.
Expiry date: after the end of the browser session

Name: _SS
Value: SID=2EE7002D956A61511D280F2F94746077113092826-9
Purpose : This cookie is used, among other things, to recognize how you, as a user, accessed our website. Specifically, which advertisement led you to our website.
Expiry date: after one year

How long and where will the data be stored?

We have no control over how Microsoft uses the collected user data. Microsoft operates its own servers worldwide. Most are located in the United States, and therefore your data may also be stored, managed, and processed on American servers. Microsoft stores data (especially personal data) for as long as necessary to provide its own services or products, or for legal purposes. Microsoft also states that the actual retention period varies considerably and depends on the specific product.

When you search using Bing, Microsoft deletes your saved search queries after 6 months by deleting your IP address. Cookie IDs, such as those generated via the MUID cookie, are anonymized after 18 months.

How can I delete my data or prevent data storage?

You can opt out of Microsoft Ads conversion tracking at any time. If you do not want to see interest-based ads from Microsoft Advertising, you can disable this feature at https://account.microsoft.com/privacy/ad-settings/signedout . You can also disable, manage, or delete all cookies in your browser. The process varies slightly depending on the browser. Under the „Cookies“ section, you will find links to instructions for the most popular browsers.

Legal basis

If you have consented to the use of Microsoft Advertising, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur during collection by Microsoft Advertising.

We also have a legitimate interest in using Microsoft Advertising to optimize our online service and marketing activities. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we only use Microsoft Advertising if you have given your consent.

Microsoft processes your data, among other things, in the USA. Microsoft is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, Microsoft uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Microsoft commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

For more information about Microsoft’s standard contractual clauses, please visit https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses

We hope we have provided you with an overview of data processing through conversion tracking in Microsoft Ads. Of course, Microsoft’s privacy policy is subject to change. For more information and to stay up-to-date, we recommend reviewing Microsoft’s privacy statement at https://privacy.microsoft.com/de-de/privacystatement .

Microsoft Advertising Similar Audiences Privacy Policy

We also use the advertising tool Microsoft Advertising Similar Audiences. The service provider is the American company Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For the European region, the responsible company is Microsoft Ireland Operations Limited, South County Business Park, Dublin D18 P521, Ireland.

Microsoft processes your data, among other things, in the USA. Microsoft is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at: commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Furthermore, Microsoft uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). These templates, provided by the European Commission, ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Microsoft commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. The corresponding Implementing Decision and the Standard Contractual Clauses can be found, among other places, at: eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

Learn more about the data processed through the use of Microsoft Advertising at: privacy.microsoft.com/de-de/privacystatement .

PayPal Marketing Solutions Privacy Policy

PayPal Marketing Solutions Privacy Statement Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as IP address, login and contact details, identification and signature data, payment information, etc. More details can be found below in this privacy policy.
📅 Storage period: In principle, the data is stored for as long as is necessary to fulfill the obligations and within the scope of the purpose.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is PayPal Marketing Solutions?

We use the sales optimization tool PayPal Marketing Solutions on our website. The service provider is the American company PayPal Inc. For the European region, PayPal Europe (S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg) is responsible.

With PayPal Marketing Solutions, we can conduct targeted marketing campaigns to better promote our services or products. Founded in 1998, the company now boasts over 325 million active customers and is one of the world’s largest and best-known online payment providers. PayPal Marketing Solutions is an additional service offered alongside its payment processing capabilities.

Why do we use PayPal Marketing Solutions for our website?

There are several reasons why we use and offer PayPal Marketing Solutions on our website. We want to provide you with the best possible service and user experience (UX) on our website. For us, this also means that you only see content and advertisements that are truly relevant to you. PayPal Marketing Solutions allows us to tailor advertisements and other content precisely to your needs and interests. This way, we provide you with valuable content and achieve our business goals more easily and quickly.

What data does PayPal Marketing Solutions process?

PayPal’s privacy policy distinguishes between various categories of personal data that may be processed through the use of its service. These include registration and contact information, identification and signature data, payment information, information about imported contacts, data from your account profile, device data such as your IP address, location data, and so-called derived data. Derived data refers to information that can be inferred from transactions or other data. This can include purchasing habits, behavioral patterns, creditworthiness, or personal preferences.

Then there is also personal data collected by third parties (such as identity verification companies, fraud detection providers, or your bank). This data includes information from credit bureaus, transaction data, information relating to legal regulations, technical usage data, location data, and also derived data.

PayPal and its partners also use tracking technologies such as cookies, pixel tags, web beacons and widgets to recognize you as a user, to personalize content and to conduct analyses for interest-based advertising.

How long and where will the data be stored?

Generally, PayPal stores data for as long as necessary to fulfill its obligations and within the scope of the purpose for which it was collected. Personal data necessary for the customer relationship is retained for up to 10 years after the termination of the relationship. If PayPal is subject to a legal obligation, the retention period for personal data is governed by the applicable law (e.g., insolvency law). PayPal also stores personal data for as long as necessary if retention is advisable in the context of legal disputes.

Because PayPal is a globally operating company, it also has data centers worldwide where your data can be stored. This means your data may be stored on PayPal servers outside your country and even outside the scope of the GDPR.

How can I delete my data or prevent data storage?

You have the right to access, rectify, erase, and restrict the processing of your personal data at any time. You can also withdraw your consent to data processing at any time.

If you wish to disable, delete or manage cookies in general, you will find the corresponding links to the respective instructions for the most well-known browsers under the section „Cookies“.

Legal basis

The use of PayPal Marketing Solutions requires your consent, which we obtained via our cookie popup. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by PayPal Marketing Solutions.

In addition to your consent, we have a legitimate interest in analyzing website visitor behavior to improve our services both technically and economically. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests) . However, we only use PayPal Marketing Solutions if you have given your consent.

PayPal also processes your data in the USA, among other locations. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks to the legality and security of data processing.

PayPal uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR) as the basis for processing data with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e., in particular the USA) or for transferring data to such countries. Standard Contractual Clauses (SCCs) are template agreements provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). These clauses oblige PayPal to maintain the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

For more information about the standard contractual clauses and the data processed through the use of PayPal Marketing Solutions, please see the privacy policy at https://www.paypal.com/webapps/mpp/ua/privacy-full .

Yahoo Gemini Privacy Policy

We use Yahoo Gemini, an online advertising platform, on our website. The service provider is the American company Verizon Media Inc., 770 Broadway, 4th, 5th, 6th and 9th Floors, New York, NY 10003-9562, USA.

Yahoo also processes your data in the USA, among other locations. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks to the lawfulness and security of data processing.

As a basis for data processing by recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e., in particular the USA) or data transfers to such countries, Yahoo uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are template agreements provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through these clauses, Yahoo commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

For more information about the standard contractual clauses and the data processed through the use of Yahoo, please see the Privacy Policy at https://legal.yahoo.com/xw/en/yahoo/privacy/topic/b2bprivacypolicy/index.html .

Cookie Consent Management Platform Summary
👥 Affected: Website visitors
🤝 Purpose: Obtaining and managing consent for certain cookies and thus the use of certain tools
📓 Data processed: Data for managing cookie settings, such as IP address, time of consent, type of consent, and individual consents. More details can be found in the documentation for each tool used.
📅 Storage duration: Depends on the tool used; expect periods of several years.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is a Cookie Consent Management Platform?

We use a Consent Management Platform (CMP) software on our website to facilitate the correct and secure handling of scripts and cookies for both you and us. The software automatically generates a cookie popup, scans and controls all scripts and cookies, provides you with the legally required cookie consent, and helps us and you maintain an overview of all cookies. Most cookie consent management tools identify and categorize all existing cookies. As a website visitor, you then decide which scripts and cookies you allow or block. The following graphic illustrates the relationship between browser, web server, and CMP.

Why do we use a cookie management tool?

Our goal is to offer you the greatest possible transparency regarding data protection. We are also legally obligated to do so. We want to inform you as thoroughly as possible about all tools and cookies that can store and process your data. It is also your right to decide which cookies you accept and which you do not. To grant you this right, we first need to know exactly which cookies have landed on our website. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we are aware of all cookies and can provide you with GDPR-compliant information about them. You can then accept or reject cookies via the consent system.

What data is processed?

Our cookie management tool allows you to manage each individual cookie yourself and gives you complete control over the storage and processing of your data. Your consent is stored so that we don’t have to ask you every time you visit our website and so that we can prove your consent if legally required. This is stored either in an opt-in cookie or on a server. The storage period for your cookie consent varies depending on the provider of the cookie management tool. This data (such as pseudonymous user ID, time of consent, details about the cookie categories or tools, browser, and device information) is usually stored for up to two years.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information. Generally, we process personal data only as long as it is absolutely necessary for the provision of our services and products. Data stored in cookies is stored for varying lengths of time. Some cookies are deleted as soon as you leave the website, while others can remain stored in your browser for several years. The exact duration of data processing depends on the tool used; you should usually expect a storage period of several years. You can generally find detailed information about the duration of data processing in the respective privacy policies of the individual providers.

Right to object

You also have the right and the option to withdraw your consent to the use of cookies at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Information on specific cookie management tools can be found – if available – in the following sections.

Legal basis

If you consent to cookies, your personal data will be processed and stored via these cookies. If we are permitted to use cookies based on your consent (Article 6(1)(a) GDPR), this consent also serves as the legal basis for the use of cookies and the processing of your data. To manage cookie consent and enable you to grant it, we use cookie consent management platform software. The use of this software allows us to operate the website efficiently and in compliance with the law, which constitutes a legitimate interest (Article 6(1)(f) GDPR).

AdSimple Consent Manager Privacy Policy Summary
👥 Affected: Website visitors
🤝 Purpose: To obtain consent for certain cookies and thus the use of certain tools
📓 Data processed: Data for managing your cookie settings, such as IP address, time of consent, type of consent, and individual consents. More details can be found further down in this privacy policy.
📅 Storage duration: the cookie used expires after one year.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is the AdSimple Consent Manager?

We use the AdSimple Consent Manager from the software development and online marketing company AdSimple GmbH, Fabriksgasse 20, 2230 Gänserndorf, on our website. The AdSimple Consent Manager allows us, among other things, to provide you with a comprehensive and GDPR-compliant cookie notice, so you can decide which cookies you allow and which you do not. By using this software, your data is sent to and stored by AdSimple. In this privacy policy, we inform you why we use the AdSimple Consent Manager, what data is transferred and stored, and how you can prevent this data transfer.

The AdSimple Consent Manager is software that scans our website and identifies and categorizes all existing cookies. Furthermore, as a website visitor, you will be informed about the use of cookies via a cookie notice script and can decide for yourself which cookies you allow and which you do not.

Why do we use the AdSimple Consent Manager on our website?

We want to offer you maximum transparency regarding data protection. To ensure this, we first need to know exactly which cookies have landed on our website over time. Because AdSimple’s Consent Manager regularly scans our website and identifies all cookies, we have full control over these cookies and can therefore act in compliance with the GDPR. This allows us to inform you precisely about the use of cookies on our website. Furthermore, you will always receive an up-to-date and GDPR-compliant cookie notice and can decide for yourself, via a checkbox system, which cookies you accept or block.

What data is stored by the AdSimple Consent Manager?

If you consent to cookies on our website, the following cookie will be set by the AdSimple Consent Manager:

Name: acm_status
Value: “:true,”statistics”:true,”marketing”:true,”socialmedia”:true,”settings”:true}
Purpose: This cookie stores your consent status. This allows our website to read and follow your current status on future visits.
Expiry date: after one year

How long and where will the data be stored?

All data collected by the AdSimple Consent Manager is transferred and stored exclusively within the European Union. The collected data is stored on AdSimple’s servers at Hetzner GmbH in Germany. Only AdSimple GmbH and Hetzner GmbH have access to this data.

How can I delete my data or prevent data storage?

You have the right to access and delete your personal data at any time. You can prevent data collection and storage, for example, by rejecting the use of cookies via the cookie notice script. Your browser also offers another way to prevent data processing or manage it according to your preferences. Cookie management works slightly differently depending on the browser. In the „Cookies“ section, you will find links to the instructions for the most common browsers.

Legal basis

If you consent to cookies, your personal data will be processed and stored via these cookies. If we are permitted to use cookies based on your consent (Article 6(1)(a) GDPR), this consent also serves as the legal basis for the use of cookies and the processing of your data. The AdSimple Consent Manager is used to manage cookie consent and enable you to grant it. Using this software allows us to operate the website efficiently and in compliance with the law, which constitutes a legitimate interest (Article 6(1)(f) GDPR).

We hope we have provided you with a good overview of the data traffic and data processing by the AdSimple Consent Manager. If you would like to learn more about this tool, we recommend visiting the description page at https://www.adsimple.at/consent-manager/ .

consentmanager Privacy Policy

We use consentmanager, a cookie banner solution from Händlerbund, on our website. The service provider is the German company Händlerbund Management AG, Torgauer Str. 233, ArcusPark / Haus B, 04347 Leipzig, Germany.

You can find out more about the data processed through the use of consentmanager in the Privacy Policy at https://www.haendlerbund.de/de/datenschutzerklaerung .

Cookiebot Privacy Policy

Cookiebot Privacy Policy Summary
👥 Affected: Website visitors
🤝 Purpose: To obtain consent for certain cookies and thus the use of certain tools
📓 Data processed: Data for managing cookie settings, such as IP address, time of consent, type of consent, and individual consents. More details can be found in the documentation for each tool used.
📅 Data retention period: the data will be deleted after one year.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Cookiebot?

We use features from the provider Cookiebot on our website. Cookiebot is operated by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot allows us, among other things, to provide you with a comprehensive cookie notice (also known as a cookie banner or cookie notification). By using this feature, your data may be sent to, stored by, and processed by Cookiebot or Cybot. In this privacy policy, we inform you why we use Cookiebot, what data is transferred, and how you can prevent this data transfer.

Cookiebot is a software product from the company Cybot. The software automatically generates a GDPR-compliant cookie notice for our website visitors. Furthermore, the technology behind Cookiebot scans, monitors, and evaluates all cookies and tracking measures on our website.

Why do we use Cookiebot on our website?

We take data protection very seriously. We want to show you exactly what happens on our website and which of your data is stored. Cookiebot helps us maintain a clear overview of all our cookies (first-party and third-party cookies). This allows us to inform you precisely and transparently about the use of cookies on our website. You will always receive an up-to-date and data protection-compliant cookie notice and can decide for yourself which cookies you allow and which you do not.

What data does Cookiebot store?

If you allow cookies, the following data will be transferred to, stored and processed by Cybot.

IP address (in anonymized form, the last 3 digits are set to 0)
Date and time of your consent
our website URL
technical browser data
encrypted, anonymous key
the cookies you have allowed (as proof of consent)

The following cookies are set by Cookiebot if you have consented to the use of cookies:

Name: CookieConsent
Value: {stamp:’P7to4eNgIHvJvDerjKneBsmJQd9113092826-2
Purpose: This cookie stores your consent status. This allows our website to read and follow your current status on future visits.
Expiry date: after one year

Name: CookieConsentBulkTicket
Value: kDSPWpA%2fjhljZKClPqsncfR8SveTnNWhys5NojaxdFYBPjZ2PaDnUw%3d%3113092826-6
Purpose: This cookie is set when you allow all cookies and thus activate „collective consent“. The cookie then stores its own random and unique ID.
Expiry date: after one year

Note: Please bear in mind that this is an example list and we cannot claim it to be exhaustive. You can see which other cookies may be used in the cookie declaration at https://www.cookiebot.com/de/cookie-declaration/ .

According to Cybot’s privacy policy, the company does not sell personal data. However, Cybot shares data with trusted third-party or subcontracting companies that help the company achieve its business objectives. Data is also shared when legally required.

How long and where will the data be stored?

All collected data is transferred, stored, and forwarded exclusively within the European Union. The data is stored in an Azure data center (cloud provider: Microsoft). You can learn more about all Azure regions at https://azure.microsoft.com/de-de/explore/global-infrastructure/geographies/ . All user data is deleted by Cookiebot 12 months after registration (cookie consent) or immediately after termination of the Cookiebot service.

How can I delete my data or prevent data storage?

You have the right to access and delete your personal data at any time. You can prevent data collection and storage, for example, by declining the use of cookies via the cookie notice. Your browser also offers another way to prevent data processing or manage it according to your preferences. Cookie management works slightly differently depending on the browser. In the „Cookies“ section, you will find links to the instructions for the most common browsers.

Legal basis

If you consent to cookies, your personal data will be processed and stored via these cookies. If we are permitted to use cookies based on your consent (Article 6(1)(a) GDPR), this consent also serves as the legal basis for the use of cookies and the processing of your data. To manage cookie consent and enable you to grant it, we use Cookiebot. The use of this software allows us to operate the website efficiently and in compliance with the law, which constitutes a legitimate interest (Article 6(1)(f) GDPR).

If you would like to learn more about the privacy policy of „Cookiebot“ or the company behind it, Cybot, we recommend that you read the privacy policy at https://www.cookiebot.com/de/privacy-policy/ .

Cookiefirst Privacy Policy

We use Cookiefirst, a cookie consent manager tool, on our website. The service provider is the Dutch company Digital Data Solutions BV, Plantage Middenlaan 42a, 1018DH, Amsterdam, Netherlands.

You can find out more about the data processed through the use of Cookiefirst in the Privacy Policy at https://cookiefirst.com/legal/general-terms-conditions/ .

OneTrust Privacy Policy

We use OneTrust, a privacy management tool, on our website. The service provider is the Italian company iubenda srl, Via San Raffaele, 1 – 20121 Milan, Italy.

You can find out more about the data processed through the use of OneTrust in the Privacy Policy at https://www.onetrust.com/privacy/ .

Security & Anti-Spam

Security & Anti-Spam Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Cybersecurity
📓 Data processed: Data such as your IP address, name, or technical data such as browser version
You can find more details below and in the individual privacy policies.
📅 Storage period: In most cases, the data is stored until it is no longer needed to fulfill the service.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is security and anti-spam software?

With so-called security and anti-spam software, you and we can protect ourselves from various spam and phishing emails, as well as other potential cyberattacks. Spam refers to unsolicited advertising emails sent in bulk. These emails are also known as junk mail and can even incur costs. Phishing emails, on the other hand, are messages designed to gain your trust through fake messages or websites in order to obtain personal data. Anti-spam software typically protects against unwanted spam messages or malicious emails that could, for example, introduce viruses into your system. We also use general firewall and security systems that protect our computers from unwanted network attacks.

Why do we use security and anti-spam software?

We place particular emphasis on security on our website. After all, it’s not just about our security, but above all, yours. Unfortunately, cyber threats are now commonplace in the world of IT and the internet. Hackers often attempt to steal personal data from IT systems using cyberattacks. Therefore, a robust defense system is absolutely essential. A security system monitors all incoming and outgoing connections to our network and computers. To achieve even greater protection against cyberattacks, we utilize additional external security services alongside the standard security systems on our computers. This effectively prevents unauthorized data traffic and protects us against cybercrime.

What data is processed by security and anti-spam software?

Exactly which data is collected and stored depends, of course, on the specific service. However, we always strive to use only programs that collect very little data or only store data necessary for fulfilling the offered service. Generally, the service may store data such as name, address, IP address, email address, and technical data like browser type and version. Performance and log data may also be collected to detect potential incoming threats in a timely manner. This data is processed within the scope of the services and in compliance with applicable laws. For US providers, this includes the GDPR (via standard contractual clauses). In some cases, these security services also collaborate with third-party providers who may store and/or process data under our instructions and in accordance with data protection guidelines and other security measures. Data storage is usually done via cookies.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information. For example, security programs store data until you or we revoke the data storage consent. Generally, personal data is only stored for as long as is absolutely necessary for the provision of the services. Unfortunately, in many cases, we lack precise information from the providers regarding the storage period.

Right to object

You also have the right and the option to withdraw your consent to the use of cookies or third-party security software at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Since such security services may also use cookies, we recommend that you read our general privacy policy on cookies. To find out exactly what data is stored and processed about you, you should read the privacy policies of the respective tools.

Legal basis

We primarily use security services based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in a good security system against various cyberattacks.

Certain data processing activities, in particular the use of cookies and security features, require your consent. If you have consented to the processing and storage of your data by integrated security services, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Most of the services we use place cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review the privacy statement or cookie policy of the respective service provider.

Information on specific tools – if available – can be found in the following sections.

Cloud services

Cloud Services Privacy Policy Summary
👥 Affected parties: We as website operators and you as website visitors
🤝 Purpose: Security and data storage
📓 Data processed: Data such as your IP address, name, or technical data such as browser version
You can find more details below and in the individual data protection texts or in the privacy policies of the providers.
📅 Storage period: In most cases, the data is stored until it is no longer needed to fulfill the service.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are cloud services?

Cloud services provide us, as website operators, with storage space and computing power via the internet. Data can be transferred to, processed, and stored in an external system via the internet. The respective cloud provider manages this data. Depending on their needs, individuals or companies can choose the storage space or computing power required. Cloud storage is accessed via an API or storage protocols. API stands for Application Programming Interface and refers to a programming interface that connects software and hardware components.

Why do we use cloud services?

We use cloud services for several reasons. A cloud service allows us to store our data securely. Furthermore, we can access the data from various locations and devices, giving us greater flexibility and streamlining our workflows. Cloud storage also saves us money because we don’t need to build and manage our own data storage and security infrastructure. Storing our data centrally in the cloud also allows us to expand our applications and manage our information much more effectively.

As website operators and companies, we primarily use cloud services for our own purposes. For example, we use these services to manage our calendar and to store documents and other important information in the cloud. However, your personal data may also be stored in this process. This is the case, for instance, if you provide us with your contact information (such as your name and email address) and we store our customer data with a cloud provider. Consequently, data that we process from you may also be stored and processed on external servers. When we offer certain forms or content from cloud services on our website, cookies may also be set for web analytics and advertising purposes. Furthermore, these cookies remember your settings (such as your preferred language) so that you find your familiar web environment the next time you visit our website.

What data is processed by cloud services?

Many of the data we store in the cloud are not personally identifiable, but some data, according to the GDPR definition, falls under the category of personal data. This often includes customer data such as name, address, IP address, or telephone number, or technical device information. Videos, images, and audio files can also be stored in the cloud. Exactly how the data is collected and stored depends on the specific service. We strive to use only services that handle data with a high degree of trustworthiness and professionalism. Generally, services like Amazon Drive have access to the stored files in order to provide their own services. However, these services require permissions, such as the right to copy files for security reasons. This data is processed and managed within the framework of the services and in compliance with applicable laws. For US providers, this includes the GDPR (via standard contractual clauses). In some cases, these cloud services also collaborate with third-party providers who may process data under instruction and in accordance with data protection guidelines and other security measures. We would like to emphasize once again that all well-known cloud services (such as Amazon Drive, Google Drive or Microsoft Onedrive) request the right to access stored content in order to offer and optimize their own service accordingly.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information. Generally, cloud services store data until you or we revoke consent for data storage or delete the data. Personal data is generally stored only as long as absolutely necessary for providing the services. However, permanently deleting data from the cloud can take several months. This is because the data is usually not stored on just one server, but distributed across several.

Right to object

You also have the right and the option to withdraw your consent to data storage in a cloud at any time. If cookies are used, you also have the right to withdraw your consent. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser. We also recommend that you read our general privacy policy about cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective cloud providers.

Legal basis

We primarily use cloud services based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in a good security and storage system.

Certain processing activities, in particular the use of cookies and storage functions, require your consent. If you have consented to your data being processed and stored by cloud services, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Most of the services we use place cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review the privacy statement or cookie policy of the respective service provider.

Information on specific tools – if available – can be found in the following sections.

Google Cloud Privacy Policy

We use Google Cloud, an online storage service for files, photos, and videos, for our website. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

Google provides a data processing agreement pursuant to Article 28 of the GDPR, which serves as the legal basis for data protection in our customer relationship with Google. This agreement refers to the EU Standard Contractual Clauses. You can find the data processing terms here: https://business.safety.google/intl/de/adsprocessorterms/

You can find out more about the data processed through the use of Google Cloud in the Privacy Policy at https://policies.google.com/privacy?hl=de .

Payment Providers Introduction

Payment provider privacy policy summary
👥 Affected: Visitors to the website
🤝 Purpose: To enable and optimize the payment process on our website
📓 Data processed: Data such as name, address, bank details (account number, credit card number, passwords, TANs, etc.), IP address and contract data
More details can be found in the respective payment provider tool.
📅 Storage duration: depends on the payment provider used
⚖️ Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract)

What is a payment provider?

We use online payment systems on our website that ensure a secure and seamless payment process for both you and us. This may involve sending, storing, and processing personal data with the respective payment provider. These payment providers are online payment systems that allow you to place an order via online banking. The payment processing is handled by your chosen payment provider, and we subsequently receive confirmation of the payment. This method is available to any user with an active online banking account and PIN/TAN authentication. Very few banks still offer or accept such payment methods.

Why do we use payment providers on our website?

Naturally, we want to offer the best possible service with our website and integrated online shop, so that you feel comfortable on our site and can take advantage of our offers. We know that your time is valuable and that payment processing, in particular, needs to be quick and seamless. For this reason, we offer you various payment providers. You can choose your preferred payment provider and pay in the usual way.

What data is processed?

The exact data processed depends, of course, on the specific payment provider. However, data such as name, address, and bank details (account number, credit card number, passwords, TANs, etc.) are generally stored. This data is necessary to process a transaction. Additionally, any contract data and user data, such as when you visit our website, which content you are interested in, or which subpages you click on, may also be stored. Most payment providers also store your IP address and information about the computer you are using.

The data is generally stored and processed on the payment providers‘ servers. We, as website operators, do not receive this data. We are only informed whether the payment was successful or not. For identity and credit checks, payment providers may forward data to the relevant authorities. All payment transactions are always subject to the terms and conditions and privacy policies of the respective provider. Therefore, please always review the payment provider’s terms and conditions and privacy policy. You also have the right to have your data deleted or corrected at any time. Please contact the respective service provider regarding your rights (right of withdrawal, right of access, and data subject rights).

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. Generally, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If legally required, as in the case of accounting, this storage period may be exceeded. For example, we retain accounting documents pertaining to a contract (invoices, contracts, bank statements, etc.) for 10 years (§ 147 AO) and other relevant business documents for 6 years (§ 247 HGB) after they are generated.

Right to object

You always have the right to access, correct, and delete your personal data. If you have any questions, you can also contact the responsible parties at the payment provider you are using. Contact details can be found either in our specific privacy policy or on the website of the respective payment provider.

You can delete, disable, or manage cookies used by payment providers in your browser. The process varies depending on your browser. Please note, however, that this may prevent the payment process from working.

Legal basis

We therefore offer services for the processing of contractual or legal relationships (Art. 6 para. 1 lit. b GDPR) In addition to traditional banks and credit institutions, other payment service providers are also offered. The privacy policies of the individual payment providers (such as Amazon Payments , Apple Pay , or Discover ) provide you with a detailed overview of data processing and storage. Furthermore, you can always contact the responsible parties with any questions regarding data protection issues.

Information on specific payment providers can be found – if available – in the following sections.

EPS transfer privacy policy

We use eps-Überweisung, an online payment service, on our website. The service provider is the Austrian company Stuzza GmbH, Frankgasse 10/8, 1090 Vienna, Austria.

You can find out more about the data processed through the use of eps transfers in the privacy policy at https://eservice.psa.at/de/datenschutzerklaerung.html .

Google Pay Privacy Policy

We use the online payment provider Google Pay on our website. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

The data processing terms for Google advertising products (Google Ads Controller-Controller Data Protection Terms), which refer to the standard contractual clauses, can be found at https://business.safety.google/adscontrollerterms/ .

You can find out more about the data processed through the use of Google Pay in the Privacy Policy at https://policies.google.com/privacy .

Klarna Checkout Privacy Policy

Klarna Checkout Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize the payment process on our website
📓 Data processed: Data such as name, address, bank details (account number, credit card number, passwords, TANs, etc.), IP address and contract data
You can find more details below in this privacy policy.
📅 Storage period: Data is stored as long as Klarna needs it for the processing purpose.
⚖️ Legal basis: Art. 6 para. 1 lit. c GDPR (Legal obligation), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is Klarna Checkout?

We use the Klarna Checkout online payment system from the Swedish company Klarna Bank AB on our website. Klarna Bank is headquartered at Sveavägen 46, 111 34 Stockholm, Sweden. If you choose to use this service, personal data will be sent to, stored, and processed by Klarna. This privacy policy provides you with an overview of Klarna’s data processing practices.

Klarna Checkout is a payment system for online orders. The user selects their payment method, and Klarna Checkout handles the entire payment process. Once a user has made a payment through the checkout system and entered their information, future online purchases can be completed even faster and more easily. The Klarna system recognizes the existing customer as soon as their email address and postal code are entered.

Why do we use Klarna Checkout for our website?

Our goal with our website and integrated online shop is to offer you the best possible service. This includes not only the overall website experience and our products, but also smooth, fast, and secure payment processing for your orders. To guarantee this, we use the Klarna Checkout payment system.

What data does Klarna Checkout store?

As soon as you choose Klarna as your payment service and pay using the Klarna Checkout payment method, you also transmit personal data to the company. On the Klarna Checkout page, technical data such as browser type, operating system, our website address, date and time, language settings, time zone settings, and IP address are collected from you and transmitted to Klarna’s servers, where they are stored. This data is stored even if you have not yet completed an order.

When you order a product or service through our shop, you must enter your personal data in the designated fields. This data is processed by Klarna for payment processing. Specifically, the following personal data (as well as general product information) may be stored and processed by Klarna for creditworthiness and identity verification:

Contact information: Name, date of birth, national ID number, title, billing and shipping address, email address, telephone number, nationality or salary.
Payment information such as credit card details or your account number
Product information such as tracking number, type of item and price of the product

In addition, there is also data that can be collected optionally, provided you consciously choose to do so. This includes, for example, political, religious, or philosophical beliefs, or various health data.

In addition to the data mentioned above, Klarna may also collect data about the goods or services you purchase or order, either directly or through third parties (such as us or public databases). This could include, for example, the tracking number or the type of item ordered, as well as information about your creditworthiness, income, or credit history. Klarna may also share your personal data with service providers such as software providers, data storage providers, or us as the merchant.

When data is automatically entered into a form, cookies are always involved. If you don’t want to use this function, you can deactivate these cookies at any time. Further down in the text, you will find instructions on how to delete, deactivate, or manage cookies in your browser. Our tests have shown that Klarna does not set any cookies directly. If you select the payment method „Klarna Sofort“ and click „Order,“ you will be redirected to the Sofort website. After successful payment, you will be taken to our thank-you page. There, Sofort.com sets the following cookie:

Name : SOFUEB
Value: e8cipp378mdscn9e17kajlfhv7113092826-4
Purpose: This cookie stores your session ID.
Expiry date: after the browser session ends

How long and where will the data be stored?

Klarna strives to store your data only within the EU or the European Economic Area (EEA). However, it is possible that data may be transferred outside the EU/EEA. If this occurs, Klarna ensures that data protection complies with the GDPR and that the third country is subject to an adequacy decision by the European Union. The data is always stored for as long as Klarna needs it for the processing purpose.

How can I delete my data or prevent data storage?

You can withdraw your consent to Klarna processing your personal data at any time. You also always have the right to access, correct, and delete your personal data. To do so, simply contact the company or its data protection team by email at datenschutz@klarna.de . You can also contact Klarna directly via the „My Data Protection Request“ section on the Klarna website.

You can delete, disable, or manage cookies that Klarna may use for its functions in your browser. The process varies depending on the browser you use. Under the „Cookies“ section, you will find links to instructions for the most popular browsers.

Legal basis

We therefore offer services for the processing of contractual or legal relationships (Art. 6 para. 1 lit. b GDPR) In addition to traditional banks/credit institutions, we also offer the payment service provider Klarna Checkout.

We hope we have provided you with a good overview of data processing by Klarna. If you would like to learn more about how your data is handled, we recommend that you read Klarna’s privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy .

PayPal Privacy Statement

PayPal Privacy Statement Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize the payment process on our website
📓 Data processed: Data such as name, address, bank details (account number, credit card number, passwords, TANs, etc.), IP address and contract data may be processed.
You can find more details further down in this privacy policy.
📅 Data retention period: Data is generally stored until the cooperation with PayPal is terminated.
⚖️ Legal basis: Art. 6 para. 1 lit. b GDPR (contract performance), Art. 6 para. 1 lit. a GDPR (consent)

What is PayPal?

We use the online payment service PayPal on our website. The service provider is the American company PayPal Inc. For the European region, PayPal Europe (S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg) is responsible.

PayPal allows all users to send and receive money electronically. Founded in 1998, the company now has over 325 million active customers and is one of the world’s largest and best-known online payment providers.

Why do we use PayPal for our website?

There are several reasons why we use and offer PayPal on our website. Since PayPal is one of the best-known online payment providers, many of our website visitors use and trust this service. PayPal also offers high security standards for digital money transfers. The service uses various encryption methods to protect your personal data as effectively as possible. We also appreciate PayPal’s ease of use and the ability to make international payments in different currencies. Transactions are generally processed very quickly, which is another advantage for both us and you as a customer.

What data does PayPal process?

How long and where will the data be stored?

How can I delete my data or prevent data storage?

You have the right to access, rectify, erase, and restrict the processing of your personal data at any time. You can also withdraw your consent to data processing at any time.

If you wish to disable, delete or manage cookies in general, you will find the corresponding links to the respective instructions for the most well-known browsers under the section „Cookies“.

Legal basis

We have a legitimate interest in integrating PayPal as an external payment service to make our offering more attractive and to improve it technically and economically. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests). Please note that you can only use PayPal if you enter into a contractual relationship with PayPal. This may require you to provide further data protection and contractual declarations (e.g., your consent).

For more information about the standard contractual clauses and the data processed through the use of PayPal, please see the privacy policy at https://www.paypal.com/webapps/mpp/ua/privacy-full .

Shop Pay Privacy Policy

We use Shop Pay, an online payment solution service, on our website. The service provider is the American company Shopify Inc. For the European region, Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland) is responsible.

Please note that, according to the European Court of Justice, there is currently no adequate level of data protection for data transfers to the USA. Data processing is primarily carried out by Shop Pay. This may result in data being processed and stored in a non-anonymized manner. Furthermore, US government authorities may potentially access individual data points. It is also possible that this data may be linked to data from other Shop Pay services where you have a user account.

You can find out more about the data processed through the use of Shop Pay in the Privacy Policy at https://www.shopify.de/legal/datenschutz .

Visa Privacy Policy

We use Visa, a global payment provider, on our website. The service provider is the American company Visa Inc. For the European region, the responsible company is Visa Europe Services Inc. (1 Sheldon Square, London W2 6TT, United Kingdom).

Visa processes your data, among other places, in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks to the lawfulness and security of data processing.

Visa uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR) as the basis for processing data with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, and especially the USA) or for transferring data to such countries. Standard Contractual Clauses (SCCs) are template agreements provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). These clauses oblige Visa to maintain the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More information about Visa’s standard contractual clauses can be found at https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html .

For more information about the data processed through the use of Visa, please see the Privacy Policy at https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html .

Audio & Video Introduction

Audio & Video Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as contact details, user behavior data, information about your device and your IP address may be stored.
You can find more details below in the corresponding privacy policy texts.
📅 Storage period: Data is generally stored as long as it is needed for the service purpose.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are audio and video elements?

We have integrated audio and video elements into our website so that you can watch videos or listen to music/podcasts directly through our site. The content is provided by service providers. Therefore, all content is retrieved from the respective servers of these providers.

These are embedded features from platforms such as YouTube, Vimeo, or Spotify. Using these platforms is generally free, but they may also offer paid content. These embedded features allow you to listen to or watch the respective content directly on our website.

When you use audio or video elements on our website, your personal data may also be transmitted to, processed and stored by the service providers.

Why do we use audio and video elements on our website?

Of course, we want to offer you the best possible experience on our website. And we understand that content is no longer conveyed solely through text and static images. Instead of simply providing a link to a video, we offer audio and video formats directly on our website that are entertaining, informative, or ideally, both. This expands our service and makes it easier for you to access interesting content. Therefore, in addition to our text and images, we also offer video and/or audio content.

What data is stored through audio and video elements?

When you visit a page on our website that contains, for example, an embedded video, your device connects to the service provider’s server. In doing so, your data is also transmitted to and stored by the third-party provider. Some data is collected and stored regardless of whether you have an account with the third-party provider or not. This usually includes your IP address, browser type, operating system, and other general information about your device. Furthermore, most providers also collect information about your web activity. This includes, for example, session duration, bounce rate, which buttons you clicked, and which website you used to access the service. All this information is usually stored via cookies or pixel tags (also called web beacons). Pseudonymized data is usually stored in cookies in your browser. You can always find out exactly which data is stored and processed in the respective provider’s privacy policy.

Duration of data processing

You can find out exactly how long data is stored on third-party servers either further down in the privacy policy of the respective tool or in the provider’s privacy statement. Generally, personal data is only processed for as long as is absolutely necessary for the provision of our services or products. This usually also applies to third-party providers. You can generally assume that certain data will be stored on third-party servers for several years. Data can be stored for varying lengths of time, especially in cookies. Some cookies are deleted as soon as you leave the website, while others can remain stored in your browser for several years.

Right to object

Since the integrated audio and video functions on our site usually also use cookies, you should also read our general privacy policy about cookies. The privacy policies of the respective third-party providers provide more detailed information about how they handle and store your data.

Legal basis

If you have consented to the processing and storage of your data through embedded audio and video elements, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR) . In principle, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. However, we only use the embedded audio and video elements if you have given your consent.

YouTube Privacy Policy

YouTube Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as contact details, user behavior data, information about your device and your IP address may be stored.
You can find more details below in this privacy policy.
📅 Storage period: Data is generally stored as long as it is needed for the service purpose.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is YouTube?

We have embedded YouTube videos on our website. This allows us to present interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that has an embedded YouTube video, your browser automatically connects to the servers of YouTube or Google. Depending on your settings, various data is transmitted during this process. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all data processing within the European Economic Area.

Below we would like to explain in more detail which data is processed, why we have embedded YouTube videos and how you can manage or delete your data.

On YouTube, users can watch, rate, comment on, and upload videos for free. Over the past few years, YouTube has become one of the most important social media channels worldwide. To enable us to display videos on our website, YouTube provides a code snippet that we have embedded on our site.

Why do we use YouTube videos on our website?

YouTube is the video platform with the most visitors and the best content. We strive to offer you the best possible user experience on our website. And of course, interesting videos are an essential part of that. With our embedded videos, we provide you with additional helpful content alongside our text and images. Furthermore, the embedded videos make our website easier to find on Google search. Even when we run advertisements through Google Ads, Google—thanks to the data collected—can only show these ads to people who are genuinely interested in our offerings.

What data does YouTube store?

As soon as you visit one of our pages that has an embedded YouTube video, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can usually associate your interactions on our website with your profile using cookies. This includes data such as session duration, bounce rate, approximate location, and technical information like browser type, screen resolution, and your internet service provider. Other data may include contact information, any ratings, sharing content via social media, or adding videos to your favorites on YouTube.

If you’re not signed in to a Google or YouTube account, Google stores data with a unique identifier linked to your device, browser, or app. This allows, for example, your preferred language setting to be retained. However, much interaction data cannot be stored because fewer cookies are set.

The following list shows cookies that were set in a browser test. We show cookies that were set both when no user was logged into a YouTube account and when a user was logged in. This list is not exhaustive, as user data always depends on interactions on YouTube.

Name: YSC
Value: b9-CV6ojI5Y113092826-1
Purpose: This cookie registers a unique ID to store statistics about the video viewed.
Expiry date: after the end of the session

Name: PREF
Value: f1=50000000
Purpose: This cookie also registers your unique ID. Google receives statistics via PREF about how you use YouTube videos on our website.
Expiry date: after 8 months

Name: GPS
Value: 1
Purpose: This cookie registers your unique ID on mobile devices to track your GPS location.
Expiry date: after 30 minutes

Name: VISITOR_INFO1_LIVE
Value: 95Chz8bagyU
Purpose: This cookie attempts to estimate the user’s bandwidth on our websites (with embedded YouTube video).
Expiry date: after 8 months

Other cookies that are set when you are logged in with your YouTube account:

Name: APISID
Value: zILlvClZSkqGsSwI/AU1aZI6HY7113092826-
Purpose: This cookie is used to create a profile of your interests. The data is used for personalized advertising.
Expiry date: after 2 years

Name: CONSENT
Value: YES+AT.de+20150628-20-0
Purpose: This cookie stores a user’s consent status for using various Google services. CONSENT also serves a security purpose, verifying users and protecting user data from unauthorized access.
Expiry date: after 19 years

Name: HSID
Value: AcRwpgUik9Dveht0I
Purpose: This cookie is used to create a profile of your interests. This data helps to display personalized advertising.
Expiry date: after 2 years

Name: LOGIN_INFO
Value: AFmmF2swRQIhALLl6aL…
Purpose: This cookie stores information about your login data.
Expiry date: after 2 years

Name: SAPISID
Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM
Purpose: This cookie works by uniquely identifying your browser and device. It is used to create a profile of your interests.
Expiry date: after 2 years

Name: SID
Value: oQfNKjAsI113092826-
Purpose: This cookie stores your Google account ID and your last login time in digitally signed and encrypted form.
Expiry date: after 2 years

Name: SIDCC
Value: AN0-TYuqub2JOcDTyL
Purpose: This cookie stores information about how you use the website and what advertisements you may have seen before visiting our site.
Expiry date: after 3 months

How long and where will the data be stored?

The data that YouTube receives and processes from you is stored on Google servers. Most of these servers are located in America. You can see the exact locations of Google’s data centers at https://datacenters.google/ . Your data is distributed across these servers. This allows for faster data retrieval and better protection against manipulation.

Google stores the collected data for varying lengths of time. Some data can be deleted at any time, some is automatically deleted after a limited period, and still other data is stored by Google for longer periods. Some data (such as items from „My Activity,“ photos or documents, and products) stored in your Google Account remains stored until you delete it. Even if you are not signed in to a Google Account, you can delete some data associated with your device, browser, or app.

How can I delete my data or prevent data storage?

You can manually delete data from your Google account. However, with the automatic deletion feature for location and activity data introduced in 2019, information is stored for either 3 or 18 months, depending on your choice, and then deleted.

Whether or not you have a Google account, you can configure your browser to delete or disable cookies from Google. The process varies depending on the browser you use. Under the „Cookies“ section, you will find links to instructions for the most popular browsers.

Legal basis

If you have consented to the processing and storage of your data through embedded YouTube elements, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR) . Your data is also generally stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. However, we only use the embedded YouTube elements if you have given your consent. YouTube also uses cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review the privacy statement or cookie policy of the respective service provider.

YouTube processes your data, among other things, in the USA. YouTube, or rather Google, is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/ .

Since YouTube is a subsidiary of Google, they share a privacy policy. If you would like to learn more about how your data is handled, we recommend reading the privacy policy at https://policies.google.com/privacy?hl=de.

YouTube Subscribe Button Privacy Policy

We have integrated the YouTube subscribe button into our website. You can usually recognize the button by the classic YouTube logo. The logo shows the words „Subscribe“ or „YouTube“ in white lettering against a red background, with the white play symbol to the left. However, the button may also be displayed in a different design.

Our YouTube channel regularly offers you funny, interesting, or exciting videos. With the built-in „Subscribe“ button, you can subscribe to our channel directly from our website without having to visit the YouTube website separately. We want to make accessing our extensive content as easy as possible for you. Please note that YouTube may store and process your data as a result.

If you see a built-in subscribe button on our site, YouTube – according to Google – sets at least one cookie. This cookie stores your IP address and our URL. YouTube can also learn information about your browser, your approximate location, and your preferred language. In our test, the following four cookies were set without us being logged into YouTube:

Name: YSC
Value: b9-CV6ojI5113092826Y
Purpose: This cookie registers a unique ID to store statistics about the video viewed.
Expiry date: after the end of the session

Name: GPS
Value: 1
Purpose: This cookie registers your unique ID on mobile devices to track your GPS location.
Expiry date: after 30 minutes

Name: VISITOR_INFO1_LIVE
Value: 11309282695Chz8bagyU
Purpose: This cookie attempts to estimate the user’s bandwidth on our websites (with embedded YouTube video).
Expiry date: after 8 months

Note: These cookies were set after a test and cannot claim to be exhaustive.

If you are logged into your YouTube account, YouTube can use cookies to store many of your actions/interactions on our website and associate them with your YouTube account. This allows YouTube to obtain information such as how long you browse our site, which browser type you use, your preferred screen resolution, and other actions you perform.

YouTube uses this data firstly to improve its own services and offers, and secondly to provide analyses and statistics for advertisers (who use Google Ads).

YouTube Similar Audiences Privacy Policy

We also use the advertising tool YouTube Similar Audiences. The service provider is the American company Google LLC. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible.

YouTube processes your data, among other places, in the USA. YouTube is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information here:
https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Furthermore, YouTube – like Google – uses Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). These templates, provided by the European Commission, ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (e.g., the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, YouTube commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. The corresponding implementing decision and the Standard Contractual Clauses can be found, among other places, here:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You can find out more about the data processed through the use of YouTube Similar Audiences in the privacy policy at https://policies.google.com/privacy .

Survey and polling systems Introduction

Survey and polling systems Privacy policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of surveys on the website
📓 Data processed: Contact details, device data, access duration and time, IP addresses. Further details can be found in the documentation for the respective survey and questionnaire system used.
📅 Storage duration: depends on the tool used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are survey and polling systems?

We regularly conduct various surveys and questionnaires via our website. The results are always evaluated anonymously. A survey or questionnaire system is a tool integrated into our website that asks you questions (for example, about our products or services) which you can answer if you choose to participate. Your answers are always evaluated anonymously. However, with your consent to data processing, personal data may also be stored and processed.

Why do we use survey and polling systems?

We want to offer you the best products and services in our industry. Surveys provide us with invaluable feedback, allowing us to understand your expectations of us and our services. Based on these anonymous evaluations, we can tailor our products and services precisely to your needs and preferences. Furthermore, this information helps us to target our advertising and marketing efforts more effectively to those who are genuinely interested in our offerings.

What data is processed?

Personal data is only processed if it is necessary for technical implementation or if you have consented to the processing of your personal data. In such cases, your IP address, for example, will be stored so that the survey can be displayed in your browser. Cookies may also be used to allow you to easily continue your survey at a later time.

If you have consented to data processing, contact details such as your email address or telephone number may be processed in addition to your IP address. Data that you enter into an online form, for example, will also be stored and processed. Some providers also store information about the websites you visit (on our website), when you started and finished the survey, and various technical information about your computer.

How long is data stored?

Right to object

You also have the right and the option to withdraw your consent to the use of cookies or embedded survey systems at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Since survey systems may use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly what data is stored and processed about you, you should read the privacy policies of the respective tools.

Legal basis

The use of survey systems requires your consent, which we obtained via our cookie popup. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur during data collection by survey and questionnaire systems.

In addition to your consent, we have a legitimate interest in conducting surveys on our topic. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we will only use the tools if you have given your consent.

Since survey systems use cookies, we also recommend that you read our general privacy policy regarding cookies. To learn exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Information on the individual survey systems can be found – if available – in the following sections.

Google Form Privacy Policy

We use Google Forms, a service for Google Cloud forms, on our website. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

The Google Ads Data Processing Terms, which correspond to the standard contractual clauses and also apply to Google Forms, can be found at https://business.safety.google/adsprocessorterms/ .

You can find out more about the data processed through the use of Google in the privacy policy at https://policies.google.com/privacy .

Data Processing Agreement (DPA) Google Form

This agreement is legally required because Google processes personal data on our behalf. It stipulates that Google may only process data received from us according to our instructions and must comply with the GDPR. You can find the link to the data processing agreement (DPA) at https://workspace.google.com/terms/dpa_terms.html .

SurveyMonkey Privacy Policy

We use SurveyMonkey, a survey management software, for our website. The service provider is the American company Momentive Inc. For the European Economic Area, the Irish company Momentive Europe UC (2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland) is responsible.

SurveyMonkey also processes data in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can entail various risks to the lawfulness and security of data processing.

SurveyMonkey uses standard contractual clauses approved by the EU Commission (Article 46, paragraphs 2 and 3 GDPR) as the basis for processing data with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e., in particular the USA) or transferring data to such countries. These clauses oblige SurveyMonkey to maintain the EU level of data protection when processing relevant data even outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You can find out more about the data processed through the use of SurveyMonkey in the privacy policy at https://www.surveymonkey.de/mp/legal/privacy/ .

Review Platforms Introduction

Review Platforms Summary
👥 Affected: Visitors to the website or a review platform
🤝 Purpose: Feedback on our products and/or services
📓 Data processed: Including IP address, email address, name. More details can be found below or on the respective rating platforms used.
📅 Storage duration: depends on the respective platform
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests),

What are rating platforms?

You can rate our products or services on various review platforms. We participate in some of these platforms so that we can receive your feedback and thus improve our offerings. When you rate us via a review platform, the privacy policy and terms and conditions of the respective review service apply. Very often, you will also need to register to submit a review. Review technologies (widgets) may also be integrated into our website. By using such an integrated tool, data is also transferred to, processed by, and stored by the respective provider.

Many of these integrated programs work on a similar principle. After you have ordered a product or used a service from us, you will be asked to submit a review, either via email or on the website. You will usually be redirected to a review page via a link, where you can easily and quickly create a review. Some review systems also offer an interface to various social media channels to make the feedback accessible to more people.

Why do we use rating platforms?

Review platforms collect feedback and ratings about our offerings. Your reviews provide us with quick and valuable feedback, allowing us to improve our products and/or services much more efficiently. Consequently, these ratings help us optimize our offerings and also give you and all our future customers a good overview of the quality of our products and services.

What data is processed?

With your consent, we transmit information about you and the services you have used to the relevant review platform. We do this to ensure that you have actually used one of our services, as this is the only way you can provide genuine feedback. The transmitted data is used solely for user identification. The specific data stored and processed depends, of course, on the providers used. In most cases, review platforms also receive personal data such as your IP address, email address, or name. Even after you submit your review, order information, such as the order number of a purchased item, is forwarded to the platform. If your email address is transmitted, this is so that the review platform can send you an email after your purchase. To enable us to integrate your review into our website, we also inform the providers that you have visited our site. The review platform used is responsible for the collected personal data.

How long and where will the data be stored?

You can find more detailed information about the duration of data processing in the provider’s privacy policy below, provided we have further information on this. Generally, we only process personal data for as long as it is absolutely necessary for the provision of our services and products. Personal data mentioned in a review is usually anonymized by employees of the platform used and is therefore only visible to the company’s administrators. The collected data is stored on the providers‘ servers and, in most cases, deleted after the order is completed.

Right to object

Legal basis

If you have consented to the use of a review platform, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by a review portal.

We also have a legitimate interest in using a rating platform to optimize our online service. The corresponding legal basis for this is Article 6(1)(f) GDPR (legitimate interests). However, we only use a rating platform if you have given your consent.

We hope we have provided you with the most important general information regarding data processing by review platforms. Further details can be found below in the data protection texts or in the linked privacy policies of the companies.

Google Customer Reviews Privacy Policy

We also use the Google Customer Reviews platform for our website. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

You can find out more about the data processed through the use of Google in the privacy policy at https://policies.google.com/privacy?hl=de .

Trusted Shops Privacy Policy

We also use the Trusted Shops review platform for our website. The service provider is the German company Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne, Germany.

You can find out more about the data processed through the use of Trusted Shops in the privacy policy athttps://www.trustedshops.de/impressum-datenschutz/#datenschutz .

Web Design Introduction

Web design privacy policy summary
👥 Affected: Visitors to the website
🤝 Purpose: To improve the user experience
📓 Data processed: The specific data processed depends heavily on the services used. This typically includes IP address, technical data, language settings, browser version, screen resolution, and browser name. More details can be found in the documentation for each web design tool used.
📅 Storage duration: depends on the tools used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is web design?

We use various tools on our website to enhance our web design. Contrary to popular belief, web design isn’t just about making our website look good; it’s also about functionality and performance. Of course, a visually appealing website is also a key objective of professional web design. Web design is a subfield of media design and deals with the visual, structural, and functional aspects of a website. The goal of web design is to improve your experience on our website. In web design terminology, this is referred to as user experience (UX) and usability. User experience encompasses all the impressions and experiences a website visitor has on a website. Usability is a subset of user experience, focusing on the user-friendliness of a website. The emphasis here is on ensuring that content, subpages, and products are clearly structured, allowing you to easily and quickly find what you’re looking for. To provide you with the best possible experience on our website, we also use third-party web design tools. Therefore, in this privacy policy, the category „web design“ includes all services that improve the design of our website. This could include, for example, fonts, various plugins, or other integrated web design functions.

Why do we use web design tools?

How you absorb information from a website depends heavily on its structure, functionality, and visual appeal. Therefore, good and professional web design has become increasingly important to us. We are constantly working to improve our website and see this as an added service for you as a website visitor. Furthermore, a beautiful and functional website also offers us economic advantages. Ultimately, you will only visit us and take advantage of our services if you feel completely comfortable.

What data is stored by web design tools?

When you visit our website, web design elements may be integrated into our pages that can also process data. The exact data processed depends heavily on the tools used. Below you can see exactly which tools we use for our website. For more detailed information about data processing, we recommend that you also read the respective privacy policies of the tools used. These policies usually explain which data is processed, whether cookies are used, and how long the data is stored. For example, fonts such as Google Fonts automatically transmit information like language settings, IP address, browser version, browser screen resolution, and browser name to Google servers.

Duration of data processing

How long data is processed varies greatly and depends on the web design elements used. For example, if cookies are used, the storage period can be as short as a minute or as long as a few years. Please familiarize yourself with this. We recommend reading our general section on cookies as well as the privacy policies of the tools used. There you will usually find information about which cookies are used and what information they store. Google Fonts, for example, are stored for one year. This is intended to improve website loading times. Generally, data is only stored for as long as necessary to provide the service. Data may be stored for longer periods if required by law.

Right to object

You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. This can be done either via our cookie management tool or via other opt-out functions. You can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser. However, some web design elements (mostly fonts) contain data that cannot be deleted quite so easily. This is the case when data is automatically collected and transmitted to a third-party provider (such as Google) directly upon page request. In this case, please contact the support of the respective provider. For Google, you can reach their support at https://support.google.com/?hl=de .

Legal basis

If you have consented to the use of web design tools, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by web design tools. We also have a legitimate interest in improving the web design on our website. After all, this is the only way we can provide you with an attractive and professional website. The corresponding legal basis for this is Article 6(1)(f) GDPR (legitimate interests). However, we only use web design tools if you have given your consent. We want to emphasize this point again.

Information on specific web design tools can be found – if available – in the following sections.

Adobe Fonts Privacy Policy

We use Adobe Fonts, a web font hosting service, on our website. The service provider is the American company Adobe Inc. For the European region, the Irish company Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible.

Adobe processes your data, among other places, in the USA. Adobe is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, Adobe uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Adobe commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More information about Adobe’s standard contractual clauses can be found at https://www.adobe.com/at/privacy/eudatatransfers.html .

You can find out more about the data processed through the use of Adobe Fonts in the Privacy Policy at https://www.adobe.com/at/privacy.html .

Font Awesome Privacy Policy

Font Awesome Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: such as IP address and which icon files are loaded
You can find more details below in this privacy policy.
📅 Storage duration: Files in identifiable form are stored for a few weeks.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Font Awesome?

We use Font Awesome from the American company Fonticons (307 S. Main St., Suite 202, Bentonville, AR 72712, USA) on our website. When you visit one of our web pages, the Font Awesome web font (specifically icons) is loaded via the Font Awesome Content Delivery Network (CDN). This ensures that the text, fonts, and icons are displayed correctly on every device. This privacy policy explains in more detail the data storage and processing by this service.

Icons are playing an increasingly important role on websites. Font Awesome is a web font specifically designed for web designers and developers. With Font Awesome, icons can be scaled and colored as desired using the CSS stylesheet language, replacing traditional image icons. The Font Awesome CDN is the easiest way to load these icons and fonts onto your website. All we had to do was add a small line of code to our site.

Why do we use Font Awesome on our website?

Font Awesome allows us to better format the content on our website. This makes it easier for you to navigate and understand the content. The icons can even sometimes replace entire words, saving space. This is especially useful when we’re optimizing content for smartphones. These icons are inserted as HTML code rather than images. This allows us to edit the icons with CSS exactly as we want. At the same time, Font Awesome also improves our loading speed because it uses only HTML elements, not image icons. All these advantages help us make the website even clearer, more modern, and faster for you.

What data does Font Awesome store?

The Font Awesome Content Delivery Network (CDN) is used to load icons and symbols. CDNs are networks of servers distributed worldwide that allow files to be loaded quickly from nearby servers. This ensures that the corresponding icons from Font Awesome are provided as soon as you visit one of our pages.

In order for the web fonts to load, your browser must establish a connection to the servers of Fonticons, Inc. Your IP address will be detected during this process. Font Awesome also collects data about which icon files are downloaded and when. Furthermore, technical data such as your browser version, screen resolution, and the time the page was accessed are also transmitted.

This data is collected and stored for the following reasons:

to optimize content delivery networks
to identify and correct technical errors
to protect CDNs from abuse and attacks
to be able to charge fees to Font Awesome Pro customers
to find out the popularity of icons
to know which computer and software you are using

If your browser does not allow web fonts, a standard font from your computer will be used automatically. To the best of our knowledge, no cookies are set. We are in contact with Font Awesome’s privacy department and will inform you as soon as we learn more.

How long and where will the data be stored?

Font Awesome stores data about the usage of its Content Delivery Network (CDN) on servers located in the United States. However, the CDN servers themselves are located worldwide and store user data based on your location. This data is typically stored in identifiable form for only a few weeks. Aggregated statistics about CDN usage may be stored for longer periods. No personally identifiable information is included.

How can I delete my data or prevent data storage?

To our knowledge, Font Awesome does not store any personal data via content delivery networks. If you do not want data about the icons used to be stored, you unfortunately cannot visit our website. If your browser does not allow web fonts, no data will be transmitted or stored. In this case, your computer’s default font will simply be used.

Legal basis

If you have consented to the use of Font Awesome, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur during collection by Font Awesome.

We also have a legitimate interest in using Font Awesome to optimize our online service. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we only use Font Awesome if you have given your consent.

Please note that, according to the European Court of Justice, there is currently no adequate level of data protection for data transfers to the USA. Data processing is primarily carried out by Font Awesome. This may result in data being processed and stored in a non-anonymized manner. Furthermore, US government authorities may potentially access individual data points. It is also possible that this data may be linked to data from other Font Awesome services where you have a user account.

If you would like to learn more about Font Awesome and how they handle data, we recommend that you read the privacy policy at https://fontawesome.com/privacy and the help page at https://fontawesome.com/support .

Google Fonts Privacy Policy

Google Fonts Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as IP address and CSS and font requests
You can find more details below in this privacy policy.
📅 Storage duration: Font files are stored at Google for one year.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are Google Fonts?

We use Google Fonts on our website. These are the “Google fonts” from Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

You don’t need to register or provide a password to use Google Fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you don’t need to worry about your Google account data being transmitted to Google while using Google Fonts. Google collects data on the usage of CSS (Cascading Style Sheets) and the fonts used, and stores this data securely. We will examine the specifics of this data storage in more detail later.

Google Fonts (formerly Google Web Fonts) is a directory of over 800 fonts that Google makes available to its users free of charge.

Many of these fonts are released under the SIL Open Font License, while others are released under the Apache License. Both are free software licenses.

Why do we use Google Fonts on our website?

With Google Fonts, we can use fonts on our own website without having to upload them to our own server. Google Fonts is an important component for maintaining the high quality of our website. All Google fonts are automatically optimized for the web, which saves data volume and is a significant advantage, especially for use on mobile devices. When you visit our site, the small file size ensures fast loading times. Furthermore, Google Fonts are secure web fonts. Different rendering systems in various browsers, operating systems, and mobile devices can lead to errors. Such errors can sometimes distort text or even entire web pages. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all common browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We use Google Fonts so that we can present our entire online service as beautifully and consistently as possible.

What data does Google store?

When you visit our website, the fonts are loaded from a Google server. This external request transmits data to Google’s servers. This allows Google to recognize that you, or rather your IP address, have visited our website. The Google Fonts API was developed to minimize the use, storage, and collection of end-user data to only what is necessary for the proper delivery of fonts. API stands for „Application Programming Interface“ and serves, among other things, as a data transmitter in the software field.

Google Fonts securely stores CSS and font requests with Google, thus protecting them. The collected usage statistics allow Google to determine the popularity of individual fonts. Google publishes these results on internal analytics pages, such as Google Analytics. Additionally, Google uses data from its own web crawler to identify which websites use Google Fonts. This data is published in the Google Fonts BigQuery database. Businesses and developers utilize the Google web service BigQuery to analyze and manipulate large datasets.

It should be noted, however, that every Google Font request also automatically transmits information such as language settings, IP address, browser version, browser screen resolution, and browser name to Google servers. Whether this data is also stored is unclear and not explicitly communicated by Google.

How long and where will the data be stored?

Google stores requests for CSS assets on its servers, which are primarily located outside the EU, for one day. This allows us to use the fonts with a Google stylesheet. A stylesheet is a formatting template that allows you to easily and quickly change, for example, the design or font of a website.

The font files are stored at Google for one year. Google’s goal is to improve website loading times in general. When millions of websites reference the same fonts, they are cached after the first visit and appear instantly on all subsequent visits. Google sometimes updates font files to reduce file size, increase language coverage, and improve design.

How can I delete my data or prevent data storage?

The data that Google stores for a day or a year cannot be easily deleted. This data is automatically transmitted to Google when you visit our website. To delete this data prematurely, you must contact Google Support at https://support.google.com/?hl=de&tid=113092826 . In this case, you can only prevent data storage by not visiting our website.

Unlike other web fonts, Google Fonts grants us unrestricted access to all its fonts. This means we can access a vast array of fonts and choose the perfect one for our website. You can find more information about Google Fonts and other frequently asked questions at https://developers.google.com/fonts/faq?tid=113092826 . While Google addresses data privacy issues there, truly detailed information about data storage is not included. Obtaining precise information from Google about the data they store is relatively difficult.

Legal basis

If you have consented to the use of Google Fonts, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when Google Fonts collects it.

We also have a legitimate interest in using Google Fonts to optimize our online service. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we only use Google Fonts if you have given your consent.

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/ .

You can also read about what data Google collects and what this data is used for at https://www.google.com/intl/de/policies/privacy/ .

Google Fonts Local Privacy Policy

Our website uses Google Fonts from Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible. We have integrated the Google fonts locally, i.e., on our web server – not on Google’s servers. Therefore, there is no connection to Google servers and consequently no data transfer or storage.

What are Google Fonts?

Google Fonts, formerly known as Google Web Fonts, is an interactive directory of over 800 fonts provided free of charge by Google . Google Fonts allows users to utilize fonts without uploading them to their own servers. However, to prevent any data transfer to Google servers, we have downloaded the fonts to our own server. This ensures our compliance with data protection regulations and prevents us from sending any data to Google Fonts.

Online Map Services Introduction

Online map services privacy policy summary
👥 Affected: Visitors to the website
🤝 Purpose: To improve the user experience
📓 Data processed: The specific data processed depends heavily on the services used. This typically includes IP address, location data, search terms, and/or technical data. Further details can be found in the descriptions of the respective tools used.
📅 Storage duration: depends on the tools used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are online map services?

We also use online map services as an enhanced service on our website. Google Maps is probably the service you’re most familiar with, but there are other providers that specialize in creating digital maps. These services allow you to display locations, route plans, or other geographical information directly on our website. With an integrated map service, you no longer need to leave our website to, for example, view directions to a location. Map sections are embedded using HTML code to enable the online map to function on our website. These services can then display road maps, the Earth’s surface, or aerial and satellite images. When you use the embedded map service, data is also transferred to and stored by the tool used. This data may include personal data.

Why do we use online map services on our website?

Generally speaking, our goal is to provide you with a pleasant experience on our website. And your time is only truly enjoyable if you can easily navigate our site and find all the information you need quickly and easily. Therefore, we thought an online map system could significantly improve our website service. Without leaving our website, you can easily view directions, locations, or points of interest using the map system. It’s also incredibly convenient that you can see at a glance where our company headquarters are located, ensuring you can find us quickly and easily. As you can see, there are many advantages, and we clearly consider online map services on our website to be part of our customer service.

What data do online map services store?

When you open a page on our website that includes an online map function, personal data may be transmitted to and stored by the respective service. This usually includes your IP address, which can also be used to determine your approximate location. In addition to the IP address, data such as entered search terms and latitude and longitude coordinates are also stored. If you enter an address for route planning, this data will also be saved. The data is not stored on our servers, but on the servers of the integrated tools. You can think of it like this: you are on our website, but when you interact with a map service, this interaction actually takes place on their website. For the service to function correctly, at least one cookie is usually placed in your browser. Google Maps, for example, also uses cookies to record user behavior in order to optimize its own service and display personalized advertising. You can learn more about cookies in our „Cookies“ section.

How long and where will the data be stored?

Each online map service processes different user data. If we have further information, we will inform you about the duration of data processing in the relevant sections for each tool below. Generally, personal data is only stored for as long as necessary to provide the service. Google Maps, for example, stores certain data for a specific period, while you must delete other data yourself. Mapbox, for instance, stores the IP address for 30 days and then deletes it. As you can see, each tool stores data for a different length of time. Therefore, we recommend that you carefully review the privacy policies of the tools used.

The providers also use cookies to store data about your user behavior with the map service. You can find more general information about cookies in our „Cookies“ section, and you can also find out which cookies may be used in the privacy policies of the individual providers. However, these are usually only exemplary lists and are not exhaustive.

Right to object

You always have the option and the right to access your personal data and to object to its use and processing. You can also revoke your consent at any time. This is usually easiest via the cookie consent tool. However, there are other opt-out tools you can use. You can also manage, delete, or disable cookies set by the providers you use with just a few clicks. However, this may result in some service functions no longer working as expected. How you manage cookies in your browser depends on the browser you are using. In the „Cookies“ section, you will also find links to instructions for the most common browsers.

Legal basis

If you have consented to the use of an online map service, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by an online map service.

We also have a legitimate interest in using an online map service to optimize our website. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests). However, we only use an online map service if you have given your consent. We want to emphasize this point again here.

Information on specific online map services can be found – if available – in the following sections.

Google Maps Privacy Policy

Google Maps Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as entered search terms, your IP address and also the latitude and longitude coordinates.
You can find more details below in this privacy policy.
📅 Storage duration: depends on the data stored
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Maps?

We use Google Maps from Google Inc. on our website. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google Maps allows us to show you locations more effectively and thus better tailor our service to your needs. By using Google Maps, data is transferred to Google and stored on Google’s servers. Here we would like to explain in more detail what Google Maps is, why we use this Google service, what data is stored, and how you can prevent this.

Google Maps is an online mapping service from Google. With Google Maps, you can search for the exact locations of cities, landmarks, accommodations, or businesses online using a PC, tablet, or app. If businesses are listed on Google My Business, additional information about the company is displayed alongside the location. To show directions, map snippets of a location can be embedded into a website using HTML code. Google Maps displays the Earth’s surface as a road map or as aerial/satellite imagery. Thanks to Street View and high-quality satellite imagery, very detailed representations are possible.

Why do we use Google Maps on our website?

All our efforts on this page aim to provide you with a useful and meaningful experience on our website. By integrating Google Maps, we can provide you with essential information about our various locations. You can see at a glance where our company headquarters are located. The directions always show you the best and fastest way to reach us. You can access directions for routes by car, public transport, on foot, or by bicycle. For us, providing Google Maps is part of our customer service.

What data does Google Maps store?

In order for Google Maps to fully offer its service, the company needs to collect and store your data. This includes, among other things, the search terms you enter, your IP address, and your latitude and longitude coordinates. If you use the route planner function, the starting address you enter will also be saved. This data storage, however, takes place on Google Maps‘ websites. We can only inform you about this, but we have no control over it. Because we have integrated Google Maps into our website, Google places at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google primarily uses this data to optimize its own services and to provide you with personalized advertising.

The following cookie will be set in your browser due to the integration of Google Maps:

Name: NID
Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ113092826-5
Purpose: NID is used by Google to personalize ads based on your Google searches. With the help of this cookie, Google „remembers“ your most frequent search queries or your previous interactions with ads. This ensures you always receive tailored advertisements. The cookie contains a unique ID that Google uses to collect your personal preferences for advertising purposes.
Expiry date: after 6 months

Note: We cannot guarantee the completeness of the stored data. Changes are always possible, especially when using cookies. To identify the NID cookie, a separate test page was created that only included Google Maps.

How long and where will the data be stored?

Google’s servers are located in data centers around the world. However, most servers are in the United States. Therefore, your data is also primarily stored in the USA. You can find detailed information about the locations of Google’s data centers here: https://datacenters.google/

Google distributes the data across various storage devices. This makes the data faster to access and better protected against potential manipulation attempts. Each data center also has specific emergency programs. For example, if there are problems with Google hardware or a natural disaster cripples the servers, the data remains quite secure.

Google stores some data for a set period. For other data, Google only offers the option to delete it manually. Furthermore, the company also anonymizes information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 or 18 months.

How can I delete my data or prevent data storage?

With the automatic deletion feature for location and activity data introduced in 2019, information about your location and web/app activity is stored for either 3 or 18 months, depending on your choice, and then deleted. You can also manually delete this data from your history at any time via your Google account. If you want to completely prevent location tracking, you need to pause the „Web & App Activity“ section in your Google account. Click on „Data & Personalization“ and then on the „Activity controls“ option. Here you can turn activity tracking on or off.

In your browser, you can also disable, delete, or manage individual cookies. The process varies slightly depending on the browser you use. Under the „Cookies“ section, you will find links to instructions for the most common browsers.

Legal basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by Google Maps.

We also have a legitimate interest in using Google Maps to optimize our online service. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we only use Google Maps if you have given your consent.

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/ .

If you would like to learn more about Google’s data processing, we recommend that you consult the company’s own privacy policy at https://policies.google.com/privacy?hl=de .

Content Search Provider Introduction

Content search provider privacy policy summary
👥 Affected: Visitors to the website
🤝 Purpose: To improve the user experience
📓 Data processed: The specific data processed depends heavily on the services used. This usually includes IP address, search interests, and/or technical data. More details can be found in the descriptions of the respective tools used.
📅 Storage duration: depends on the tools used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is a content search provider?

We’ve already published a lot of content on our website. And of course, we don’t want it to simply be forgotten just because it can’t be found. That’s why we use a content search provider on our website. You’re probably familiar with major search engines like Google. A content search provider is essentially also a search engine, but unlike Google, it doesn’t scour the entire web for content, but only the website you’re currently visiting. You can enter terms related to the content you’re looking for in a text field, and the search engine will find the articles you need. Please note that using the integrated search function may also involve the processing of your personal data.

Why do we use a content search provider?

As you browse our website, you’ll quickly notice how much useful content we’ve published over the years. There are some real gems among them, and we want you to be able to find them quickly without having to click around endlessly. With a content search function directly on our website, you can use keywords relevant to your search topic to find the content you’re looking for quickly and easily. This feature is incredibly practical, and we see it as our responsibility to make your experience on our website as pleasant and helpful as possible. That’s why we decided to integrate a content search program into our website.

What data is processed?

When you use the search function on our website, the integrated content search provider (such as Algolia Places or Giphy) may automatically receive and store data from you. This includes technical data about your browser as well as data such as your IP address, device ID, and the search terms you entered. Please note that IP addresses are considered personal data. The providers‘ privacy policies state that this information is collected and stored to enhance security and improve their services. The automatically collected usage data, which does not include personal data and is processed in anonymized form, may also be used for analytical purposes. Some providers also share this anonymized data with third parties. To learn more about this, we recommend that you carefully read the specific privacy policies of each provider. Cookies are also typically placed in your browser to ensure the services function correctly. You can learn more about cookies in our general „Cookies“ section. Whether and which cookies the individual search tools use can be found – if available – below or in the respective privacy policies of the integrated tools.

How long and where will the data be stored?

As a general rule, each content search provider processes different data. Therefore, this general section cannot go into detail about the data processing of individual tools. However, services typically only store personal data as long as necessary for the tools to function properly. Some services (such as Giphy) also retain personal data for longer periods if required by law. Most providers also store anonymized data for longer periods. Content search providers may also use cookies to store various types of data. You can learn more about this in our general section on cookies. If you would like to know about the specific cookies used by a search provider, we recommend consulting the privacy policy of the providers we use. You will usually find an example list of the cookies used there.

Right to object

Always be aware: if you do not consent, no personal data may be processed about you. You always have the right to access your personal data and object to its use. You can also withdraw your consent at any time via the cookie consent tool or other opt-out options. You can easily manage, delete, or disable cookies yourself via your browser. If you delete cookies, some functions of the tool may no longer work, so please don’t be surprised. How you manage cookies in your browser also depends on the browser you are using. In the „Cookies“ section, you will also find links to instructions for the most common browsers.

Legal basis

If you have consented to the use of a content search provider, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur when collected by a content search provider.

We also have a legitimate interest in using a content search provider to optimize our service on our website. The corresponding legal basis for this is Article 6(1)(f) GDPR (legitimate interests). However, we only ever use a content search provider if you have given your consent. We want to emphasize this point again here.

Information on specific content search providers can be found – if available – in the following sections.

Custom Google Search Privacy Policy

Custom Google Search Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To optimize our service performance
📓 Data processed: Data such as IP address and entered search terms are stored by Google.
You can find more details below in this privacy policy.
📅 Storage duration: The storage duration varies depending on the data being stored.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is custom Google search?

We have integrated the Google Custom Search plugin into our website. Google is the world’s largest and best-known search engine and is operated by the US company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible. By using Google Custom Search, your data may be transferred to Google. In this privacy policy, we inform you why we use this plugin, what data is processed, and how you can manage or prevent this data transfer.

The custom Google search plugin is a Google search bar directly on our website. The search works just like on www.google.com , but the search results are focused on our content and products, or on a limited search area.

Why do we use Google Custom Search on our website?

A website with a lot of interesting content can often become so large that it’s easy to lose track. Over time, we’ve also accumulated a lot of valuable material, and as part of our service, we want you to be able to find our content as quickly and easily as possible. The custom Google search makes finding interesting content a breeze. The integrated Google plugin improves the overall quality of our website and makes searching easier for you.

What data is stored by Google’s custom search?

The custom Google search only transmits your data to Google if you actively use the Google search function integrated into our website. This means that only when you enter a search term in the search bar and then confirm it (e.g., by clicking „Enter“) will your IP address be sent to Google, stored, and processed. Based on the cookies used (such as 1P_JAR), it can be assumed that Google also receives data about website usage. If you search for content using the integrated Google search function while visiting our website and are simultaneously logged into your Google account, Google can associate the collected data with your Google account. As website operators, we have no control over what Google does with the collected data or how Google processes it.

The following cookies will be set in your browser if you use Google’s custom search and are not signed in with a Google account:

Name: 1P_JAR
Value: 2020-01-27-13113092826-5
Purpose: This cookie collects website usage statistics and measures conversions. A conversion occurs, for example, when a user becomes a buyer. The cookie is also used to display relevant advertisements to users.
Expiry date: after one month

Name: CONSENT
Value: WP.282f52113092826-9
Purpose: This cookie stores a user’s consent status for using various Google services. CONSENT also serves a security purpose, verifying users and protecting user data from unauthorized access.
Expiry date: after 18 years

Name: NID
Value: 196=pwIo3B5fHR-8
Purpose: NID is used by Google to tailor advertisements to your Google searches. With the help of this cookie, Google „remembers“ your search queries or your previous interactions with ads. This ensures you always receive customized advertisements.
Expiry date: after 6 months

Note: This list is not exhaustive, as Google frequently changes its choice of cookies.

How long and where will the data be stored?

Google’s servers are distributed around the world. Since Google is an American company, most data is stored on American servers. You can see the exact locations of Google’s servers at https://www.google.com/about/datacenters/locations/?hl=de .
Your data is distributed across various physical storage devices. This makes the data faster to access and better protected against potential manipulation. Google also has corresponding emergency programs for your data. Even if Google experiences internal technical problems and servers become unavailable, the risk of service interruption and data loss remains low.
Depending on the type of data, Google stores it for varying lengths of time. You can delete some data yourself, while other data is automatically deleted or anonymized by Google. However, Google also stores some data for longer periods if required for legal or business reasons.

How can I delete my data or prevent data storage?

Under European Union data protection law, you have the right to access, update, delete, or restrict the processing of your data. Some data can be deleted at any time. If you have a Google account, you can delete data about your web activity there or set it to be deleted after a certain period of time.
Your browser also allows you to disable, delete, or manage cookies according to your preferences. Under the „Cookies“ section, you will find links to instructions for the most popular browsers.

Legal basis

If you have consented to the use of Google’s custom search, the legal basis for the corresponding data processing is this consent. According to Article 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, such as that which may occur during the collection of data by Google’s custom search.

We also have a legitimate interest in using Google’s custom search to optimize our online service. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests) . However, we only use Google’s custom search if you have given your consent.

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/

We hope we have provided you with the most important information regarding data processing by Google. If you would like to learn more, we recommend Google’s comprehensive privacy policy at https://policies.google.com/privacy?hl=de .

Giphy Privacy Policy

We use Giphy, an online database and search engine, for our website. The service provider is the American company Giphy, Inc., 416 West 13th Street, New York, NY 10014, USA.

Giphy processes your data, among other things, in the USA. Giphy is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en .

For more information about the data processed through the use of Giphy, please see the Privacy Policy at https://support.giphy.com/hc/en-us/articles/360032872931 .

Other Introduction

Other Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: To improve the user experience
📓 Data processed: The specific data processed depends heavily on the services used. It usually involves IP address and/or technical data. More details can be found in the descriptions of the respective tools.
📅 Storage duration: depends on the tools used
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What falls under „Other“?

The category „Other“ includes services that don’t fit into any of the categories mentioned above. These are typically various plugins and embedded elements that enhance our website. These functions are usually provided by third parties and integrated into our website. Examples include web search services like Algolia Place, Giphy, Programmable Search Engine, or online weather data services such as OpenWeather.

Why do we use other third-party providers?

We want to offer you the best online presence in our industry with our website. A website has long since ceased to be merely a business card for companies. Rather, it’s a place that should help you find what you’re looking for. To continually make our website even more interesting and helpful for you, we use various third-party services.

What data is processed?

Whenever elements are integrated into our website, your IP address is transmitted to the respective provider, stored, and processed there. This is necessary because otherwise the content would not be sent to your browser and consequently would not be displayed correctly. Service providers may also use pixel tags or web beacons. These are small graphics on websites that record a log file and can also analyze this file. The information obtained allows the providers to improve their own marketing efforts. In addition to pixel tags, such information (such as which button you click or when you visit which page) can also be stored in cookies. These can contain not only analytical data about your web behavior but also technical information such as your browser type or operating system. Some providers may also link the collected data with other internal services or with third-party providers. Each provider handles your data differently. Therefore, we recommend that you carefully read the privacy policies of the respective services. We generally strive to use only services that are very careful with data protection.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. Generally, we only process personal data for as long as it is absolutely necessary for the provision of our services and products.

Legal basis

If we request your consent and you agree that we may use the service, this serves as the legal basis for processing your data (Art. 6 para. 1 lit. a GDPR). In addition to your consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our services technically and economically. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use these tools if you have given your consent.

Information on the specific tools can be found – if available – in the following sections.

Explanation of terms used

We always strive to make our privacy policy as clear and understandable as possible. However, this isn’t always easy, especially when dealing with technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical expressions (such as cookies, IP address). However, we don’t want to use these without explanation. Below you will find an alphabetical list of important terms used that we may not have adequately addressed in the previous privacy policy. If these terms are taken from the GDPR and are definitions, we will also include the GDPR texts here and, where necessary, add our own explanations.

Supervisory authority

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

‘Supervisory authority’ means an independent public authority established by a Member State in accordance with Article 51;

Explanation: “Supervisory authorities” are always independent state institutions that also have the power to issue directives in certain cases. They serve to carry out so-called state supervision and are located within ministries, special departments, or other authorities. In Austria, there is an Austrian Data Protection Authority , while in Germany, each federal state has its own data protection authority.

Data processor

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Explanation: As a company and website owner, we are responsible for all data we process from you. In addition to the data controller, there may also be so-called data processors. This includes any company or individual who processes personal data on our behalf. Data processors can therefore include, besides service providers such as tax advisors, hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

consent

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Explanation: Websites typically obtain such consent via a cookie consent tool. You’re probably familiar with this. Whenever you visit a website for the first time, you’re usually asked via a banner whether you agree to or consent to data processing. In most cases, you can also adjust your settings and thus decide for yourself which data processing you allow and which you don’t. If you don’t consent, no personal data may be processed. Of course, consent can also be given in writing, i.e., not via a tool.

Personal data

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Explanation: Personal data is therefore all data that can identify you as an individual. This is usually data such as:

name
address
E-mail address
Postal address
Telephone number
birth date
Identification numbers such as social security number, tax identification number, identity card number or matriculation number
Bank details such as account number, credit information, account balances, etc.

According to the European Court of Justice (ECJ), your IP address also counts as personal data . IT experts can use your IP address to determine at least the approximate location of your device and, consequently, you as the internet connection owner. Therefore, storing an IP address also requires a legal basis under the GDPR. There are also so-called „special categories“ of personal data that are particularly worthy of protection. These include:

racial and ethnic origin
political opinions
religious or philosophical beliefs
union membership
genetic data, such as data obtained from blood or saliva samples
biometric data (that is, information about psychological, physical, or behavioral characteristics that can identify a person).
Health data
Data on sexual orientation or sex life

Profiling

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

Explanation: Profiling involves collecting various pieces of information about a person to learn more about them. In the online world, profiling is frequently used for advertising purposes or credit checks. Web analytics programs, for example, collect data about your behavior and interests on a website. This results in a specific user profile, which can then be used to target advertising to a specific audience.

Responsible

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law;

Explanation: In our case, we are responsible for processing your personal data and are therefore the “controller”. If we transfer collected data to other service providers for processing, these are “processors”. A “data processing agreement (DPA)” must be signed for this.

processing

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Note: When we refer to processing in our privacy policy, we mean any type of data processing. As mentioned above in the original GDPR statement, this includes not only the collection but also the storage and processing of data.

Binding internal data protection regulations

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

‘binding corporate rules’ means measures for the protection of personal data which a controller or processor established in the territory of a Member State undertakes to comply with with regard to transfers or a category of transfers of personal data to a controller or processor in the same group of undertakings or group of undertakings engaged in a joint economic activity in one or more third countries;

Explanation: You may have heard or read the term „Binding Corporate Rules“ before. This is the term that most often comes up when discussing binding internal data protection regulations. Such internal regulations are particularly recommended for companies (such as Google) that process data in third countries, as they essentially obligate the company to comply with data protection regulations. These regulations govern the handling of personal data that is transferred to and processed in third countries.

Personal data breach

Definition of terms according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:

“Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed;

Explanation: For example, a „personal data breach“ can occur in the event of a data leak, i.e., a technical problem or a cyberattack. If the breach poses a risk to the rights and freedoms of natural persons, the controller must immediately report the incident to the competent supervisory authority. Furthermore, the data subjects must also be informed if the breach presents a high risk to their rights and freedoms.

Closing remarks

Congratulations! If you’re reading this, you’ve really made it through our entire privacy policy, or at least scrolled this far. As you can see from the length of our privacy policy, we take the protection of your personal data very seriously.
It is important to us to inform you about the processing of your personal data to the best of our knowledge and belief. We want to tell you not only which data is processed, but also explain the reasons for using various software programs. Privacy policies usually sound very technical and legal. Since most of you are not web developers or lawyers, we wanted to take a different approach and explain the matter in simple and clear language. Of course, this isn’t always possible due to the complexity of the subject matter. Therefore, the most important terms are explained in more detail at the end of this privacy policy.
If you have any questions regarding data protection on our website, please do not hesitate to contact us or the responsible party. We wish you a pleasant time and hope to welcome you back to our website soon.