Privacy Policy

  1. Data protection overview

    1. General information

      The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

    2. Data collection on our website

      1. Who is the responsible party for the data collection on this website (i.e., the “controller”)??

        The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

      2. How do we collect your data?

        We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.

        Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

      3. What are the purposes we use your data for?

        A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.

      4. What rights do you have as far as your information is concerned?

        You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

        Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

    3. Analysis tools and tools provided by third parties – optional

      There is a possibility that your browsing patterns will be statistically analyzed when your visit this website. Such analyses are performed primarily with what we refer to as analysis programs.

      For detailed information about these analysis programs please consult our Data Protection Declaration below.

  2. Hosting and Content Delivery Networks (CDN)

    We are hosting the content of our website at the following providers:

    1. External Hosting – optional – not updated – use when below no hoster applies

      This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site.

      The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f DSGVO).

      Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    2. Webflow Hosting – optional

      The provider is the Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as “Webflow”). When you visit our website, Webflow records various logfiles, including your IP address.

      Webflow is a tool for the creation and hosting of websites.  Webflow stores cookies or other recognition technologies that are required for the depiction of the site, for the provision of certain website functions and to guarantee its security (necessary cookies).

      For details, please consult the data privacy policy of Webflow: https://webflow.com/legal/eu-privacy-policy.

      Webflow Inc. provides the online e-commerce platform that allows us to sell our products and services to you.

      Your data is stored via Webflow data storage, databases and the general Webflow application. Webflow stores your data on a secure server behind a firewall.

      We use Webflow on the basis of Art.6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is depicted as reliable as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      The transfer of data to the United States is based on the standard contract clauses of the EU Commission. For details, please go to: https://webflow.com/legal/eu-privacy-policy.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    3. Checkdomain – optional

      The Provider is the checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany (hereinafter “Checkdomain”). For details, please visit the privacy policy of Checkdomain: https://www.checkdomain.de/agb/datenschutz/.

      The use of Checkdomain is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable representation of our website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    4. IP-Projects – optional

      The Provider is the IP-Projects GmbH & Co. KG, Inh. Michael Schinzel, Am Vogelherd 14, 97295 Waldbrunn Germany (hereinafter “IP-Projects”). For details, please visit the privacy policy of IP-Projects: https://www.ip-projects.de/unternehmen/datenschutz.html.

      The use of IP-Projects is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable representation of our website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    5. All-Inkl – optional

      The Provider is the ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter “All-Inkl”). For details, please visit the privacy policy of All-Inkl: https://all-inkl.com/datenschutzinformationen/.

      The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable representation of our website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    6. Amazon Web Services (AWS) – optional

      The provider is the Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”).

      When you visit our website, your personal data will be processed on AWS servers. This may also result in the transfer of personal data to the parent company of AWS in the United States. The transfer of data to the US is based on the EU’s standard contractual clauses. For details please consult: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

      For more information, please see the AWS Data Privacy Policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.

      AWS is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in a depiction of our website that is as reliable as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    7. DomainFactory – optional

      The provider is the DomainFactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany (hereinafter referred to as: DomainFactory). Whenever you visit our website, DomainFactory records a variety of logfiles, including your IP addresses.

      For details, please refer to the Privacy Policy of DomainFactory: https://www.df.eu/de/datenschutz/.

      We use DomainFactory on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in making the depiction of our website as dependable as possible. If you have been asked for your respective consent, processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, if the consent comprises the archiving of cookies or access to information on the user’s device (e.g., device finger printing) as defined in the TTDSG. Such consent may be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    8. Host Europe – optional

      The provider is the Host Europe GmbH, Hansestraße 111, 51149 Köln, Germany (hereinafter referred to as: Host Europe). Whenever you visit our website, Host Europe will record a variety of logfiles, including your IP addresses.

      For details, please refer to the Data Privacy Policy of Host Europe: https://www.hosteurope.de/AGB/Datenschutzerklaerung/.

      We use Host Europe on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in making the depiction of our website as dependable as possible. If you have been asked for your respective consent, processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, if the consent comprises the archiving of cookies or access to information on the user’s device (e.g., device finger printing) as defined in the TTDSG. Such consent may be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    9. IONOS – optional

      The provider is the IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter referred to as: IONOS). Whenever you visit our website, IONOS records various logfiles along with your IP addresses. For details, please consult the data privacy policy of IONOS: https://www.ionos.de/terms-gtc/terms-privacy.

      We use IONOS on the basis of Art. 6 (1)(f) GDPR. Our company has a legitimate interest in presenting a website that is as dependable as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    10. Mittwald – optional

      The provider is the Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (hereinafter referred to as Mittwald).

      For details, please view the data privacy policy of Mittwald: https://www.mittwald.de/datenschutz.

      We use Mittwald on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable depiction of our website possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    11. jweiland – optional

      The provider is jweiland.net, Echterdinger Straße 57, Gebäude 9, 70794 Filderstadt, Germany (hereinafter referred to as jweiland).

      For details, please view the data privacy policy of jweiland: https://jweiland.net/datenschutz.html.

      We use jweiland on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable depiction of our website possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    12. Cloudflare – optional

      We use the “Cloudflare” service provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. (hereinafter referred to as “Cloudflare”).

      Cloudflare offers a content delivery network with DNS that is available worldwide. As a result, the information transfer that occurs between your browser and our website is technically routed via Cloudflare’s network. This enables Cloudflare to analyze data transactions between your browser and our website and to work as a filter between our servers and potentially malicious data traffic from the Internet. In this context, Cloudflare may also use cookies or other technologies deployed to recognize Internet users, which shall, however, only be used for the herein described purpose.

      The use of Cloudflare is based on our legitimate interest in a provision of our website offerings that is as error free and secure as possible (Art. 6(1)(f) GDPR).

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.cloudflare.com/privacypolicy/.

      For more information on Cloudflare’s security precautions and data privacy policies, please follow this link: https://www.cloudflare.com/privacypolicy/.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    13. Amazon CloudFront CDN – optional

      We use the Content Delivery Network Amazon CloudFront CDN. The provider is Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg (hereinafter referred to as “Amazon”).

      Amazon CloudFront CDN is a globally distributed Content Delivery Network. During these transactions, the information transfer between your browser and our website is technically routed via the Content Delivery Network. This enables us to boost the global availability and performance capabilities of our website.

      The use of Amazon CloudFront CDN is based on our legitimate interest in keeping the presentation of our web services as error free and secure as possible (Art. 6(1)(f) GDPR).

      The data transfer to the United States is based on the Standard Contract Clauses of the EU Commission.  You can find the details here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

      For more information on Amazon CloudFront CDN please follow this link: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    14. Shopify Hosting – optional – not updated

      We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers.

      Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by adequacy decision of the European Commission. For more information about Shopify's privacy policy, please visit the website below: https://www.shopify.de/legal/datenschutz

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

  3. General information and mandatory information

    1. Data protection

      The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

      Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

      We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

    2. Information about the responsible party (referred to as the “controller” in the GDPR)

      The data processing controller on this website is:

      Beispielfirma
      Musterweg 10
      90210 Musterstadt

      Telephone: +49 (0) 123 44 55 66
      Email: info@beispielfirma.de

      The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

    3. Storage duration

      Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

    4. General information on the legal basis for the data processing on this website

      If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

    5. Designation of a data protection officer – optional (über 20 Mitarbeiter in D.)

      We have appointed a data protection officer.

      Beispielfirma
      Musterweg 10
      90210 Musterstadt

      Telephone: +49 (0) 123 44 55 66
      Email: info@beispielfirma.de

    6. Information on data transfer to the USA and other non-EU countries – optional

      Among other things, we use tools of companies domiciled in the United States or other from a data protection perspective non-secure non-EU countries. If these tools are active, your personal data may potentially be transferred to these non-EU countries and may be processed there. We must point out that in these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as the data subject do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.

    7. Revocation of your consent to the processing of data

      A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

    8. Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

      IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

      IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

    9. Right to log a complaint with the competent supervisory agency

      In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

    10. Right to data portability

      You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

    11. Information about, rectification and eradication of data

      Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

    12. Right to demand processing restrictions

      You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

      • In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
      • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
      • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
      • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

      If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

    13. SSL and/or TLS encryption

      For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

      If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

    14. Encrypted payment transactions on this website – optional

      If you are under an obligation to share your payment information (e.g. account number if you give us the authority to debit your bank account) with us after you have entered into a fee-based contract with us, this information is required to process payments.

      Payment transactions using common modes of paying (Visa/MasterCard, debit to your bank account) are processed exclusively via encrypted SSL or TLS connections. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

      If the communication with us is encrypted, third parties will not be able to read the payment information you share with us.

    15. Rejection of unsolicited e-mails

      We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in our Site Notice to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

  4. Recording of data on this website

    1. Server log files

      The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

      • The type and version of browser used
      • The used operating system
      • Referrer URL
      • The hostname of the accessing computer
      • The time of the server inquiry
      • The IP address

      This data is not merged with other data sources.

      This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    2. Contact form – optional

      If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

      The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

      The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.

    3. Request by e-mail, telephone or fax

      If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

      These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

      The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

    4. Communication via WhatsApp – optional

      For communication with our customers and other third parties, one of the services we use is the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

      The communication is encrypted end-to-end (peer-to-peer), which prevents WhatsApp or other third parties from gaining access to the communication content. However, WhatsApp does gain access to metadata created during the communication process (for example, sender, recipient, and time). We would also like to point out that WhatsApp has stated that it shares personal data of its users with its U.S.-based parent company Meta. Further details on data processing can be found in the WhatsApp privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

      The use of WhatsApp is based on our legitimate interest in communicating as quickly and effectively as possible with customers, interested parties and other business and contractual partners (Art. 6(1)(f) GDPR). If a corresponding consent has been requested, data processing is carried out exclusively on the basis of the consent; this consent may be revoked at any time with effect for the future.

      The communication content exchanged between and on WhatsApp remains with us until you request us to delete it, revoke your consent to storage or the purpose for which the data is stored ceases to apply (e.g. after your request has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.

      We use WhatsApp in the “WhatsApp Business” variant.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum?lang=en.

      We have set up our WhatsApp accounts in such a way that there is no automatic synchronization of data with the address book on the smartphones in use.

      We have concluded a data processing agreement (DPA) with the above-mentioned provider.

    5. Calendly – optional

      You can make appointments with us on our website. We use the “Calendly” tool for booking appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter “Calendly”).

      To book an appointment, enter the requested data and the desired date in the screen provided. The data entered will be used for planning, executing and, if necessary, for the follow-up of the appointment. The appointment data is stored for us on the servers of Calendly, whose privacy policy can be viewed here: https://calendly.com/de/pages/privacy.

      The data you have entered will remain with us until you ask us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply. Mandatory legal provisions, in particular retention periods, remain unaffected.

      The legal basis for data processing is Art. 6(1)(f) GDPR. The website operator has a justified interest in making appointments with interested parties and customers in as uncomplicated a manner as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://calendly.com/pages/dpa.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    6. Hubspot CRM – optional

      We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereafter Hubspot CRM).

      Hubspot CRM enables us, among other things, to manage existing and potential customers and customer contacts, to communicate with you and to plan and execute marketing activities in line with your interests. Hubspot CRM enables us to capture, sort and analyze customer interactions via email, social media, or phone across multiple channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or marketing measures (e.g., newsletter mailings). Hubspot CRM also enables us to collect and analyze the user behavior of our contacts on our website.

      The use of Hubspot CRM is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      For details, please refer to Hubspot’s privacy policy: https://legal.hubspot.com/de/privacy-policy.

      Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    7. Registration on this website – optional – not updated

      You have the option to register on this website to be able to use additional website functions. We shall use the data you enter only for the purpose of using the respective offer or service you have registered for. The required information we request at the time of registration must be entered in full. Otherwise we shall reject the registration.

      To notify you of any important changes to the scope of our portfolio or in the event of technical modifications, we shall use the e-mail address provided during the registration process.

      We shall process the data entered during the registration process on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR).

      The data recorded during the registration process shall be stored by us as long as you are registered on this website. Subsequently, such data shall be deleted. This shall be without prejudice to mandatory statutory retention obligations.

    8. The comment function on this website – optional – not updated

      When you use the comment function on this website, information on the time the comment was generated and your e-mail-address and, if you are not posting anonymously, the user name you have selected will be archived in addition to your comments.

      1. Storage of the IP address

        Our comment function stores the IP addresses of all users who enter comments. Given that we do not review the comments prior to publishing them, we need this information in order to take action against the author in the event of rights violations, such as defamation or propaganda.

      2. Subscribing to comments

        As a user of this website, you have the option to subscribe to comments after you have registered. You will receive a confirmation e-mail, the purpose of which is to verify whether you are the actual holder of the provided e-mail address. You can deactivate this function at any time by following a respective link in the information e-mails. The data entered in conjunction with subscriptions to comments will be deleted in this case. However, if you have communicated this information to us for other purposes and from a different location (e.g. when subscribing to the newsletter), the data shall remain in our possession.

      3. Storage period for comments

        Comments and any affiliated information (e.g. the IP address) shall be stored by us and remain on this website until the content the comment pertained to has been deleted in its entirety or if the comments had to be deleted for legal reasons (e.g. insulting comments).

      4. Legal basis

        Comments are stored on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

      5. Usage of Gravatar Plugin – optional

        Our website uses the external Avatar-Service Gravatar for the display of pictures and avatars of users commenting on articles of this website. Gravatar is operated by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA (“Automattic”).

        The use of Gravatar is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f DSGVO, as we offer contributors and commentators the opportunity to personalise their contributions with a profile picture with the help of Gravatar.

        The email address provided in the comments will be transferred to Gravatar in order to show an avatar in the comments that might be connected with that email address. The email address will be encoded and send to Gravatar. Gravatar in turn delivers avatars to our website that will be integrated in the comments. By displaying these pictures Gravatar can store your IP-address. For more information regarding the evaluation and usage of data through Gravatar please visit the data protection information of Gravatar.

        If you do not wish to display a picture that is related to an email address of yours, we recommend using an email-address that is not deposited at Gravatar.

  5. Social media – optional

    1. Facebook plugins (like button & media elements) – optional

      We have integrated elements of the social network Facebook on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too.

      An overview of the Facebook social media elements is available under the following link: https://developers.facebook.com/docs/plugins/.

      If the social media element has been activated, a direct connection between your device and the Facebook server will be established. As a result, Facebook will receive information confirming your visit to this website with your IP address. If you click on the Facebook Like button while you are logged into your Facebook account, you can link content of this website to your Facebook profile. Consequently, Facebook will be able to allocate your visit to this website to your user account. We have to emphasize that we as the provider of the website do not receive any information on the content of the transferred data and its use by Facebook. For more information, please consult the Data Privacy Policy of Facebook at: https://de-de.facebook.com/privacy/explanation.

      If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6 Sect. 1 lit. a GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

      Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found under: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g., requests for information) regarding data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

    2. Instagram Embed Inhalte – optional – not updated

      On this website, components of the service Instagram are integrated. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data in other social networks.

      The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

      By each call of one of the individual pages of this website, which is operated by the controller and on which an Instagram component (Insta-Button or Insta-Embed-Post) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Instagram component to download a representation of the corresponding component from Instagram. Within the scope of this technical procedure, Instagram receives knowledge about which specific subpage of our website is visited by the data subject.

      If the data subject is logged in to Instagram at the same time, Instagram recognizes which specific subpage the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject activates one of the Instagram buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

      Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is simultaneously logged into Instagram at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she can prevent the transmission by logging out of his or her Instagram account before accessing our website.

      Further information and the applicable privacy policy of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

    3. Instagram – optional

      We have integrated functions of the public media platform Instagram into this website. These functions are being offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

      If the social media element has been activated, a direct connection between your device and Instagram’s server will be established. As a result, Instagram will receive information on your visit to this website.

      If you are logged into your Instagram account, you may click the Instagram button to link contents from this website to your Instagram profile. This enables Instagram to allocate your visit to this website to your user account. We have to point out that we as the provider of the website and its pages do not have any knowledge of the content of the data transferred and its use by Instagram.

      If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

      Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook or Instagram. The processing by Facebook or Instagram that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found under: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook or Instagram tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of Facebook or Instagram products. You can assert data subject rights (e.g., requests for information) regarding data processed by Facebook or Instagram directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

      For more information on this subject, please consult Instagram’s Data Privacy Declaration at: https://instagram.com/about/legal/privacy/.

    4. Twitter – optional

      We have integrated functions of the social media platform Twitter into this website. These functions are provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

      If the social media element has been activated, a direct connection between your device and Twitter’s server will be established. As a result, Twitter will receive information on your visit to this website. While you use Twitter and the “Re-Tweet” function, websites you visit are linked to your Twitter account and disclosed to other users. We must point out, that we, the providers of the website and its pages do not know anything about the content of the data transferred and the use of this information by Twitter. For more details, please consult Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.

      If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

      You have the option to reset your data protection settings on Twitter under the account settings at https://twitter.com/account/settings.

    5. LinkedIn – optional

      This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

      Any time you access a page of this website that contains elements of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to this website to your user account. We have to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data and its use by LinkedIn.

      If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6 (1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en.

      For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.

    6. XING – optional

      This website uses elements of the XING network. The provider is the New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

      Any time one of our sites/pages that contains elements of XING is accessed, a connection with XING’s servers is established. As far as we know, this does not result in the archiving of any personal data. In particular, the service does not store any IP addresses or analyze user patterns.

      If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6 (1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

      For more information on data protection and the XING share button please consult the Data Protection Declaration of Xing at: https://www.xing.com/app/share?op=data_protection.

    7. Pinterest – optional

      We use elements of the social network Pinterest on this website. The network is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

      If you access a site or page that contains such an element, your browser will establish a direct connection with Pinterest’s servers. During this process, the social media element transfers log data to Pinterest’s servers in the United States. The log data may possibly include your IP address, the address of the websites you visited, which also contain Pinterest functions. The information also includes the type and settings of your browser, the data and time of the inquiry, how you use Pinterest and cookies.

      If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6 (1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

      For more information concerning the purpose, scope and continue processing and use of the data by Pinterest as well as your affiliated rights and options to protect your private information, please consult the data privacy information of Pinterest at: https://about.pinterest.com/en/privacy-policy.

  6. Analysis tools and advertising – optional

    1. Google Tag Manager – optional

      We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

      The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

      The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

    2. Google Analytics – optional

      This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

      Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is summarized in a user-ID and assigned to the respective end device of the website visitor.

      Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

      Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

      The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

      1. Browser plug-in

        You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

        For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

      2. Contract data processing

        We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

    3. Google Ads Remarketing – optional

      This website uses the functions of Google Ads Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

      With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to subsequently display interest-based advertising to them in the Google advertising network (remarketing or retargeting).

      Moreover, it is possible to link the advertising target groups generated with Google Ads Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g., cell phone) in a manner tailored to you as well as on any of your devices (e.g., tablet or PC).

      If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/.

      The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

      For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.

      1. Formation of Target Groups with Customer Reconciliation

        For the formation of target groups, we use, among other things, the Google Ads Remarketing customer reconciliation feature. To achieve this, we transfer certain customer data (e.g., email addresses) from our customer lists to Google. If the respective customers are Google users and are logged into their Google accounts, matching advertising messages within the Google network (e.g., YouTube, Gmail or in a search engine) are displayed for them to view.

    4. Google Conversion-Tracking – optional

      This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

      With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.

      The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

      For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en

    5. Google AdSense (not personalized) – optional

      This website uses Google AdSense, an ad embedding service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

      We use Google AdSense in the “non-personalized” mode. Contrary to the personalized mode, the ads are not based on your previous user patterns and the service does not generate a user profile for you. Instead, the service uses so-called “context information” to choose the ads that are posted for you to view. The selected ads are thus based e.g., on your location, the content of the website you are visiting at the time, or the search terms you are using. To learn more about the distinct differences between personalized targeting and targeting that has not been personalized by Google AdSense, please click on the following link: https://support.google.com/adsense/answer/9007336.

      Please keep in mind that if Google Adsense is used in the non-personalized mode, it is possible that cookies are stored or comparable recognition technologies (e.g., device fingerprinting) are used.

      The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

      You have the option to autonomously adjust the advertising settings in your user account. To do so, please click on the link provided below and log in: https://adssettings.google.com/authenticated.

      For more information about Google’s advertising technologies, please click here: https://policies.google.com/technologies/ads and https://www.google.de/intl/de/policies/privacy/.

    6. Google Optimize – optional – not updated

      Our website uses the web analysis and optimization service "Google Optimize", which are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google Optimize"). We use the Google Optimize service to increase the attractiveness, content and functionality of our website by playing new features and content to a percentage of our users and statistically evaluating the change in usage. Google Optimize is a sub-service of Google Analytics (see section Google Analytics).

      Google Optimize uses cookies to optimize and analyze your use of our website. The information generated by these cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. We use Google Optimize with activated IP anonymization, so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website optimization purposes and providing other services relating to website activity and internet usage.

      You can prevent the storage of cookies by selecting the appropriate settings on your internet browser. In addition, you can prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. For more information about data collection and processing by Google, please refer to Google's privacy policy, which is available at http://www.google.com/policies/privacy.

    7. Bing Universal Event Tracking (UET) – optional – not updated

      On our website, Bing Ads technologies are used to collect and store data from which usage profiles are created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website if they have reached our website via ads from Bing Ads. If you arrive at our website via such an ad, a cookie is set on your computer. A Bing UET tag is integrated on our website. This is a code which, in conjunction with the cookie, stores some non-personal data about the use of the website. This includes, among other things, the length of time spent on the website, which areas of the website were accessed and via which ad the users arrived at the website. Information about your identity is not collected.

      The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data, by deactivating the setting of cookies. This may restrict the functionality of the website under certain circumstances.

      In addition, Microsoft may be able to track your usage behavior across multiple electronic devices through cross-device tracking, which enables Microsoft to display personalized ads on or within Microsoft websites and apps. You can disable this behavior at http://choice.microsoft.com/de-de/opt-out.

      For more information about Bing's analytics services, please visit the Bing Ads website ( https://help.bingads.microsoft.com/#apex/3/de/53056/2 ). For more information about privacy at Microsoft and Bing, see Microsoft's privacy policy ( https://privacy.microsoft.com/de-de/privacystatement ).

    8. Microsoft Bing Ads – optional – not updated

      On our pages, we use the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. In this process, Microsoft Bing Ads stores a cookie on your computer if you have reached our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognize that someone has clicked on an ad, been redirected to our website and reached a previously determined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the user's identity is disclosed.

      If you do not want information about your behavior to be used by Microsoft as explained above, you can refuse the necessary setting of a cookie - for example, by using browser settings that generally disable the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by following the link below: https://account.microsoft.com/privacy/ad-settings/signedout?lang=de-DE to declare your objection. For more information on data protection and the cookies used by Microsoft and Bing Ads, please visit the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement.

    9. Facebook pixel – optional

      To measure conversion rates, this website uses the visitor activity pixel of Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too.

      This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyze the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.

      For us as the operators of this website, the collected data is anonymous. We are not in a position to arrive at any conclusions as to the identity of users. However, Facebook archives the information and processes it, so that it is possible to make a connection to the respective user profile and Facebook is in a position to use the data for its own promotional purposes in compliance with the Facebook Data Usage Policy. This enables Facebook to display ads on Facebook pages as well as in locations outside of Facebook. We as the operator of this website have no control over the use of such data.

      The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381.

      Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found under: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g., requests for information) regarding data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

      In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/.

      You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.

      If you do not have a Facebook account, you can deactivate any user-based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

    10. Hotjar – optional

      This website utilizes Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

      Hotjar is a tool used to analyze your user patterns on this website. Hotjar allows us to for instance record your mouse and scroll movements as well as your click. During this process, Hotjar also has the capability to determine how long your cursor remained in a certain position. Based on this information, Hotjar compiles so-called Heatmaps, that make possible to determine which parts of the website the website visitor reviews with preference.

      We are also able to determine how long you have stayed on a page of this website and when you left. We can also determine at which point you suspended making entries into a contact form (so-called conversion funnels).

      Furthermore, Hotjar can be deployed to obtain direct feedback from website visitors. This function aims at the improvement of the website offerings of the website operator.

      Hotjar uses technologies that make it possible to recognize the user for the purpose of analyzing the user patterns (e.g., cookies or the deployment of device fingerprinting).

      If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of Art. 6(1)(f) GDPR; the website operator has a legitimate interest in the analysis of user patterns to optimize both, the web presentation and the operator’s advertising activities.

      1. Deactivation of Hotjar

        If you would like to deactivate the recording of data by Hotjar, please click on the link below and follow the instructions provided under the link: https://www.hotjar.com/policies/do-not-track/.

        Please keep in mind that you will have to separately deactivate Hotjar for every browser and every device.

        For more detailed information about Hotjar and the data to be recorded, please consult the Data Privacy Declaration of Hotjar under the following link: https://www.hotjar.com/privacy.

      2. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    11. etracker – optional

      This website uses the analysis service etracker. The provider of this service is the etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany.

      etracker allows us to analyze the behavior patterns of our website visitors. For this purpose, etracker, among other things, records your abridged IP-address, geographic information (does not exceed details such as the city level), log files and other information your browser transfers to our webserver when you access the website. As a result, we are able to measure the website interactions, such as the length of the visit, conversions (e.g., registrations, purchase orders), scroll events, clicks and page access by the website visitor. These interactions are allocated to the website visitor for the duration of the current day, so that the data can be recognized during follow-up visits. Once the day has ended, visitor recognition is no longer possible.

      No cookies will be stored in your browser in the absence of your consent. Moreover, no information is read in the archive of your device. Using this analysis tools without cookies occurs on the basis of Art. 6(1)(f) GDPR. The website operator has legitimate interest in the analysis of user patterns so that the operator can optimize the web portfolio and the ads. The rights and principal liberties of the data subject are protected. During the analysis with etracker, the IP address is anonymized as soon as possible, and the recognition of visitors is possible only for the duration of the current day.

      If your respective consent has been obtained, processing will occur exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

      You have the option to deactivate etracker here:

      I object to the processing of my personal data with etracker on this website.

      This will result in the placement of an opt out cookie under the name „_et_oi_v2“ by etracker. In the future, this will have the effect that visitor data from your browser will no longer be collected and archived for this domain by etracker. Please do not delete this specific cookie as long as you want to uphold your objection. For more information, please consult the Data Protection Policies of etracker at: https://www.etracker.com/en/data-privacy/.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    12. Leadinfo – optional – not updated

      We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits by companies to our website based on IP addresses and shows us publicly available information for this purpose, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. "leadinfo.com") to correlate IP addresses with companies and improve the services. For more information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. If you opt-out, your information will no longer be collected by Leadinfo.

      Preventing access by lead info
      If you do not want Leadinfo to identify your IP address when you access our website, you can have your company name blocked from access by sending an email to Leadinfo at the following address with the following content:

      hallo@leadinfo.com
      Subject: opt-out
      Name of your company
      Commercial register number, if available

  7. Newsletter – optional

    1. Newsletter data

      If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.

    2. Sendinblue – optional – to translate

      Diese Website nutzt Sendinblue für den Versand von Newslettern. Anbieter ist die Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Deutschland.

      Sendinblue ist ein Dienst, mit dem u.a. der Versand von Newslettern organisiert und analysiert werden kann. Die von Ihnen zum Zwecke des Newsletterbezugs eingegeben Daten werden auf den Servern von Sendinblue in Deutschland gespeichert.

      1. Datenanalyse durch Sendinblue

        Mit Hilfe von Sendinblue ist es uns möglich, unsere Newsletter-Kampagnen zu analysieren. So können wir z. B. sehen, ob eine Newsletter-Nachricht geöffnet und welche Links ggf. angeklickt wurden. Auf diese Weise können wir u.a. feststellen, welche Links besonders oft angeklickt wurden.

        Außerdem können wir erkennen, ob nach dem Öffnen/ Anklicken bestimmte vorher definierte Aktionen durchgeführt wurden (Conversion-Rate). Wir können so z. B. erkennen, ob Sie nach dem Anklicken des Newsletters einen Kauf getätigt haben.

        Sendinblue ermöglicht es uns auch, die Newsletter-Empfänger anhand verschiedener Kategorien zu unterteilen („clustern“). Dabei lassen sich die Newsletterempfänger z. B. nach Alter, Geschlecht oder Wohnort unterteilen. Auf diese Weise lassen sich die Newsletter besser an die jeweiligen Zielgruppen anpassen.

        Wenn Sie keine Analyse durch Sendinblue wollen, müssen Sie den Newsletter abbestellen. Hierfür stellen wir in jeder Newsletternachricht einen entsprechenden Link zur Verfügung.

        Ausführliche Informationen zum zu den Funktionen von Sendinblue entnehmen Sie folgendem Link: https://de.sendinblue.com/newsletter-software/.

      2. Rechtsgrundlage

        Die Datenverarbeitung erfolgt auf Grundlage Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO). Sie können diese Einwilligung jederzeit widerrufen. Die Rechtmäßigkeit der bereits erfolgten Datenverarbeitungsvorgänge bleibt vom Widerruf unberührt.

      3. Speicherdauer

        Die von Ihnen zum Zwecke des Newsletter-Bezugs bei uns hinterlegten Daten werden von uns bis zu Ihrer Austragung aus dem Newsletter bei uns bzw. dem Newsletterdiensteanbieter gespeichert und nach der Abbestellung des Newsletters aus der Newsletterverteilerliste gelöscht. Daten, die zu anderen Zwecken bei uns gespeichert wurden, bleiben hiervon unberührt.

        Nach Ihrer Austragung aus der Newsletterverteilerliste wird Ihre E-Mail-Adresse bei uns bzw. dem Newsletterdiensteanbieter ggf. in einer Blacklist gespeichert, sofern dies zur Verhinderung künftiger Mailings erforderlich ist. Die Daten aus der Blacklist werden nur für diesen Zweck verwendet und nicht mit anderen Daten zusammengeführt. Dies dient sowohl Ihrem Interesse als auch unserem Interesse an der Einhaltung der gesetzlichen Vorgaben beim Versand von Newslettern (berechtigtes Interesse im Sinne des Art. 6 Abs. 1 lit. f DSGVO). Die Speicherung in der Blacklist ist zeitlich nicht befristet. Sie können der Speicherung widersprechen, sofern Ihre Interessen unser berechtigtes Interesse überwiegen.

        Näheres entnehmen Sie den Datenschutzbestimmungen von Sendinblue unter: https://de.sendinblue.com/datenschutz-uebersicht/.

      4. Auftragsverarbeitung

        Wir haben einen Vertrag über Auftragsverarbeitung (AVV) zur Nutzung des oben genannten Dienstes geschlossen. Hierbei handelt es sich um einen datenschutzrechtlich vorgeschriebenen Vertrag, der gewährleistet, dass dieser die personenbezogenen Daten unserer Websitebesucher nur nach unseren Weisungen und unter Einhaltung der DSGVO verarbeitet.

    3. Mailchimp with deactivated success measurement – optional

      This website uses the services of Mailchimp to send out its newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

      Among other things, Mailchimp is a service that can be deployed to organize the sending of newsletters. Whenever you enter data for the purpose of subscribing to a newsletter (e.g. your e-mail address), the information is stored on Mailchimp servers in the United States. We have deactivated the success measurement of Mailchimp, so Mailchimp will not evaluate your behavior when opening our newsletter.

      If you do not want Mailchimp to receive your data, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message.

      The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.

      The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

      After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

      For more details, please consult the Data Privacy Policies of Mailchimp at: https://mailchimp.com/legal/terms/.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    4. CleverReach – optional

      This website uses CleverReach for the sending of newsletters. The provider is the CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter “CleverReach”). CleverReach is a service that can be used to organize and analyze the sending of newsletters. The data you have entered for the purpose of subscribing to our newsletter (e.g., e-mail address) are stored on servers of CleverReach in Germany or in Ireland.

      Newsletters we send out via CleverReach allow us to analyze the user patterns of our newsletter recipients. Among other things, in conjunction with this, it is possible how many recipients actually opened the newsletter e-mail and how often which link inside the newsletter has been clicked. With the assistance of a tool called Conversion Tracking, we can also determine whether an action that has been predefined in the newsletter actually occurred after the link was clicked (e.g., purchase of a product on this website). For more information on the data analysis services by CleverReach newsletters, please go to: https://www.cleverreach.com/en/features/reporting-tracking/.

      The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.

      If you do not want to permit an analysis by CleverReach, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message.

      The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

      After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

      For more details, please consult the Data Protection Provisions of CleverReach at: https://www.cleverreach.com/en/privacy-policy/.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    5. ActiveCampaign – optional

      This website uses ActiveCampaign for sending newsletters. Provider is ActiveCampaign, Inc., 1 N Dearborn, 5th Floor Chicago, Illinois 60602, United States.

      ActiveCampaign is a service with which, among other things, the dispatch of newsletters can be organized and analyzed. The data you enter for the purpose of subscribing to the newsletter will be stored on the servers of ActiveCampaign in the United States.

      1. Data analysis by ActiveCampaign

        With the help of ActiveCampaign we are able to analyze our newsletter campaigns. For example, we can see if a newsletter message has been opened and which links have been clicked. In this way, we can determine which links have been clicked particularly frequently.

        We can also see whether certain previously defined actions were performed after opening / clicking (conversion rate). For example, we can tell if you have made a purchase after clicking on the newsletter.

        ActiveCampaign also allows us to classify newsletter recipients into different categories („clusters”). For example, the newsletter recipients can be subdivided according to age, gender, or place of residence. In this way, the newsletters can be better adapted to the respective target groups. If you do not want an analysis by ActiveCampaign, you have to unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can unsubscribe from the newsletter directly on the website.

        Detailed information about the functions of ActiveCampaign can be found in the following link: https://www.activecampaign.com/email-marketing.

        The privacy policy of ActiveCampaign can be found at: https://www.activecampaign.com/privacy-policy.

      2. Legal Basis

        Data processing is based on your agreement (Art. 6(1)(a) GDPR). You can revoke this agreement at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

        Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.activecampaign.com/legal/scc and https://www.activecampaign.com/de/legal/gdpr-updates/privacy-shield.

      3. Storage period

        The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

        After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

      4. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

  8. Plug-ins and Tools

    1. Google Fonts (local embedding)

      This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

      For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

    2. Adobe Fonts – optional

      In order to ensure the uniform depiction of certain fonts, this website uses fonts called Adobe Fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

      When you access pages of this website, your browser will automatically load the required fonts directly from the Adobe site to be able to display them correctly on your device. As a result, your browser will establish a connection with Adobe’s servers in the United States. Hence, Adobe learns that your IP address was used to access this website. According to the information provided by Adobe, no cookies will be stored in conjunction with the provision of the fonts.

      Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a uniform presentation of the font on the operator’s website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.

      For more information about Adobe Fonts, please read the policies under: https://www.adobe.com/privacy/policies/adobe-fonts.html.

      Adobe’s Data Privacy Declaration may be reviewed under: https://www.adobe.com/privacy/policy.html.

    3. Google Maps – optional

      This website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

      To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. In case Google Maps has been activated, Google has the option to use Google Fonts for the purpose of the uniform depiction of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache, to correctly display text and fonts.

      We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

      For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

    4. Google reCAPTCHA – optional

      We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

      The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.

      reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

      Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and Terms Of Use under the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

    5. Friendly Captcha – optional

      We use Friendly Captcha (hereinafter referred to as “Friendly Captcha”) on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

      Friendly Captcha is used to verify whether the entry of data into this website (e.g., into a contact form) is being processed by a person or an automated program. For this purpose, Friendly Captcha analyzes the behavior patterns of website visitors based on numerous characteristics. For the analysis, Friendly Captcha examines a wide range of information (e.g., anonymized IP address, referrer, time of the visit, etc.). For more related information please visit: https://friendlycaptcha.com/legal/privacy-end-users/.

      The storage and analysis of the data occurs on the basis of Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in protecting the operator’s web presentations against abusive automatic spying and SPAM. In the event that respective consent has been obtained, the data will be processed exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, if the consent comprises the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined in the TTDSG (German Telecommunications Act). Such consent may be revoked at any time.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    6. YouTube with expanded data protection integration – optional

      Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

      We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.

      As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

      Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

      Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.

      The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

    7. Vimeo Without Tracking (Do-Not-Track) – optional

      This website uses plugins of the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

      Whenever you visit one of our pages featuring Vimeo videos, a connection with the servers of Vimeo is established. In conjunction with this, the Vimeo server receives information about which of our sites you have visited. Vimeo also receives your IP address. However, we have set up Vimeo in such a way that Vimeo cannot track your user activities and does not place any cookies.

      We use Vimeo to make our online presentation attractive for you. This is a legitimate interest on our part pursuant to Art. 6(1)(f) GDPR. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time.

      Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission and, according to Vimeo, on “legitimate business interests”. Details can be found here: https://vimeo.com/privacy.

      For more information on the handling of user data, please consult Vimeo’s data privacy policy at: https://vimeo.com/privacy

    8. Jameda – so nicht DSGVO konform – optional

      Seals or widgets of jameda GmbH, St. Cajetan-Straße 41, 81669 Munich, Germany, are included on our website. A widget is a small window that displays variable information. Our seal also works in a similar way, i.e. it does not always look the same, but the display changes. Although the corresponding content is displayed on our website, it is retrieved from the jameda servers at this moment. This is the only way to always show the current content, especially the current rating. For this purpose, a data connection must be established from this website to jameda and jameda receives certain technical data (date and time of the visit; the page from which the query is made; Internet protocol address used (IP address), browser type and version, device type, operating system and similar technical information) which are necessary for the content to be delivered. However, this data is only used to provide the content and is not stored or used in any other way.

      We pursue with the integration the purpose and the justified interest to represent current and correct contents on our homepage. The legal basis is Art. 6 para. 1 f) DSGVO. We do not store the aforementioned data due to this integration. Further information on data processing by jameda can be found in the data protection declaration on the website www.jameda.de.

    9. SoundCloud – optional – not updated

      We may have integrated plug-ins of the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, Great Britain) into this website. You will be able to recognise such SoundCloud plug-ins by checking for the SoundCloud logo on the respective pages.

      Whenever you visit this website, a direct connection between your browser and the SoundCloud server will be established immediately after the plug-in has been activated. As a result, SoundCloud will be notified that you have used your IP address to visit this website. If you click the „Like“ button or the „Share“ button while you are logged into your Sound Cloud user account, you can link the content of this website to your SoundCloud profile and/or share the content. Consequently, SoundCloud will be able to allocate the visit to this website to your user account. We emphasize that we as the provider of the websites do not have any knowledge of the data transferred and the use of this data by SoundCloud.

      We use SoundCloud on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in attaining the highest level of visibility on social media.

      For more information about this, please consult SoundCloud’s Data Privacy Declaration at: https://soundcloud.com/pages/privacy.

      If you prefer not to have your visit to this website allocated to your SoundCloud user account by SoundCloud, please log out of your SoundCloud user account before you activate content of the SoundCloud plug-in.

    10. Spotify – optional – not updated

      We have integrated features of the Spotify music platform into this website. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You will be able to recognize Spotify plug-ins when you see the green logo on this website. An overview of Spotify’s plug-ins can be found at: https://developer.spotify.com.

      The plug-in makes it possible to establish a direct connection between your browser and Spotify’s server when you visit this website. As a result, Spotify receives the information that you visited this website with your IP address. If you click the Spotify button while you are logged into your Spotify account, you have the option to link content from this website with your Spotify profile. Consequently, Spotify will be in a position to allocate your visit to this website to your user account.

      The data processing activities are based on Art. 6 Sect. 1 lit. f GDPR. Accordingly, the website operator has a legitimate interest in placing respective acoustic content on the operator’s website.

      For more information, please consult Spotify’s Data Protection Declaration under: https://www.spotify.com/us/legal/privacy-policy/.

      If you do not want Spotify to be able to allocate the visit of this website to your Spotify user account, please log out of your Spotify user account while visiting our sites.

    11. Podcasts über Apple iTunes – optional – not updated – to translate

      Diese Webseite nutzt Apple iTunes Podcasts für das Hosting und die Bereitstellung von Podcasts. Anbieter dieser Dienste ist Apple Inc., 1 Infinite Loop, Cupertino, CA 95014, USA („Apple iTunes Podcasts“). Bei der Nutzung von Apple iTunes Podcasts werden Daten in die USA übermittelt, die in der DSGVO als Drittland mit einem unsicheren Datenschutzniveau gelten. Die Daten können eventuell die Adressen der besuchten Internetseiten, die auch Apple iTunes Podcasts -Funktionen enthalten sowie Browser-Informationen, Datum und Zeitpunkt der Verbindung, Wir haben keine Kenntnis vom Inhalt der übertragenen Daten sowie über die Art und Weise der Nutzung und über die Dauer der Speicherung durch Apple iTunes Podcasts.

      1. Rechtsgrundlage

        Die Rechtsgrundlage für die Verarbeitung der Daten ist unser berechtigtes Interesse gemäß Art. 6 Abs. 1 lit. f DSGVO, da wir Ihnen einen ansprechenden Internetauftritt sowie verschiedene zeitgemäße Informations- und Interaktionsmöglichkeiten mit uns anbieten möchten.

      2. Weiterführende Informationen finden sich in den Apple iTunes Podcasts -Datenschutzbestimmungen; diese sind abrufbar unter: https://www.apple.com/de/privacy/

    12. ProvenExpert – optional

      We have included evaluation seals from ProvenExpert on this website. The provider is Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, https://www.provenexpert.com.

      The ProvenExpert seal enables us to display on our website customer reviews that have been submitted to ProvenExpert about our company. When you visit our website, a connection to ProvenExpert is established so that ProvenExpert can determine that you have visited our website. Furthermore, ProvenExpert records your language settings to display the seal in the chosen language.

      The use of ProvenExpert is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most comprehensible presentation of customer reviews. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

    13. Userlike with extended data privacy mode – optional

      We use Userlike (hereinafter called “Userlike”) to process user inquiries via our support channels or live chat systems. The provider is Userlike UG (a limited liability company), Probsteigasse 44 – 46, 50670 Cologne, Germany.

      Messages you send to us may be stored in the Userlike ticket system or answered by our staff in live chat. When you communicate with us through Userlike, we and Userlike store, among other things, your name and email address, if you have provided them, and your chat history. This data is summarized in a profile.

      Messages that are addressed to us remain in our possession until you ask us to delete them or the reason for the data storage is no longer effective (e.g., after your inquiry has been processed). This shall be without prejudice to any statutory provisions – especially statutory mandatory retention obligations.

      Userlike is deployed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing activities that are as effective as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      For more information please consult the Userlike data protection declaration: https://www.userlike.com/de/data-privacy and https://www.userlike.com/de/blog/live-chat-software-datenschutz-dsgvo.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

    14. Shopify – optional – not updated

      We use the Shopify service developed and operated by Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5 (hereinafter "SHOPIFY"). SHOPIFY provides us with an online e-commerce platform through which we can offer our goods for sale. Your inventory and usage data is stored on SHOPIFY's servers. If you place an order in our shop, you agree with the storage and processing of your personal data by Shopify. Your personal data will be forwarded to the Shopify data center and processed. This data is stored and processed for the purpose of supporting and processing your orders, authenticating you, processing payment transactions and improving Shopify's services. For more information on Shopify's terms of use and privacy policy, please visit http://www.shopify.com/legal/privacy. The Shopify Data Processing Agreement can be found at https://www.shopify.com/legal/dpa.

      1. Cookie use by Shopify – our shop service provider

        In the process of purchasing and selling a product from our store, Shopify collects personal information entered by the buyer, such as name, address and email address. When you use our store, we receive Internet Protocol (IP) information about your browser and operating system. Our shop is operated on Shopify Inc. Shopify provides us with its online e-commerce platform to sell our products and services. Your data will be processed through Shopify's data storage, databases and general program functions. Shopify stores your data on a secure server with a firewall.

        To protect your personal information, Shopify uses reasonable precautions and state-of-the-art industry practices to ensure that your information is not lost, misused, used, published, altered, or destroyed. When you provide credit card information, the information is encrypted using Secure Socket Layer Technology (SSL) and AES-256 encryption. Although no data transmission method over the Internet or through electronic storage provides 100% security, Shopify meets all PCI-DSS requirements and also implements generally accepted industry standards. Here is a list of the cookies used by Shopify. These are listed here to give you the choice of whether or not to accept cookies.

        • _session_id, unique token, sessional. Allows Shopify to store information about your session (referrer, landing page, etc).
        • _shopify_visit, no data held. Remains for 30 minutes of the last visit to the site and is used by Shopifys internal stats tracker to record the number of visits.
        • _shopify_uniq, no data held. Runs out at midnight (depending on the user) of the next day. Counts the number of visits of an individual user of a store.
        • cart, unique token. Is active for two weeks and stores information about the contents of your shopping cart.
        • _secure_session_id, unique token, sessional
      2. Privacy Policy for the use of Shopify

        A visit to our website may result in the storage of information on a Shopify server (date, time, pages visited). This is not an analysis of your personal data (e.g. name, address or email address). Personal data will only be collected with the prior confirmation of the user. Any forwarding of data to third parties without the consent of the user does not take place. Shopify expressly points out that the transmission of data via the Internet (e.g. via e-mail) may have security vulnerabilities. It is therefore not possible to completely protect data from access by third parties. Shopify assumes no liability for any damage caused by such security vulnerabilities. The use of any contact data for advertising purposes is expressly prohibited by Shopify. Shopify reserves the right to take legal action in case of unauthorized sending of advertising information, e.g. caused by spam-mail.

    15. Wistia – optional – not updated

      We use plugins from Wistia to play videos. The operator of the service is Wistia, 17 Tudor Street, Cambridge, Massachusetts, USA. When you visit one of our pages equipped with a Wistia player, a connection to Wistia's servers is established. Wistia collects the following categories of personal data anonymously:

      • anonymized IP address incl. provider
      • Access time to videos viewed
      • Details of their viewed video sections
      • Video URL
      • Type of device (stationary, mobile)
      • Operating system and browser used

      If you are logged in as a member of Wistia, Wistia assigns this information to your respective personal user account of this platform. You can prevent such an assignment by logging out of your user account before visiting our website.

      The use of Wistia is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1)(f) DS-GVO.

      For more information on the handling of user data, please refer to Wistia's privacy policy (https://wistia.com/privacy).

    16. Flexperto (Online-Beratung) – to translate

    17. Zapier – optional

      We have integrated Zapier on this website. The provider is Zapier Inc, Market St. #62411, San Francisco, CA 94104-5401, USA (hereinafter “Zapier”).

      Zapier allows us to link and synchronize various functionalities, databases, and tools with our website. In this way, it is possible, for example, to automatically play out content that we publish on our website on our social media channels or to export content from marketing and analysis tools. Depending on the functionality, Zapier may also collect various personal data in the process.

      The use of Zapier is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest on the most effective integration of the tools used. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

      Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://zapier.com/tos.

      1. Data processing

        We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

  9. Online marketing and affiliate programs – optional – not updated

    1. Amazon affiliate program

      The operators of this website participate in the Amazon EU partners’ programme. Amazon integrates ads and links to the German Amazon website - Amazon.de - into this website, which allows us to generate earnings in the form of advertising cost reimbursements. Amazon uses cookies for this programme to be able to determine the source of orders placed. This allows Amazon to determine that you have clicked the partner link on this website.

      The archiving of „Amazon cookies“ is based on Art. 6 lit. f GDPR. Based on the aforementioned regulation, the website operator has a legitimate interest to do this since the determination of the website operator’s affiliate earnings is contingent upon the placement of cookies.

      For more information on Amazon’s data usage, please consult Amazon’s Data Privacy Declaration under the following link: https://www.amazon.com/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=468496.

  10. Data processing when using our online shop – optional – not updated

    1. Purchases in our online shop

      When you shop via our website, the following personal data may be collected, processed and used by you to process your order:

      • Surname,
      • first name,
      • billing and delivery address,
      • email address,
      • personal payment information,
      • …more information

      Your data will be encrypted during transmission to us by the latest technical security standards, a so-called SSL 256bit (SSL = Secure Socket Layer) encryption.

      In order to ensure the best possible support for our customers, we pass on your personal data to other companies, which we have used as contract processors, within the framework of what is legally permissible, exclusively for the proper fulfilment of the contract and only to the extent necessary for this and ensure that your data is only processed in accordance with our instructions.

    2. Encrypted payments on this website

      If you are under an obligation to share your payment information (e.g. account number if you give us the authority to debit your bank account) with us after you have entered into a fee-based contract with us, this information is required to process payments.

      Payment transactions using common modes of paying (Visa/MasterCard, debit to your bank account) are processed exclusively via encrypted SSL or TLS connections. You can recognise an encrypted connection by checking whether the address line of the browser switches from „http://“ to „https://“ and also by the appearance of the lock icon in the browser line.

      If the communication with us is encrypted, third parties will not be able to read the payment information you share with us.

    3. Processing of data (customer and contract data)

      We collect, process and use personal data only to the extent necessary for the establishment, content organization or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of this website (usage data) only to the extent that this is necessary to make it possible for users to utilize the services and to bill for them.

      The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.

    4. Data transfer upon closing of contracts for online stores, retailers and the shipment of merchandise

      We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with companies entrusted with the shipment of goods or the financial institution tasked with the processing of payments. Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.

      The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual actions.

    5. Data transfer upon closing of contracts for services and digital content – optional

      We share personal data with third parties only if this is necessary in conjunction with the handling of the contract; for instance, with the financial institution tasked with the processing of payments.

      Any further transfer of data shall not occur or shall only occur if you have expressly consented to the transfer. Any sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.

      The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or for pre-contractual actions.

    6. Payment methods

      In the context of the payment in our on-line shop we raise certain personal data from you, in order to complete the payment process.
      Apart from the purchase by bill, with which we dispatch a bill to your indicated contact address to be payed later for your convenience, we offer various other payment methods, in order to make your purchase in our online shop as comfortable as possible. These include the following services:

      1. Shopify Payments – to translate

      2. PayPal – optional

        We have integrated PayPal payments into our online shop. PayPal is an independent online payment service provider. Payments are processed through so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection service.

        The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

        If you select "PayPal" as the payment option during the ordering process in our online shop, the data of the person concerned will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transfer of personal data to PayPal required for payment processing.

        The personal data transmitted to PayPal is usually first name, surname, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. For the completion of the sales contract such personal data are also necessary, which stand in connection with the respective order.

        The purpose of data transmission is to process payments and prevent fraud. We transmit personal data to PayPal in particular if a justified interest for the transmission is given. The personal data exchanged between PayPal and us may be transferred by PayPal to credit agencies. The purpose of this transfer is to check identity and creditworthiness.

        PayPal may share the personal information with affiliated companies and service providers or subcontractors to the extent necessary to fulfill its contractual obligations or to process the information on behalf of PayPal.

        The transfer of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing to fulfill a contract). You have the possibility to revoke your consent to data processing at any time. A revocation has no effect on the effectiveness of past data processing operations.

        PayPal's current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

      3. Stripe – optional

        On our website we offer payment via Stripe. Provider of this payment service is the Stripe Payments Europe, Ltd., a private limited company organized under the laws of Ireland with company number 513174 and offices at The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland (hereinafter referred to as "Stripe").

        The transmission of your data to Stripe is based on Art. 6 (1) (a) DSGVO (consent) and Art. 6 (1) (b) DSGVO (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation has no effect on the effectiveness of past data processing operations.

        Stripe has self-certified itself under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list).

        Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about the data protection of "Stripe" at the following Internet address: https://stripe.com/de/privacy.

      4. Payment by creditkard

        This payment method is handled by the payment provider Stripe Payments Europe. The input of your payment data and the comparison of these data with the respective credit institution takes place through the integration via an iFrame directly at Stripe and no payment data is stored on our part.

        If you pay by credit card, you agree that your credit card details: Card type, cardholder name, card number and expiry date, but not the verification number, will be stored in encrypted form by Stripe Payments Europe for your purchase in our online store.

        Bei Zahlung per Kreditkarte werden die folgenden Daten verarbeitet:

        • card type (American Express, Mastercard or VISA)
        • name of the cardholder
        • card number
        • security code
        • expiration date
        • browser type and browser version
        • used operating system
        • time of request
        • IP address

        The legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO (execution of a contractual relationship).

      5. Sofortüberweisung – optional

        Among other options, we offer the payment service called „instant transfer Sofort“ on this website. The provider of this payment option is the Sofort GmbH, Theresienhöhe 12, 80339 München, Germany (hereinafter referred to as „Sofort GmbH“).

        With the assistance of the „instant transfer Sofort“ tool, we receive a payment confirmation from the Sofort GmbH in real time, which allows us to instantly start to fulfil our obligations to you.

        When you choose the „instant transfer Sofort“ payment option, you must send a PIN and a valid TAN to the Sofort GmbH, which allows the company to log into your online banking account. Upon logging in, the Sofort GmbH will verify your account balance and will execute the bank transfer to us with the assistance of the TAN you provided. Subsequently, the company sends us an immediate transaction confirmation. After Sofort GmbH has logged in, the system will also automatically verify your revenues and check the credit limit of your pre-approved overdraft credit line and the existence of other accounts along with their balances.

        Along with the PIN and TAN numbers, the system also transfers the payment information you entered along with personal data to the Sofort GmbH. Your personal data comprise your first and last name, address, phone number(s), e-mail address, IP address as well as any other data required for the processing of the payment transaction. This data must be transferred in order to be able to determine your identity with absolute certainty and to prevent attempts to commit fraud.

        The legal basis for the sharing of your information with the Sofort GmbH is Art. 6 Sect. 1 lit. a GDPR (consent) as well as Art. 6 Sect. 1 lit. b GDPR (processing for fulfilment of a contract). You have the option to at any time revoke your consent to the processing of your data. Such a revocation shall not have any impact on the effectiveness of data processing transactions that occurred in the past.

        For details on payments made with the instant transfer option, please follow these links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

      6. Paydirect – optional

        Among other options, we offer payment via Paydirekt on this website. The provider of this payment service is the Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany (hereinafter referred to as „Paydirekt“).

        Whenever you transact a payment via Paydirekt, Paydirekt collects transaction data and passes the data on to the bank you are registered with under Paydirekt. Besides the information required for the payment transaction itself, Paydirekt collects other data in conjunction with the processing of your transaction, such as the shipping address or the individual items in the shopping cart.

        Subsequently, Paydirekt authenticates the transaction with the assistance of an authentication process that has been archived with the bank for this purpose. Next, your payment amount will be transferred to our account from your account. We do not have any access to your account information; neither do third parties.

        For details concerning payment via Paydirekt, please review the General Terms and Conditions as well as the Data Protection Provisions of Paydirekt by following this link: https://www.paydirekt.de/agb/index.html.

      7. Apple Pay – to translate

      8. Google Pay – to translate

      9. Amazon Pay – to translate

    7. Purpose and legal basis of data processing

      1. We use your personal data, which we receive within your use of our online shop, to initiate and process purchase contracts concluded via the online shop as well as for customer service and consultation. In addition, we also use your personal data to assert rights from the purchase contracts concluded or initiated with you. Legal basis for the processing of your data in the context of the purchase and the purchase initiation in our online shop is Art. 6 Para. 1 Letter b DSGVO.

      2. The processing of your data within the framework of the payment process takes place in order to carry out the payment type you have chosen. The legal basis for the transmission of your data to external payment service providers is Art. 6 Para. 1 Letters a and b DSGVO.

      3. Your e-mail address and telephone number (if voluntarily provided by you) will be given to postal service providers for the purpose of informing you of the status of your shipment so that you can schedule when the package arrives at the shipping address. The legal basis for the transmission of data to postal service providers for shipment tracking is Art. 6 Para. 1 Letter f DSGVO.

    8. Duration of data storage

      We process your data in principle for the duration of our contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship).

      In addition, we are subject to various storage and documentation obligations, including those arising from the German Commercial Code (HGB) and the Fiscal Code (AO). The period for storage or documentation is specified for up to ten years after the end of the contractual relationship or the pre-contractual legal relationship.

      Furthermore, special statutory provisions may require a longer storage period, e.g. the preservation of evidence within the framework of the statutory statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), the regular limitation period is three years, but limitation periods of up to 30 years may also be applicable.

      If the data are no longer necessary for the fulfilment of contractual or legal obligations and rights, they are regularly deleted, unless their further processing – for a limited period – is necessary for the fulfilment of the above-mentioned purposes for an overriding legitimate interest.

  11. Custom Services

    1. Handling applicant data

      We offer website visitors the opportunity to submit job applications to us (e.g., via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing, and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

    2. Scope and purpose of the collection of data

      If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 BDSG according to German Law (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

      If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship in our data processing system.

    3. Data Archiving Period

      If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

      Longer storage may also take place if you have given your agreement (Article 6(1)(a) GDPR) or if statutory data retention requirements preclude the deletion.

    4. Admission to the applicant pool

      If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

      Admission to the applicant pool is based exclusively on your express agreement (Art. 6(1)(a) GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.

      The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.