Data protection declaration
This Privacy Statement clarifies to you the nature, scope and purpose of processing personal data ("Data") in the context of the provision of our services as well as within our online offer and the websites associated with it, Features and content as well as external online presence, such as Our social media profiles on (collectively referred to below as an "online offering"). In terms of the terms used, such as We refer to the definitions in the kind "processing" or "responsible." 4 of the General Data Protection Regulation (GDPR).
Responsible
Types of data processed
-inventory data (e.g., personal master data, names or addresses). -contact details (e.g., e-mail, telephone numbers). -Content data (e.g., text input, photographs, videos). -usage data (e.g., visited websites, interest in content, access times). -Meta-/communication data (e.g., device information, IP addresses).
Categories of affected persons
Visitors and users of the online offer (below we also refer to the affected persons as "users").
Purpose of processing
-Providing the online offer, its features and content. -Answering contact requests and communicating with users. -Security measures. -range measurement/Marketing
Terms used
"Personal data" is any information relating to an identified or identifiable natural person (' the person concerned '); Identifiable is a natural person who is directly or indirectly, in particular by assigning it to an identifier such as a name, to a identification number, to location data, to an online identifier (e.g. Cookie) or can be identified as one or more special characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. "Processing" is any process performed with or without the help of automated procedures or any such sequence of operations in connection with personal data. The term goes far and encompasses virtually every handling of data. "Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific person concerned without the use of additional information, provided that this additional data Information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not assigned to an identified or identifiable natural person. "Profiling" of any type of automated processing of personal data, which consists in this personal data being used to evaluate certain personal aspects relating to a natural person, in particular aspects To analyze or predict this natural person's work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or change of location. The "person responsible" is the natural or legal person, authority, institution or other body that decides alone or together with others on the purposes and means of processing personal data. "Order processor" means a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible.
Authoritative legal bases
By the sort. 13 We inform you about the legal basis of our data processing. For users from the scope of the General Data Protection Regulation (GDPR), i.e. The EU and the EEC, unless the legal basis is mentioned in the Privacy Statement, the following applies: The legal basis for obtaining consenting is Art. 6 paragraph 1 lit. a and kind. 7 GDPR; The legal basis for processing to fulfil our services and implement contractual measures, as well as answering inquiries, is Art. 6 paragraph 1 lit. b GDPR; The legal basis for processing to fulfil our legal obligations is Art. 6 paragraph 1 lit. c GDPR; In the event that vital interests of the person concerned or another natural person require the processing of personal data serves Art. 6 paragraph 1 lit. D GDPR as the legal basis. The legal basis for the necessary processing to carry out a task which is in the public interest or in the exercise of public authority, which has been entrusted to the person responsible is a species. 6 paragraph 1 lit. e GDPR. The legal basis for processing in order to safeguard our legitimate interests is Art. 6 paragraph 1 lit. f DSGVO. The processing of data for purposes other than those for which they have been provided is determined in accordance with the requirements of Art 6(3) of the 4 GDPR. The processing of special categories of data (according to type. 9 paragraph. 1 GDPR) is determined according to the specifications of the species. 9 paragraph. 2 GDPR.
Security
We meet in accordance with the statutory requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of processing, as well as the different probability of occurrence and severity of the Risk to the rights and freedoms of individuals, appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to it, entering, sharing, ensuring availability and its Separation. We have also established procedures to ensure a perception of affected rights, deletion of data and response to data exposure. We also take the protection of personal data into account in the development, or Selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly presets.
Working with contract processors, jointly responsible and third parties
If, as part of our processing, we disclose data to other persons and companies (contract processors, jointly responsible persons or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of A legal permit (e.g. If the data is transmitted to third parties, such as payment service providers, for the fulfillment of the contract), users have consented to a legal obligation or on the basis of our legitimate interests (e.g. When using agents, web hosts, etc.). If we disclose, transmit or otherwise grant access to other companies in our group of companies, this is done in particular for administrative purposes as a legitimate interest and beyond that on a legal basis. This is the basis for this.
Transfers to third countries
If we provide data in a third country (i.e. Process outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or do so in the context of the use of third-party services or disclosure, or disclosure, or Transmission of data to other persons or companies is only done if it is necessary to fulfil our (before) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate rights. Interests are happening. Subject to legal or contractual permits, we process or leave the data in a third country only if the legal requirements are met. I.e. Processing takes place, for example. On the basis of special guarantees, such as the officially recognised finding of a level of data protection corresponding to the EU (e.g. for the United States through the "Privacy Shield") or compliance with officially recognized special contractual obligations.
Rights of the persons concerned
You have the right to request confirmation as to whether the data in question is processed and for information about this data, as well as on further information and copy of the data in accordance with the legal requirements. You have accordingly. The legal requirements have the right to require the completion of the data concerning you or the correction of the incorrect data concerning you. In accordance with the legal requirements, you have the right to demand that data in question be deleted immediately, or that the data in question be deleted. Alternatively, to require a restriction of the processing of the data in accordance with the legal requirements. You have the right to request that the data you have provided to us be obtained in accordance with the legal requirements and to request that it be transmitted to other persons responsible. You also have the right, in accordance with the legal requirements, to lodge a complaint with the competent supervisory authority.
Withdrawal
You have the right to revoke granted consents with effect for the future.
Right to object
You may object to the future processing of the data concerning you at any time in accordance with the legal requirements. The objection may be made in particular against processing for direct advertising purposes.
Cookies and the right to object to direct advertising
"Cookies" are small files that are stored on users ' computers. Different information can be stored within the cookies. A cookie is primarily used to provide the information about a user (or To store the device on which the cookie is stored) during or after its visit within an online offer. As temporary cookies, or "Session cookies" or "transient cookies" are referred to as cookies that are deleted after a user leaves an online offer and closes their browser. In such a cookie, for example, can. The contents of a shopping basket are stored in an online store or login status. Cookies are referred to as "permanent" or "persistent," which remain stored even after the browser is closed. For example, Login status is saved when users visit it after several days. Similarly, such a cookie can store the interests of users used for range measurement or marketing purposes. Cookies are referred to as a "third-party cookie" offered by providers other than the person who runs the online offer (otherwise, if only its cookies are referred to as "first-party cookies"). We may use temporary and permanent cookies and make up for this as part of our privacy policy. If users do not want cookies to be stored on their computer, they are asked to disable the option in their browser's system settings. Saved cookies can be deleted from the browser's system settings. The exclusion of cookies can lead to functional limitations of this online offer. A general objection to the use of cookies used for online marketing purposes can be explained by the US side http://www.aboutads.info/choices/or the EU side http://www.youronlinechoices.com/in a large number of services, especially in the case of tracking. In addition, cookies can be stored by switching them down in the browser's settings. Please note that not all functions of this online offer may be available.
Deletion of data
The data we process will be deleted or restricted in processing in accordance with the legal requirements. Unless expressly stated in the context of this Privacy Statement, the data stored with us will be deleted as soon as it is no longer necessary for its purpose and no legal retention obligations stand in the way of deletion. Unless the data is deleted because it is necessary for other and legally permissible purposes, its processing will be restricted. I.e. The data will be blocked and will not be processed for any other purpose. This applies, for example, to For data that must be retained for commercial or tax reasons.
Changes and updates to the Privacy Statement
We ask you to check the content of our privacy policy on a regular basis. We adjust the privacy policy as soon as the changes to the data processing we do make this necessary. We will inform you as soon as the changes will result in an act of participation on your part (e.g. Consent) or other individual notification.
Participation in affiliate partner programs
Within our online offer, we set based on our legitimate interests (i.e. Interested in the analysis, optimization and economic operation of our online offer). Article. 6 paragraph 1 lit. R GDPR introduces industry-standard tracking measures to the extent that they are necessary for the operation of the affiliate system. Below we inform users about the technical background. The services offered by our contractors can also be advertised and linked on other websites (so-called. Affiliate links or after-buy systems, if, for example, Links or services of third parties after the conclusion of the contract). The operators of the respective websites receive a commission if users follow the affiliate links and then take advantage of the offers. In summary, it is necessary for our online offering that we can track whether users who are interested in affiliate links and/the offers available to us subsequently use the offers at the instigation of affiliate links or our Online platform. For this purpose, the affiliate links and our offers are supplemented with certain values, which are part of the link or otherwise, e.g. In a cookie, can be set. The values include, in particular, the initial website (referrer), time, an online identification of the operators of the website on which the affiliate link was located, an online identification of the respective offer, an online identification of the user, as well as Tracking-specific values such as Advertising ID, Partner ID and categorizations. The online identifiers of the users we use are pseudonymous values. I.e. The online identifiers do not contain any personal data such as names or e-mail addresses. They only help us to determine whether the same user who clicked on an affiliate link or is interested in an offer through our online offer, perceives the offer, i.e. Such as. Has entered into a contract with the provider. However, the online identifier is personal in so far as the partner company and also us, the online identifier is available together with other user data. This is the only way the partner company can tell us whether the user has taken advantage of the offer and whether, for example, we have taken advantage of the offer. Be able to pay out the bonus.
Amazon Partner Program
We are based on our legitimate interests (i.e. Interest in the economic operation of our online offer in the sense of the species. 6 paragraph 1 lit. Q. GDPR) Participants in Amazon EU's partner program, designed to provide a medium for websites to earn advertising expenses by placing ads and links to Amazon.com.au (so-called: Affiliate system). I.e. As an Amazon partner, we earn in qualified purchases. Amazon uses cookies to track the origin of the orders. Among other things, Amazon can recognize that you clicked the partner link on this website and then purchased a product from Amazon. For more information on Amazon's data usage and ability to object, see the company's privacy policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010. Note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or any of its affiliates.
Comments and posts
If users leave comments or other posts, their IP addresses may be based on our legitimate interests within the meaning of the species. 6 paragraph 1 lit. Q. GDPR for 7 days. This is done for our safety if someone leaves illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this case, we can be prosecuted for the comment or contribution ourselves and are therefore interested in the identity of the author. Furthermore, we reserve the right to do so on the basis of our legitimate interests. Article. 6 paragraph 1 lit. Q. GDPR to process users ' information for spam detection. On the same legal basis, we reserve the right, in the case of surveys, to store users ' IP addresses for their duration and to use cookies to avoid multiple votes. The information about the person, any contact and website information as well as the content information provided in the context of the comments and contributions will be stored by us permanently until the user is at odds.
Comment subscriptions
The follow-up comments may be related by users with their consent. Article. 6 paragraph 1 lit. (GDPR). Users will receive a confirmation email to check that they are the owner of the email address they enter. Users can opt out of ongoing comment subscriptions at any time. The confirmation email will include hints about the revocation options. For the purposes of proving user consent, we store the registration date as well as the users ' IP address and delete this information when users opt out of the subscription. You can cancel the receipt of our subscription at any time, i.e. Resist their consents. We may store the emailed addresses issued for up to three years on the basis of our legitimate interests before deleting them in order to prove prior consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.
Retrieval of emojis and smilies
Within our WordPress blog, graphic emojis (or Smilies), i.e. Small graphical files expressing feelings that are sourced from external servers. In doing so, the providers of the servers, collect the IP addresses of the users. This is necessary so that the emoji files can be transmitted to users ' browsers. The emoji service is provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Automattic privacy notices: https://automattic.com/privacy/. The server domains used are s.w.org and twemoji.maxcdn.com, which, as far as we know, are so-called. Content delivery networks, servers that only serve to transmit the files quickly and securely and delete users ' personal data after transmission. The use of the emojis is based on our legitimate interests, i.e. Interested in an attractive design of our online offer gem. Article. 6 paragraph 1 lit. Q. GDPR.
Contact
When contacting us (e.g. Via contact form, e-mail, telephone or via social media), the user's details are used to process the contact request and how to process it. Article. 6 paragraph 1 lit. B. (In the context of contractual/pre-contractual relations), type. 6 paragraph 1 lit. Q. (Other inquiries) GDPR processed .. Users ' information can be stored in a customer relationship management system ("CRM System") or similar request organization. We will delete the requests if they are no longer required. We check the requirement every two years; In addition, the legal archiving obligations apply.
Hosting and e-mail shipping
The hosting services we use are used to provide the following services: Infrastructure and platform services, computing capacity, storage and database services, e-mail delivery, security services and Technical maintenance services that we use for the purpose of operating this online offer. In doing this, we process, or Our hosting provider inventory data, contact data, content data, contract data, usage data, meta-and communication data of customers, interested parties and visitors of this online offer based on our legitimate interests in an efficient and Secure provision of this online offer. Article. 6 paragraph 1 lit. f GDPR i.V.m. Article. 28 GDPR (completion contract of contract).
Collection of access data and log files
We, respectively, Our hosting provider, elevates on the basis of our legitimate interests in the sense of the species. 6 paragraph 1 lit. Q. GDPR data about every access to the server on which this service is located (so-called server log files). Access data includes name of the website retrieved, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type plus version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting providers. Logfile information is available for security reasons (e.g. Stored for a maximum of 7 days to investigate acts of abuse or fraud) for a maximum period of 7 days and then deleted. Data that is required for further retention for evidentiary purposes are exempt from deletion pending a final resolution of the incident.
Google Analytics
We set on the basis of our legitimate interests (i.e. Interest in the analysis, optimization and economic operation of our online offer in the sense of the species. 6 paragraph 1 lit. Q. GDPR) Google Analytics, a web analytics service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about users ' use of the online offer is usually transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this Information on our Behalf to evaluate the Users ' use of our Online offering, to compile reports on the Activities within this Online offering, and to provide further information on the use of this Online offer and the Internet use Related Services to provide us. Pseudonymous user profiles can be created from the processed data. We only use Google Analytics with IP anonymization enabled. This means that the IP address of users is being shortened by Google within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address to a server of Google in the United States is transferred and cut there. The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent cookies from being Stored by adjusting their browser software accordingly; Users can also prevent the Collection of data generated by the Cookie and related to its Use of the Online Offer To Google, as well as Google's processing of that data by Using it by using the browser plugin available under the following Link. Download and install: http://tools.google.com/dlpage/gaoptout?hl=de. For more information on Google's use of data, hiring and objection, see Google's Privacy Statement (https://policies.google.com/technologies/ads) and the settings for the presentation of Advertising by Google (https://adssettings.google.com/authenticated). The personal Data of the Users will be deleted or anonymised after 14 Months.
Google Universal Analytics
We use Google Analytics as "Universal Analytics" in the design. "Universal Analytics" means a method of Google Analytics in which the user analysis is based on a pseudonymous user ID and thus a pseudonymous profile of the user is created with information from the use of different devices (so-called "Cross-device tracking").
Google Adsense with personalized ads
We use on the basis of our legitimate interests (i.e. Interest in the analysis, optimization and economic operation of our online offer in the sense of the species. 6 paragraph 1 lit. Q. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google"). Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). We use the AdSense service, which allows ads to appear on our website and we receive a reward for their display or other use. For these purposes, usage data, such as The click on an ad and the IP address of the users is processed, with the IP address shortened by the last two digits. Therefore, the processing of users ' data is pseudonymised. We use Adsense with personalized ads. Based on the websites visited by users or used apps and the user profiles created in this way, Google draws conclusions about their interests. Advertisers use this information to align their campaigns with these interests, which is beneficial to users and advertisers alike. For Google, ads are personalized when collected or known data determines or influences ad selection. These include previous searches, activities, website visits, the use of apps, demographic and location information. Specifically, this includes: Demographic targeting, targeting of interest categories, remarketing, and targeting on customer matching lists and audience lists uploaded to DoubleClick Bid Manager or Campaign Manager. For more information on Google's use of data, hiring and objection, see Google's Privacy Statement (https://policies.google.com/technologies/ads) and the settings for the presentation of Advertising by Google (https://adssettings.google.com/authenticated).
Integration of third-party services and content
We set within our online offer on the basis of our legitimate interests (i.e. Interest in the analysis, optimization and economic operation of our online offer in the sense of the species. 6 paragraph 1 lit. Q. GDPR) third-party content or service offerings to provide their content and services, such as: Include videos or fonts (referred to below uniformly as "Content"). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they would not be able to send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We make every effort to use only content whose respective providers only use the IP address to deliver the content. Third-party vendors can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" allow information to be analysed on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and, among other things, technical information about the browser and operating system, referring websites, visiting time as well as other information about the use of our online offer As well as associated with such information from other sources.
Youtube
We include the videos of the platform "YouTube" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
Google ReCaptcha
We bind the function for detecting bots, e.g. When entered in online forms ("ReCaptcha") from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
Google maps
We include the maps of the service "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The Data processed may include, in particular, users ' IP addresses and Location Data, which are not collected without their Consent (usually carried out within the settings of their Mobile Devices). The Data can be processed in the UNITED States. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
Openstreetmap
We include the maps of the "OpenStreetMap" service (https://www.openstreetmap.de) offered by the OpenStreetMap Foundation (OSMF) on the basis of the Open Data Commons Open Database License (ODbL). Privacy Policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy. As far as we know, the data of the users are used by OpenStreetMap exclusively for the purpose of displaying the map functions and caching the selected settings. This data may include in particular IP addresses and location data of the users, which are not collected without their consent (usually carried out within the framework of the settings of their mobile devices). The Data can be processed in the UNITED States. For more information, see OpenStreetMap's Privacy Policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.
Using Facebook Social Plugins
We use on the basis of our legitimate interests (i.e. Interest in the analysis, optimization and economic operation of our online offer in the sense of the species. 6 paragraph 1 lit. Q. GDPR) Social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). For this purpose, for example, Content such as images, videos or texts and buttons that allow users to share content from this online offer within Facebook. The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). When a user calls a feature of this online offering that contains such a plugin, their device establishes a direct connection to Facebook's servers. Facebook transmits the content of the plugin directly to the user's device and integrates it into the online offering. User profiles of users can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to our level of knowledge. By integrating the plug-ins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by clicking on the Like button or making a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymised IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the rights and settings to protect the privacy of users in this regard, can be taken from Facebook's privacy policy: https://www.facebook.com/about/privacy/. If a user is a Facebook member and does not want Facebook to collect data about them through this online offer and link it to their member data stored on Facebook, they must log out of Facebook before using our online offer and Delete cookies. Further settings and contradictions regarding the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/or the EU side http://www.youronlinechoices.com/. The settings are made as platform independent, i.e. They are applied to all devices, such as desktop computers or mobile devices.
Within our online offering, Twitter service features and content, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, can be integrated. For this purpose, for example, Content such as images, videos or texts and buttons that allow users to share content from this online offer within Twitter. If users are members of the platform Twitter, Twitter can call the above. Assign content and functions to the profiles of users there. Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy Policy: https://twitter.com/de/privacy, opt-out: https://twitter.com/personalization.
Google +
Within our online offer, functions and contents of the platform Google+, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") can be integrated. For this purpose, for example, Content such as images, videos or texts and buttons that allow users to share content of this online offer within Google. If the users are members of the Google+ platform, Google may call the above-known Assign content and functions to the profiles of users there. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). For more information on Google's use of data, hiring and objection, see Google's Privacy Statement (https://policies.google.com/technologies/ads) and the settings for the presentation of Advertising by Google (https://adssettings.google.com/authenticated). Created with Privacy Generator.de by RA Dr. Thomas Schwenke
