With this data protection declaration, we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data is any data that has a personal reference to you, e.g. name, address, email address or user behaviour.
Processing your data
We process your personal data that has been transferred to us within the framework of the contractual and pre-contractual relationships existing between us. The scope, type, purpose and necessity of this processing depends on the respective relationship underlying this agreement. For this purpose, we store and process your data in the computer systems we use. The data processed by us includes all the data that have been provided by you for the purpose of using the contractual or pre-contractual services and which are required for processing your enquiry or the contract concluded between us.
This may include, in particular, the following data:
The processing is limited to those data that are necessary and appropriate to answer enquiries and/or to fulfil a contract concluded between you and us. The processing also includes special categories of personal data according to Art. 9 (1) GDPR. The processing is carried out within the framework of preventive health care in accordance with Art. 9 para. 2 lit. h) GDPR, Section 22 para. 1 no. 1 b) Bundesdatenschutzgesetz (BDSG) [Federal Data Protection Act]. Furthermore, where necessary, your consent, in accordance with Art. 9 (2) a), will be obtained before processing. Personal data is only passed on to third parties if this is necessary for the purpose of providing the service or within the scope of the organisation of our business for the processing of financial accounting and compliance with legal obligations. In this case, only such data is transferred to external service providers that is necessary and expedient for the fulfilment of the contract or for the processing of financial accounting as well as compliance with legal obligations. Legal basis: The processing of your personal data as well as its transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) GDPR and serves to fulfil the contract between you and us. In addition, we only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) GDPR, if you have consented to the transfer, Art. 6 para. 1 lit. a), the transfer is necessary to protect your vital interests or those of another natural person, Art. 6 para. 1 lit. d) or if we have a legitimate interest in this, Art. 6 para. 1 lit. f) GDPR. This is the case, for example, should it be necessary to pursue our claims. Erasure: Your data will be deleted as soon as the data is no longer required for the fulfilment of contractual or statutory obligations of care and for dealing with any warranty and comparable obligations. This shall not affect the statutory retention obligations.
Web hosting
In order to maintain our online presence, we use an Internet service provider on whose server the website is stored (hosting) and who makes our site available on the Internet. In doing so, the internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Name and address of the Internet service provider: Google Firebase Europe You can view its privacy policy here: https://support.google.com/firebase/topic/ Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) GDPR.
If you only use our website for information purposes, our internet service provider only collects the personal data that the browser you are using transmits to its server. These are the following dates:
The aforementioned data is stored as log files on the servers of our Internet service provider. This is necessary in order to be able to display the website on the terminal device you are using and to ensure stability and security. Our legitimate interest in data processing lies in the above purposes. Legal basis: The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) GDPR. Duration: The above data for the provision of our website is stored for a period of 186 days and then deleted.
Cloudflare
We use the performance and security service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107 on our website.
Cloudflare is used to optimise the loading times of our website and to secure it. For this purpose, we use Cloudflare as a content delivery network (CDN). A CDN is a network of regionally distributed servers connected via the internet. Scaling storage and delivery capacities are made available via the CDN. This ensures optimal data throughput even with large load peaks. Through Cloudflare, user requests on our website are initially routed via Cloudflare servers in the USA. Statistics are compiled from these data streams. This serves to detect potential threats to our website from malware at an early stage and to optimise the loading times of our website. For this purpose, we have concluded an order processing agreement with Cloudflare, according to which Cloudflare is entitled and obliged to evaluate the information obtained and to create statistical reports for us on the type and extent of website use. These statistics enable us to continuously improve our services, to carry out a cost-benefit analysis of our internet marketing and to make our internet presence more interesting and user-friendly for you as a user. Legal basis: We use Cloudflare based on our legitimate interest in the efficient and secure provision of our website, Art. 6 para. 1 lit. f) GDPR. Erasure: The acquired data is automatically deleted by Cloudflare after 4 hours.
Information on the third-party provider:
Details of the contact options we provide
If you contact us via email, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, your telephone number or your email address, or provide further information about yourself or your request, this data will be stored in our company in order to process your request. Legal basis: If you have made your enquiry via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. If you make your enquiry in the context of contractual or pre-contractual relations with us, the legal basis for processing your data is Art. 6 (1) lit. b. GDPR. If your request does not fall under one of the aforementioned categories, our legitimate interest in processing your data is to answer your request properly and in your interest, Art. 6 (1) lit. f GDPR. Erasure: The personal data we collect will be deleted if it is no longer required. We review the necessity every 2 years. You can also revoke data processing at any time.
Registration
You have the option to register on our website and create a user account to access specific content on our website. For this purpose, it is necessary to provide personal data, which can be found in the input mask. The data requested there includes in particular your name, password and email address. This data is stored and processed by us to enable you to access your user account. The data can be changed or deleted by you at any time. The data will not be passed on to third parties unless it is used to process the contract. In order to protect you and us from abusive registrations, we store the IP address used during registration, as well as the date and time of registration. This data will not be passed on to third parties. Legal basis: We process your data on the basis of Art. 6 para. 1 lit. b GDPR for the purpose of providing your user account. Erasure: The personal data, as well as the IP address, date and time are stored until the purpose no longer applies. The deletion of the data collected in the course of registration takes place as soon as the associated account on our website is deleted or changed: You can delete your account at any time or request deletion by the controller mentioned above.
Your rights under the GDPR
According to the GDPR, you are entitled to the rights listed below, which you can assert at any time with the controller named in section 1 of this privacy policy:
Right of withdrawal
In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not change the lawfulness of the processing of your personal data that took place until the revocation.
Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of a balance of interests (Art. 6(1)(f) GDPR). This is particularly the case if the data processing is not necessary for the performance of a contract. If you exercise your right to object, please explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons worthy of protection for the data processing outweigh your interests and rights.
Irrespective of the above, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.
Please address your objection to the contact address of the controller given above.
Google Web Fonts
We use "Google Web Fonts", a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website
The service enables us to integrate the display of external fonts (web fonts) into the design of our website and to display them correctly when displaying the website. This gives us certain design options with which we want to make the design of our website more user-friendly. The integration of these web fonts takes place through a server call. From this server, the fonts are delivered compressed to your browser and unpacked there. As a rule, this server is located in the USA. If you visit one of our pages on which we integrate Google Fonts, Google will be informed which of our Internet pages you have visited. In addition, the IP address of the browser of the visitor's terminal device is stored by Google. Purpose: The aforementioned interests constitute the purpose of the use of Google Web Fonts. Legal basis: We use Google Web Fonts based on our legitimate interest in the optimisation and design of our online offer, Art. 6 para. 1 lit. f GDPR.
Information on the third-party provider:
Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Vimeo
We use components of Vimeo on this website, a service of Vimeo LLC, 555 West 18th Street, New York 10011, USA.
What is Vimeo?
Vimeo is a video platform that was founded in 2004 and has made it possible to stream videos in HD quality since 2007. Since 2015, it has also been possible to stream in 4k Ultra HD. The use of the portal is free of charge, but paid content can also be published. Compared to the market leader YouTube, Vimeo prioritises high-quality content. Thus, on the one hand, the portal offers a lot of artistic content such as music videos and short films, but on the other hand, it also offers documentaries on a wide variety of topics that are well worth knowing. Why do we use Vimeo on our website?
The aim of our website is to provide you with the best possible content. And to do so in as easily accessible a way as possible. Only when we have achieved this are we satisfied with our service. The video service Vimeo supports us in achieving this goal. Vimeo offers us the opportunity to present you with high-quality content directly on our website. Instead of just giving you a link to an interesting video, this way you can watch the video right here with us. This expands our service and makes it easier for you to access interesting content. Thus, in addition to our texts and images, we also offer video content. What data is stored on Vimeo?
When you visit a website on our website that has a Vimeo video embedded, your browser connects to Vimeo's servers. This results in a data transmission. This data is collected, stored and processed on the Vimeo servers. No matter whether you have a Vimeo account or not, Vimeo collects information about you. This includes your IP address, technical information about your browser type, operating system or very basic device information. Furthermore, Vimeo stores information about the website you use to gain access to the Vimeo service and what actions (web activities) you perform on our website. These web activities include, for example, session duration, bounce rate or which button you clicked on our website with a built-in Vimeo function. These actions may be tracked and stored by Vimeo using cookies and similar technologies.
If you are logged in to Vimeo as a registered member, more data can usually be collected, as more cookies may already have been set in your browser. In addition, your actions on our website are directly linked to your Vimeo account. To prevent this, you must log out of Vimeo while "surfing" on our website.
Below we show you cookies that are set by Vimeo when you are on a website with an integrated Vimeo function. This list is not exhaustive and assumes that you do not have a Vimeo account.
Name: playerValue: ""Purpose: This cookie saves your settings before you play an embedded Vimeo video. This will give you your preferred settings again the next time you watch a Vimeo video.Expiry date: after one yearName: vuidValue: pl1046149876.614422590311167682-4Purpose: This cookie collects information about your actions on websites that have an embedded Vimeo video.Expiry date: after 2 years
Remarks: These two cookies are always set as soon as you are on a website with an embedded Vimeo video. If you watch the video and click on the button, for example to "share" or "like" the video, further cookies are set. These are also third-party cookies such as _ga or _gat_UA-76641-8 from Google Analytics or _fbp from Facebook. Exactly which cookies are set here depends on your interaction with the video.
The following list shows a sample of possible cookies that are set when you interact with the Vimeo video:
Name: _abexpsValue: %5B%5DPurpose: This Vimeo cookie helps Vimeo to remember the settings you have made. This could be, for example, a preset language, a region or a user name. In general, the cookie stores data about how you use Vimeo.Expiry date: after one yearName: continuous_play_v3Value:1Purpose: This cookie is a first-party cookie from Vimeo. The cookie collects information about how you use the Vimeo service. For example, the cookie stores when you pause or replay a video.Expiry date: after one yearName: _gaValue: GA1.2.1522249635.1578401280311167682-7Purpose: This cookie is a third-party cookie from Google. By default, analytics.js uses the cookie _ga to store the user ID. Basically, it is used to distinguish website visitors.Expiry date: after 2 yearsName: _gcl_auValue: 1.1.770887836.1578401279311167682-3Purpose: This third-party cookie from Google AdSense is used to improve the effectiveness of advertisements on websites.Expiry date: after 3 monthsName: _fbpValue: fb.1.1578401280585.310434968Purpose: This is a Facebook cookie. This cookie is used to display advertisements or advertising products from Facebook or other advertisers.Expiry date: after 3 months
Vimeo uses this data, among other things, to improve its own service, to communicate with you and to set its own targeted advertising measures. Vimeo emphasises on its website that only first-party cookies (i.e. cookies from Vimeo itself) are used for embedded videos as long as you do not interact with the video.
Information on the third-party provider:
Our online presence on social networks
We operate online presences within the social networks listed below. If you visit one of these websites, your usage data will be collected and processed by the respective provider. This is usually done by means of cookies that are stored on the terminal device you are using. For the term cookie, see above under the relevant heading. The cookies are used to store your usage behaviour and interests and to create corresponding usage profiles. In the usage profiles, data can also be stored regardless of the device you are using. This is particularly the case if you are a member of the respective platform and logged in to it.
We have embedded plugins on our website in the form of “social media buttons" of the providers we use. You can tell which plugin belongs to which provider by the respective logo marks it. If you go to one of our online pages on which such a plug-in is implemented, a connection is automatically established with the respective provider of the plug-in between your browser and the provider's servers and a cookie is set by the provider on the end device used by you. Data transmission can also take place if you do not have an account with the respective operator of the social network or have an account there but are not logged in at the time of visiting our website. In addition, data is transmitted to the provider as a result of further interactions with the respective social plugin (e.g. clicking the "Like me" button on Facebook, re-tweet button on Twitter).
The collected data is generally used by the provider for the purposes of advertising and market research by creating user profiles from your usage behaviour. These in turn can be used by the providers to play interest-based advertising to you. You have a right of revocation against the creation of user profiles. To exercise this, you must contact the respective provider. If you have an account with the provider, your usage data may be linked to it. To prevent such a linking of your data, you can log out of the provider's service before visiting our site.
You can find out from the respective data protection declarations of the providers provided below for what purpose and to what extent data is collected by that provider We have no influence on what data is collected and how this data is used by the provider. If you wish to request detailed information or exercise your rights as a data subject, the most effective way to do so is to contact the respective provider yourself, as only the respective provider has access to your data.
We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that it may be more difficult to enforce your data subject rights. Those US providers that are certified under the Privacy Shield have committed to comply with EU data protection standards. Information on whether the respective provider has such a certificate can be found in the information on the providers provided below.
Legal basis: Should you have been asked for consent to data processing by one of the providers mentioned below, the legal basis for that processing is Art. 6 (1) lit. a GDPR. Furthermore, the processing of your data is based on our legitimate interests to contact and communicate with you, Art. 6 para. 1 lit. f. GDPR. Prevention: For the respective opt-out options, please refer to the information provided by the providers linked below.
We maintain online presences on the following social networks:
Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 - USA.
Registered Office in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 - Ireland
Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tool Manager only implements tags. This means: No cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags, insofar as these have been implemented with the Google Tag Manager.
Google Analytics
We use "Google Analytics", a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.
We use Google Analytics to record and statistically evaluate the flow of visitors to our website. Among other things, Google Analytics collects data about the website from which you accessed our website (so-called referrers), which sub-pages of the website you accessed or how often and for how long a sub-page was viewed and which interactions you carried out. In order to collect and store this data, Google Analytics sets a cookie on the terminal device you are using (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymise your IP address so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to or linked with the anonymised IP address by Google. The information generated in this way is transferred to Google servers in the USA and stored there. Google may share this personal data collected through the technical process with third parties. We have concluded an order processing agreement with Google. Accordingly, Google is entitled and obliged to evaluate the information obtained for us and to compile statistical reports for us on the type and extent of website use. These statistics enable us to constantly improve our offer, to carry out a cost-benefit analysis of our internet marketing and to make our internet presence more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics based on our legitimate interest in the analysis, optimisation and economic operation of our online offer, Art. 6 para. 1 lit. f GDPR. Erasure: The data we collect and transmit in this way is automatically deleted after 26 months. Prevention: You can prevent cookies from being stored by downloading and installing the browser add-on provided by Google. This is available at: https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all the functions of our website to their full extent. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which will prevent your data from being collected on our website in the future. Please click the following <link>. You also have the option of preventing the storage of cookies by setting this in your browser. You can delete cookies that have already been set at any time.
Information on the third-party provider:
Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Security measures
We also take technical and organisational security measures in accordance with the state of the art in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties.
Keeping this privacy policy up to date and amending it
This privacy policy is currently valid and is the April 2020 version. Due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.
This privacy policy was created with the help of SOS Recht. You can find the data protection declaration generator here. SOS Recht is a service provided by Mueller.legal Rechtsanwälte Partnerschaft with their registered office in Berlin.
Disclaimer: German law applies exclusively. The German version of these general terms and conditions is binding. The English version is for information purposes only.