With the following data protection declaration, we would like to inform you about which types of your personal data (hereinafter also referred to as “data”) we process for which purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as “online offer”).
The terms used are not gender-specific.
As of: November 25, 2021
Content Overview
Introduction
More responsible
Overview of processing operations
Relevant legal bases
Security arrangements
Transfer of personal data
Data processing in third countries
Deletion of data
Use of cookies
Provision of the online offer and web hosting
Contact and inquiry management
Web analysis, monitoring and optimization
Online Marketing
Presence in social networks (social media)
Modification and updating of the Privacy Policy
Rights of data subjects
Definitions of terms
More responsible
Overview of processing operations
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
Types of data processed
Inventory data (e.g. names, addresses).
Content data (e.g. entries in online forms).
Contact details (e.g. e-mail, telephone numbers).
Meta/communication data (e.g. device information, IP addresses).
Usage data (e.g. websites visited, interest in content, access times).
Categories of data subjects
Communication partner.
Users (e.g. website visitors, users of online services).
Purposes of processing
Provision of our online offer and user-friendliness.
Direct marketing (e.g. by e-mail or post).
Feedback (e.g. collecting feedback via online form).
Marketing.
Contact requests and communication.
Profiles with user-related information (creating user profiles).
Range measurement (e.g. access statistics, recognition of returning visitors).
Relevant legal bases
Below you will find an overview of the legal basis of the GDPR, on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Should more specific legal bases also be relevant in individual cases, we will inform you of these in the data protection declaration.
Consent (Art. 6 Para. 1 P. 1 lit. a. GDPR) — The data subject has given his consent to the processing of personal data concerning him for a specific purpose or several specific purposes.
Fulfilment of the contract and pre-contractual enquiries (Art. 6 para. 1 P. 1 lit. b. DSGVO) — The processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures that are carried out at the request of the data subject.
Legitimate interests (Art. 6 para. 1 P. 1 lit. f. GDPR) — The processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail.
Security arrangements
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, ensuring availability and their separation. Furthermore, we have established procedures that guarantee the exercise of data subject rights, the deletion of data and reactions to the endangerment of the data. Furthermore, we already take the protection of personal data into account during the development or processing of personal data. Selection of hardware, software and procedures in accordance with the principle of data protection, through technology design and data protection-friendly presets.
Transfer of personal data
As part of our processing of personal data, it happens that the data is transmitted to other bodies, companies, legally independent organizational units or persons, or they are disclosed to you. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such a case, we comply with the legal requirements and, in particular, conclude appropriate contracts or contracts. Agreements that serve the protection of your data with the recipients of your data.
Data processing in third countries
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transmission of data to other persons, bodies or companies, this will only be done in accordance with the legal requirements.
Subject to express consent or contractually or legally required transmission, we process or have the data processed only in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 DSGVO, information page of the EU Commission: ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as their consents allowed for processing are revoked or other permissions cease to apply (e.g. if the purpose of the processing of this data has ceased or they are not necessary for the purpose).
If the data are not deleted because they are necessary for other and legally permissible purposes, their processing will be limited to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons or whose storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.
Our data protection information may also contain further information on the storage and deletion of data, which apply primarily to the respective processing.
Use of cookies
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after his visit to an online offer. The stored information may include, for example, the language settings on a website, the login status, a shopping cart or the place where a video was viewed. The term cookies also includes other technologies that perform the same functions as cookies (for example, when user information is stored using pseudonymous online identifiers, also referred to as “user IDs”)
The following cookie types and functions are distinguished:
Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
Permanent cookies: Permanent cookies remain stored even after closing the browser. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users who are used to measure reach or for marketing purposes may be stored in such a cookie.
First-party cookies: First-party cookies are set by us.
Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (also: essential or absolutely necessary) cookies: On the one hand, cookies may be absolutely necessary for the operation of a website (e.g. to save logins or other user entries or for security reasons).
