Privacy Policy

As of July 14, 2023

Table of Contents

• Responsible
• Overview of processing
• Relevant legal bases
• International data transfers
• Use of cookies
• Provision of the online offer and web hosting
• Contact and inquiry management

Responsible

Relevant legal bases

Relevant legal bases according to the GDPR: The following is an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. If, in addition, more specific legal bases are relevant in individual cases, we will inform you of these in the data protection declaration;

• Consent (Art. 6 para. 1 p. 1 lit. a) DSGVO) – The data subject has given his consent to the processing of personal data concerning him for a specific purpose or purposes.
• Contractual performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b) DSGVO) – Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures undertaken at the data subject’s request.
• Registered interests (Art. 6 para. 1 p. 1 lit. f) DSGVO) – Processing is necessary for the purposes of protecting the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national regulations on data protection apply in Germany. This includes in particular the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, the processing for other purposes and the transmission as well as automated decision-making in individual cases including profiling. Furthermore, state data protection laws of the individual federal states may apply.

Note on validity DSGVO and Swiss DSG: This data protection notice serves to provide information in accordance with both the Swiss Federal Law on Data Protection (Swiss DSG) and the General Data Protection Regulation (DSGVO). For this reason, please note that due to the broader spatial application and comprehensibility, the terms of the GDPR are used. In particular, instead of the terms “processing” of “personal data” and “overriding interest” used in the Swiss DPA, the terms “processing” of “personal data” and “legitimate interest” used in the GDPR are used. However, the legal meaning of the terms shall continue to be determined in accordance with the Swiss DPA within the scope of application of the Swiss DPA.

Overview of processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of data processed

• Contact details.
• Content data.
• Usage data.
• Meta, communication and procedural data.

Categories of persons concerned

• Communication partners.
• Users.

Purposes of processing

• Contact requests and communication.
• Security measures.
• Managing and responding to inquiries.
• Feedback.
• Provision of our online offer and user-friendliness.
• Information Technology Infrastructure.

International data transfers

Data processing in third countries: If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, entities or companies, this is only done in accordance with the legal requirements.

Subject to express consent or contractually or legally required transfer (see Art. 49 GDPR), we process or allow the data to be processed only in third countries with a recognized level of data protection (Art. 45 GDPR), in the presence of and compliance with contractual obligation through so-called standard protection clauses of the EU Commission (Art. 46 GDPR) or in the presence of certifications or binding internal data protection regulations (s. Art. 44 bis 49 DSGVO, Informationsseite der EU-Kommission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

Trans-Atlantic Data Privacy Framework (TADPF): Within the framework of the so-called “Trans-Atlantic Data Privacy Framework” (TADPF), the EU Commission has also recognized the level of data protection for certain companies from the USA. The list of certified companies as well as more information about the TADPF can be found on the U.S. Department of Commerce website at https://www.dataprivacyframework.gov/ (in English) take. Information in German and in other languages can be found on the EU Commission website: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/eu-us-data-transfers_en We also inform you about the companies we use that are certified under the Trans-Atlantic Data Privacy Framework.

Use of cookies

Cookies are small text files or other storage devices that store information on end devices and read information from the end devices; E.g. to store the login status in a user account, a shopping cart content in an e-shop, the accessed content or used functions of an online offer. Cookies may further be used for various purposes, e.g. for purposes of functionality, security and comfort of online offers as well as the creation of analyses of visitor flows.

Notes on consent: We use cookies in accordance with the law. Therefore, we obtain prior consent from users except where such consent is not required by law. In particular, consent is not required if the storage and reading of the information, i.e. also of cookies, are absolutely necessary in order to provide the user with a telemedia service (i.e. our online offer) expressly requested by the user. Cookies that are strictly necessary usually include cookies with functions related to the display and operability of the online offer , load balancing, security, storage of users’ preferences and choices or similar purposes related to the provision of the main and secondary functions of the online offer requested by users. The revocable consent will be clearly communicated to the users and will include the information about the particular cookie usage.

Notes on legal bases under data protection law: On which legal basis under data protection law we process users’ personal data using cookies depends on whether we ask users for consent. If the users consent, the legal basis of the processing of your data is the declared consent. Otherwise, the data processed with the help of cookies will be processed on the basis of our legitimate interests (e.g. in a business operation of our online offer and improvement of its usability) or, if this is done in the context of the fulfillment of our contractual obligations, if the use of cookies is necessary to fulfill our contractual obligations. For what purposes the cookies are processed by us, we explain in the course of this privacy policy or in the context of our consent and processing processes.

storage time: In terms of storage time, the following types of cookies are distinguished:

• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user leaves an online offer and closes his end device (e.g. browser or mobile application).e.g. browser or mobile application) has closed.
• Permanente Cookies: Permanente Cookies bleiben auch nach dem Schließen des Endgerätes gespeichert. For example, login status can be saved or preferred content can be displayed directly when the user revisits a website. Likewise, user data collected with the help of cookies can be used for coverage measurement. Unless we provide users with explicit information about the type and storage duration of cookies (e.g., as part of obtaining consent), users should assume that cookies are permanent and that the storage period can be up to two years.

General information on revocation and objection (so-called “opt-out”): Users can revoke the consent they have given at any time and object to the processing in accordance with the legal requirements. For this purpose, users can, among other things, restrict the use of cookies in the settings of their browser (whereby this may also restrict the functionality of our online offer). Ein Widerspruch gegen die Verwendung von Cookies zu Online-Marketing-Zwecken kann auch über die Websites https://optout.aboutads.info und https://www.youronlinechoices.com/ erklärt werden.

• Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Consent (Art. 6 para. 1 p. 1 lit. a) DSGVO).

Further guidance on processing operations, procedures and services:

• processing of cookie data on the basis of consent: We use a cookie consent management procedure, under which the consent of users to the use of cookies, or. of the processing and providers mentioned in the cookie consent management procedure can be obtained and managed and revoked by users. In this case, the declaration of consent is stored in order not to have to repeat its query and to be able to prove the consent in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies), in order to be able to assign the consent to a user or his device; Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of consent can be up to two years. Here, a pseudonymous user identifier is formed and stored with the time of consent, information about the scope of consent (e.g. which categories of cookies and/or service providers) as well as the browser, system and end device used; legal basis: Consent (Art. 6 para 1 p. 1 lit. a) DSGVO).

Provision of the online offer and web hosting

We process users’ data in order to provide them with our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or terminal device.

• Types of data processed: Usage data (e.g. web pages visited.e.g. web pages visited, interest in content, access times); meta, communication and procedural data (e.g. IP addresses, timestamps, identification numbers, consent status).
• Betroffene Personen: Nutzer (z.B. Webseitenbesucher, Nutzer von Onlinediensten).
• Purposes of processing: Provision of our online offer and user-friendliness; Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc..).); security measures.
• Rechtsgrundlagen: Berechtigte Interessen (Art. 6 Abs. 1 S. 1 lit. f) DSGVO).

Further guidance on processing operations, procedures and services:

• Collection of access data and log files: Access to our online offer is logged in the form of so-called “server log files”. The server log files may include the address and name of the web pages and files accessed, the date and time of access, data volumes transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider; The server log files may be used, on the one hand, for security purposes, e.g., to prevent server overload (especially in case of abusive attacks, so-called DDoS attacks) and, on the other hand, to ensure server utilization and stability; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Deletion of data: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further retention is required for evidentiary purposes shall be exempt from deletion until final clarification of the respective incident.

Contact and inquiry management

When contacting us (e.g. by mail, contact form, e-mail, telephone or via social media) as well as in the context of existing user and business relationships, the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures.

• Processed data types: Contact data (e.g. e-mail, telephone numbers; content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times).e.g. e-mail, telephone numbers); content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times); meta, communication and procedural data (e.g. IP addresses, time information, identification numbers, consent status).
• Betroffene Personen: Kommunikationspartner.
• Purposes of processing: contact requests and communication; managing and responding to requests; feedback (e.g..e.g. collecting feedback via online form); providing our online offer and user experience.
• Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b) DSGVO).

Further guidance on processing operations, procedures and services:

• Contact Form: If users contact us via our contact form, e-mail or other communication channels, we process the data communicated to us in this context to process the communicated request; Legal basis: Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b) DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).

Created with free Datenschutz-Generator.de by Dr. Thomas Schwenke