Data protection

1. Data protection at a glance

General notes

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. For detailed information about data protection, please refer to our privacy policy listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. Their contact details can be found in the „Information about the responsible party“ section of this privacy policy.

How do we collect your data?

Your data is collected in part by you providing it to us. This can, for example, include data that you enter into a contact form.

Other data is collected automatically or with your consent when visiting the website by our IT systems. This mainly includes technical data (e.g. internet browser, operating system or time of page visit). The collection of this data takes place automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure the flawless provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or ordered through the website, the transmitted data will also be processed for contract offers, orders, or other requests for services.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For this and any other questions regarding data protection, you can contact us at any time.

Analysis tools and tools from third-party providers

When you visit this website, your browsing behavior can be statistically evaluated. This is mainly done using so-called analysis programs.

Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)

We host the content of our website with the following provider:

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter „Strato“). When you visit our website, Strato collects various log files, including your IP addresses.

For more information, please refer to Strato's privacy policy: https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TDDDG. Consent can be revoked at any time.

Cloudflare

We use the „Cloudflare“ service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter „Cloudflare”).

Cloudflare provides a globally distributed content delivery network with DNS. Technically, the information transfer between your browser and our website is routed through the Cloudflare network. This enables Cloudflare to analyze the traffic between your browser and our website and serve as a filter between our servers and potentially malicious traffic from the internet. In doing so, Cloudflare can also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described here.

The use of Cloudflare is based on our legitimate interest in providing our web offerings in the most error-free and secure manner possible (Art. 6(1)(f) GDPR).

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details and further information on security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards when processing data in the United States. Any company certified under the DPF is required to comply with these data protection standards. For more information, please contact the provider via the following link: https://www.dataprivacyframework.gov/participant/5666.

Order processing

We have concluded a contract for the processing of orders (AVV) for the use of the aforementioned service. This is a contract required by data protection law that ensures that this service processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google Cloud CDN

We use the Content Delivery Network Google Cloud CDN. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google offers a globally distributed content delivery network. In this context, the information transfer between your browser and our website is technically routed through the Google network. This allows us to increase the global accessibility and performance of our website.

The use of Google Cloud CDN is based on our legitimate interest in providing our web offerings as fault-free and secure as possible (Art. 6(1)(f) GDPR).

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://cloud.google.com/terms/eu-model-contract-clause.

Further information about Google Cloud CDN can be found here: https://cloud.google.com/cdn/docs/overview?hl=de.

Order processing

Nitropack

We have integrated Nitropack on this website. The provider is NitroPack Ltd. 3 Prof. Georgi Bradistilov, entr. A, 3rd floor, Sofia, Bulgaria (hereinafter „Nitropack“).

Nitropack allows us to optimize the page loading speed, offers the possibility to integrate various platforms, and includes a content delivery network (CDN). To this end, Nitropack processes the IP address.

The legal basis for data processing is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in optimizing page loading speed. If appropriate consent has been requested, processing will take place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

For further details, please refer to the provider's privacy policy at: https://nitropack.io/page/privacy.

Order processing

3. General notes and mandatory information

The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and for what purposes we use it. It also explains how and for what purpose this is done.

We point out that data transmission over the Internet (e.g. when communicating via email) can involve security vulnerabilities. It is not possible to completely protect data from access by third parties.

Information about the responsible entity

The responsible body for data processing on this website is:

Roman Drozd
Bahnhofstr. 25a
85238 Petershausen

Phone: [Phone number of the responsible entity]
Email: booking@dj-roman-white.de

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Storage duration

Unless a specific storage period is specified within this privacy policy, your personal data will remain with us until the purpose for the data processing has ceased. If you make a legitimate request to delete or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will take place upon the termination of these reasons.

General information about the legal bases for data processing on this website

If you have consented to the data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, provided that special categories of data are processed under Art. 9(1) GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your end device (e.g., via device fingerprinting), data processing also takes place on the basis of § 25(1) TDDDG. The consent can be revoked at any time. If your data is required for contract performance or for the execution of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data insofar as it is necessary to fulfill a legal obligation pursuant to Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legal bases in each individual case are explained in the following paragraphs of this privacy policy.

Recipients of personal data

As part of our business activities, we work with various external parties. In some cases, the transfer of personal data to these external parties is also required. We only pass on personal data to external parties if this is necessary as part of fulfilling a contractual obligation, if we are legally obliged to do so (e.g., the disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using contract processors, we only pass on personal data of our customers on the basis of a valid contract for contract processing. In the case of joint processing, a contract for joint processing is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. The legality of data processing carried out up to the revocation remains unaffected by the revocation.

Right of objection to data collection in special cases as well as to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ARTICLE 6(1)(E) OR F OF THE GDPR, YOU HAVE AT ANY TIME THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE EACH AND EVERY LEGAL BASIS ON WHICH A PROCESSING IS BASED SHALL BE NOTIFIED IN THIS DATA PROTECTION NOTICE. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, EXCEPT WHERE WE CAN PROVE OBJECTIONABLE PROHIBITIVE GROUNDS THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR WHERE THE PROCESSING IS NECESSARY FOR THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) OF THE GDPR).

IF YOUR PERSONAL DATA ARE BEING PROCESSED TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, IN WHICH CASE IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED IN CONNECTION WITH SUCH DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21(2) OF THE GDPR).

Right to complain to the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to file a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged violation. This right to file a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done as far as it is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal regulations, you have the right at any time to obtain information free of charge about your stored personal data, their origin and recipients, and the purpose of data processing, and if applicable, the right to correct or delete this data. For this purpose and for any further questions regarding personal data, you can contact us at any time.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. To exercise this right, you can contact us at any time. The right to restrict the processing exists in the following cases:

If you dispute the accuracy of the personal data we store about you, we usually need time to verify this. During this period, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data occurred unlawfully, you may request the restriction of data processing instead of the deletion.
If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request that the processing of your personal data be restricted instead of being deleted.
If you have filed a complaint under Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may only be processed – apart from their storage – with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from „http://“ http://„ to “https://“ https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to advertising emails

The use of contact details published under the imprint obligation for the purpose of sending unsolicited advertising and informational material is hereby denied. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.

4. Data collection on this website

Cookies

Our websites use so-called „cookies“. Cookies are small data packages that do not cause any damage to your device. They are either temporarily stored on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically after the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic deletion is performed by your web browser.

Cookies can be generated by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies can be used to analyze user behavior or for advertising purposes.

Cookies that are necessary for the execution of the electronic communication process, for the provision of certain functions that you wish to use (e.g., for the shopping cart function), or for optimizing the website (e.g., cookies for measuring web traffic) are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent has been requested for the storage of cookies and similar recognition technologies, the processing will take place solely on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); the consent can be revoked at any time.

You can set your browser to be informed about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally, and to automatically delete the cookies when you close the browser. When cookies are deactivated, the functionality of this website may be limited.

You can find information about the cookies and services used on this website in this privacy policy.

Consent with Cookiebot

Our website uses the consent technology of Cookiebot to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in a data protection-compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter „Cookiebot“).

When you visit our website, a connection is established with the servers of Cookiebot to obtain your consent and other declarations regarding cookie usage. Cookiebot then stores a cookie in your browser to be able to assign the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies. Compulsory statutory retention obligations remain unaffected.

The use of Cookiebot is intended to obtain the consents required by law for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

Order processing

CCM19

Our website uses CCM19 to obtain your consent to store certain cookies on your device or to use certain technologies and to document these in a data protection-compliant manner. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter „CCM19“).

When you visit our website, a connection is established with the servers of CCM19 to obtain your consent and other declarations regarding the use of cookies. Subsequently, CCM19 stores a cookie in your browser to be able to assign the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, you delete the CCM19 cookie yourself, or the purpose for data storage no longer applies. Compulsory statutory retention obligations remain unaffected.

The use of CCM19 is intended to obtain the consents required by law for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

Order processing

Real Cookie Banner

Our website uses the Consent technology from Real Cookie Banner to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in a data protection-compliant manner. The provider of this technology is devowl.io GmbH, Tannet 12, 94539 Grafling (hereinafter „Real Cookie Banner“).

Real Cookie Banner is installed locally on our servers, so no connection is made to the servers of the provider of Real Cookie Banner. Real Cookie Banner stores a cookie in your browser to be able to associate the consents granted to you with the revocation thereof. The data collected in this way is stored until you request us to delete it, you delete the Real Cookie Banner cookie yourself, or the purpose for storing the data no longer applies. Compulsory statutory retention obligations remain unaffected.

The use of Real Cookie Banner is intended to obtain the consent required by law for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

Contact form

If you submit inquiries to us via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not disclose this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing the requests submitted to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), provided that it has been requested; the consent is revocable at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been completed). Compulsory legal provisions – in particular retention periods – remain unaffected.

Request by email, phone or fax

If you contact us by email, phone or fax, your request, including all personal data derived from it (name, request), will be stored and processed by us for the purpose of processing your request. We will not disclose this data without your consent.

The data you send to us via contact requests remains with us until you request us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Compulsory statutory provisions – in particular statutory retention periods – remain unaffected.

Communication via WhatsApp

For communication with our customers and other third parties, we use, among other things, the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or any third parties from gaining access to the communication content. However, WhatsApp does receive access to metadata that is generated during the communication process (e.g., sender, recipient, and time). We further point out that, according to WhatsApp, it shares personal data of its users with its US-based parent company Meta. For more details on data processing, please refer to WhatsApp’s privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is based on our legitimate interest in communicating with customers, interested parties, and other business and contractual partners as quickly and effectively as possible (Art. 6(1)(f) GDPR). If appropriate consent has been requested, data processing will only take place based on consent; this consent can be revoked at any time with effect for the future.

The communication content exchanged between you and us on WhatsApp remains with us until you ask us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Compulsory legal provisions – in particular retention periods – remain unaffected.

We use WhatsApp in the „WhatsApp Business“ version.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.

We have set up our WhatsApp accounts so that it does not automatically synchronize data with the address book on the smartphones currently in use.

We have concluded an agreement on order processing (AVV) with the aforementioned provider.

Google Forms

We have integrated Google Forms on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google).

Google Forms allows us to create online forms to structure the messages, requests, and other inputs received from our website visitors. All of the information you provide is processed on Google’s servers. Google Forms stores a cookie in your browser that contains a unique ID (NID cookie). This cookie stores various information, such as your language settings.

The use of Google Forms is based on our legitimate interest in conducting your inquiry as user-friendly as possible (Art. 6(1)(f) GDPR). If appropriate consent has been requested, processing will take place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TDDDG. Consent may be revoked at any time.

The data you enter in the form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been completed). Compulsory legal provisions – in particular retention periods – remain unaffected.

For more information, please refer to Google's privacy policy at https://policies.google.com/.

Order processing

Calendly

On our website you have the opportunity to schedule appointments with us. For scheduling appointments, we use the tool „Calendly“. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter „Calendly“).

To book an appointment, please enter the requested information and the desired date in the provided form. The entered data is used for planning, conducting, and, if necessary, following up on the appointment. The appointment details are stored on our Calendly servers, whose privacy policy you can view here: https://calendly.com/privacy.

The data you have entered remains with us until you request us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies. Compulsory legal provisions – in particular retention periods – remain unaffected.

The legal basis for data processing is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in arranging appointments with interested parties and customers as simply as possible. If appropriate consent has been requested, processing will take place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TDDDG. Consent may be withdrawn at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://calendly.com/pages/dpa.

Order processing

Google Calendar

On our website you have the opportunity to schedule appointments with us. For planning purposes, we use Google Calendar. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter „Google“).

For the purpose of booking an appointment, please enter the requested data and the desired date in the provided form. The entered data will be used for planning, conducting, and, if necessary, following up on the appointment. The appointment details will be stored by us on the Google Calendar servers; you can view their privacy policy here: https://policies.google.com/privacy.

The legal basis for data processing is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in arranging appointments with interested parties and customers as conveniently as possible. If appropriate consent has been requested, the processing will take place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., for device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://workspace.google.com/terms/dpa_terms.html and here https://cloud.google.com/terms/sccs.

Order processing

5. Social media

Social media elements with Shariff

This website uses elements of social media (e.g., Facebook, X, Instagram, Pinterest, XING, LinkedIn, Tumblr).

You can usually recognize the social media elements by the respective social media logos. To ensure data protection on this website, we only use these elements together with the so-called „Shariff“ solution. This application prevents the social media elements integrated on this website from transferring your personal data to the respective provider when you first visit the page.

Only when you activate the respective social media element by clicking the associated button is a direct connection to the provider’s server established (consent). As soon as you activate the social media element, the respective provider receives the information that you visited this website using your IP address. If you are simultaneously logged into your respective social media account (e.g., Facebook), the respective provider can assign the visit to this website to your user account.

Activating the plugin constitutes consent within the meaning of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You can revoke this consent at any time with effect for the future.

The use of the service is carried out in order to obtain the statutory consents for the use of certain technologies. The legal basis for this is Art. 6(1)(c) GDPR.

Facebook

This website includes elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

An overview of the Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When the social media element is active, a direct connection is established between your end device and the Facebook server. Facebook thus receives the information that you have visited this website using your IP address. If you click the Facebook „Like“ button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate the visit to this website with your user account. Please note that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

As far as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article 26 GDPR). In this case, the joint responsibility is limited solely to the collection of the data and its forwarding to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations shared by us have been set out in a joint processing agreement. The text of the agreement can be found here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for implementing the tool in a data protection-compliant manner on our website. Facebook is responsible for the data security of the Facebook products. Affected rights (e.g. requests for information) regarding the data processed by Facebook can be asserted directly with Facebook. If you assert the affected rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

Instagram

This website incorporates functions of the Instagram service. These functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to this website with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the data transmitted as well as of its use by Instagram.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article 26 GDPR). In this case, the joint responsibility is limited solely to the collection of the data and its forwarding to Facebook or Instagram. The processing by Facebook or Instagram following forwarding is not part of the joint responsibility. The obligations imposed on us jointly have been set out in a joint processing agreement. The text of the agreement can be found here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook or Instagram tool and for implementing the tool in a data protection-compliant manner on our website. Facebook is responsible for the data security of the Facebook or Instagram products. Affected rights (e.g. access requests) regarding the data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert the affected rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

Further information can be found in the Instagram privacy policy: https://privacycenter.instagram.com/policy/.

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

With every call-up of a page of this website that contains elements from LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited this website using your IP address. If you click on the „Recommend“ button from LinkedIn and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to this website with you and your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

Further information can be found in the LinkedIn privacy policy under: https://www.linkedin.com/legal/privacy-policy.

6. Analysis tools and advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyze the behavior of website visitors. In this process, the website operator receives various usage data, such as page views, dwell time, operating systems used, and the user’s origin. This data is associated with the user’s respective device. An association with a user ID does not take place.

Furthermore, with Google Analytics, we can record your mouse movements and scrolling and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to supplement the data collected and employs machine learning technologies in its data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the United States and stored there.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization

The Google Analytics IP anonymization is activated. This means that your IP address is shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

More information about how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have entered into a contract with Google for the processing of orders and fully implement the strict requirements of the German data protection authorities regarding the use of Google Analytics.

WP Statistics

This website uses the analytics tool WP Statistics to statistically evaluate visitor traffic. Provider is Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).

With WP Statistics, we can analyze the use of our website. WP Statistics collects, among other things, log files (IP address, referrer, used browser, user origin, used search engine) and actions that the website visitors have performed on the page (e.g., clicks and views).

The data collected by WP Statistics is stored exclusively on our own server.

The use of this analysis tool is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymous analysis of user behavior in order to optimize both our website and our advertising. If appropriate consent has been requested, the processing will take place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

IP anonymization

We use WP Statistics with anonymized IP addresses. Your IP address is shortened in this process so that it can no longer be directly associated with you.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (such as location data and interests) (demographic targeting). As a website operator, we can quantitatively evaluate this data by, for example, analyzing which search terms led to the display of our advertisements and how many ads resulted in corresponding clicks.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

Google Ads Remarketing

This website uses the features of Google Ads Remarketing. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign specific target groups to people who interact with our online offering in order to subsequently display interest-based advertising in the Google advertising network (remarketing or retargeting).

Furthermore, the advertising audiences created with Google Ads Remarketing can be linked to Google’s cross-device features. In this way, interest-based, personalized advertising messages that have been adapted to you based on your previous usage and browsing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC).

If you have a Google account, you can object to personalized advertising at the following link: https://adssettings.google.com/anonymous?hl=de.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

Further information and the data protection regulations can be found in the Google privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Target group development with customer matching

To target our audience, we use, among other things, the customer matching feature of Google Ads Remarketing. In this process, we transfer certain customer data (e.g., email addresses) from our customer lists to Google. If the relevant customers are Google users and logged into their Google account, they will see relevant advertising messages within the Google network (e.g., on YouTube, Gmail, or in the search engine).

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate how often certain buttons on our website are clicked and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who have clicked on our ads and which actions they have performed. We do not receive any information that would allow us to identify the user personally. Google itself uses cookies or similar recognition technologies to identify users.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

More information about Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Meta-Pixel (formerly Facebook Pixel)

This website uses the Visitor Action Pixel from Meta for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the data collected is also transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a meta ad. This enables the effectiveness of the meta ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, so that a connection to the respective user profile on Facebook or Instagram is possible, and Meta uses the data for its own advertising purposes, in accordance with the Meta Data Use Policy (https://de-de.facebook.com/about/privacy/) can use. This allows Meta to enable the display of advertisements on Facebook or Instagram pages and other advertising channels. This use of the data cannot be influenced by us as the site operator.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

We use the extended matching function within the Meta-Pixel.

The expanded matching allows us to transmit various types of data (e.g., place of residence, state, postal code, hashed email addresses, names, gender, date of birth, or phone number) of our customers and interested parties that we collect through our website to Meta. This allows us to further tailor our advertising campaigns on Facebook and Instagram to the individuals interested in our offerings. Additionally, the expanded matching improves the attribution of website conversions and expands custom audiences.

To the extent that personal data is collected on our website using the tool described here and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article 26 GDPR). In this case, the joint responsibility is limited solely to the collection of the data and their transmission to Meta. The processing carried out by Meta after transmission is not part of the joint responsibility. The obligations we jointly have are set out in a joint processing agreement. The text of the agreement can be found here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Meta tool and for implementing the tool in a data protection-compliant manner on our website. Meta is responsible for the data security of the Meta products. Affected rights (e.g. access requests) regarding the data processed by Facebook or Instagram can be asserted directly with Meta. When you assert the affected rights with us, we are obliged to forward them to Meta.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information about protecting your privacy in Meta's privacy policy: https://de-de.facebook.com/about/privacy/.

You can also use the „Custom Audiences” remarketing feature in the “Advertising settings” section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate. To do this, you must be logged in to Facebook.

If you do not have an account on Facebook or Instagram, you can disable usage-based advertising from Meta on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Meta Conversion API

We have integrated the Meta Conversion API on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the data collected is also transferred to the USA and other third countries.

The Meta Conversion API allows us to capture the website visitor's interactions with our website and pass them on to Meta to improve ad performance on Facebook and Instagram.

To this end, the following information is collected: the time of the request, the website accessed, your IP address and your user agent, and, if applicable, other specific data (e.g., purchased products, value of the shopping cart, and currency). A complete overview of the data collected can be found here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information about protecting your privacy in Meta's privacy policy: https://de-de.facebook.com/about/privacy/.

Order processing

Meta Custom Audiences

We use Meta Custom Audiences. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

When you visit or use our websites and apps, access our free or paid offers, submit data to us, or interact with our company’s Facebook or Instagram content, we collect your personal data. If you give us consent to use Meta Custom Audiences, we will transmit this data to Meta, with whom Meta can display relevant advertising to you. Furthermore, target audiences can be defined using your data (Lookalike Audiences).

Meta processes this data as our order processor. Details can be found in Meta's terms of use agreement: https://www.facebook.com/legal/terms/customaudience.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

LinkedIn Insight Tag

This website uses the Insight Tag from LinkedIn. The provider of this service is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by LinkedIn Insight Tag

With the help of the LinkedIn Insight Tag, we obtain information about the visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the professional data (e.g., career stage, company size, country, location, industry, and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, with the help of the LinkedIn Insight Tag, we can measure whether the visitors to our websites make a purchase or other action (conversion measurement). The conversion measurement can also be carried out across devices (e.g., from PC to tablet). LinkedIn Insight Tag also offers a retargeting function, with which we can display targeted advertising to the visitors of our website outside the website, whereby according to LinkedIn no identification of the target audience takes place.

LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of the LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

The data collected by LinkedIn cannot be associated with individuals not specified by us as website operators. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own advertising purposes. For details, please refer to LinkedIn’s privacy policy. https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

Provided that consent has been obtained, the use of the aforementioned service is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 TDDDG. Consent can be revoked at any time. In the absence of consent, the use of this service is based on Art. 6(1)(f) GDPR; the website operator has a legitimate interest in effective advertising measures, including social media.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Objection to the use of the LinkedIn Insight Tag

The analysis of usage behavior and targeted advertising by LinkedIn contradict the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, members of LinkedIn can control the use of their personal data for advertising purposes in their account settings. To avoid a link between the data collected on our website and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Order processing

7. Newsletter and postal advertising

Newsletter data

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. Other data will not be collected or will only be collected on a voluntary basis. We use newsletter service providers described below to process the newsletter.

Mailchimp with disabled performance measurement

This website uses the services of Mailchimp for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Mailchimp is a service that can be used to organize the sending of newsletters, among other things. If you enter data for the purpose of subscribing to the newsletter (e.g., email address), this data will be stored on Mailchimp’s servers in the USA. We have disabled performance measurement on Mailchimp so that Mailchimp will not evaluate its behavior when opening our newsletters.

If you do not want your data to be transferred to Mailchimp, you must unsubscribe from the newsletter. We provide a corresponding link in each newsletter message for this purpose.

Data processing is carried out based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter, either with us or with the newsletter service provider. After unsubscribing from the newsletter, the data will be deleted from the newsletter distribution list. Data that has been stored with us for other purposes remains unaffected by this.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you are removed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist, if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and not combined with other data. This serves both your and our interests in complying with legal requirements regarding the sending of newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.

For more information, please refer to the Mailchimp privacy policy at: https://mailchimp.com/legal/terms/.

Order processing

ActiveCampaign

This website uses ActiveCampaign to send newsletters. The provider is ActiveCampaign, Inc., 1 N Dearborn, 5th Floor Chicago, Illinois 60602, USA.

ActiveCampaign is a service that can be used to organize and analyze, among other things, the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on ActiveCampaign’s servers in the USA.

Data analysis by ActiveCampaign

With the help of ActiveCampaign, we are able to analyze our newsletter campaigns. This allows us, for example, to see whether a newsletter message was opened and which links were clicked if applicable. In this way, we can, among other things, determine which links were clicked the most frequently.

In addition, we can see whether certain predefined actions were performed after opening / clicking (conversion rate). For example, we can see whether you made a purchase after clicking on the newsletter.

ActiveCampaign also allows us to segment (or “cluster”) the newsletter recipients based on various categories. For example, we can segment the newsletter recipients based on age, gender, or place of residence. This way, the newsletters can be better adapted to the respective target groups. If you do not want to use ActiveCampaign for analysis, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.

For detailed information about the features of ActiveCampaign, please see the following link: https://www.activecampaign.com/email-marketing.

The privacy policy of ActiveCampaign can be found here: https://www.activecampaign.com/privacy-policy.

Legal basis

Data processing is carried out based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.activecampaign.com/legal/newscc and https://www.activecampaign.com/de/legal/gdpr-updates/privacy-shield.

Storage duration

Order processing

Click-tap

This website uses Click-Tip to send newsletters. The provider is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom.

Klick-Tipp is a service that can be used to organize and analyze, among other things, the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are stored on Klick-Tipp’s servers.

Data analysis by click-and-tap

When we send newsletters using click-to-tap technology, we can determine whether a newsletter message has been opened and which links have been clicked, if applicable.

The click-tap feature also allows us to segment newsletter recipients based on various categories (so-called tagging). For example, newsletter recipients can be divided according to gender, personal preferences (e.g., vegetarians or non-vegetarians), or customer relationships (e.g., customer or potential customer). In this way, newsletters can be better tailored to the respective target groups. For more information, please see: https://www.klicktipp.com and https://support.klicktipp.com/.

If you do not want to receive an analysis by clicking on the link, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose.

Legal basis

The United Kingdom is considered a third country that is more secure in terms of data protection law. This means that the United Kingdom has a level of data protection that corresponds to the level of data protection in the European Union.

Storage duration

For more information, please refer to the Klick-Tipp privacy policy at: https://www.klicktipp.com/datenschutzerklarung/.

Order processing

Newsletter delivery to existing customers

If you order goods or services from us and provide your email address when doing so, this email address may subsequently be used by us for the sending of newsletters, provided that we have previously informed you of this. In such a case, only direct advertising for similar goods or services will be sent via the newsletter. You can unsubscribe from this newsletter at any time. A corresponding link can be found in each newsletter for this purpose. In this case, the legal basis for sending the newsletter is Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG.

After you are removed from the newsletter distribution list, your email address may be stored by us in a blacklist to prevent future mailings to you. The data from the blacklist is only used for this purpose and not combined with other data. This serves both your and our interests in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.

Post advertising

We use your address in accordance with all legal regulations for the dispatch of postal advertising (postal advertising).

The legal basis for this is our legitimate interest in direct advertising pursuant to Art. 6(1)(f) in conjunction with Recital 47 of the GDPR. If appropriate consent has been requested, processing will take place exclusively on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time. More specific regulations may be provided to you as part of the data collection process and take precedence over this policy.

Your address remains with us until the purpose for data processing no longer applies. If you make a legitimate request to delete your data or withdraw your consent to postal advertising, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will take place upon the lapse of these reasons.

We use the following service provider for the shipping of our postal mailings:

Deutsche Post AG
Charles-de-Gaulle-Str. 20
53113 Bonn

Order processing

8. Plugins and Tools

YouTube with expanded privacy protection

This website embeds videos from the website YouTube. The operator of the website is Google Ireland Limited („Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites that include YouTube, a connection is established with YouTube’s servers. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in expanded privacy mode. Videos that are played in expanded privacy mode are not used by YouTube to personalize browsing on YouTube. Ads that are played in expanded privacy mode are also not personalized. In expanded privacy mode, no cookies are set. Instead, so-called local storage elements are stored in the user’s browser that, similar to cookies, contain personal data and can be used for recognition purposes. Details about expanded privacy mode can be found here: https://support.google.com/youtube/answer/171780.

If necessary, after activating a YouTube video, further data processing processes may be triggered, over which we have no influence.

The use of YouTube is carried out in the interest of presenting our online offerings in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If appropriate consent has been requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TDDDG. The consent can be revoked at any time.

Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Fonts

This page uses so-called Google Fonts to uniformly display fonts. These fonts are provided by Google. When you visit a page, your browser loads the required fonts into its browser cache to display text and fonts correctly.

For this purpose, the browser you use must establish a connection to Google’s servers. This enables Google to know that this website was accessed using your IP address. The use of Google Fonts is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform presentation of the font on its website. If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

If your browser does not support Google Fonts, a standard font from your computer is used.

Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in the privacy policy of Google: https://policies.google.com/privacy?hl=de.

Google Maps

This page uses the Google Maps mapping service. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of this service, we can embed map material on our website.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this page has no influence on this data transmission. When Google Maps is activated, Google can use Google Fonts for uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into its browser cache to display text and fonts correctly.

The use of Google Maps is carried out in the interest of an appealing presentation of our online offerings and of easy finding of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information about how user data is handled, please see Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use „Google reCAPTCHA“ (hereinafter „reCAPTCHA“) on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to verify whether the data entry on this website (e.g. in a contact form) is performed by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. To analyze the data, reCAPTCHA evaluates various information (e.g. IP address, duration of the website visit by the visitor, or mouse movements made by the user). The data collected during the analysis is sent to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The storage and analysis of the data is carried out in accordance with Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam. If appropriate consent has been requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

hCaptcha

We use hCaptcha (hereinafter „hCaptcha“) on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter „IMI“).

hCaptcha is used to verify whether the data entry on this website (e.g. in a contact form) is performed by a human or by an automated program. To do this, hCaptcha analyzes the behavior of the website visitor based on various characteristics.

This analysis begins automatically as soon as a website visitor enters a website with hCaptcha enabled. To perform the analysis, hCaptcha evaluates various information (e.g., IP address, length of time the website visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to IMI. If hCaptcha is used in „invisible mode,“ the analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data processing is based on standard contractual clauses that are included in the data processing addendum to the IMI General Terms and Conditions or the data processing agreements.

For more information about hCaptcha, please refer to the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.

SoundCloud

This website may integrate plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom). You can recognize the SoundCloud plugins by the SoundCloud logo on the affected pages.

When you visit this website, a direct connection between your browser and the SoundCloud server is established after activating the plugin. SoundCloud thereby receives the information that you have visited this website using your IP address. If you click on the „Like“ or „Share“ button while logged into your SoundCloud account, you can link and/or share the content of this website with your SoundCloud profile. This allows SoundCloud to associate the visit to this website with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by SoundCloud.

The storage and analysis of the data is carried out on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the widest possible visibility in social media. If appropriate consent has been requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Further information can be found in the SoundCloud privacy policy at: https://soundcloud.com/pages/privacy.

If you do not wish SoundCloud to associate visits to this website with your SoundCloud user account, please log out of your SoundCloud user account before activating the SoundCloud plugin.

Spotify

This website includes functions from the music service Spotify. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm in Sweden. You can recognize the Spotify plugins by the green logo on this website. An overview of the Spotify plugins can be found here: https://developer.spotify.com.

This allows a direct connection between your browser and the Spotify server when visiting this website via the plugin. Spotify receives the information that you have visited this website using your IP address. By clicking the Spotify button while logged into your Spotify account, you can link the content of this website to your Spotify profile. This allows Spotify to associate the visit to this website with your user account.

We point out that when using Spotify, cookies from Google Analytics are used, which means that your usage data can also be passed on to Google when you use Spotify. Google Analytics is a tool from the Google group that analyses user behavior and is based in the USA. Spotify is solely responsible for this integration. We, as the website operator, have no influence over this processing.

The storage and analysis of the data is carried out in accordance with Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the appealing acoustic design of its website. If appropriate consent has been requested, the processing will take place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Further information can be found in the Spotify privacy policy: https://www.spotify.com/de/legal/privacy-policy/.

If you do not want Spotify to be able to associate the visit to this website with your Spotify user account, please log out of your Spotify user account.

Zapier

We have integrated Zapier on this website. The provider is Zapier Inc., Market St. #62411, San Francisco, CA 94104-5401, USA (hereinafter Zapier).

Zapier allows us to link and synchronize various functionalities, databases, and tools with our website. In this way, it is possible, for example, to automatically play back content that we publish on our website on our social media channels or to export content from marketing and analytics tools. Depending on the functionality, Zapier can also collect various personal data in this process.

The use of Zapier is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most effective integration of the tools used. If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://zapier.com/tos.

Order processing

9. E-commerce and payment providers

Processing of customer and contract data

We collect, process, and use personal customer and contractual data to establish, structure, and modify our contractual relationships. We only collect, process, and use personal data regarding the use of this website (usage data) to the extent necessary to enable the user to use the service or to bill them. The legal basis for this is Art. 6(1)(b) GDPR.

The customer data collected will be deleted after the completion of the order or termination of the business relationship and the expiry of any applicable legal retention periods. Legal retention periods remain unaffected.

Data transmission upon contract conclusion for services and digital content

We only transmit personal data to third parties when this is necessary as part of the contract process, for example to the credit institution entrusted with payment processing.

Any further transmission of the data will not take place unless you have explicitly consented to it. Your data will not be disclosed to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

10. Audio and video conferences

Data processing

For communication with our customers, we use online conferencing tools among others. The tools we use in detail are listed below. When you communicate with us via video or audio conferencing over the Internet, your personal data will be collected and processed by us and the provider of the respective conferencing tool.

The conference tools capture all the data that you provide/use to access the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, the start and end (time) of participation in the conference, the number of participants, and other „contextual information“ related to the communication process (metadata).

Furthermore, the provider of the tool processes all technical data that is necessary for the processing of online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.

If content is exchanged, uploaded, or otherwise made available within the tool, it will also be stored on the servers of the tool provider. Such content includes, in particular, cloud recordings, chat/instant messages, Voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.

Please note that we have no full control over the data processing procedures of the tools used. Our capabilities are largely determined by the company policy of the respective provider. For more information about data processing by the conference tools, please refer to the privacy statements of the tools used, which we have listed under this text.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves the general purpose of simplifying and accelerating communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). If consent has been requested, the use of the relevant tools is based on this consent; the consent can be revoked at any time with effect for the future.

Storage duration

The data directly collected by us through the video and conference tools is deleted by our systems as soon as you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Compulsory statutory retention periods remain unaffected.

We have no influence over the storage duration of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Used conference tools

We use the following conference tools:

Zoom

We use Zoom. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, please refer to Zoom’s privacy policy: https://explore.zoom.us/de/privacy/.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://explore.zoom.us/de/privacy/.

Order processing

Skype for Business

We use Skype for Business. The provider is Skype Communications SARL, the parent company of Microsoft Corporation, 23-29 Rives de Clausen, L-2165 Luxembourg. For details on data processing, please refer to the Skype privacy policy: https://privacy.microsoft.com/de-de/privacystatement/.

Order processing

Google Meet

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on data processing, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Order processing

11. Own services

Handling applicant data

We offer you the opportunity to apply to us (e.g. by email, post or via the online application form). In the following, we inform you about the scope, purpose and use of the personal data collected as part of the application process. We assure you that the collection, processing and use of your data is carried out in accordance with applicable data protection law and all other legal regulations, and that your data will be treated strictly confidentially.

Scope and purpose of data collection

When you submit an application to us, we process the personal data associated with it (e.g., contact and communication data, application documents, notes during job interviews, etc.), insofar as this is necessary for deciding whether to conclude an employment contract. The legal basis for this is § 26 BDSG under German law (initiating an employment relationship), Art. 6(1)(b) GDPR (general contract initiation), and – if you have given your consent – Art. 6(1)(a) GDPR. Your consent is revocable at any time. Your personal data will only be shared within our company with individuals involved in processing your application.

If the application is successful, the data submitted by you will be stored in our data processing systems based on § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship.

Duration of data retention

If we are unable to offer you a job, refuse to accept an offer of employment, or withdraw your application, we reserve the right to store the data you have provided with us for up to 6 months from the end of the application process (rejection or withdrawal of the application), based on our legitimate interests (Article 6(1)(f) GDPR). After that, the data will be deleted and the physical application documents destroyed. The storage serves, in particular, for evidentiary purposes in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or ongoing legal dispute), a deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your consent (Article 6(1)(a) GDPR) or if statutory retention obligations preclude deletion.

Admission to the applicant pool

If we do not offer you a job, there is the possibility of including you in our applicant pool. In the event of acceptance, all documents and information from the application will be added to the applicant pool in order to contact you in the event of suitable vacancies.

Admission to the applicant pool takes place solely on the basis of your express consent (Art. 6(1)(a) GDPR). The consent is voluntary and is not related to the ongoing application process. The person concerned can revoke their consent at any time. In this case, the data from the applicant pool will be deleted irrevocably, unless there are any legal reasons for retaining it.

The data from the applicant pool will be deleted irrevocably no later than two years after consent is granted.

OneDrive

We have integrated OneDrive on this website. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter „OneDrive“).

OneDrive allows us to embed a upload area on our website where you can upload content. When you upload content, it is stored on the OneDrive servers. When you visit our website, a connection to OneDrive is also established so that OneDrive can determine that you have visited our website.

The use of OneDrive is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a reliable upload area on its website. If appropriate consent has been requested, the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

Order processing

Google Drive

We have integrated Google Drive on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Drive allows us to embed a upload area on our website where you can upload content. When you upload content, it is stored on Google Drive's servers. When you visit our website, a connection is also established with Google Drive so that Google Drive can determine that you have visited our website.

The use of Google Drive is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a reliable upload area on its website. If appropriate consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.