Privacy policy

Introduction and overview

We have written this privacy statement (version 05.05.2023-322494722) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the controller - and the processors (e.g. providers) commissioned by us - process, will process in the future and what lawful options you have. The terms used are to be understood as gender-neutral.
In short, we inform you comprehensively about data that we process about you.

Privacy statements usually sound very technical and use legal terminology. This privacy statement, on the other hand, is intended to describe the most important things to you as simply and transparently as possible. To the extent that it is conducive to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. In this way, we inform you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible by providing the most concise, unclear and legalistic explanations possible, as is often standard practice on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is one or the other piece of information that you did not yet know.
If questions nevertheless remain, we would like to ask you to contact the responsible office named below or in the imprint, to follow the available links and to look at further information on third-party sites. Our contact details can of course also be found in the imprint.

Scope

This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (order processors). By personal data, we mean information within the meaning of Art. 4 No. 1 DSGVO, such as a person's name, e-mail address and postal address. The processing of personal data ensures that we can offer and invoice our services and products, whether online or offline. The scope of this privacy policy includes:

• all online presences (websites, online stores) that we operate
• Social media appearances and e-mail communication
• mobile apps for smartphones and other devices

In short, the privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the aforementioned channels. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal basis

In the following privacy statement, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this General Data Protection Regulation of the EU online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6(1) lit. a DSGVO): You have given us your consent to process data for a specific purpose. An example would be the storage of your entered data of a contact form.
2. contract (Article 6(1)(b) DSGVO): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.
3. Legal obligation (Article 6(1)(c) DSGVO): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate interests (Article 6(1)(f) DSGVO): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website in a secure and economically efficient manner. This processing is therefore a legitimate interest.

Further conditions such as the performance of recordings in the public interest and the exercise of official authority as well as the protection of vital interests do not generally occur with us. If such a legal basis should be relevant, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

• In Austria, this is the Federal Act on the Protection of Individuals with regard to the Processing of Personal Data(Data Protection Act), or DSG for short.
• In Germany, the Federal Data Protection Act, or BDSG for short, applies.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the responsible person

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or office below:

Storage duration

The fact that we only store personal data for as long as is absolutely necessary for the provision of our services and products applies as a general criterion at our company. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are required by law to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

Should you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store it.

We will inform you about the specific duration of the respective data processing below, provided that we have further information on this.

Rights under the General Data Protection Regulation

In accordance with Articles 13, 14 of the GDPR, we inform you about the following rights you have to ensure that data processing is fair and transparent:

• According to Article 15 of the GDPR, you have the right to know whether we are processing data about you. If this is the case, you have the right to receive a copy of the data and the following information:
• the purpose for which we carry out the processing;
• the categories, i.e. the types of data that are processed;
• who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
• how long the data will be stored;
• the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
• that you can complain to a supervisory authority (links to these authorities can be found below);
• the origin of the data if we have not collected it from you;
• whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.
• You have a right to rectify data according to Article 16 of the GDPR, which means that we must correct data if you find errors.
• According to Article 17 of the GDPR, you have the right to erasure ("right to be forgotten"), which specifically means that you may request the deletion of your data.
• According to Article 18 of the GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it any further.
• According to Article 20 DSGVO, you have the right to data portability, which means that we will provide you with your data in a common format upon request.
• According to Article 21 of the GDPR, you have a right to object, which, once enforced, entails a change in processing.
• If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then check as soon as possible whether we can legally comply with this objection.
• If data is used to conduct direct marketing, you may object to this type of data processing at any time. We may not use your data for direct marketing thereafter.
• If data is used to perform profiling, you can object to this type of data processing at any time. We may not use your data for profiling thereafter.
• According to Article 22 of the GDPR, you may have the right not to be subject to a decision based solely on automated processing (for example, profiling).
• According to Article 77 of the GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the data processing of personal data violates the GDPR.

In short, you have rights - do not hesitate to contact the responsible party listed above with us!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Hesse Data Protection Authority

State Commissioner for Data Protection: Prof. Dr. Alexander Roßnagel
Address : P.O. Box 31 63, 65021 Wiesbaden
Telephone: 06 11/140 80
E-mail address: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de/

Data transmission to third countries

We only transfer or process data to countries outside the EU (third countries) if you consent to this processing, if this is required by law or contractually necessary and in any case only to the extent that this is generally permitted. Your consent is in most cases the most important reason that we have data processed in third countries. Processing personal data in third countries such as the U.S., where many software vendors provide services and have their server locations, may mean that personal data is processed and stored in unexpected ways.

We expressly point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. Data processing by US services (such as Google Analytics) may result in data not being processed and stored anonymously. Furthermore, US government authorities may be able to access individual data. In addition, it may happen that collected data is linked with data from other services of the same provider, if you have a corresponding user account. Where possible, we try to use server locations within the EU, if this is offered.

We will inform you in more detail about data transfer to third countries, if applicable, at the appropriate places in this privacy policy.

Data processing security

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. In this way, we make it as difficult as possible for third parties to infer personal information from our data.

Article 25 of the GDPR speaks here of "data protection through technical design and through data protection-friendly default settings" and thus means that both software (e.g., forms) and hardware (e.g., access to the server room) should always be designed with security in mind and that appropriate measures should be taken. If necessary, we will go into more detail on specific measures below.

TLS encryption with https

TLS, encryption and https sound very technical and they are. We use HTTPS (the Hypertext Transfer Protocol Secure stands for "secure hypertext transfer protocol") to transfer data over the Internet in a tap-proof way.
This means that the complete transfer of all data from your browser to our web server is secured - no one can "listen in".

In this way, we have introduced an additional security layer and comply with data protection by design of technology(Article 25(1) DSGVO). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
You can recognize the use of this data transmission protection by the small lock symbol at the top left of the browser, to the left of the Internet address (e. g. e.g. beispielseite.de) and the use of the https scheme (instead of http) as part of our Internet address.
If you would like to know more about encryption, we recommend a Google search for "Hypertext Transfer Protocol Secure wiki" to find good links to further information.

Communication

Communication summary

‍👥Parties concerned: All those who communicate with us by telephone, e-mail or online form.

Data processed: e.g. phone number, name, e-mail address, form data entered. You can find more details on this in the respective contact type used

🤝 Purpose: Handling communication with customers, business partners, etc.

📅 Storage period: duration of the business case and legal requirements

⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. b DSGVO (Contract), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests).

When you contact us and communicate by phone, e-mail or online form, personal data may be processed.

The data will be processed for the handling and processing of your question and the related business transaction. The data is stored for as long as it is required by law.

Persons concerned

All those who seek contact with us via the communication channels provided by us are affected by the aforementioned processes.

Phone

When you call us, the call data is stored pseudonymously on the respective terminal device and with the telecommunications provider used. In addition, data such as name and telephone number may subsequently be sent by e-mail and stored for the purpose of responding to inquiries. The data is deleted as soon as the business case has been terminated and legal requirements permit.

E-mail

If you communicate with us by e-mail, data may be stored on the respective end device (computer, laptop, smartphone,...) and data is stored on the e-mail server. The data is deleted as soon as the business case has been terminated and legal requirements allow it.

Online forms

If you communicate with us using an online form, data is stored on our web server and, if necessary, forwarded to an e-mail address of ours. The data is deleted as soon as the business case has been terminated and legal requirements permit.

Legal basis

The processing of the data is based on the following legal bases:

• Art. 6 para. 1 lit. a DSGVO (consent): You give us your consent to store your data and to use it for purposes related to the business case;
• Art. 6 para. 1 lit. b DSGVO (contract): There is a need for the performance of a contract with you or a processor such as the telephone provider or we need to process the data for pre-contractual activities, such as the preparation of an offer;
• Art. 6 para. 1 lit. f DSGVO (Legitimate Interests): We want to operate customer inquiries and business communication in a professional framework. For this purpose, certain technical facilities such as e-mail programs, exchange servers and mobile network operators are necessary in order to be able to operate the communication efficiently.

Order processing agreement (AVV)

In this section, we would like to explain to you what a processing order is and why it is needed. Because the word "order processing contract" is quite a mouthful, we will also use only the acronym AVV more often here in the text. Like most companies, we do not work alone, but also use the services of other companies or individuals ourselves. Through the involvement of various companies or service providers, it may be that we pass on personal data for processing. These partners then act as processors with whom we conclude a contract, the so-called order processing agreement (AVV). The most important thing for you to know is that the processing of your personal data takes place exclusively according to our instructions and must be regulated by the GCU.

Who are processors?

As a company and website owner, we are responsible for all data that we process from you. In addition to the responsible parties, there may also be so-called processors. This includes any company or person who processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, authority, institution or other body that processes personal data on our behalf is considered a processor. Consequently, processors can be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft, for example.

For a better understanding of the terminology, here is an overview of the three roles in the GDPR:

Data subject (you as customer or interested party) → Responsible party (we as company and client) → Processor(service provider such as web hoster or cloud provider)

Content of a contract for the processing of orders

As already mentioned above, we have concluded an AVV with our partners who act as processors. This states first and foremost that the processor will process the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing, although in this context the electronic conclusion of the contract is also considered "in writing". Only on the basis of the contract will the processing of personal data take place. The contract must contain the following:

• Binding to us as the responsible party
• Duties and rights of the responsible person
• Categories of persons concerned
• Type of personal data
• Nature and purpose of data processing
• Subject and duration of data processing
• Place of implementation of data processing

Furthermore, the contract contains all the obligations of the processor. The most important obligations are:

• Ensure data security measures
• take possible technical and organizational measures to protect the rights of the data subject
• keep a data processing register
• cooperate with the data protection supervisory authority at its request
• Conduct a risk analysis in relation to the personal data received
• Sub-processors may only be engaged with the written consent of the responsible person

You can see what such an AVV looks like in concrete terms at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html, for example. A sample contract is presented here.

Cookies

Cookies summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: depends on the respective cookie. You can find more details about this below or from the manufacturer of the software that sets the cookie.

Data processed: Depending on the cookie used in each case. More details can be found below or from the manufacturer of the software that sets the cookie.

📅 Storage period: depending on the respective cookie, can range from hours to years variieren⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit.f DSGVO (Legitimate Interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.
Below, we explain what cookies are and why they are used so that you can better understand the following privacy policy.

Whenever you browse the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to cookies, our site knows who you are and offers you the setting you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser, such as Chrome, and the web server. Here, the web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies also cannot access information on your PC.

For example, cookie data can look like this:

Name: _ga
Value: GA1.2.1326744211.152322494722-9
Purpose: to distinguish website visitors
Expiration date: after 2 years

A browser should be able to support these minimum sizes:

• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total

What are the types of cookies?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

We can distinguish 4 types of cookies:

Essential cookies
These cookies are necessary to ensure basic website functionality. For example, these cookies are needed when a user adds a product to the shopping cart, then continues browsing on other pages and only later goes to the checkout. These cookies do not delete the shopping cart even if the user closes his browser window.

Purposeful cookies
These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behavior of the website with different browsers.

Target-oriented cookies
These cookies provide a better user experience. For example, entered locations, font sizes or form data are stored.

Advertising cookies
These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very convenient, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these cookie types you want to allow. And, of course, this decision is also stored in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Internet Engineering Task Force (IETF) Request for Comments called "HTTP State Management Mechanism".

Purpose of processing via cookies

The purpose ultimately depends on the cookie in question. You can find more details below or from the manufacturer of the software that sets the cookie.

What data is processed?

Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize what data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy.

Cookies storage duration

The storage period depends on the particular cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.

You can also influence the storage period yourself. You can manually delete all cookies at any time via your browser (see also "Right of objection" below). Furthermore, cookies that are based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage remains unaffected until then.

Right to object - how can I delete cookies?

How and whether you want to use cookies, you decide. Regardless of which service or website the cookies come from, you always have the option to delete, disable or only partially allow cookies. For example, you can block third-party cookies, but allow all other cookies.

If you want to determine which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete and manage cookies

If you do not want to have cookies in principle, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google using the search term "delete cookies Chrome" or "disable cookies Chrome" in the case of a Chrome browser.

Legal basis

The so-called "Cookie Guidelines" have been in place since 2009. These state that the storage of cookies requires your consent (Article 6 (1) a DSGVO). Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in Section 96 (3) of the Telecommunications Act (TKG). In Germany, the Cookie Directives were not implemented as national law. Instead, this directive was largely implemented in Section 15 (3) of the German Telemedia Act (TMG).

For absolutely necessary cookies, even in the absence of consent, there are legitimate interests (Article 6(1)(f) DSGVO), which in most cases are economic in nature. We want to provide visitors to the website with a pleasant user experience and for this purpose certain cookies are often absolutely necessary.

If cookies are used that are not absolutely necessary, this only happens in the case of your consent. The legal basis in this respect is Art. 6 para. 1 lit. a DSGVO.

In the following sections, you will be informed in more detail about the use of cookies, if used software uses cookies.

Application data

Application data summary

‍👥Affected parties: Users who apply for a job with us.

🤝 Purpose: Handling of an application procedure

📓 Processed data: Name, address, contact details, e-mail address, telephone number, qualification certificates (diplomas), possibly special category data.

📅 Storage period: in the event of a successful application, until the end of the employment relationship. Otherwise, the data will be deleted after the application process or stored for a certain period with your consent.⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), legitimate interest (Art. 6 para. 1 lit. f DSGVO), Art. 6 para. 1 lit. b DSGVO (contract), Art. 9 para. 2 lit. a. DSGVO (processing of special categories)

What is application data?

You can apply to us by e-mail, online form or via a recruiting tool for a job in our company. All data that we receive and process from you as part of an application counts as application data. In doing so, you always disclose personal data such as name, date of birth, address and telephone number.

Why do we process application data?

We process your data so that we can operate a proper selection process in relation to the advertised position. In addition, we also like to keep your application documents in our application archive. Because it often happens that for the advertised positions a cooperation does not work out for various reasons, but we are impressed by you and your application and can imagine a future cooperation very well. Provided you give us your consent, we will archive your documents so that we can easily contact you for future tasks in our company.

We guarantee that we will handle your data with particular care and only ever process your data within the legal framework. Even within our company, your data will only be forwarded to persons who are directly involved with your application. In short: Your data is in safe hands with us!

What data is processed?

If you apply to us by e-mail, for example, we naturally also receive personal data, as mentioned above. Even the e-mail address already counts as personal data. However, in the course of an application process, we only process data that is relevant for our decision as to whether or not we want to welcome you to our team.

Exactly what data is processed depends primarily on the job posting. In most cases, however, it is a matter of name, date of birth, contact details and proof of qualifications. If you submit the application via an online form, the data is passed on to us in encrypted form. If you send us the application by e-mail, this encryption does not take place. Therefore, we cannot assume any responsibility for the way the data is transmitted. However, once the data is on our servers, we are responsible for the lawful handling of your data.

During an application process, in addition to the data mentioned above, information about your health or ethnic origin may also be requested so that we and you can exercise the rights related to labor law, social security and social protection and, at the same time, comply with the corresponding obligations. These data are special category data.

Here is a list of possible data we receive from you and process:

• Name
• Contact address
• E-mail address
• Phone number
• Date of birth
• Information that comes from the cover letter and resume
• Proof of qualification (e.g.) Certificates
• Special category data (e.g., ethnic origin, health data, religious beliefs).
• Usage data (websites visited, access data ect.)
• Metadata (IP address, device information)

How long will the data be stored?

If we accept you as a team member in our company, your data will be further processed for the purpose of the employment relationship and kept with us at least until the employment relationship ends. All application documents will then be placed in your employee file.

If we do not offer you the job, if you decline our offer or withdraw your application, we may retain your data for up to 6 months after the conclusion of the application process due to legitimate interest (Art. 6 (1) lit. f DSGVO). After that, both your electronic data and all data from physical application documents will be completely deleted or destroyed. We retain your data, for example, so that we can still answer any follow-up questions or so that we can provide evidence of the application in the event of a legal dispute. If a legal dispute arises and we may still need the data after the 6 months have expired, we will only delete the data when there is no longer any reason to retain it. If there are legal retention obligations to fulfill, we must generally store the data for longer than 6 months.

Furthermore, we can also keep your data longer if you have given special consent for this. We do this, for example, if we can well imagine a cooperation with you in the future. Then it is helpful to have your data archived so that we can contact you without any problems. In this case, the data will be added to our applicant pool. Of course, you can revoke your consent to the longer storage of your data at any time. If there is no revocation and you do not give a new consent, your data will be deleted after 2 years at the latest.

Legal basis

Legal bases for the processing of your data are Art. 6 para 1 lit. a DSGVO (consent), Art. 6 para 1 lit. b DSGVO (contract or pre-contractual measures), Art. 6 para 1 lit. f DSGVO (legitimate interests) and Art. 9 para 2 lit. a. DSGVO (processing of special categories).

If we include you in our application tool, this happens on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). We would like to point out that your consent to our application pool is voluntary, has no influence on the application process and you have the option to revoke your consent at any time. The lawfulness of the processing until the time of the revocation remains unaffected.

In the case of the protection of vital interests, the data processing is carried out in accordance with Art. 9 para. 2 lit. c. DSGVO. For the purposes of health care, occupational medicine, medical diagnosis, health or social care or treatment, or for the management of health or social care systems and services, the processing of personal data is carried out in accordance with Art. 9 (2) lit. h. DSGVO. If you voluntarily provide special category data, the processing is based on Art. 9 (2) lit. a. DSGVO.

Customer data

Customer data summary

‍👥Parties concerned: Customers or business and contractual partners

🤝 Purpose: Provision of the contractually or pre-contractually agreed services, including associated communication.

📓 Processed data: Name, address, contact data, e-mail address, telephone number, payment information (such as invoices and bank data), contract data (such as term and subject of the contract), IP address, order data.

📅 Storage period: the data is deleted as soon as it is no longer required for the provision of our business purposes and there is no legal obligation to retain it.⚖️ Legal basis: Legitimate interest (Art. 6 para. 1 lit. f DSGVO), contract (Art. 6 para. 1 lit. b DSGVO)

What is customer data?

In order to be able to offer our service or contractual services, we also process data of our customers and business partners. This data always includes personal data. Customer data is all information that is processed on the basis of a contractual or pre-contractual cooperation in order to be able to provide the services offered. Customer data is therefore all collected information that we collect and process about our customers.

Why do we process customer data?

There are many reasons why we collect and process customer data. The most important is that we simply need various data to provide our services. Sometimes your e-mail address is enough, but if you purchase a product or service, for example, we also need data such as name, address, bank data or contract data. We also use the data subsequently for marketing and sales optimization, so that we can improve our overall service to our customers. Another important point is our customer service, which is always very important to us. We want you to be able to come to us at any time with questions about our offers, and for this we need at least your e-mail address.

What data is processed?

Exactly which data is stored can only be described here on the basis of categories. This always depends on which services you receive from us. In some cases, you only provide us with your e-mail address so that we can contact you or answer your questions, for example. In other cases, you purchase a product or service from us and for this we need significantly more information, such as your contact data, payment data and contract data.

Here is a list of possible data we receive from you and process:

• Name
• Contact address
• E-mail address
• Phone number
• Date of birth
• Payment data (invoices, bank data, payment history, etc.)
• Contract data ( term, content)
• Usage data (websites visited, access data ect.)
• Metadata (IP address, device information)

How long will the data be stored?

As soon as we no longer need the customer data to fulfill our contractual obligations and our purposes, and the data is also no longer necessary for possible warranty and liability obligations, we delete the corresponding customer data. This is the case, for example, when a business contract ends. After that, the statute of limitations is usually 3 years, although longer periods are possible in individual cases. Of course, we also comply with the statutory retention obligations. Your customer data will certainly not be passed on to third parties unless you have given explicit consent to do so.

Legal basis

Legal bases for the processing of your data are Art. 6 para 1 lit. a DSGVO (consent), Art. 6 para 1 lit. b DSGVO (contract or pre-contractual measures), Art. 6 para 1 lit. f DSGVO (legitimate interests) and in special cases (e.g. medical services) Art. 9 para 2 lit. a. DSGVO (processing of special categories).

In the case of the protection of vital interests, the data processing is carried out in accordance with Art. 9 para. 2 lit. c. DSGVO. For the purposes of health care, occupational medicine, medical diagnosis, health or social care or treatment, or for the management of health or social care systems and services, the processing of personal data is carried out in accordance with Art. 9 (2) lit. h. DSGVO. If you voluntarily provide special category data, the processing is based on Art. 9 (2) lit. a. DSGVO.

Web Analytics Introduction

Web Analytics Privacy Policy Summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: Evaluation of visitor information to optimize the web offer.

📓 Processed data: Access statistics, which include data such as locations of accesses, device data, access duration and time, navigation behavior, click behavior, and IP addresses. You can find more details on this in the respective web analytics tool used.

📅 Storage period: depending on the web analytics used-Tool⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests)

What is Web Analytics?

We use software on our website to evaluate the behavior of website visitors, known as web analytics for short. This involves collecting data that is stored, managed and processed by the respective analytic tool provider (also known as a tracking tool). The data is used to create analyses of user behavior on our website and made available to us as the website operator. In addition, most tools offer various testing options. For example, we can test which offers or content are best received by our visitors. To do this, we show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such test procedures, as for other analytics procedures, user profiles can also be created and the data stored in cookies.

Why do we run web analytics?

With our website we have a clear goal in mind: we want to deliver the best web offer on the market for our industry. To achieve this goal, we want to offer the best and most interesting offer on the one hand, and on the other hand make sure that you feel completely comfortable on our website. With the help of web analysis tools, we can take a closer look at the behavior of our website visitors and then improve our web offer for you and us accordingly. For example, we can see how old our visitors are on average, where they come from, when our website is most visited or which content or products are particularly popular. All this information helps us to optimize the website and thus best adapt it to your needs, interests and wishes.

What data is processed?

Exactly what data is stored depends, of course, on the analysis tools used. But as a rule, for example, which content you view on our website, which buttons or links you click on, when you access a page, which browser you use, which device (PC, tablet, smartphone, etc.) you use to visit the website or which computer system you use are stored. If you agreed that location data may also be collected, these may also be processed by the web analytics tool provider.

In addition, your IP address is also stored. According to the General Data Protection Regulation (DSGVO), IP addresses are personal data. However, your IP address is usually stored pseudonymously (i.e. in an unrecognizable and shortened form). For the purpose of testing, web analysis and web optimization, no direct data, such as your name, age, address or e-mail address are stored as a matter of principle. All this data, if collected, is stored pseudonymously. This means that you cannot be identified as a person.

The following example shows schematically how Google Analytics works as an example of client-based web tracking with Java Script code.

How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, other cookies can store data for several years.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If it is required by law, as for example in the case of accounting, this storage period may also be exceeded.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser.

Legal basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by web analytics tools.

In addition to consent, there is a legitimate interest on our part to analyze the behavior of website visitors and thus to improve our offer technically and economically. With the help of web analytics, we detect errors of the website, can identify attacks and improve the economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we use the tools only insofar as they have given consent.

Since web analytics tools use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy statements of the respective tools.

Information on specific web analytics tools, if any, is provided in the following sections.

Google Analytics Privacy Policy

Google Analytics Privacy Policy Summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: Evaluation of visitor information to optimize the web offer.

📓 Processed data: Access statistics, which include data such as locations of accesses, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found below in this Privacy Policy.

📅 Storage period: depending on the Properties⚖️ used Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests)

What is Google Analytics?

We use on our website the analysis tracking tool Google Analytics (GA) of the American company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. For example, when you click on a link, this action is stored in a cookie and sent to Google Analytics. Using the reports we receive from Google Analytics, we can better tailor our website and service to your preferences. In the following, we will go into more detail about the tracking tool and, in particular, inform you about what data is stored and how you can prevent this.

Google Analytics is a tracking tool used for traffic analysis of our website. For Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions you take on our website. Once you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we receive reports about your user behavior. These reports may include, but are not limited to, the following:

• Target group reports: Through target group reports, we get to know our users better and know more precisely who is interested in our service.
• Ad reports: Ad reports make it easier for us to analyze and improve our online advertising.
• Acquisition reports: Acquisition reports give us helpful information on how to get more people interested in our service.
• Behavior reports: This is where we learn how you interact with our website. We can track which path you take on our site and which links you click.
• Conversion reports: Conversion is the name given to a process in which you perform a desired action as a result of a marketing message. For example, when you go from being just a website visitor to a buyer or newsletter subscriber. These reports help us learn more about how our marketing efforts are working for you. This is how we aim to increase our conversion rate.
• Real-time reports: Here we always know immediately what is happening on our website. For example, we can see how many users are reading this text.

Why do we use Google Analytics on our website?

Our goal with this website is clear: we want to provide you with the best possible service. The statistics and data from Google Analytics help us achieve this goal.

The statistically evaluated data shows us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is found more easily by interested people on Google. On the other hand, the data helps us to better understand you as a visitor. We thus know exactly what we need to improve on our website in order to provide you with the best possible service. The data also helps us to carry out our advertising and marketing measures in a more individual and cost-effective way. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics uses a tracking code to create a random, unique ID associated with your browser cookie. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a "returning" user. All collected data is stored together with this user ID. This is how it is possible to evaluate pseudonymous user profiles in the first place.

To be able to analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is default. Alternatively, you can also create the Universal Analytics property. Depending on the property used, data is stored for different lengths of time.

Identifiers such as cookies and app instance IDs measure your interactions on our website. Interactions are all types of actions you perform on our website. If you also use other Google systems (such as a Google account), data generated through Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, authorize it. Exceptions may occur if required by law.

The following cookies are used by Google Analytics:

Name: _ga
Value: 2.1326744211.152322494722-5
Purpose: By default, analytics.js uses the _ga cookie to store the user ID. Basically, it is used to distinguish website visitors.
Expiration date: after 2 years.

Name: _gid
Value: 2.1687193234.152322494722-1
Purpose: The cookie is also used to distinguish website visitors
Expiration date: after 24 hours

Name: _gat_gtag_UA_<property-id>
Wert: 1
Verwendungszweck: Wird zum Senken der Anforderungsrate verwendet. Wenn Google Analytics über den Google Tag Manager bereitgestellt wird, erhält dieser Cookie den Namen _dc_gtm_ <property-id>.
Ablaufdatum: nach 1 Minute

Name: AMP_TOKEN
Value: not specified
Purpose: The cookie has a token that can be used to retrieve a user ID from the AMP client ID service. Other possible values indicate a logout, a request, or an error.
Expiration date: after 30 seconds up to one year.

Name: __utma
Value: 1564498958.1564498958.1564498958.1
Purpose: This cookie is used to track your behavior on the website and measure performance. The cookie is updated every time information is sent to Google Analytics.
Expiration date: after 2 years.

Name: __utmt
Wert: 1
Verwendungszweck: Das Cookie wird wie _gat_gtag_UA_<property-id> zum Drosseln der Anforderungsrate verwendet.
Ablaufdatum: nach 10 Minuten

Name: __utmb
Value: 3.10.1564498958
Purpose: This cookie is used to determine new sessions. It is updated every time new data or info is sent to Google Analytics.
Expiration date: after 30 minutes.

Name: __utmc
Value: 167421564
Purpose: This cookie is used to set new sessions for returning visitors. This is a session cookie and is only stored until you close the browser again.
Expiration date: After closing the browser.

Name: __utmz
Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/
Purpose: The cookie is used to identify the source of traffic to our website. That is, the cookie stores from where you came to our website. This may have been another page or an advertising placement.
Expiration date: after 6 months.

Name: __utmv
Value: not specified
Purpose: The cookie is used to store custom user data. It is always updated when information is sent to Google Analytics.
Expiration date: after 2 years.

Note: This list cannot claim to be complete, as Google also changes the choice of its cookies again and again.

Here we show you an overview of the most important data collected with Google Analytics:

Heatmaps: Google creates so-called heatmaps. Heatmaps allow you to see exactly those areas that you click on. This gives us information about where you are "on the road" on our site.

Session duration: Google defines session duration as the time you spend on our site without leaving. If you have been inactive for 20 minutes, the session ends automatically.

Bounce rate: A bounce rate is when you view only one page on our website and then leave our website again.

Account creation: When you create an account or place an order on our website, Google Analytics collects this data.

IP address: The IP address is only shown in abbreviated form so that no clear assignment is possible.

Location: The IP address can be used to determine the country and your approximate location. This process is also called IP location determination.

Technical information: Technical information may include your browser type, Internet service provider, or screen resolution.

Source of origin: Google Analytics or, of course, we are also interested in which website or which advertisement you came to our site from.

Other data include contact details, any ratings, playing media (e.g. when you play a video via our site), sharing content via social media or adding to your favorites. The enumeration does not claim to be complete and only serves as a general orientation of the data storage by Google Analytics.

How long and where is the data stored?

Google has their servers spread all over the world. Most servers are located in America and consequently your data is mostly stored on American servers. Here you can read exactly where the Google data centers are located: https://www.google.com/about/datacenters/locations/?hl=de

Your data is distributed on different physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation. In every Google data center, there are corresponding emergency programs for your data. If, for example, the hardware at Google fails or natural disasters paralyze servers, the risk of a service interruption at Google still remains low.

The data retention period depends on the properties used. When using the newer Google Analytics 4 properties, the retention period of your user data is set to 14 months. For other so-called event data, we have the option to choose a retention period of 2 months or 14 months.

For Universal Analytics properties, Google Analytics has a default retention period of 26 months for your user data. Then your user data is deleted. However, we have the option to choose the retention period of user data ourselves. We have five variants available for this purpose:

• Deletion after 14 months
• Deletion after 26 months
• Deletion after 38 months
• Deletion after 50 months
• No automatic deletion

In addition, there is also the option that data will only be deleted if you no longer visit our website within the time period we have selected. In this case, the retention period is reset each time you visit our website again within the specified period.

Once the specified period has expired, the data is deleted once a month. This retention period applies to your data associated with cookies, user recognition and advertising IDs (e.g. DoubleClick domain cookies). Reporting results are based on aggregate data and are stored separately from user data. Aggregated data is a merging of individual data into a larger unit.

How can I delete my data or prevent data storage?

Under European Union data protection law, you have the right to obtain information about your data, update it, delete it, or restrict it. Using the browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js), you can prevent Google Analytics from using your data. You can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de. Please note that this add-on only disables data collection by Google Analytics.

If you basically want to disable, delete or manage cookies, you can find the corresponding links to the respective instructions of the most popular browsers under the section "Cookies".

Legal basis

The use of Google Analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by web analytics tools.

In addition to the consent, there is a legitimate interest on our part to analyze the behavior of website visitors and thus to improve our offer technically and economically. With the help of Google Analytics, we detect website errors, can identify attacks and improve the economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google Analytics if you have given your consent.

Google also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.

Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which reference the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we have been able to provide you with the most important information about Google Analytics data processing. If you want to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.

Content Delivery Networks Introduction

Content Delivery Networks Privacy Policy Summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: Optimization of our service performance (to load the website faster).

📓 Processed data: Data such as your IP addressMore details can be found below and in the individual privacy texts.

📅 Storage period: most of the time, the data is stored until it is no longer required for the fulfillment of the service

⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests).

What is a Content Delivery Network?

We use a so-called Content Delivery Network on our website. Most often, such a network is just called CDN. A CDN helps us to load our website quickly and smoothly, regardless of your location. In the process, your personal data is also stored, managed and processed on the servers of the CDN provider used. In the following, we will go into more detail about the service and its data processing. You can find detailed information about the handling of your data in the respective privacy policy of the provider.

Each Content Delivery Network (CDN) is a network of regionally distributed servers that are all connected via the Internet. Via this network, website content (especially very large files) can be delivered quickly and smoothly even during large load peaks. The CDN creates a copy of our website on your servers for this purpose. Since these servers are distributed worldwide, the website can be delivered quickly. The data transfer to your browser is consequently significantly shortened by the CDN.

Why do we use a content delivery network for our website?

A fast loading website is part of our service. Of course, we know how annoying it is when a website loads at a snail's pace. Most of the time, people even lose patience and look for the distance before the website is fully loaded. Of course, we want to avoid that. That's why a fast-loading website is a natural part of our website offering. With a Content Delivery Network our website will load much faster in your browser. The use of the CDN is especially helpful if you are abroad, because the website is delivered from a server near you.

What data is processed?

When you request a website or the content of a website and it is cached in a CDN, the CDN routes the request to the server closest to you and the server delivers the content. Content delivery networks are built so that JavaScript libraries can be downloaded and hosted on npm and Github servers. Alternatively, most CDNs allow WordPress plugins to be loaded if they are hosted on WordPress.org. Your browser may send personal data to the content delivery network we use. This is data such as IP address, browser type, browser version, which web page is loaded or time and date of the page visit. This data is collected and also stored by the CDN. Whether cookies are used for data storage depends on the network used. Please read the data protection texts of the respective service.

Right of objection

If you want to completely prevent this data transfer, you can install a JavaScript blocker (see for example https://noscript.net/) on your PC. Of course, our website will then no longer be able to provide the usual service (such as fast loading speed).

Legal basis

If you have consented to the use of a content delivery network, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur when collected by a content delivery network.

We also have a legitimate interest in using a content delivery network to optimize our online service and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the tool if you have given your consent.

For information about specific content delivery networks, if any, see the following sections.

Amazon CloudFront CDN Privacy Policy

We use the content delivery network Amazon CloudFront CDN for our website. The service provider is the American company Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA.

Amazon also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.

Amazon uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through these clauses, Amazon undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Amazon Data Processing Term (AWS GDPR DATA PROCESSING), which references the Standard Contractual Clauses, can be found at https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

To learn more about the data processed through the use of Amazon CloudFront CDN, please see the Privacy Policy at https://aws.amazon.com/de/privacy/.

jQuery CDN Privacy Policy

jQuery CDN Privacy Policy Summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: Optimization of our service performance (to load the website faster).

📓 Processed data: Data such as your IP addressMore details can be found below in this privacy policy.

📅 Storage period: most of the time, the data is stored until it is no longer required for the fulfillment of the service

⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests).

What is jQuery?

In order to deliver our website or all of our individual subpages (web pages) to you quickly and smoothly on different devices, we use jQuery CDN services from the company jQuery Foundation. jQuery is distributed via the Content Delivery Network (CDN) of the American software company StackPath (LCC 2012 McKinney Ave. Suite 1100, Dallas, TX 75201, USA). Through this service, personal data of you is stored, managed and processed. In this Privacy Policy, we will go into more detail about what data of yours is processed through the use of jQuery CDN.

A content delivery network (CDN) is a network of regionally distributed servers that are connected via the Internet. Through this network, content, especially very large files, can be delivered quickly even during large load peaks. jQuery creates a copy of our website on their servers. So our website can be delivered as fast as possible. This means that the data transfer to your browser is shortened by a CDN.

Why do we use jQuery on our website?

Of course, we want to offer you a comprehensive and well-functioning service with our website. This also includes a fast website. With jQuery, our website can load much faster at your end. Especially helpful is the use of jQuery for users from abroad, because here the page can be delivered from a server nearby.

What data is processed by jQuery?

jQuery uses JavaScript libraries to deliver our website content quickly. For this purpose, a CDN server loads the necessary files. As soon as a connection to the CDN server is established, your IP address is captured and stored. This only happens if this data is not already stored in your browser by a past website visit.

StackPath's privacy policy explicitly mentions that StackPath uses aggregated and anonymized data from various services (such as jQuery) to enhance security and for its own services. However, this data does not identify you as a person.

How long and where is the data stored?

jQuery or StackPath has servers distributed in various countries and your data may thus be stored in both the Americas and the European Economic Area. StackPath retains personal data processed on our behalf for as long as necessary to provide services offered, as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

Right of objection

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact responsible persons of jQuery at any time.

If you do not want data transfer to occur, you always have the option to install Java script blockers such as https://www.ghostery.com/ or noscript.net. However, you can also simply disable the execution of JavaScript codes in your browser. If you decide to disable JavaScript codes, the usual functions will also change. For example, a website will no longer load as quickly.

Legal basis

If you have consented to jQuery CDN being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by jQuery CDN.

We also have a legitimate interest in using jQuery CDN to optimize our online service and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the tool if you have given your consent.

Stackpath also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of the data processing.

As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, Stackpath uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Through these clauses, Stackpath undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

The Stackpath Data Protection Addendum, which complies with the Standard Contractual Clauses, can be found at https://www.stackpath.com/legal/data-processing-addendum.

For more information on StackPath privacy, see https://www.stackpath.com/legal/privacy-statement and on jQuery, see https://openjsf.org/wp-content/uploads/sites/84/2019/11/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf.

jsdelivr.com-CDN Privacy Policy

jsdelivr.com-CDN Privacy Policy Summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: Optimization of our service performance (to load the website faster).

📓 Processed data: Data such as your IP address, browser type, browser version, which web page is loaded or time and date of page visitMore details can be found below in this privacy policy.

📅 Storage period: for the most part, data is stored until it is no longer needed to fulfill the service werden⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests)

What is jsdelivr.com-CDN?

To enable us to deliver our individual web pages to you quickly and flawlessly on all different devices, we use the open-source services of jsdelivr.com from the Polish software company ProspectOne, Królewska 65A/1, 30-081, Kraków, Poland. This is a content delivery network (CDN). This is a network of regionally distributed servers connected via the Internet. This allows content, especially large files, to be delivered quickly and optimally, even during large load peaks.

Why do we use jsdelivr.com-CDN?

Of course, we want to offer you a comprehensive and well-functioning service with our website. This also includes a fast website. With jsdelivr.com-CDN our website can load much faster at your end. Especially helpful is the use of jsdelivr.com-CDN for users from abroad, because here the site can be delivered from a server nearby.

What data is processed by jsdelivr.com-CDN?

jsDelivr is built to download JavaScript libraries hosted on npm and Github servers. However, WordPress plugins can also be loaded, as long as they are hosted on WordPress.org. In order to provide this service, your browser may send personal data to jsdelivr.com. jsDelivr may thus collect and store user data such as IP address, browser type, browser version, which web page is loaded or time and date of page visit. The privacy policy of jsdelivr.com explicitly states that the company does not use cookies or other tracking services.

How long and where is the data stored?

jsDelivr has servers distributed in various countries and your data may be stored outside the European Economic Area. jsDelivr retains personal data processed on our behalf for as long as necessary to provide services offered, as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

Right of objection

You always have the right of access, rectification and deletion of your personal data. If you have any questions, you can also contact responsible persons of jsdelivr.com-CDN at any time.

If you want to prevent this data transfer, you can install a JavaScript blocker (see, for example, https://noscript.net/). Please note, however, that this will prevent the website from providing the usual service (such as fast loading speed).

Legal basis

If you have consented that jsdelivr.com-CDN may be used, the legal basis of the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by jsdelivr.com-CDN.

From our side, there is also a legitimate interest to use jsdelivr.com-CDN to optimize our online service and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the tool if you have given your consent.

For more information on data processing by the software service jsDelivr, please see the company's privacy policy at https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.

Cookie Consent Management Platform Introduction

Cookie Consent Management Platform Summary

‍👥Parties concerned: Website visitors

🤝 Purpose: Obtaining and managing consent for certain cookies and thus the use of certain tools.

📓 Processed data: Data used to manage the cookie settings set, such as IP address, time of consent, type of consent, individual consents. More details can be found with the respective tool used.

📅 Storage period: Depends on the tool used, you have to look at periods of several years einstellen⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit.f DSGVO (legitimate interests)

What is a Cookie Consent Management Platform?

We use a Consent Management Platform (CMP) software on our website, which helps us and you to handle used scripts and cookies correctly and safely. The software automatically creates a cookie popup, scans and controls all scripts and cookies, provides cookie consent for you as required by data protection laws, and helps us and you keep track of all cookies. With most cookie consent management tools, all existing cookies are identified and categorized. You as a website visitor then decide for yourself whether and which scripts and cookies you allow or disallow. The following graphic illustrates the relationship between browser, web server and CMP.

Why do we use a cookie management tool?

Our goal is to offer you the best possible transparency in the area of data protection. In addition, we are also legally obligated to do so. We want to inform you as well as possible about all tools and all cookies that can store and process data from you. It is also your right to decide for yourself which cookies you accept and which you do not. In order to give you this right, we first need to know exactly which cookies ended up on our website in the first place. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we know about all cookies and can provide you with DSGVO-compliant information about them. You can then accept or reject cookies via the consent system.

What data is processed?

Within the framework of our cookie management tool, you can manage each individual cookie yourself and have complete control over the storage and processing of your data. The declaration of your consent is stored so that we do not have to query you each time you visit our website again and we can also prove your consent if required by law. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the storage period of your cookie consent varies. In most cases, this data (e.g. pseudonymous user ID, time of consent, details of cookie categories or tools, browser, device information) is stored for up to two years.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. Data that is stored in cookies is stored for different lengths of time. Some cookies are already deleted after you leave the website, others may be stored in your browser for several years. The exact duration of data processing depends on the tool used; in most cases, you should be prepared for a storage period of several years. In the respective privacy statements of the individual providers, you will usually receive precise information about the duration of data processing.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser.

Information on specific cookie management tools, if any, can be found in the following sections.

Legal basis

If you consent to cookies, personal data about you will be processed and stored via these cookies. If we are allowed to use cookies through your consent (Article 6 (1) lit. a DSGVO), this consent is also the legal basis for the use of cookies or the processing of your data. In order to be able to manage the consent to cookies and to enable you to give your consent, cookie consent management platform software is used. The use of this software enables us to operate the website in an efficient manner in compliance with the law, which constitutes a legitimate interest (Article 6 (1) (f) DSGVO).

Web design introduction

Web design privacy policy summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: Improve user experience

📓 Data processed: Which data is processed depends heavily on the services used. Mostly it is about IP address, technical data, language settings, browser version, screen resolution and name of the browser. You can find more details about this in the respective web design tools used.

📅 Storage period: depending on the Tools⚖️ used Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests)

What is web design?

We use several tools on our website that serve our web design. Web design is not, as often assumed, only about our website looking pretty, but also about functionality and performance. But of course, the appropriate appearance of a website is also one of the major goals of professional web design. Web design is a branch of media design and deals with the visual as well as the structural and functional design of a website. The goal is to use web design to improve your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. User experience refers to all impressions and experiences that the website visitor experiences on a website. Usability is a sub-item of user experience. This refers to the user-friendliness of a website. The main emphasis here is on ensuring that content, subpages or products are clearly structured and that you can easily and quickly find what you are looking for. In order to provide you with the best possible experience on our website, we also use so-called third-party web design tools. In this privacy policy, the category "web design" therefore includes all services that improve the design of our website. These can be, for example, fonts, various plugins or other integrated web design functions.

Why do we use web design tools?

How you absorb information on a website depends very much on the structure, functionality and visual perception of the website. Therefore, a good and professional web design became more and more important for us as well. We are constantly working on improving our website and also see this as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, you will only visit us and take advantage of our offers if you feel completely comfortable.

What data is stored by web design tools?

When you visit our website, web design elements may be embedded in our pages that can also process data. Exactly what data is involved depends, of course, strongly on the tools used. Further below you can see exactly which tools we use for our website. We recommend that you also read the respective privacy policy of the tools used for more detailed information on data processing. In most cases, you will find out there which data is processed, whether cookies are used and how long the data is stored. Through fonts such as Google Fonts, for example, information such as language settings, IP address, browser version, browser screen resolution and browser name are also automatically transmitted to the Google servers.

Duration of data processing

How long data is processed is very individual and depends on the web design elements used. For example, if cookies are used, the retention period can be as short as a minute or as long as a few years. Please do your research in this regard. For this, we recommend on the one hand our general text section on cookies, as well as the privacy statements of the tools used. There you will usually find out exactly which cookies are used and what information is stored in them. Google font files, for example, are stored for one year. This is to improve the loading time of a website. In principle, data is only ever stored for as long as is necessary for the provision of the service. In the case of legal requirements, data may also be stored for longer.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. You can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser. However, under web design elements (mostly fonts), there is also data that cannot be deleted quite so easily. This is the case when data is automatically collected directly when a page is called up and transmitted to a third-party provider (such as Google). In this case, please contact the support of the respective provider. In the case of Google, you can reach the support at https://support.google.com/?hl=de.

Legal basis

If you have consented to web design tools being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur when web design tools are used. From our side, there is also a legitimate interest to improve the web design on our website. After all, only then can we provide you with a beautiful and professional web offer. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use web design tools insofar as you have given your consent. In any case, we want to emphasize this again here.

Information on specific web design tools - if available - is provided in the following sections.

Google Fonts Privacy Policy

Google Fonts Privacy Policy Summary

‍👥 Data subjects: Visitors to the website

🤝 Purpose: Optimization of our service performance

📓 Processed data: Data such as IP address and CSS and font requestsMore details can be found below in this privacy policy.

📅 Storage duration: Font files are stored by Google for one year

⚖️ Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests).

What are Google Fonts?

On our website we use Google Fonts. These are the "Google Fonts" of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

You do not need to log in or enter a password to use Google Fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you do not need to worry that your Google account information, while using Google Fonts, will be transmitted to Google. Google records the usage of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We'll look at exactly what the data storage looks like in more detail.

Google Fonts (formerly Google Web Fonts) is a directory of over 800 fonts that Google makes available to your users for free.

Many of these fonts are released under the SIL Open Font License, while others are released under the Apache License. Both are free software licenses.

Why do we use Google Fonts on our website?

With Google Fonts, we can use fonts on our own website, and not have to upload them to our own server. Google Fonts is an important component to keep the quality of our website high. All Google Fonts are automatically optimized for the web and this saves data volume and is a big advantage especially for mobile use. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can sometimes visually distort texts or entire web pages. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). So, we use the Google Fonts to make all our online service as beautiful and consistent as possible.

What data is stored by Google?

When you visit our website, the fonts are reloaded via a Google server. Through this external call, data is transmitted to the Google servers. In this way, Google also recognizes that you or your IP address is visiting our website. The Google Fonts API is designed to reduce the use, storage, and collection of end-user data to what is necessary for proper font delivery. By the way, API stands for "Application Programming Interface" and serves, among other things, as a data transmitter in the software field.

Google Fonts stores CSS and font requests securely at Google and is therefore protected. Through the collected usage figures, Google can determine how well the individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites are using Google fonts. This data is published to the Google Fonts BigQuery database. Entrepreneurs and developers use Google's BigQuery web service to be able to examine and move large amounts of data.

It should be noted, however, that each Google Font request also automatically transmits information such as language settings, IP address, browser version, browser screen resolution and browser name to the Google servers. Whether this data is also stored cannot be clearly determined or is not clearly communicated by Google.

How long and where is the data stored?

Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This allows us to use fonts with the help of a Google stylesheet. A stylesheet is a format template that can be used to easily and quickly change the design or font of a web page, for example.

The font files are stored by Google for one year. Google thus pursues the goal of fundamentally improving the loading time of web pages. When millions of web pages reference the same fonts, they are cached after the first visit and immediately reappear on all other web pages visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.

How can I delete my data or prevent data storage?

The data that Google stores for one day or one year cannot simply be deleted. The data is automatically transmitted to Google when the page is accessed. In order to delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=322494722. You can only prevent data storage in this case if you do not visit our site.

Unlike other web fonts, Google allows us unlimited access to all fonts. So we can access an unlimited sea of fonts and get the most out of them for our website. You can find out more about Google Fonts and other issues at https://developers.google.com/fonts/faq?tid=322494722. While Google does address privacy-related issues there, it doesn't really include detailed information about data storage. It is relatively difficult to get really precise information about stored data from Google.

Legal basis

If you have consented to Google Fonts being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by Google Fonts.

We also have a legitimate interest in using Google Font to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google Font if you have given your consent.

Google also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.

Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which also correspond to the standard contractual clauses for Google Fonts, can be found at https://business.safety.google/adsprocessorterms/.

You can also find out what data is generally collected by Google and what it is used for at https://www.google.com/intl/de/policies/privacy/.

Google Fonts Local Privacy Policy

On our website we use Google Fonts of the company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible. We have embedded the Google fonts locally, i.e. on our web server - not on Google's servers. This means that there is no connection to Google servers and thus no data transfer or storage.

What are Google Fonts?

Google Fonts used to be called Google Web Fonts. This is an interactive directory of over 800 fonts that Google provides for free. With Google Fonts, you could use fonts without uploading them to your own server. However, in order to prevent any information transfer to Google servers in this regard, we have downloaded the fonts to our server. This way we act privacy compliant and do not send any data to Google Fonts.

Closing words

Congratulations! If you are reading these lines, you have really "fought" through our entire privacy policy or at least scrolled up to here. As you can see from the scope of our data protection declaration, we take the protection of your personal data anything but lightly.
It is important to us to inform you to the best of our knowledge and belief about the processing of personal data. However, we do not only want to tell you which data is processed, but also to explain the reasons for using various software programs. As a rule, privacy statements sound very technical and legalistic. However, since most of you are not web developers or lawyers, we also wanted to take a different approach linguistically and explain the facts in simple and clear language. Of course, this is not always possible due to the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy.
If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible office. We wish you a nice time and hope to welcome you on our website again soon.

All texts are protected by copyright.

‍

Source: Created with the privacy generator from AdSimple

‍