1. An overview of data protection

General information

The fol­low­ing infor­ma­tion will pro­vide you with an easy to nav­i­gate overview of what will hap­pen with your per­son­al data when you vis­it this web­site. The term „per­son­al data“ com­pris­es all data that can be used to per­son­al­ly iden­ti­fy you. For detailed infor­ma­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Protection Declaration, which we have includ­ed beneath this copy.

Data recording on this website

Who is the respon­si­ble par­ty for the record­ing of data on this web­site (i.e. the „con­troller“)?

The data on this web­site is processed by the oper­a­tor of the web­site, whose con­tact infor­ma­tion is avail­able under sec­tion „Information Required by Law“ on this web­site.

How do we record your data?

We col­lect your data as a result of your shar­ing of your data with us. This may, for instance be infor­ma­tion you enter into our con­tact form.

Our IT sys­tems auto­mat­i­cal­ly record oth­er data when you vis­it our web­site. This data com­pris­es pri­mar­i­ly tech­ni­cal infor­ma­tion (e.g. web brows­er, oper­at­ing sys­tem or time the site was accessed). This infor­ma­tion is record­ed auto­mat­i­cal­ly when you access this web­site.

What are the pur­pos­es we use your data for?

A por­tion of the infor­ma­tion is gen­er­at­ed to guar­an­tee the error free pro­vi­sion of the web­site. Other data may be used to analyse your user pat­terns.

What rights do you have as far as your infor­ma­tion is con­cerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents and pur­pos­es of your archived per­son­al data at any time with­out hav­ing to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or erad­i­cat­ed. Please do not hes­i­tate to con­tact us at any time under the address dis­closed in sec­tion „Information Required by Law“ on this web­site if you have ques­tions about this or any oth­er data pro­tec­tion relat­ed issues. You also have the right to log a com­plaint with the com­pe­tent super­vis­ing agency.

Moreover, under cer­tain cir­cum­stances, you have the right to demand the restric­tion of the pro­cess­ing of your per­son­al data. For details, please con­sult the Data Protection Declaration under sec­tion „Right to Restriction of Data Processing.“

Analysis tools and tools provided by third parties

There is a pos­si­bil­i­ty that your brows­ing pat­terns will be sta­tis­ti­cal­ly analysed when your vis­it this web­site. Such analy­ses are per­formed pri­mar­i­ly with cook­ies and with what we refer to as analy­sis pro­grammes. As a rule, the analy­ses of your brows­ing pat­terns are con­duct­ed anony­mous­ly; i.e. the brows­ing pat­terns can­not be traced back to you.

You have the option to object to such analy­ses or you can pre­vent their per­for­mance by not using cer­tain tools. For detailed infor­ma­tion about the tools and about your options to object, please con­sult our Data Protection Declaration below.

2. Hosting

External Hosting

This web­site is host­ed by an exter­nal ser­vice provider (host). Personal data col­lect­ed on this web­site are stored on the servers of the host. These may include, but are not lim­it­ed to, IP address­es, con­tact requests, meta­da­ta and com­mu­ni­ca­tions, con­tract infor­ma­tion, con­tact infor­ma­tion, names, web page access, and oth­er data gen­er­at­ed through a web site.

The host is used for the pur­pose of ful­fill­ing the con­tract with our poten­tial and exist­ing cus­tomers (Art. 6 para. 1 lit. b DSGVO) and in the inter­est of secure, fast and effi­cient pro­vi­sion of our online ser­vices by a pro­fes­sion­al provider (Art. 6 para. 1 lit. f DSGVO).

Our host will only process your data to the extent nec­es­sary to ful­fil its per­for­mance oblig­a­tions and to fol­low our instruc­tions with respect to such data.

Execution of a con­tract data pro­cess­ing agree­ment

In order to guar­an­tee pro­cess­ing in com­pli­ance with data pro­tec­tion reg­u­la­tions, we have con­clud­ed an order pro­cess­ing con­tract with our host.

3. General information and mandatory information

Data protection

The oper­a­tors of this web­site and its pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. Hence, we han­dle your per­son­al data as con­fi­den­tial infor­ma­tion and in com­pli­ance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this Data Protection Declaration.

Whenever you use this web­site, a vari­ety of per­son­al infor­ma­tion will be col­lect­ed. Personal data com­pris­es data that can be used to per­son­al­ly iden­ti­fy you. This Data Protection Declaration explains which data we col­lect as well as the pur­pos­es we use this data for. It also explains how, and for which pur­pose the infor­ma­tion is col­lect­ed.

We here­with advise you that the trans­mis­sion of data via the Internet (i.e. through e‑mail com­mu­ni­ca­tions) may be prone to secu­ri­ty gaps. It is not pos­si­ble to com­plete­ly pro­tect data against third par­ty access.

Information about the responsible party (referred to as the „controller“ in the GDPR)

The data pro­cess­ing con­troller on this web­site is:

Auda Invest GmbH & Co. KG
Wahrberg 4
24960 Glücksburg

Phone: +49 (0) 4631- 443 662
E‑mail: info@factorhair.de

The con­troller is the nat­ur­al per­son or legal enti­ty that sin­gle-hand­ed­ly or joint­ly with oth­ers makes deci­sions as to the pur­pos­es of and resources for the pro­cess­ing of per­son­al data (e.g. names, e‑mail address­es, etc.).

Revocation of your consent to the processing of data

A wide range of data pro­cess­ing trans­ac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already giv­en us. To do so, all you are required to do is sent us an infor­mal noti­fi­ca­tion via e‑mail. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revo­ca­tion.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).

Right to log a complaint with the competent supervisory agency

In the event of vio­la­tions of the GDPR, data sub­jects are enti­tled to log a com­plaint with a super­vi­so­ry agency, in par­tic­u­lar in the mem­ber state where they usu­al­ly main­tain their domi­cile, place of work or at the place where the alleged vio­la­tion occurred. The right to log a com­plaint is in effect regard­less of any oth­er admin­is­tra­tive or court pro­ceed­ings avail­able as legal recours­es.

Right to data portability

You have the right to demand that we hand over any data we auto­mat­i­cal­ly process on the basis of your con­sent or in order to ful­fil a con­tract be hand­ed over to you or a third par­ty in a com­mon­ly used, machine read­able for­mat. If you should demand the direct trans­fer of the data to anoth­er con­troller, this will be done only if it is tech­ni­cal­ly fea­si­ble.

SSL and/or TLS encryption

For secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as pur­chase orders or inquiries you sub­mit to us as the web­site oper­a­tor, this web­site uses either an SSL or a TLS encryp­tion pro­gramme. You can recog­nise an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from „http://“ to „https://“ and also by the appear­ance of the lock icon in the brows­er line.

If the SSL or TLS encryp­tion is acti­vat­ed, data you trans­mit to us can­not be read by third par­ties.

Encrypted payment transactions on this website

If you are under an oblig­a­tion to share your pay­ment infor­ma­tion (e.g. account num­ber if you give us the author­i­ty to deb­it your bank account) with us after you have entered into a fee-based con­tract with us, this infor­ma­tion is required to process pay­ments.

Payment trans­ac­tions using com­mon modes of pay­ing (Visa/MasterCard, deb­it to your bank account) are processed exclu­sive­ly via encrypt­ed SSL or TLS con­nec­tions. You can recog­nise an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from „http://“ to „https://“ and also by the appear­ance of the lock icon in the brows­er line.

If the com­mu­ni­ca­tion with us is encrypt­ed, third par­ties will not be able to read the pay­ment infor­ma­tion you share with us.

Information about, rectification and eradication of data

Within the scope of the applic­a­ble statu­to­ry pro­vi­sions, you have the right to at any time demand infor­ma­tion about your archived per­son­al data, their source and recip­i­ents as well as the pur­pose of the pro­cess­ing of your data. You may also have a right to have your data rec­ti­fied or erad­i­cat­ed. If you have ques­tions about this sub­ject mat­ter or any oth­er ques­tions about per­son­al data, please do not hes­i­tate to con­tact us at any time at the address pro­vid­ed in sec­tion „Information Required by Law.“

Right to demand processing restrictions

You have the right to demand the impo­si­tion of restric­tions as far as the pro­cess­ing of your per­son­al data is con­cerned. To do so, you may con­tact us at any time at the address pro­vid­ed in sec­tion „Information Required by Law.“ The right to demand restric­tion of pro­cess­ing applies in the fol­low­ing cas­es:

If you have restrict­ed the pro­cess­ing of your per­son­al data, these data – with the excep­tion of their archiv­ing – may be processed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­tle­ments or to pro­tect the rights of oth­er nat­ur­al per­sons or legal enti­ties or for impor­tant pub­lic inter­est rea­sons cit­ed by the European Union or a mem­ber state of the EU.

Rejection of unsolicited e‑mails

We here­with object to the use of con­tact infor­ma­tion pub­lished in con­junc­tion with the manda­to­ry infor­ma­tion to be pro­vid­ed in sec­tion „Information Required by Law“ to send us pro­mo­tion­al and infor­ma­tion mate­r­i­al that we have not express­ly request­ed. The oper­a­tors of this web­site and its pages reserve the express right to take legal action in the event of the unso­licit­ed send­ing of pro­mo­tion­al infor­ma­tion, for instance via SPAM mes­sages.

4. Recording of data on this website

Cookies

In some instances, our web­site and its pages use so-called cook­ies. Cookies do not cause any dam­age to your com­put­er and do not con­tain virus­es. The pur­pose of cook­ies is to make our web­site more user friend­ly, effec­tive and more secure. Cookies are small text files that are placed on your com­put­er and stored by your brows­er.

Most of the cook­ies we use are so-called „ses­sion cook­ies.“ They are auto­mat­i­cal­ly delet­ed after your leave our site. Other cook­ies will remain archived on your device until you delete them. These cook­ies enable us to recog­nise your brows­er the next time you vis­it our web­site.

You can adjust the set­tings of your brows­er to make sure that you are noti­fied every time cook­ies are placed and to enable you to accept cook­ies only in spe­cif­ic cas­es or to exclude the accep­tance of cook­ies for spe­cif­ic sit­u­a­tions or in gen­er­al and to acti­vate the auto­mat­ic dele­tion of cook­ies when you close your brows­er. If you deac­ti­vate cook­ies, the func­tions of this web­site may be lim­it­ed.

Cookies that are required for the per­for­mance of the elec­tron­ic com­mu­ni­ca­tions trans­ac­tion or to pro­vide cer­tain func­tions you want to use (e.g. the shop­ping cart func­tion), are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing cook­ies to ensure the tech­ni­cal­ly error free and opti­mised pro­vi­sion of the operator’s ser­vices. If a cor­re­spond­ing agree­ment has been request­ed (e.g. an agree­ment to the stor­age of cook­ies), the pro­cess­ing takes place exclu­sive­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revoked at any time.

If oth­er cook­ies (e.g. cook­ies for the analy­sis of your brows­ing pat­terns) should be stored, they are addressed sep­a­rate­ly in this Data Protection Declaration.

Server log files

The provider of this web­site and its pages auto­mat­i­cal­ly col­lects and stores infor­ma­tion in so-called serv­er log files, which your brows­er com­mu­ni­cates to us auto­mat­i­cal­ly. The infor­ma­tion com­pris­es:

This data is not merged with oth­er data sources.

This data is record­ed on the basis of Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in the tech­ni­cal­ly error free depic­tion and the opti­miza­tion of the operator’s web­site. In order to achieve this, serv­er log files must be record­ed.

Contact form

If you sub­mit inquiries to us via our con­tact form, the infor­ma­tion pro­vid­ed in the con­tact form as well as any con­tact infor­ma­tion pro­vid­ed there­in will be stored by us in order to han­dle your inquiry and in the event that we have fur­ther ques­tions. We will not share this infor­ma­tion with­out your con­sent.

The pro­cess­ing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is relat­ed to the exe­cu­tion of a con­tract or if it is nec­es­sary to car­ry out pre-con­trac­tu­al mea­sures. In all oth­er cas­es the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the requests addressed to us (Art. 6 Para. 1 lit. f DSGVO) or on your agree­ment (Art. 6 Para. 1 lit. a DSGVO) if this has been request­ed.

The infor­ma­tion you have entered into the con­tact form shall remain with us until you ask us to erad­i­cate the data, revoke your con­sent to the archiv­ing of data or if the pur­pose for which the infor­ma­tion is being archived no longer exists (e.g. after we have con­clud­ed our response to your inquiry). This shall be with­out prej­u­dice to any manda­to­ry legal pro­vi­sions – in par­tic­u­lar reten­tion peri­ods.

Request by e‑mail, telephone or fax

If you con­tact us by e‑mail, tele­phone or fax, your request, includ­ing all result­ing per­son­al data (name, request) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass these data on with­out your con­sent.

The pro­cess­ing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is relat­ed to the exe­cu­tion of a con­tract or if it is nec­es­sary to car­ry out pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on your con­sent (Article 6 (1) a GDPR) and/or on our legit­i­mate inter­ests (Article 6 (1) (f) GDPR), since we have a legit­i­mate inter­est in the effec­tive pro­cess­ing of requests addressed to us.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age laps­es (e.g. after com­ple­tion of your request). Mandatory statu­to­ry pro­vi­sions — in par­tic­u­lar statu­to­ry reten­tion peri­ods — remain unaf­fect­ed.

Registration on this website

You have the option to reg­is­ter on this web­site to be able to use addi­tion­al web­site func­tions. We shall use the data you enter only for the pur­pose of using the respec­tive offer or ser­vice you have reg­is­tered for. The required infor­ma­tion we request at the time of reg­is­tra­tion must be entered in full. Otherwise we shall reject the reg­is­tra­tion.

To noti­fy you of any impor­tant changes to the scope of our port­fo­lio or in the event of tech­ni­cal mod­i­fi­ca­tions, we shall use the e‑mail address pro­vid­ed dur­ing the reg­is­tra­tion process.

We shall process the data entered dur­ing the reg­is­tra­tion process on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR).

The data record­ed dur­ing the reg­is­tra­tion process shall be stored by us as long as you are reg­is­tered on this web­site. Subsequently, such data shall be delet­ed. This shall be with­out prej­u­dice to manda­to­ry statu­to­ry reten­tion oblig­a­tions.

Registration with Facebook Connect

Instead of reg­is­ter­ing direct­ly on this web­site, you also have the option to reg­is­ter using Facebook Connect. The provider of this ser­vice is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you decide to reg­is­ter via Facebook Connect and click on the „Login with Facebook“/„Connect with Facebook“ but­ton, you will be auto­mat­i­cal­ly con­nect­ed to the Facebook plat­form. There, you can log in using your user­name and pass­word. As a result, your Facebook pro­file will be linked to this web­site or our ser­vices. This link gives us access to the data you have archived with Facebook. These data com­prise pri­mar­i­ly the fol­low­ing:

This infor­ma­tion will be used to set up, pro­vide and cus­tomise your account.

The reg­is­tra­tion via Facebook Connect and the affil­i­at­ed data pro­cess­ing trans­ac­tions are imple­ment­ed on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR). You may revoke this con­sent at any time, which shall affect all future trans­ac­tions there­after.

For more infor­ma­tion, please con­sult the Facebook Terms of Use and the Facebook Data Privacy Policies. Use these links to access this infor­ma­tion: https://www.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

The comment function on this website

When you use the com­ment func­tion on this web­site, infor­ma­tion on the time the com­ment was gen­er­at­ed and your e‑mail-address and, if you are not post­ing anony­mous­ly, the user name you have select­ed will be archived in addi­tion to your com­ments.

Storage of the IP address

Our com­ment func­tion stores the IP address­es of all users who enter com­ments. Given that we do not review the com­ments pri­or to pub­lish­ing them, we need this infor­ma­tion in order to take action against the author in the event of rights vio­la­tions, such as defama­tion or pro­pa­gan­da.

Subscribing to com­ments

As a user of this web­site, you have the option to sub­scribe to com­ments after you have reg­is­tered. You will receive a con­fir­ma­tion e‑mail, the pur­pose of which is to ver­i­fy whether you are the actu­al hold­er of the pro­vid­ed e‑mail address. You can deac­ti­vate this func­tion at any time by fol­low­ing a respec­tive link in the infor­ma­tion e‑mails. The data entered in con­junc­tion with sub­scrip­tions to com­ments will be delet­ed in this case. However, if you have com­mu­ni­cat­ed this infor­ma­tion to us for oth­er pur­pos­es and from a dif­fer­ent loca­tion (e.g. when sub­scrib­ing to the newslet­ter), the data shall remain in our pos­ses­sion.

Storage peri­od for com­ments

Comments and any affil­i­at­ed infor­ma­tion (e.g. the IP address) shall be stored by us and remain on this web­site until the con­tent the com­ment per­tained to has been delet­ed in its entire­ty or if the com­ments had to be delet­ed for legal rea­sons (e.g. insult­ing com­ments).

Legal basis

Comments are stored on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any con­sent you have already giv­en us. To do so, all you are required to do is sent us an infor­mal noti­fi­ca­tion via e‑mail. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revo­ca­tion.

Processing of data (customer and contract data)

We col­lect, process and use per­son­al data only to the extent nec­es­sary for the estab­lish­ment, con­tent orga­ni­za­tion or change of the legal rela­tion­ship (data inven­to­ry). These actions are tak­en on the basis of Art. 6 Sect. 1 lit. b GDPR, which per­mits the pro­cess­ing of data for the ful­fil­ment of a con­tract or pre-con­trac­tu­al actions. We col­lect, process and use per­son­al data con­cern­ing the use of this web­site (usage data) only to the extent that this is nec­es­sary to make it pos­si­ble for users to uti­lize the ser­vices and to bill for them.

The col­lect­ed cus­tomer data shall be erad­i­cat­ed upon com­ple­tion of the order or the ter­mi­na­tion of the busi­ness rela­tion­ship. This shall be with­out prej­u­dice to any statu­to­ry reten­tion man­dates.

Data transfer upon closing of contracts for online stores, retailers and the shipment of merchandise

We share per­son­al data with third par­ties only if this is nec­es­sary in con­junc­tion with the han­dling of the con­tract; for instance, with com­pa­nies entrust­ed with the ship­ment of goods or the finan­cial insti­tu­tion tasked with the pro­cess­ing of pay­ments. Any fur­ther trans­fer of data shall not occur or shall only occur if you have express­ly con­sent­ed to the trans­fer. Any shar­ing of your data with third par­ties in the absence of your express con­sent, for instance for adver­tis­ing pur­pos­es, shall not occur.

The basis for the pro­cess­ing of data is Art. 6 Sect. 1 lit. b GDPR, which per­mits the pro­cess­ing of data for the ful­fil­ment of a con­tract or for pre-con­trac­tu­al actions.

5. Social media

Facebook plug-ins (Like & Share button)

We have inte­grat­ed plug-ins of the social net­work Facebook, pro­vid­ed by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, on this web­site. You will be able to recog­nise Facebook plug-ins by the Facebook logo or the „Like“ but­ton on this web­site. An overview of the Facebook plug-ins is avail­able under the fol­low­ing link: https://developers.facebook.com/docs/plugins/.

Whenever you vis­it this web­site and its pages, the plug-in will estab­lish a direct con­nec­tion between your brows­er and the Facebook serv­er. As a result, Facebook will receive the infor­ma­tion that you have vis­it­ed this web­site with your plug-in. However, if you click the Facebook „Like“ but­ton while you are logged into your Facebook account, you can link the con­tent of this web­site and its pages with your Facebook pro­file. As a result, Facebook will be able to allo­cate the vis­it to this web­site and its pages to your Facebook user account. We have to point out, that we as the provider of the web­site do not have any knowl­edge of the trans­ferred data and its use by Facebook. For more detailed infor­ma­tion, please con­sult the Data Privacy Declaration of Facebook at: https://www.facebook.com/privacy/explanation.

If you do not want Facebook to be able to allo­cate your vis­it to this web­site and its pages to your Facebook user account, please log out of your Facebook account while you are on this web­site.

The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

Twitter plug-in

We have inte­grat­ed func­tions of the social media plat­form Twitter into this web­site. These func­tions are pro­vid­ed by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. While you use Twitter and the „Re-Tweet“ func­tion, web­sites you vis­it are linked to your Twitter account and dis­closed to oth­er users. During this process, data are trans­ferred to Twitter as well. We must point out, that we, the providers of the web­site and its pages do not know any­thing about the con­tent of the data trans­ferred and the use of this infor­ma­tion by Twitter. For more details, please con­sult Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.

The use of Twitter plug-ins is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

You have the option to reset your data pro­tec­tion set­tings on Twitter under the account set­tings at https://twitter.com/account/settings.

Instagram plug-in

We have inte­grat­ed func­tions of the pub­lic media plat­form Instagram into this web­site. These func­tions are being offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you may click the Instagram but­ton to link con­tents from this web­site to your Instagram pro­file. This enables Instagram to allo­cate your vis­it to this web­site to your user account. We have to point out that we as the provider of the web­site and its pages do not have any knowl­edge of the con­tent of the data trans­ferred and its use by Instagram.

The use of the Instagram plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

For more infor­ma­tion on this sub­ject, please con­sult Instagram’s Data Privacy Declaration at: https://instagram.com/about/legal/privacy/.

Tumblr plug-in

This web­site and its pages use but­tons of the Tumblr plat­form. The provider is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA.

These but­tons enable you to share a report or a page on Tumblr or to fol­low the provider on Tumblr. If you access one of our web­sites via the Tumblr but­ton, your brows­er will estab­lish a direct con­nec­tion with Tumblr’s servers. We do not have any con­trol over the vol­ume of data Tumblr col­lects and trans­fers with the assis­tance of this plug-in. Based on the cur­rent sta­tus of the infor­ma­tion we have the IP address of the user and the URL of the respec­tive web­site are both trans­ferred.

The use of the Tumblr plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

For fur­ther infor­ma­tion on this sub­ject, please con­sult Tumblr’s Data Privacy Declaration at: https://www.tumblr.com/privacy/de.

LinkedIn plug-in

This web­site uses func­tions of the LinkedIn net­work. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Any time you access a page of this web­site that con­tains func­tions of LinkedIn, a con­nec­tion to LinkedIn’s servers is estab­lished. LinkedIn is noti­fied that you have vis­it­ed this web­site with your IP address. If you click on LinkedIn’s „Recommend“ but­ton and are logged into your LinkedIn account at the time, LinkedIn will be in a posi­tion to allo­cate your vis­it to this web­site to your user account. We have to point out that we as the provider of the web­sites do not have any knowl­edge of the con­tent of the trans­ferred data and its use by LinkedIn.

The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

For fur­ther infor­ma­tion on this sub­ject, please con­sult LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.

XING plug-in

This web­site uses func­tions of the XING net­work. The provider is the XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany.

Any time one of our sites/pages that con­tains func­tions of XING is accessed, a con­nec­tion with XING’s servers is estab­lished. As far as we know, this does not result in the archiv­ing of any per­son­al data. In par­tic­u­lar, the ser­vice does not store any IP address­es or analyse user pat­terns.

The use of the XING plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

For more infor­ma­tion on data pro­tec­tion and the XING share but­ton please con­sult the Data Protection Declaration of Xing at: https://www.xing.com/app/share?op=data_protection.

Pinterest plug-in

We use social plug-ins of the social net­work Pinterest on this web­site. The net­work is oper­at­ed by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103–490, USA („Pinterest“).

If you access a site or page that con­tains such a plug-in, your brows­er will estab­lish a direct con­nec­tion with Pinterest’s servers. During this process, the plug-in trans­fers log data to Pinterest’s servers in the United States. The log data may pos­si­bly include your IP address, the address of the web­sites you vis­it­ed, which also con­tain Pinterest func­tions. The infor­ma­tion also includes the type and set­tings of your brows­er, the data and time of the inquiry, how you use Pinterest and cook­ies.

The use of the Pinterest plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in being as vis­i­ble as pos­si­ble on social media.

For more infor­ma­tion con­cern­ing the pur­pose, scope and con­tin­ue pro­cess­ing and use of the data by Pinterest as well as your affil­i­at­ed rights and options to pro­tect your pri­vate infor­ma­tion, please con­sult the data pri­va­cy infor­ma­tion of Pinterest at: https://about.pinterest.com/en/privacy-policy.

6. Analysis tools and advertising

Google Analytics

This web­site uses func­tions of the web analy­sis ser­vice Google Analytics. The provider of this ser­vice is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called cook­ies. Cookies are text files, which are stored on your com­put­er and that enable an analy­sis of the use of the web­site by users. The infor­ma­tion gen­er­at­ed by cook­ies on your use of this web­site is usu­al­ly trans­ferred to a Google serv­er in the United States, where it is stored.

The stor­age of Google Analytics cook­ies and the uti­liza­tion of this analy­sis tool are based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of this web­site has a legit­i­mate inter­est in the analy­sis of user pat­terns to opti­mize both, the ser­vices offered online and the operator’s adver­tis­ing activ­i­ties. If a cor­re­spond­ing agree­ment has been request­ed (e.g. an agree­ment to the stor­age of cook­ies), the pro­cess­ing takes place exclu­sive­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revoked at any time.

IP anonymiza­tion

On this web­site, we have acti­vat­ed the IP anonymiza­tion func­tion. As a result, your IP address will be abbre­vi­at­ed by Google with­in the mem­ber states of the European Union or in oth­er states that have rat­i­fied the Convention on the European Economic Area pri­or to its trans­mis­sion to the United States. The full IP address will be trans­mit­ted to one of Google’s servers in the United States and abbre­vi­at­ed there only in excep­tion­al cas­es. On behalf of the oper­a­tor of this web­site, Google shall use this infor­ma­tion to analyse your use of this web­site to gen­er­ate reports on web­site activ­i­ties and to ren­der oth­er ser­vices to the oper­a­tor of this web­site that are relat­ed to the use of the web­site and the Internet. The IP address trans­mit­ted in con­junc­tion with Google Analytics from your brows­er shall not be merged with oth­er data in Google’s pos­ses­sion.

Browser plug-in

You do have the option to pre­vent the archiv­ing of cook­ies by mak­ing per­ti­nent changes to the set­tings of your brows­er soft­ware. However, we have to point out that in this case you may not be able to use all of the func­tions of this web­site to their fullest extent. Moreover, you have the option pre­vent the record­ing of the data gen­er­at­ed by the cook­ie and affil­i­at­ed with your use of the web­site (includ­ing your IP address) by Google as well as the pro­cess­ing of this data by Google by down­load­ing and installing the brows­er plug-in avail­able under the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to the record­ing of data

You have the option to pre­vent the record­ing of your data by Google Analytics by click­ing on the fol­low­ing link. This will result in the place­ment of an opt out cook­ie, which pre­vents the record­ing of your data dur­ing future vis­its to this web­site: Google Analytics deac­ti­va­tion.

For more infor­ma­tion about the han­dling of user data by Google Analytics, please con­sult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data pro­cess­ing

We have exe­cut­ed a con­tract data pro­cess­ing agree­ment with Google and are imple­ment­ing the strin­gent pro­vi­sions of the German data pro­tec­tion agen­cies to the fullest when using Google Analytics.

Demographic para­me­ters pro­vid­ed by Google Analytics

This web­site uses the func­tion „demo­graph­ic para­me­ters“ pro­vid­ed by Google Analytics. It makes it pos­si­ble to gen­er­ate reports pro­vid­ing infor­ma­tion on the age, gen­der and inter­ests of web­site vis­i­tors. The sources of this infor­ma­tion are inter­est-relat­ed adver­tis­ing by Google as well as vis­i­tor data obtained from third par­ty providers. This data can­not be allo­cat­ed to a spe­cif­ic indi­vid­ual. You have the option to deac­ti­vate this func­tion at any time by mak­ing per­ti­nent set­tings changes for adver­tis­ing in your Google account or you can gen­er­al­ly pro­hib­it the record­ing of your data by Google Analytics as explained in sec­tion „Objection to the record­ing of data.“

Archiving peri­od

Data on the user or inci­dent lev­el stored by Google linked to cook­ies, user IDs or adver­tis­ing IDs (e.g. DoubleClick cook­ies, Android adver­tis­ing ID) will be anonymized or delet­ed after 26 month. For details please click the fol­low­ing link: https://support.google.com/analytics/answer/7667196?hl=en

WordPress Stats

This web­site uses the WordPress tool Stats in order to sta­tis­ti­cal­ly analyse user access infor­ma­tion. The provider of the solu­tion is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110–4929, USA.

WordPress Stats uses cook­ies that are stored on your com­put­er and that make it pos­si­ble to analyse the use of this web­site. The infor­ma­tion gen­er­at­ed by the cook­ies con­cern­ing the use of our web­site is stored on servers in the United States. Your IP address is ren­dered anony­mous after pro­cess­ing and pri­or to the stor­age of the data.

„WordPress Stats“ cook­ies will remain on your device until you delete them.

The stor­age of „WordPress Stats“ cook­ies and the use of this analy­sis tool are based on Art. 6 Sect. 1 lit. f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the anony­mous analy­sis of user pat­terns, in order to opti­mize the operator’s web offer­ings and adver­tis­ing. If a cor­re­spond­ing agree­ment has been request­ed (e.g. an agree­ment to the stor­age of cook­ies), the pro­cess­ing takes place exclu­sive­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revoked at any time.

You can set up your brows­er in such a man­ner that you will be noti­fied any­time cook­ies are placed and you can per­mit cook­ies only in cer­tain cas­es or exclude the accep­tance of cook­ies in cer­tain instances or in gen­er­al and you can also acti­vate the auto­mat­ic dele­tion of cook­ies upon clos­ing of the brows­er. If you deac­ti­vate cook­ies, the func­tions of this web­site may be lim­it­ed.

You do have the option to object to the col­lec­tion and use of your data for future impli­ca­tions by plac­ing an opt out cook­ie into your brows­er by click­ing on the fol­low­ing link: https://www.quantcast.com/opt-out/.

If you delete the cook­ies on your com­put­er, you must set the opt-out cook­ie again.

Google Analytics Remarketing

This web­site uses the func­tions of Google Analytics Remarketing in com­bi­na­tion with the func­tions of Google AdWords and Google DoubleClick, which work on all devices. The provider of these solu­tions is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

This func­tion makes it pos­si­ble to con­nect the adver­tis­ing tar­get groups gen­er­at­ed with Google Analytics Remarketing with the func­tions of Google AdWords and Google DoubleClick, which work on all devices. This makes it pos­si­ble to dis­play inter­est-based cus­tomized adver­tis­ing mes­sages, depend­ing on your pri­or usage and brows­ing pat­terns on a device (e.g. cell phone) in a man­ner tai­lored to you as well as on any of your devices (e.g. tablet or PC).

If you have giv­en us per­ti­nent con­sent, Google will con­nect your web and app brows­er pro­gres­sions with your Google account for this pur­pose. As a result, it is pos­si­ble to dis­play the same per­son­al­ized adver­tis­ing mes­sages on every device you log into with your Google account.

To sup­port this func­tion, Google Analytics records Google authen­ti­cat­ed IDs of users that are tem­porar­i­ly con­nect­ed with our Google Analytics data to define and com­pile the tar­get groups for the ads to be dis­played on all devices.

You have the option to per­ma­nent­ly object to remarketing/targeting across all devices by deac­ti­vat­ing per­son­al­ized adver­tis­ing. To do this, please fol­low this link: https://www.google.com/settings/ads/onweb/.

The con­sol­i­da­tion of the record­ed data in your Google account shall occur exclu­sive­ly based on your con­sent, which you may give to Google and also revoke there (Art. 6 Sect. 1 lit. a GDPR). Data record­ing process­es that are not con­sol­i­dat­ed in your Google account (for instance because you do not have a Google account or have object­ed to the con­sol­i­da­tion of data), the record­ing of data is based on Art. 6 Sect. 1 lit. f GDPR. The legit­i­mate inter­est aris­es from the fact that the oper­a­tor of the web­site has a legit­i­mate inter­est in the anonymized analy­sis of web­site vis­i­tor for adver­tis­ing pur­pos­es.

For fur­ther infor­ma­tion and the per­ti­nent data pro­tec­tion reg­u­la­tions, please con­sult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.

Google AdWords and Google Conversion Tracking

This web­site uses Google AdWords. AdWords is an online pro­mo­tion­al pro­gram of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

In con­junc­tion with Google AdWords, we use a tool called Conversion Tracking. If you click on an ad post­ed by Google, a cook­ie for Conversion Tracking pur­pos­es will be placed. Cookies are small text files the web brows­er places on the user’s com­put­er. These cook­ies expire after 30 days and are not used to per­son­al­ly iden­ti­fy users. If the user vis­its cer­tain pages of this web­site and the cook­ie has not yet expired, Google and we will be able to recog­nise that the user has clicked on an ad and has been linked to this page.

A dif­fer­ent cook­ie is allo­cat­ed to every Google AdWords cus­tomer. These cook­ies can­not be tracked via web­sites of AdWords cus­tomers. The infor­ma­tion obtained with the assis­tance of the Conversion cook­ie is used to gen­er­ate Conversion sta­tis­tics for AdWords cus­tomers who have opt­ed to use Conversion Tracking. The users receive the total num­ber of users that have clicked on their ads and have been linked to a page equipped with a Conversion Tracking tag. However, they do not receive any infor­ma­tion that would allow them to per­son­al­ly iden­ti­fy these users. If you do not want to par­tic­i­pate in track­ing, you have the option to object to this use by eas­i­ly deac­ti­vat­ing the Google Conversion Tracking cook­ie via your web brows­er under user set­tings. If you do this, you will not be includ­ed in the Conversion Tracking sta­tis­tics.

The stor­age of „Conversion“ cook­ies and the use of this track­ing tool are based on Art. 6 Sect. 1 lit. f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the analy­sis of user pat­terns, in order to opti­mize the operator’s web offer­ings and adver­tis­ing. If a cor­re­spond­ing agree­ment has been request­ed (e.g. an agree­ment to the stor­age of cook­ies), the pro­cess­ing takes place exclu­sive­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revoked at any time.

To review more detailed infor­ma­tion about Google AdWords and Google Conversion Tracking, please con­sult the Data Privacy Policies of Google at: https://policies.google.com/privacy?hl=en.

You can set up your brows­er in such a man­ner that you will be noti­fied any­time cook­ies are placed and you can per­mit cook­ies only in cer­tain cas­es or exclude the accep­tance of cook­ies in cer­tain instances or in gen­er­al and you can also acti­vate the auto­mat­ic dele­tion of cook­ies upon clos­ing of the brows­er. If you deac­ti­vate cook­ies, the func­tions of this web­site may be lim­it­ed.

Facebook Pixel

To mea­sure con­ver­sion rates, this web­site uses the vis­i­tor activ­i­ty pix­el of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“).

This tool allows the track­ing of page vis­i­tors after they have been linked to the web­site of the provider after click­ing on a Facebook ad. This makes it pos­si­ble to analyse the effec­tive­ness of Facebook ads for sta­tis­ti­cal and mar­ket research pur­pos­es and to opti­mize future adver­tis­ing cam­paigns.

For us as the oper­a­tors of this web­site, the col­lect­ed data is anony­mous. We are not in a posi­tion to arrive at any con­clu­sions as to the iden­ti­ty of users. However, Facebook archives the infor­ma­tion and process­es it, so that it is pos­si­ble to make a con­nec­tion to the respec­tive user pro­file and Facebook is in a posi­tion to use the data for its own pro­mo­tion­al pur­pos­es in com­pli­ance with the Facebook Data Usage Policy. This enables Facebook to dis­play ads on Facebook pages as well as in loca­tions out­side of Facebook. We as the oper­a­tor of this web­site have no con­trol over the use of such data.

The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in effec­tive adver­tis­ing cam­paigns, which also include social media. If a cor­re­spond­ing agree­ment has been request­ed (e.g. an agree­ment to the stor­age of cook­ies), the pro­cess­ing takes place exclu­sive­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revoked at any time.

In Facebook’s Data Privacy Policies, you will find addi­tion­al infor­ma­tion about the pro­tec­tion of your pri­va­cy at: https://www.facebook.com/about/privacy/.

You also have the option to deac­ti­vate the remar­ket­ing func­tion „Custom Audiences“ in the ad set­tings sec­tion under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.

If you do not have a Facebook account, you can deac­ti­vate any user based adver­tis­ing by Facebook on the web­site of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

7. Newsletter

Newsletter data

If you would like to sub­scribe to the newslet­ter offered on this web­site, we will need from you an e‑mail address as well as infor­ma­tion that allow us to ver­i­fy that you are the own­er of the e‑mail address pro­vid­ed and con­sent to the receipt of the newslet­ter. No fur­ther data shall be col­lect­ed or shall be col­lect­ed only on a vol­un­tary basis. We shall use such data only for the send­ing of the request­ed infor­ma­tion and shall not share such data with any third par­ties.

The pro­cess­ing of the infor­ma­tion entered into the newslet­ter sub­scrip­tion form shall occur exclu­sive­ly on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR). You may revoke the con­sent you have giv­en to the archiv­ing of data, the e‑mail address and the use of this infor­ma­tion for the send­ing of the newslet­ter at any time, for instance by click­ing on the „Unsubscribe“ link in the newslet­ter. This shall be with­out prej­u­dice to the law­ful­ness of any data pro­cess­ing trans­ac­tions that have tak­en place to date.

The data deposit­ed with us for the pur­pose of sub­scrib­ing to the newslet­ter will be stored by us until you unsub­scribe from the newslet­ter or the newslet­ter ser­vice provider and delet­ed from the newslet­ter dis­tri­b­u­tion list after you unsub­scribe from the newslet­ter. Data stored for oth­er pur­pos­es with us remain unaf­fect­ed.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your e‑mail address may be stored by us or the newslet­ter ser­vice provider in a black­list to pre­vent future mail­ings. The data from the black­list is used only for this pur­pose and not merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6 para. 1 lit. f GDPR). The stor­age in the black­list is indef­i­nite. You may object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

MailChimp

This web­site uses the ser­vices of MailChimp to send out its newslet­ters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Among oth­er things, MailChimp is a ser­vice that can be deployed to organ­ise and analyse the send­ing of newslet­ters. Whenever you enter data for the pur­pose of sub­scrib­ing to a newslet­ter (e.g. your e‑mail address), the infor­ma­tion is stored on MailChimp servers in the United States.

MailChimp is in pos­ses­sion of a cer­ti­fi­ca­tion that is in com­pli­ance with the „EU-US-Privacy-Shield.“ The „Privacy-Shield“ is a com­pact between the European Union (EU) and the United States of America (USA) that aims to war­rant the com­pli­ance with European data pro­tec­tion stan­dards in the United States.

With the assis­tance of the MailChimp tool, we can analyse the per­for­mance of our newslet­ter cam­paigns. If you open an e‑mail that has been sent through the MailChimp tool, a file that has been inte­grat­ed into the e‑mail (a so-called web-bea­con) con­nects to MailChimp’s servers in the United States. As a result, it can be deter­mined whether a newslet­ter mes­sage has been opened and which links the recip­i­ent pos­si­bly clicked on. Technical infor­ma­tion is also record­ed at that time (e.g. the time of access, the IP address, type of brows­er and oper­at­ing sys­tem). This infor­ma­tion can­not be allo­cat­ed to the respec­tive newslet­ter recip­i­ent. Their sole pur­pose is the per­for­mance of sta­tis­ti­cal analy­ses of newslet­ter cam­paigns. The results of such analy­ses can be used to tai­lor future newslet­ters to the inter­ests of their recip­i­ents more effec­tive­ly.

If you do not want to per­mit an analy­sis by MailChimp, you must unsub­scribe from the newslet­ter. We pro­vide a link for you to do this in every newslet­ter mes­sage. Moreover, you can also unsub­scribe from the newslet­ter right on the web­site.

The data is processed based on your con­sent (Art. 6 Sect. 1 lit. a GDPR). You may revoke any con­sent you have giv­en at any time by unsub­scrib­ing from the newslet­ter. This shall be with­out prej­u­dice to the law­ful­ness of any data pro­cess­ing trans­ac­tions that have tak­en place pri­or to your revo­ca­tion.

The data deposit­ed with us for the pur­pose of sub­scrib­ing to the newslet­ter will be stored by us until you unsub­scribe from the newslet­ter or the newslet­ter ser­vice provider and delet­ed from the newslet­ter dis­tri­b­u­tion list after you unsub­scribe from the newslet­ter. Data stored for oth­er pur­pos­es with us remain unaf­fect­ed.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your e‑mail address may be stored by us or the newslet­ter ser­vice provider in a black­list to pre­vent future mail­ings. The data from the black­list is used only for this pur­pose and not merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6 para. 1 lit. f GDPR). The stor­age in the black­list is indef­i­nite. You may object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

For more details, please con­sult the Data Privacy Policies of MailChimp at: https://mailchimp.com/legal/terms/.

Execution of a con­tract data pro­cess­ing agree­ment

We have exe­cut­ed a so-called „Data Processing Agreement“ with MailChimp, in which we man­date that MailChimp under­takes to pro­tect the data of our cus­tomers and to refrain from shar­ing it with third par­ties.

8. Plug-ins and Tools

YouTube with expanded data protection integration

Our web­site embeds videos of the web­site YouTube. The web­site oper­a­tor is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expand­ed data pro­tec­tion mode. According to YouTube, this mode ensures that YouTube does not store any infor­ma­tion about vis­i­tors to this web­site before they watch the video. Nevertheless, this does not nec­es­sar­i­ly mean that the shar­ing of data with YouTube part­ners can be ruled out as a result of the expand­ed data pro­tec­tion mode. For instance, regard­less of whether you are watch­ing a video, YouTube will always estab­lish a con­nec­tion with the Google DoubleClick net­work.

As soon as you start to play a YouTube video on this web­site, a con­nec­tion to YouTube’s servers will be estab­lished. As a result, the YouTube serv­er will be noti­fied, which of our pages you have vis­it­ed. If you are logged into your YouTube account while you vis­it our site, you enable YouTube to direct­ly allo­cate your brows­ing pat­terns to your per­son­al pro­file. You have the option to pre­vent this by log­ging out of your YouTube account.

Furthermore, after you have start­ed to play a video, YouTube will be able to place var­i­ous cook­ies on your device. With the assis­tance of these cook­ies, YouTube will be able to obtain infor­ma­tion about our web­site’s vis­i­tors. Among oth­er things, this infor­ma­tion will be used to gen­er­ate video sta­tis­tics with the aim of improv­ing the user friend­li­ness of the site and to pre­vent attempts to com­mit fraud. These cook­ies will stay on your device until you delete them.

Under cer­tain cir­cum­stances, addi­tion­al data pro­cess­ing trans­ac­tions may be trig­gered after you have start­ed to play a YouTube video, which are beyond our con­trol.

The use of YouTube is based on our inter­est in pre­sent­ing our online con­tent in an appeal­ing man­ner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legit­i­mate inter­est. If a cor­re­spond­ing agree­ment has been request­ed (e.g. an agree­ment to the stor­age of cook­ies), the pro­cess­ing takes place exclu­sive­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revoked at any time.

For more infor­ma­tion on how YouTube han­dles user data, please con­sult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

Google Web Fonts (local embedding)

This web­site uses so-called Web Fonts pro­vid­ed by Google to ensure the uni­form use of fonts on this site. These Google fonts are local­ly installed so that a con­nec­tion to Google’s servers will not be estab­lished in con­junc­tion with this appli­ca­tion.

9. Payment service providers and resellers

PayPal

Among oth­er options, we offer pay­ment via PayPal on this web­site. The provider of this pay­ment pro­cess­ing ser­vice is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L‑2449 Luxembourg (here­inafter referred to as „PayPal“).

If you choose pay­ment via PayPal, we will share the pay­ment infor­ma­tion you enter with PayPal.

The legal basis for the shar­ing of your data with PayPal is Art. 6 Sect. 1 lit. a GDPR (con­sent) as well as Art. 6 Sect. 1 lit. b GDPR (pro­cess­ing for the ful­fil­ment of a con­tract). You have the option to at any time revoke your con­sent to the pro­cess­ing of your data. Such a revo­ca­tion shall not have any impact on the effec­tive­ness of data pro­cess­ing trans­ac­tions that occurred in the past.

Klarna

Among oth­er options, we offer pay­ment through the ser­vices of Klarna on this web­site. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (here­inafter referred to as „Klarna“).

Klarna offers a wide spec­trum of pay­ment options (e.g. pay­ment by instal­ment). If you should decide to pay through Klarna (Klarna check­out solu­tion), Klarna will col­lect per­son­al data from you. For specifics, please review Klarna’s Data Protection Declaration by fol­low­ing this link: https://www.klarna.com/us/privacy-policy/.

Klarna uses cook­ies to opti­mise the use of Klarna check­out solu­tions. The opti­mi­sa­tion of the check­out solu­tion con­sti­tutes a legit­i­mate inter­est as defined in Art. 6 Sect. 1 lit. f GDPR. Cookies are small text files that can be stored on your device and that do not cause any dam­age to your device. The infor­ma­tion stays on your device until you delete it. For details con­cern­ing the use of Klarna cook­ies, please fol­low this link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

The legal basis for the shar­ing of your data with PayPal is Art. 6 Sect. 1 lit. a GDPR (con­sent) as well as Art. 6 Sect. 1 lit. b GDPR (pro­cess­ing for the ful­fil­ment of a con­tract). You have the option to at any time revoke your con­sent to the pro­cess­ing of your data. Such a revo­ca­tion shall not have any impact on the effec­tive­ness of data pro­cess­ing trans­ac­tions that occurred in the past.

10. Custom Services

Job Applications

We offer web­site vis­i­tors the oppor­tu­ni­ty to sub­mit job appli­ca­tions to us (e.g. via e‑mail, via postal ser­vices on by sub­mit­ting the online job appli­ca­tion form). Below, we will brief you on the scope, pur­pose and use of the per­son­al data col­lect­ed from you in con­junc­tion with the appli­ca­tion process. We assure you that the col­lec­tion, pro­cess­ing and use of your data will occur in com­pli­ance with the applic­a­ble data pri­va­cy rights and all oth­er statu­to­ry pro­vi­sions and that your data will always be treat­ed as strict­ly con­fi­den­tial.

Scope and pur­pose of the col­lec­tion of data

If you sub­mit a job appli­ca­tion to us, we will process any affil­i­at­ed per­son­al data (e.g. con­tact and com­mu­ni­ca­tions data, appli­ca­tion doc­u­ments, notes tak­en dur­ing job inter­views, etc.), if they are required to make a deci­sion con­cern­ing the estab­lish­ment or an employ­ment rela­tion­ship. The legal grounds for the afore­men­tioned are § 26 New GDPR accord­ing to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – pro­vid­ed you have giv­en us your con­sent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any con­sent giv­en at any time. Within our com­pa­ny, your per­son­al data will only be shared with indi­vid­u­als who are involved in the pro­cess­ing of your job appli­ca­tion.

If your job appli­ca­tion should result in your recruit­ment, the data you have sub­mit­ted will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the pur­pose of imple­ment­ing the employ­ment rela­tion­ship in our data pro­cess­ing sys­tem.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have sub­mit­ted on the basis of our legit­i­mate inter­ests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the end of the appli­ca­tion pro­ce­dure (rejec­tion or with­draw­al of the appli­ca­tion). Afterwards the data will be delet­ed, and the phys­i­cal appli­ca­tion doc­u­ments will be destroyed. The stor­age serves in par­tic­u­lar as evi­dence in the event of a legal dis­pute. If it is evi­dent that the data will be required after the expiry of the 6‑month peri­od (e.g. due to an impend­ing or pend­ing legal dis­pute), dele­tion will only take place when the pur­pose for fur­ther stor­age no longer applies.

Longer stor­age may also take place if you have giv­en your agree­ment (Article 6 (1) (a) GDPR) or if statu­to­ry data reten­tion require­ments pre­clude the dele­tion.

Admission to the appli­cant pool

If we do not make you a job offer, you may be able to join our appli­cant pool. In case of admis­sion, all doc­u­ments and infor­ma­tion from the appli­ca­tion will be trans­ferred to the appli­cant pool in order to con­tact you in case of suit­able vacan­cies.

Admission to the appli­cant pool is based exclu­sive­ly on your express agree­ment (Art. 6 para. 1 lit. a GDPR). The sub­mis­sion agree­ment is vol­un­tary and has no rela­tion to the ongo­ing appli­ca­tion pro­ce­dure. The affect­ed per­son can revoke his agree­ment at any time. In this case, the data from the appli­cant pool will be irrev­o­ca­bly delet­ed, pro­vid­ed there are no legal rea­sons for stor­age.

The data from the appli­cant pool will be irrev­o­ca­bly delet­ed no lat­er than two years after con­sent has been grant­ed.