1. An overview of data protection

General information

The fol­lo­wing infor­ma­ti­on will pro­vi­de you with an easy to navi­ga­te over­view of what will hap­pen with your per­so­nal data when you visit this web­si­te. The term „per­so­nal data“ com­pri­ses all data that can be used to per­so­nal­ly iden­ti­fy you. For detai­led infor­ma­ti­on about the sub­ject mat­ter of data pro­tec­ti­on, plea­se con­sult our Data Protection Declaration, which we have inclu­ded bene­ath this copy.

Data recording on this website

Who is the res­pon­si­ble par­ty for the recor­ding of data on this web­si­te (i.e. the „con­trol­ler“)?

The data on this web­si­te is pro­ces­sed by the ope­ra­tor of the web­si­te, who­se con­tact infor­ma­ti­on is avai­la­ble under sec­ti­on „Information Required by Law“ on this web­si­te.

How do we record your data?

We col­lect your data as a result of your sha­ring of your data with us. This may, for instan­ce be infor­ma­ti­on you enter into our con­tact form.

Our IT sys­tems auto­ma­ti­cally record other data when you visit our web­si­te. This data com­pri­ses pri­ma­ri­ly tech­ni­cal infor­ma­ti­on (e.g. web brow­ser, ope­ra­ting sys­tem or time the site was acces­sed). This infor­ma­ti­on is recor­ded auto­ma­ti­cally when you access this web­si­te.

What are the pur­po­ses we use your data for?

A por­ti­on of the infor­ma­ti­on is gene­ra­ted to gua­ran­tee the error free pro­vi­si­on of the web­si­te. Other data may be used to ana­ly­se your user pat­terns.

What rights do you have as far as your infor­ma­ti­on is con­cerned?

You have the right to recei­ve infor­ma­ti­on about the sour­ce, reci­pients and pur­po­ses of your archi­ved per­so­nal data at any time wit­hout having to pay a fee for such dis­clo­su­res. You also have the right to demand that your data are rec­ti­fied or era­di­ca­ted. Please do not hesi­ta­te to con­tact us at any time under the address dis­clo­sed in sec­ti­on „Information Required by Law“ on this web­si­te if you have ques­ti­ons about this or any other data pro­tec­ti­on rela­ted issues. You also have the right to log a com­plaint with the com­pe­tent super­vi­sing agen­cy.

Moreover, under cer­tain cir­cum­stan­ces, you have the right to demand the restric­ti­on of the pro­ces­sing of your per­so­nal data. For details, plea­se con­sult the Data Protection Declaration under sec­ti­on „Right to Restriction of Data Processing.“

Analysis tools and tools provided by third parties

There is a pos­si­bi­li­ty that your brow­sing pat­terns will be sta­tis­ti­cally ana­ly­sed when your visit this web­si­te. Such ana­ly­ses are per­for­med pri­ma­ri­ly with coo­kies and with what we refer to as ana­ly­sis pro­gram­mes. As a rule, the ana­ly­ses of your brow­sing pat­terns are con­duc­ted ano­ny­mous­ly; i.e. the brow­sing pat­terns can­not be tra­ced back to you.

You have the opti­on to object to such ana­ly­ses or you can pre­vent their per­for­man­ce by not using cer­tain tools. For detai­led infor­ma­ti­on about the tools and about your opti­ons to object, plea­se con­sult our Data Protection Declaration below.

2. Hosting

External Hosting

This web­si­te is hosted by an exter­nal ser­vi­ce pro­vi­der (host). Personal data col­lec­ted on this web­si­te are sto­red on the ser­vers of the host. These may inclu­de, but are not limi­ted to, IP addres­ses, con­tact requests, met­a­da­ta and com­mu­ni­ca­ti­ons, con­tract infor­ma­ti­on, con­tact infor­ma­ti­on, names, web page access, and other data gene­ra­ted through a web site.

The host is used for the pur­po­se of ful­fil­ling the con­tract with our poten­ti­al and exis­ting cus­to­mers (Art. 6 para. 1 lit. b DSGVO) and in the inte­rest of secu­re, fast and effi­cient pro­vi­si­on of our onli­ne ser­vi­ces by a pro­fes­si­o­nal pro­vi­der (Art. 6 para. 1 lit. f DSGVO).

Our host will only pro­cess your data to the extent neces­sa­ry to ful­fil its per­for­man­ce obli­ga­ti­ons and to fol­low our instruc­ti­ons with res­pect to such data.

Execution of a con­tract data pro­ces­sing agree­ment

In order to gua­ran­tee pro­ces­sing in com­pli­an­ce with data pro­tec­ti­on regu­la­ti­ons, we have con­clu­ded an order pro­ces­sing con­tract with our host.

3. General information and mandatory information

Data protection

The ope­ra­tors of this web­si­te and its pages take the pro­tec­ti­on of your per­so­nal data very serious­ly. Hence, we hand­le your per­so­nal data as con­fi­den­ti­al infor­ma­ti­on and in com­pli­an­ce with the sta­tu­to­ry data pro­tec­ti­on regu­la­ti­ons and this Data Protection Declaration.

Whenever you use this web­si­te, a vari­e­ty of per­so­nal infor­ma­ti­on will be col­lec­ted. Personal data com­pri­ses data that can be used to per­so­nal­ly iden­ti­fy you. This Data Protection Declaration explains which data we col­lect as well as the pur­po­ses we use this data for. It also explains how, and for which pur­po­se the infor­ma­ti­on is col­lec­ted.

We here­with advi­se you that the trans­mis­si­on of data via the Internet (i.e. through e‑mail com­mu­ni­ca­ti­ons) may be pro­ne to secu­ri­ty gaps. It is not pos­si­ble to com­ple­te­ly pro­tect data against third par­ty access.

Information about the responsible party (referred to as the „controller“ in the GDPR)

The data pro­ces­sing con­trol­ler on this web­si­te is:

Auda Invest GmbH & Co. KG
Wahrberg 4
24960 Glücksburg

Phone: +49 (0) 4631- 443 662
E‑mail: info@factorhair.de

The con­trol­ler is the natu­ral per­son or legal enti­ty that sin­gle-hand­ed­ly or joint­ly with others makes deci­si­ons as to the pur­po­ses of and resour­ces for the pro­ces­sing of per­so­nal data (e.g. names, e‑mail addres­ses, etc.).

Revocation of your consent to the processing of data

A wide ran­ge of data pro­ces­sing trans­ac­ti­ons are pos­si­ble only sub­ject to your express con­sent. You can also revo­ke at any time any con­sent you have alrea­dy given us. To do so, all you are requi­red to do is sent us an infor­mal noti­fi­ca­ti­on via e‑mail. This shall be wit­hout pre­ju­di­ce to the law­ful­ness of any data col­lec­ti­on that occur­red pri­or to your revo­ca­ti­on.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).

Right to log a complaint with the competent supervisory agency

In the event of vio­la­ti­ons of the GDPR, data sub­jects are entit­led to log a com­plaint with a super­vi­so­ry agen­cy, in par­ti­cu­lar in the mem­ber sta­te whe­re they usu­al­ly main­tain their domi­ci­le, pla­ce of work or at the pla­ce whe­re the alle­ged vio­la­ti­on occur­red. The right to log a com­plaint is in effect regard­less of any other admi­ni­stra­ti­ve or court pro­ceedings avai­la­ble as legal recour­ses.

Right to data portability

You have the right to demand that we hand over any data we auto­ma­ti­cally pro­cess on the basis of your con­sent or in order to ful­fil a con­tract be hand­ed over to you or a third par­ty in a com­mon­ly used, machi­ne rea­da­ble for­mat. If you should demand the direct trans­fer of the data to ano­ther con­trol­ler, this will be done only if it is tech­ni­cally fea­si­ble.

SSL and/or TLS encryption

For secu­ri­ty rea­sons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as pur­cha­se orders or inqui­ries you sub­mit to us as the web­si­te ope­ra­tor, this web­si­te uses either an SSL or a TLS encryp­ti­on pro­gram­me. You can recog­ni­se an encryp­ted con­nec­ti­on by chec­king whe­ther the address line of the brow­ser swit­ches from „http://“ to „https://“ and also by the appe­a­ran­ce of the lock icon in the brow­ser line.

If the SSL or TLS encryp­ti­on is acti­va­ted, data you trans­mit to us can­not be read by third par­ties.

Encrypted payment transactions on this website

If you are under an obli­ga­ti­on to sha­re your pay­ment infor­ma­ti­on (e.g. account num­ber if you give us the autho­ri­ty to debit your bank account) with us after you have ente­red into a fee-based con­tract with us, this infor­ma­ti­on is requi­red to pro­cess pay­ments.

Payment trans­ac­ti­ons using com­mon modes of paying (Visa/MasterCard, debit to your bank account) are pro­ces­sed exclu­si­ve­ly via encryp­ted SSL or TLS con­nec­ti­ons. You can recog­ni­se an encryp­ted con­nec­ti­on by chec­king whe­ther the address line of the brow­ser swit­ches from „http://“ to „https://“ and also by the appe­a­ran­ce of the lock icon in the brow­ser line.

If the com­mu­ni­ca­ti­on with us is encryp­ted, third par­ties will not be able to read the pay­ment infor­ma­ti­on you sha­re with us.

Information about, rectification and eradication of data

Within the sco­pe of the appli­ca­ble sta­tu­to­ry pro­vi­si­ons, you have the right to at any time demand infor­ma­ti­on about your archi­ved per­so­nal data, their sour­ce and reci­pients as well as the pur­po­se of the pro­ces­sing of your data. You may also have a right to have your data rec­ti­fied or era­di­ca­ted. If you have ques­ti­ons about this sub­ject mat­ter or any other ques­ti­ons about per­so­nal data, plea­se do not hesi­ta­te to con­tact us at any time at the address pro­vi­ded in sec­ti­on „Information Required by Law.“

Right to demand processing restrictions

You have the right to demand the impo­si­ti­on of restric­ti­ons as far as the pro­ces­sing of your per­so­nal data is con­cerned. To do so, you may con­tact us at any time at the address pro­vi­ded in sec­ti­on „Information Required by Law.“ The right to demand restric­ti­on of pro­ces­sing applies in the fol­lo­wing cases:

If you have restric­ted the pro­ces­sing of your per­so­nal data, the­se data – with the excep­ti­on of their archi­ving – may be pro­ces­sed only sub­ject to your con­sent or to claim, exer­ci­se or defend legal entit­le­ments or to pro­tect the rights of other natu­ral per­sons or legal enti­ties or for impor­tant public inte­rest rea­sons cited by the European Union or a mem­ber sta­te of the EU.

Rejection of unsolicited e‑mails

We here­with object to the use of con­tact infor­ma­ti­on publis­hed in con­junc­ti­on with the man­da­to­ry infor­ma­ti­on to be pro­vi­ded in sec­ti­on „Information Required by Law“ to send us pro­mo­ti­o­nal and infor­ma­ti­on mate­ri­al that we have not expres­sly requested. The ope­ra­tors of this web­si­te and its pages reser­ve the express right to take legal acti­on in the event of the unso­li­ci­ted sen­ding of pro­mo­ti­o­nal infor­ma­ti­on, for instan­ce via SPAM mes­sa­ges.

4. Recording of data on this website

Cookies

In some instan­ces, our web­si­te and its pages use so-cal­l­ed coo­kies. Cookies do not cau­se any dama­ge to your com­pu­ter and do not con­tain viruses. The pur­po­se of coo­kies is to make our web­si­te more user friend­ly, effec­ti­ve and more secu­re. Cookies are small text files that are pla­ced on your com­pu­ter and sto­red by your brow­ser.

Most of the coo­kies we use are so-cal­l­ed „ses­si­on coo­kies.“ They are auto­ma­ti­cally dele­ted after your lea­ve our site. Other coo­kies will remain archi­ved on your devi­ce until you dele­te them. These coo­kies ena­ble us to recog­ni­se your brow­ser the next time you visit our web­si­te.

You can adjust the set­tings of your brow­ser to make sure that you are noti­fied eve­ry time coo­kies are pla­ced and to ena­ble you to accept coo­kies only in spe­ci­fic cases or to exclu­de the accep­tan­ce of coo­kies for spe­ci­fic situ­a­ti­ons or in gene­ral and to acti­va­te the auto­ma­tic dele­ti­on of coo­kies when you clo­se your brow­ser. If you deac­ti­va­te coo­kies, the func­ti­ons of this web­si­te may be limi­ted.

Cookies that are requi­red for the per­for­man­ce of the elec­tro­nic com­mu­ni­ca­ti­ons trans­ac­ti­on or to pro­vi­de cer­tain func­ti­ons you want to use (e.g. the shop­ping cart func­ti­on), are sto­red on the basis of Art. 6 Sect. 1 lit. f GDPR. The web­si­te ope­ra­tor has a legi­ti­ma­te inte­rest in sto­ring coo­kies to ensu­re the tech­ni­cally error free and opti­mi­sed pro­vi­si­on of the operator’s ser­vi­ces. If a cor­res­pon­ding agree­ment has been requested (e.g. an agree­ment to the stor­a­ge of coo­kies), the pro­ces­sing takes pla­ce exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

If other coo­kies (e.g. coo­kies for the ana­ly­sis of your brow­sing pat­terns) should be sto­red, they are addres­sed sepa­ra­te­ly in this Data Protection Declaration.

Server log files

The pro­vi­der of this web­si­te and its pages auto­ma­ti­cally col­lects and sto­res infor­ma­ti­on in so-cal­l­ed ser­ver log files, which your brow­ser com­mu­ni­ca­tes to us auto­ma­ti­cally. The infor­ma­ti­on com­pri­ses:

This data is not mer­ged with other data sour­ces.

This data is recor­ded on the basis of Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in the tech­ni­cally error free depic­ti­on and the opti­mi­za­ti­on of the operator’s web­si­te. In order to achie­ve this, ser­ver log files must be recor­ded.

Contact form

If you sub­mit inqui­ries to us via our con­tact form, the infor­ma­ti­on pro­vi­ded in the con­tact form as well as any con­tact infor­ma­ti­on pro­vi­ded the­rein will be sto­red by us in order to hand­le your inquiry and in the event that we have fur­ther ques­ti­ons. We will not sha­re this infor­ma­ti­on wit­hout your con­sent.

The pro­ces­sing of the­se data is based on Art. 6 para. 1 lit. b GDPR, if your request is rela­ted to the exe­cu­ti­on of a con­tract or if it is neces­sa­ry to car­ry out pre-con­trac­tu­al mea­su­res. In all other cases the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the requests addres­sed to us (Art. 6 Para. 1 lit. f DSGVO) or on your agree­ment (Art. 6 Para. 1 lit. a DSGVO) if this has been requested.

The infor­ma­ti­on you have ente­red into the con­tact form shall remain with us until you ask us to era­di­ca­te the data, revo­ke your con­sent to the archi­ving of data or if the pur­po­se for which the infor­ma­ti­on is being archi­ved no lon­ger exists (e.g. after we have con­clu­ded our res­pon­se to your inquiry). This shall be wit­hout pre­ju­di­ce to any man­da­to­ry legal pro­vi­si­ons – in par­ti­cu­lar reten­ti­on peri­ods.

Request by e‑mail, telephone or fax

If you con­tact us by e‑mail, telep­ho­ne or fax, your request, inclu­ding all resul­ting per­so­nal data (name, request) will be sto­red and pro­ces­sed by us for the pur­po­se of pro­ces­sing your request. We do not pass the­se data on wit­hout your con­sent.

The pro­ces­sing of the­se data is based on Art. 6 para. 1 lit. b GDPR, if your request is rela­ted to the exe­cu­ti­on of a con­tract or if it is neces­sa­ry to car­ry out pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on your con­sent (Article 6 (1) a GDPR) and/or on our legi­ti­ma­te inte­rests (Article 6 (1) (f) GDPR), sin­ce we have a legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of requests addres­sed to us.

The data sent by you to us via con­tact requests remain with us until you request us to dele­te, revo­ke your con­sent to the stor­a­ge or the pur­po­se for the data stor­a­ge lap­ses (e.g. after com­ple­ti­on of your request). Mandatory sta­tu­to­ry pro­vi­si­ons – in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods – remain unaf­fec­ted.

Registration on this website

You have the opti­on to regis­ter on this web­si­te to be able to use addi­ti­o­nal web­si­te func­ti­ons. We shall use the data you enter only for the pur­po­se of using the res­pec­ti­ve offer or ser­vi­ce you have regis­tered for. The requi­red infor­ma­ti­on we request at the time of regi­stra­ti­on must be ente­red in full. Otherwise we shall reject the regi­stra­ti­on.

To noti­fy you of any impor­tant chan­ges to the sco­pe of our port­fo­lio or in the event of tech­ni­cal modi­fi­ca­ti­ons, we shall use the e‑mail address pro­vi­ded during the regi­stra­ti­on pro­cess.

We shall pro­cess the data ente­red during the regi­stra­ti­on pro­cess on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR).

The data recor­ded during the regi­stra­ti­on pro­cess shall be sto­red by us as long as you are regis­tered on this web­si­te. Subsequently, such data shall be dele­ted. This shall be wit­hout pre­ju­di­ce to man­da­to­ry sta­tu­to­ry reten­ti­on obli­ga­ti­ons.

Registration with Facebook Connect

Instead of regis­tering direct­ly on this web­si­te, you also have the opti­on to regis­ter using Facebook Connect. The pro­vi­der of this ser­vi­ce is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you deci­de to regis­ter via Facebook Connect and click on the „Login with Facebook“/„Connect with Facebook“ but­ton, you will be auto­ma­ti­cally con­nec­ted to the Facebook plat­form. There, you can log in using your user­na­me and pass­word. As a result, your Facebook pro­fi­le will be lin­ked to this web­si­te or our ser­vi­ces. This link gives us access to the data you have archi­ved with Facebook. These data com­pri­se pri­ma­ri­ly the fol­lo­wing:

This infor­ma­ti­on will be used to set up, pro­vi­de and cus­to­mi­se your account.

The regi­stra­ti­on via Facebook Connect and the affi­li­a­ted data pro­ces­sing trans­ac­ti­ons are imple­men­ted on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR). You may revo­ke this con­sent at any time, which shall affect all futu­re trans­ac­ti­ons the­re­af­ter.

For more infor­ma­ti­on, plea­se con­sult the Facebook Terms of Use and the Facebook Data Privacy Policies. Use the­se links to access this infor­ma­ti­on: https://www.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

The comment function on this website

When you use the com­ment func­ti­on on this web­si­te, infor­ma­ti­on on the time the com­ment was gene­ra­ted and your e‑mail-address and, if you are not pos­ting ano­ny­mous­ly, the user name you have selec­ted will be archi­ved in addi­ti­on to your com­ments.

Storage of the IP address

Our com­ment func­ti­on sto­res the IP addres­ses of all users who enter com­ments. Given that we do not review the com­ments pri­or to publis­hing them, we need this infor­ma­ti­on in order to take acti­on against the author in the event of rights vio­la­ti­ons, such as defa­ma­ti­on or pro­pa­gan­da.

Subscribing to com­ments

As a user of this web­si­te, you have the opti­on to sub­scri­be to com­ments after you have regis­tered. You will recei­ve a con­fir­ma­ti­on e‑mail, the pur­po­se of which is to veri­fy whe­ther you are the actu­al hol­der of the pro­vi­ded e‑mail address. You can deac­ti­va­te this func­ti­on at any time by fol­lo­wing a res­pec­ti­ve link in the infor­ma­ti­on e‑mails. The data ente­red in con­junc­ti­on with sub­scrip­ti­ons to com­ments will be dele­ted in this case. However, if you have com­mu­ni­ca­ted this infor­ma­ti­on to us for other pur­po­ses and from a dif­fe­rent loca­ti­on (e.g. when sub­scri­bing to the news­let­ter), the data shall remain in our pos­ses­si­on.

Storage peri­od for com­ments

Comments and any affi­li­a­ted infor­ma­ti­on (e.g. the IP address) shall be sto­red by us and remain on this web­si­te until the con­tent the com­ment per­tai­ned to has been dele­ted in its enti­re­ty or if the com­ments had to be dele­ted for legal rea­sons (e.g. insul­ting com­ments).

Legal basis

Comments are sto­red on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revo­ke at any time any con­sent you have alrea­dy given us. To do so, all you are requi­red to do is sent us an infor­mal noti­fi­ca­ti­on via e‑mail. This shall be wit­hout pre­ju­di­ce to the law­ful­ness of any data col­lec­ti­on that occur­red pri­or to your revo­ca­ti­on.

Processing of data (customer and contract data)

We col­lect, pro­cess and use per­so­nal data only to the extent neces­sa­ry for the esta­blish­ment, con­tent orga­ni­za­ti­on or chan­ge of the legal rela­ti­ons­hip (data inven­to­ry). These acti­ons are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which per­mits the pro­ces­sing of data for the ful­fil­ment of a con­tract or pre-con­trac­tu­al acti­ons. We col­lect, pro­cess and use per­so­nal data con­cerning the use of this web­si­te (usa­ge data) only to the extent that this is neces­sa­ry to make it pos­si­ble for users to uti­li­ze the ser­vi­ces and to bill for them.

The col­lec­ted cus­to­mer data shall be era­di­ca­ted upon com­ple­ti­on of the order or the ter­mi­na­ti­on of the busi­ness rela­ti­ons­hip. This shall be wit­hout pre­ju­di­ce to any sta­tu­to­ry reten­ti­on man­da­tes.

Data transfer upon closing of contracts for online stores, retailers and the shipment of merchandise

We sha­re per­so­nal data with third par­ties only if this is neces­sa­ry in con­junc­ti­on with the hand­ling of the con­tract; for instan­ce, with com­pa­nies entrusted with the ship­ment of goods or the finan­ci­al insti­tu­ti­on tas­ked with the pro­ces­sing of pay­ments. Any fur­ther trans­fer of data shall not occur or shall only occur if you have expres­sly con­sen­ted to the trans­fer. Any sha­ring of your data with third par­ties in the absen­ce of your express con­sent, for instan­ce for adver­ti­sing pur­po­ses, shall not occur.

The basis for the pro­ces­sing of data is Art. 6 Sect. 1 lit. b GDPR, which per­mits the pro­ces­sing of data for the ful­fil­ment of a con­tract or for pre-con­trac­tu­al acti­ons.

5. Social media

Facebook plug-ins (Like & Share button)

We have inte­gra­ted plug-ins of the soci­al net­work Facebook, pro­vi­ded by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, on this web­si­te. You will be able to recog­ni­se Facebook plug-ins by the Facebook logo or the „Like“ but­ton on this web­si­te. An over­view of the Facebook plug-ins is avai­la­ble under the fol­lo­wing link: https://developers.facebook.com/docs/plugins/.

Whenever you visit this web­si­te and its pages, the plug-in will esta­blish a direct con­nec­ti­on bet­ween your brow­ser and the Facebook ser­ver. As a result, Facebook will recei­ve the infor­ma­ti­on that you have visi­ted this web­si­te with your plug-in. However, if you click the Facebook „Like“ but­ton whi­le you are log­ged into your Facebook account, you can link the con­tent of this web­si­te and its pages with your Facebook pro­fi­le. As a result, Facebook will be able to allo­ca­te the visit to this web­si­te and its pages to your Facebook user account. We have to point out, that we as the pro­vi­der of the web­si­te do not have any know­led­ge of the trans­fer­red data and its use by Facebook. For more detai­led infor­ma­ti­on, plea­se con­sult the Data Privacy Declaration of Facebook at: https://www.facebook.com/privacy/explanation.

If you do not want Facebook to be able to allo­ca­te your visit to this web­si­te and its pages to your Facebook user account, plea­se log out of your Facebook account whi­le you are on this web­si­te.

The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in being as visi­ble as pos­si­ble on soci­al media.

Twitter plug-in

We have inte­gra­ted func­ti­ons of the soci­al media plat­form Twitter into this web­si­te. These func­ti­ons are pro­vi­ded by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. While you use Twitter and the „Re-Tweet“ func­ti­on, web­si­tes you visit are lin­ked to your Twitter account and dis­clo­sed to other users. During this pro­cess, data are trans­fer­red to Twitter as well. We must point out, that we, the pro­vi­ders of the web­si­te and its pages do not know any­thing about the con­tent of the data trans­fer­red and the use of this infor­ma­ti­on by Twitter. For more details, plea­se con­sult Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.

The use of Twitter plug-ins is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in being as visi­ble as pos­si­ble on soci­al media.

You have the opti­on to reset your data pro­tec­ti­on set­tings on Twitter under the account set­tings at https://twitter.com/account/settings.

Instagram plug-in

We have inte­gra­ted func­ti­ons of the public media plat­form Instagram into this web­si­te. These func­ti­ons are being offe­red by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are log­ged into your Instagram account, you may click the Instagram but­ton to link con­tents from this web­si­te to your Instagram pro­fi­le. This ena­bles Instagram to allo­ca­te your visit to this web­si­te to your user account. We have to point out that we as the pro­vi­der of the web­si­te and its pages do not have any know­led­ge of the con­tent of the data trans­fer­red and its use by Instagram.

The use of the Instagram plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in being as visi­ble as pos­si­ble on soci­al media.

For more infor­ma­ti­on on this sub­ject, plea­se con­sult Instagram’s Data Privacy Declaration at: https://instagram.com/about/legal/privacy/.

Tumblr plug-in

This web­si­te and its pages use but­tons of the Tumblr plat­form. The pro­vi­der is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA.

These but­tons ena­ble you to sha­re a report or a page on Tumblr or to fol­low the pro­vi­der on Tumblr. If you access one of our web­si­tes via the Tumblr but­ton, your brow­ser will esta­blish a direct con­nec­ti­on with Tumblr’s ser­vers. We do not have any con­trol over the volu­me of data Tumblr col­lects and trans­fers with the assis­tan­ce of this plug-in. Based on the cur­rent sta­tus of the infor­ma­ti­on we have the IP address of the user and the URL of the res­pec­ti­ve web­si­te are both trans­fer­red.

The use of the Tumblr plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in being as visi­ble as pos­si­ble on soci­al media.

For fur­ther infor­ma­ti­on on this sub­ject, plea­se con­sult Tumblr’s Data Privacy Declaration at: https://www.tumblr.com/privacy/de.

LinkedIn plug-in

This web­si­te uses func­ti­ons of the LinkedIn net­work. The pro­vi­der is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Any time you access a page of this web­si­te that con­tains func­ti­ons of LinkedIn, a con­nec­ti­on to LinkedIn’s ser­vers is esta­blis­hed. LinkedIn is noti­fied that you have visi­ted this web­si­te with your IP address. If you click on LinkedIn’s „Recommend“ but­ton and are log­ged into your LinkedIn account at the time, LinkedIn will be in a posi­ti­on to allo­ca­te your visit to this web­si­te to your user account. We have to point out that we as the pro­vi­der of the web­si­tes do not have any know­led­ge of the con­tent of the trans­fer­red data and its use by LinkedIn.

The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in being as visi­ble as pos­si­ble on soci­al media.

For fur­ther infor­ma­ti­on on this sub­ject, plea­se con­sult LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.

XING plug-in

This web­si­te uses func­ti­ons of the XING net­work. The pro­vi­der is the XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany.

Any time one of our sites/pages that con­tains func­ti­ons of XING is acces­sed, a con­nec­ti­on with XING’s ser­vers is esta­blis­hed. As far as we know, this does not result in the archi­ving of any per­so­nal data. In par­ti­cu­lar, the ser­vi­ce does not sto­re any IP addres­ses or ana­ly­se user pat­terns.

The use of the XING plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in being as visi­ble as pos­si­ble on soci­al media.

For more infor­ma­ti­on on data pro­tec­ti­on and the XING sha­re but­ton plea­se con­sult the Data Protection Declaration of Xing at: https://www.xing.com/app/share?op=data_protection.

Pinterest plug-in

We use soci­al plug-ins of the soci­al net­work Pinterest on this web­si­te. The net­work is ope­ra­ted by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103–490, USA („Pinterest“).

If you access a site or page that con­tains such a plug-in, your brow­ser will esta­blish a direct con­nec­ti­on with Pinterest’s ser­vers. During this pro­cess, the plug-in trans­fers log data to Pinterest’s ser­vers in the United States. The log data may pos­si­bly inclu­de your IP address, the address of the web­si­tes you visi­ted, which also con­tain Pinterest func­ti­ons. The infor­ma­ti­on also inclu­des the type and set­tings of your brow­ser, the data and time of the inquiry, how you use Pinterest and coo­kies.

The use of the Pinterest plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in being as visi­ble as pos­si­ble on soci­al media.

For more infor­ma­ti­on con­cerning the pur­po­se, sco­pe and con­ti­nue pro­ces­sing and use of the data by Pinterest as well as your affi­li­a­ted rights and opti­ons to pro­tect your pri­va­te infor­ma­ti­on, plea­se con­sult the data pri­va­cy infor­ma­ti­on of Pinterest at: https://about.pinterest.com/en/privacy-policy.

6. Analysis tools and advertising

Google Analytics

This web­si­te uses func­ti­ons of the web ana­ly­sis ser­vi­ce Google Analytics. The pro­vi­der of this ser­vi­ce is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-cal­l­ed coo­kies. Cookies are text files, which are sto­red on your com­pu­ter and that ena­ble an ana­ly­sis of the use of the web­si­te by users. The infor­ma­ti­on gene­ra­ted by coo­kies on your use of this web­si­te is usu­al­ly trans­fer­red to a Google ser­ver in the United States, whe­re it is sto­red.

The stor­a­ge of Google Analytics coo­kies and the uti­li­za­ti­on of this ana­ly­sis tool are based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of this web­si­te has a legi­ti­ma­te inte­rest in the ana­ly­sis of user pat­terns to opti­mi­ze both, the ser­vi­ces offe­red onli­ne and the operator’s adver­ti­sing acti­vi­ties. If a cor­res­pon­ding agree­ment has been requested (e.g. an agree­ment to the stor­a­ge of coo­kies), the pro­ces­sing takes pla­ce exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

IP ano­ny­mi­za­ti­on

On this web­si­te, we have acti­va­ted the IP ano­ny­mi­za­ti­on func­ti­on. As a result, your IP address will be abbre­vi­a­ted by Google within the mem­ber sta­tes of the European Union or in other sta­tes that have rati­fied the Convention on the European Economic Area pri­or to its trans­mis­si­on to the United States. The full IP address will be trans­mit­ted to one of Google’s ser­vers in the United States and abbre­vi­a­ted the­re only in excep­ti­o­nal cases. On behalf of the ope­ra­tor of this web­si­te, Google shall use this infor­ma­ti­on to ana­ly­se your use of this web­si­te to gene­ra­te reports on web­si­te acti­vi­ties and to ren­der other ser­vi­ces to the ope­ra­tor of this web­si­te that are rela­ted to the use of the web­si­te and the Internet. The IP address trans­mit­ted in con­junc­ti­on with Google Analytics from your brow­ser shall not be mer­ged with other data in Google’s pos­ses­si­on.

Browser plug-in

You do have the opti­on to pre­vent the archi­ving of coo­kies by making per­ti­nent chan­ges to the set­tings of your brow­ser soft­wa­re. However, we have to point out that in this case you may not be able to use all of the func­ti­ons of this web­si­te to their ful­lest extent. Moreover, you have the opti­on pre­vent the recor­ding of the data gene­ra­ted by the coo­kie and affi­li­a­ted with your use of the web­si­te (inclu­ding your IP address) by Google as well as the pro­ces­sing of this data by Google by down­loa­ding and instal­ling the brow­ser plug-in avai­la­ble under the fol­lo­wing link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to the recor­ding of data

You have the opti­on to pre­vent the recor­ding of your data by Google Analytics by clic­king on the fol­lo­wing link. This will result in the pla­ce­ment of an opt out coo­kie, which pre­vents the recor­ding of your data during futu­re visits to this web­si­te: Google Analytics deac­ti­va­ti­on.

For more infor­ma­ti­on about the hand­ling of user data by Google Analytics, plea­se con­sult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data pro­ces­sing

We have exe­cu­ted a con­tract data pro­ces­sing agree­ment with Google and are imple­men­ting the strin­gent pro­vi­si­ons of the German data pro­tec­ti­on agen­cies to the ful­lest when using Google Analytics.

Demographic para­me­ters pro­vi­ded by Google Analytics

This web­si­te uses the func­ti­on „demo­grap­hic para­me­ters“ pro­vi­ded by Google Analytics. It makes it pos­si­ble to gene­ra­te reports pro­vi­ding infor­ma­ti­on on the age, gen­der and inte­rests of web­si­te visi­tors. The sour­ces of this infor­ma­ti­on are inte­rest-rela­ted adver­ti­sing by Google as well as visi­tor data obtai­ned from third par­ty pro­vi­ders. This data can­not be allo­ca­ted to a spe­ci­fic indi­vi­du­al. You have the opti­on to deac­ti­va­te this func­ti­on at any time by making per­ti­nent set­tings chan­ges for adver­ti­sing in your Google account or you can gener­al­ly pro­hi­bit the recor­ding of your data by Google Analytics as explai­ned in sec­ti­on „Objection to the recor­ding of data.“

Archiving peri­od

Data on the user or inci­dent level sto­red by Google lin­ked to coo­kies, user IDs or adver­ti­sing IDs (e.g. DoubleClick coo­kies, Android adver­ti­sing ID) will be ano­ny­mi­zed or dele­ted after 26 month. For details plea­se click the fol­lo­wing link: https://support.google.com/analytics/answer/7667196?hl=en

WordPress Stats

This web­si­te uses the WordPress tool Stats in order to sta­tis­ti­cally ana­ly­se user access infor­ma­ti­on. The pro­vi­der of the solu­ti­on is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110–4929, USA.

WordPress Stats uses coo­kies that are sto­red on your com­pu­ter and that make it pos­si­ble to ana­ly­se the use of this web­si­te. The infor­ma­ti­on gene­ra­ted by the coo­kies con­cerning the use of our web­si­te is sto­red on ser­vers in the United States. Your IP address is ren­de­red ano­ny­mous after pro­ces­sing and pri­or to the stor­a­ge of the data.

„WordPress Stats“ coo­kies will remain on your devi­ce until you dele­te them.

The stor­a­ge of „WordPress Stats“ coo­kies and the use of this ana­ly­sis tool are based on Art. 6 Sect. 1 lit. f GDPR. The web­si­te ope­ra­tor has a legi­ti­ma­te inte­rest in the ano­ny­mous ana­ly­sis of user pat­terns, in order to opti­mi­ze the operator’s web offe­rings and adver­ti­sing. If a cor­res­pon­ding agree­ment has been requested (e.g. an agree­ment to the stor­a­ge of coo­kies), the pro­ces­sing takes pla­ce exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

You can set up your brow­ser in such a man­ner that you will be noti­fied any­ti­me coo­kies are pla­ced and you can per­mit coo­kies only in cer­tain cases or exclu­de the accep­tan­ce of coo­kies in cer­tain instan­ces or in gene­ral and you can also acti­va­te the auto­ma­tic dele­ti­on of coo­kies upon clo­sing of the brow­ser. If you deac­ti­va­te coo­kies, the func­ti­ons of this web­si­te may be limi­ted.

You do have the opti­on to object to the col­lec­ti­on and use of your data for futu­re impli­ca­ti­ons by pla­cing an opt out coo­kie into your brow­ser by clic­king on the fol­lo­wing link: https://www.quantcast.com/opt-out/.

If you dele­te the coo­kies on your com­pu­ter, you must set the opt-out coo­kie again.

Google Analytics Remarketing

This web­si­te uses the func­ti­ons of Google Analytics Remarketing in com­bi­na­ti­on with the func­ti­ons of Google AdWords and Google DoubleClick, which work on all devi­ces. The pro­vi­der of the­se solu­ti­ons is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

This func­ti­on makes it pos­si­ble to con­nect the adver­ti­sing tar­get groups gene­ra­ted with Google Analytics Remarketing with the func­ti­ons of Google AdWords and Google DoubleClick, which work on all devi­ces. This makes it pos­si­ble to dis­play inte­rest-based cus­to­mi­zed adver­ti­sing mes­sa­ges, depen­ding on your pri­or usa­ge and brow­sing pat­terns on a devi­ce (e.g. cell pho­ne) in a man­ner tail­ored to you as well as on any of your devi­ces (e.g. tablet or PC).

If you have given us per­ti­nent con­sent, Google will con­nect your web and app brow­ser pro­gres­si­ons with your Google account for this pur­po­se. As a result, it is pos­si­ble to dis­play the same per­so­na­li­zed adver­ti­sing mes­sa­ges on eve­ry devi­ce you log into with your Google account.

To sup­port this func­ti­on, Google Analytics records Google authen­ti­ca­ted IDs of users that are tem­po­ra­ri­ly con­nec­ted with our Google Analytics data to defi­ne and com­pi­le the tar­get groups for the ads to be dis­play­ed on all devi­ces.

You have the opti­on to per­ma­nent­ly object to remarketing/targeting across all devi­ces by deac­ti­va­ting per­so­na­li­zed adver­ti­sing. To do this, plea­se fol­low this link: https://www.google.com/settings/ads/onweb/.

The con­so­li­da­ti­on of the recor­ded data in your Google account shall occur exclu­si­ve­ly based on your con­sent, which you may give to Google and also revo­ke the­re (Art. 6 Sect. 1 lit. a GDPR). Data recor­ding pro­ces­ses that are not con­so­li­da­ted in your Google account (for instan­ce becau­se you do not have a Google account or have objec­ted to the con­so­li­da­ti­on of data), the recor­ding of data is based on Art. 6 Sect. 1 lit. f GDPR. The legi­ti­ma­te inte­rest ari­ses from the fact that the ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in the ano­ny­mi­zed ana­ly­sis of web­si­te visi­tor for adver­ti­sing pur­po­ses.

For fur­ther infor­ma­ti­on and the per­ti­nent data pro­tec­ti­on regu­la­ti­ons, plea­se con­sult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.

Google AdWords and Google Conversion Tracking

This web­si­te uses Google AdWords. AdWords is an onli­ne pro­mo­ti­o­nal pro­gram of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

In con­junc­ti­on with Google AdWords, we use a tool cal­l­ed Conversion Tracking. If you click on an ad posted by Google, a coo­kie for Conversion Tracking pur­po­ses will be pla­ced. Cookies are small text files the web brow­ser pla­ces on the user’s com­pu­ter. These coo­kies expi­re after 30 days and are not used to per­so­nal­ly iden­ti­fy users. If the user visits cer­tain pages of this web­si­te and the coo­kie has not yet expi­red, Google and we will be able to recog­ni­se that the user has click­ed on an ad and has been lin­ked to this page.

A dif­fe­rent coo­kie is allo­ca­ted to eve­ry Google AdWords cus­to­mer. These coo­kies can­not be track­ed via web­si­tes of AdWords cus­to­mers. The infor­ma­ti­on obtai­ned with the assis­tan­ce of the Conversion coo­kie is used to gene­ra­te Conversion sta­tis­tics for AdWords cus­to­mers who have opted to use Conversion Tracking. The users recei­ve the total num­ber of users that have click­ed on their ads and have been lin­ked to a page equip­ped with a Conversion Tracking tag. However, they do not recei­ve any infor­ma­ti­on that would allow them to per­so­nal­ly iden­ti­fy the­se users. If you do not want to par­ti­ci­pa­te in trac­king, you have the opti­on to object to this use by easi­ly deac­ti­va­ting the Google Conversion Tracking coo­kie via your web brow­ser under user set­tings. If you do this, you will not be inclu­ded in the Conversion Tracking sta­tis­tics.

The stor­a­ge of „Conversion“ coo­kies and the use of this trac­king tool are based on Art. 6 Sect. 1 lit. f GDPR. The web­si­te ope­ra­tor has a legi­ti­ma­te inte­rest in the ana­ly­sis of user pat­terns, in order to opti­mi­ze the operator’s web offe­rings and adver­ti­sing. If a cor­res­pon­ding agree­ment has been requested (e.g. an agree­ment to the stor­a­ge of coo­kies), the pro­ces­sing takes pla­ce exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

To review more detai­led infor­ma­ti­on about Google AdWords and Google Conversion Tracking, plea­se con­sult the Data Privacy Policies of Google at: https://policies.google.com/privacy?hl=en.

You can set up your brow­ser in such a man­ner that you will be noti­fied any­ti­me coo­kies are pla­ced and you can per­mit coo­kies only in cer­tain cases or exclu­de the accep­tan­ce of coo­kies in cer­tain instan­ces or in gene­ral and you can also acti­va­te the auto­ma­tic dele­ti­on of coo­kies upon clo­sing of the brow­ser. If you deac­ti­va­te coo­kies, the func­ti­ons of this web­si­te may be limi­ted.

Facebook Pixel

To mea­su­re con­ver­si­on rates, this web­si­te uses the visi­tor acti­vi­ty pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“).

This tool allows the trac­king of page visi­tors after they have been lin­ked to the web­si­te of the pro­vi­der after clic­king on a Facebook ad. This makes it pos­si­ble to ana­ly­se the effec­ti­ve­ness of Facebook ads for sta­tis­ti­cal and mar­ket research pur­po­ses and to opti­mi­ze futu­re adver­ti­sing cam­paigns.

For us as the ope­ra­tors of this web­si­te, the col­lec­ted data is ano­ny­mous. We are not in a posi­ti­on to arri­ve at any con­clu­si­ons as to the iden­ti­ty of users. However, Facebook archi­ves the infor­ma­ti­on and pro­ces­ses it, so that it is pos­si­ble to make a con­nec­ti­on to the res­pec­ti­ve user pro­fi­le and Facebook is in a posi­ti­on to use the data for its own pro­mo­ti­o­nal pur­po­ses in com­pli­an­ce with the Facebook Data Usage Policy. This ena­bles Facebook to dis­play ads on Facebook pages as well as in loca­ti­ons out­si­de of Facebook. We as the ope­ra­tor of this web­si­te have no con­trol over the use of such data.

The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­si­te has a legi­ti­ma­te inte­rest in effec­ti­ve adver­ti­sing cam­paigns, which also inclu­de soci­al media. If a cor­res­pon­ding agree­ment has been requested (e.g. an agree­ment to the stor­a­ge of coo­kies), the pro­ces­sing takes pla­ce exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

In Facebook’s Data Privacy Policies, you will find addi­ti­o­nal infor­ma­ti­on about the pro­tec­ti­on of your pri­va­cy at: https://www.facebook.com/about/privacy/.

You also have the opti­on to deac­ti­va­te the remar­ke­ting func­ti­on „Custom Audiences“ in the ad set­tings sec­ti­on under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.

If you do not have a Facebook account, you can deac­ti­va­te any user based adver­ti­sing by Facebook on the web­si­te of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

7. Newsletter

Newsletter data

If you would like to sub­scri­be to the news­let­ter offe­red on this web­si­te, we will need from you an e‑mail address as well as infor­ma­ti­on that allow us to veri­fy that you are the owner of the e‑mail address pro­vi­ded and con­sent to the receipt of the news­let­ter. No fur­ther data shall be col­lec­ted or shall be col­lec­ted only on a volun­ta­ry basis. We shall use such data only for the sen­ding of the requested infor­ma­ti­on and shall not sha­re such data with any third par­ties.

The pro­ces­sing of the infor­ma­ti­on ente­red into the news­let­ter sub­scrip­ti­on form shall occur exclu­si­ve­ly on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR). You may revo­ke the con­sent you have given to the archi­ving of data, the e‑mail address and the use of this infor­ma­ti­on for the sen­ding of the news­let­ter at any time, for instan­ce by clic­king on the „Unsubscribe“ link in the news­let­ter. This shall be wit­hout pre­ju­di­ce to the law­ful­ness of any data pro­ces­sing trans­ac­ti­ons that have taken pla­ce to date.

The data depo­si­ted with us for the pur­po­se of sub­scri­bing to the news­let­ter will be sto­red by us until you unsub­scri­be from the news­let­ter or the news­let­ter ser­vi­ce pro­vi­der and dele­ted from the news­let­ter dis­tri­bu­ti­on list after you unsub­scri­be from the news­let­ter. Data sto­red for other pur­po­ses with us remain unaf­fec­ted.

After you unsub­scri­be from the news­let­ter dis­tri­bu­ti­on list, your e‑mail address may be sto­red by us or the news­let­ter ser­vi­ce pro­vi­der in a blac­k­list to pre­vent futu­re mai­lings. The data from the blac­k­list is used only for this pur­po­se and not mer­ged with other data. This ser­ves both your inte­rest and our inte­rest in com­ply­ing with the legal requi­re­ments when sen­ding news­let­ters (legi­ti­ma­te inte­rest within the mea­ning of Art. 6 para. 1 lit. f GDPR). The stor­a­ge in the blac­k­list is inde­fi­ni­te. You may object to the stor­a­ge if your inte­rests out­weigh our legi­ti­ma­te inte­rest.

MailChimp

This web­si­te uses the ser­vi­ces of MailChimp to send out its news­let­ters. The pro­vi­der is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Among other things, MailChimp is a ser­vi­ce that can be deploy­ed to orga­ni­se and ana­ly­se the sen­ding of news­let­ters. Whenever you enter data for the pur­po­se of sub­scri­bing to a news­let­ter (e.g. your e‑mail address), the infor­ma­ti­on is sto­red on MailChimp ser­vers in the United States.

MailChimp is in pos­ses­si­on of a cer­ti­fi­ca­ti­on that is in com­pli­an­ce with the „EU-US-Privacy-Shield.“ The „Privacy-Shield“ is a com­pact bet­ween the European Union (EU) and the United States of America (USA) that aims to war­rant the com­pli­an­ce with European data pro­tec­ti­on standards in the United States.

With the assis­tan­ce of the MailChimp tool, we can ana­ly­se the per­for­man­ce of our news­let­ter cam­paigns. If you open an e‑mail that has been sent through the MailChimp tool, a file that has been inte­gra­ted into the e‑mail (a so-cal­l­ed web-bea­con) con­nects to MailChimp’s ser­vers in the United States. As a result, it can be deter­mi­ned whe­ther a news­let­ter mes­sa­ge has been ope­ned and which links the reci­pient pos­si­bly click­ed on. Technical infor­ma­ti­on is also recor­ded at that time (e.g. the time of access, the IP address, type of brow­ser and ope­ra­ting sys­tem). This infor­ma­ti­on can­not be allo­ca­ted to the res­pec­ti­ve news­let­ter reci­pient. Their sole pur­po­se is the per­for­man­ce of sta­tis­ti­cal ana­ly­ses of news­let­ter cam­paigns. The results of such ana­ly­ses can be used to tai­lor futu­re news­let­ters to the inte­rests of their reci­pients more effec­ti­ve­ly.

If you do not want to per­mit an ana­ly­sis by MailChimp, you must unsub­scri­be from the news­let­ter. We pro­vi­de a link for you to do this in eve­ry news­let­ter mes­sa­ge. Moreover, you can also unsub­scri­be from the news­let­ter right on the web­si­te.

The data is pro­ces­sed based on your con­sent (Art. 6 Sect. 1 lit. a GDPR). You may revo­ke any con­sent you have given at any time by unsub­scri­bing from the news­let­ter. This shall be wit­hout pre­ju­di­ce to the law­ful­ness of any data pro­ces­sing trans­ac­ti­ons that have taken pla­ce pri­or to your revo­ca­ti­on.

The data depo­si­ted with us for the pur­po­se of sub­scri­bing to the news­let­ter will be sto­red by us until you unsub­scri­be from the news­let­ter or the news­let­ter ser­vi­ce pro­vi­der and dele­ted from the news­let­ter dis­tri­bu­ti­on list after you unsub­scri­be from the news­let­ter. Data sto­red for other pur­po­ses with us remain unaf­fec­ted.

After you unsub­scri­be from the news­let­ter dis­tri­bu­ti­on list, your e‑mail address may be sto­red by us or the news­let­ter ser­vi­ce pro­vi­der in a blac­k­list to pre­vent futu­re mai­lings. The data from the blac­k­list is used only for this pur­po­se and not mer­ged with other data. This ser­ves both your inte­rest and our inte­rest in com­ply­ing with the legal requi­re­ments when sen­ding news­let­ters (legi­ti­ma­te inte­rest within the mea­ning of Art. 6 para. 1 lit. f GDPR). The stor­a­ge in the blac­k­list is inde­fi­ni­te. You may object to the stor­a­ge if your inte­rests out­weigh our legi­ti­ma­te inte­rest.

For more details, plea­se con­sult the Data Privacy Policies of MailChimp at: https://mailchimp.com/legal/terms/.

Execution of a con­tract data pro­ces­sing agree­ment

We have exe­cu­ted a so-cal­l­ed „Data Processing Agreement“ with MailChimp, in which we man­da­te that MailChimp under­ta­kes to pro­tect the data of our cus­to­mers and to refrain from sha­ring it with third par­ties.

8. Plug-ins and Tools

YouTube with expanded data protection integration

Our web­si­te embeds videos of the web­si­te YouTube. The web­si­te ope­ra­tor is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expand­ed data pro­tec­ti­on mode. According to YouTube, this mode ensu­res that YouTube does not sto­re any infor­ma­ti­on about visi­tors to this web­si­te befo­re they watch the video. Nevertheless, this does not neces­sa­ri­ly mean that the sha­ring of data with YouTube part­ners can be ruled out as a result of the expand­ed data pro­tec­ti­on mode. For instan­ce, regard­less of whe­ther you are wat­ching a video, YouTube will always esta­blish a con­nec­ti­on with the Google DoubleClick net­work.

As soon as you start to play a YouTube video on this web­si­te, a con­nec­ti­on to YouTube’s ser­vers will be esta­blis­hed. As a result, the YouTube ser­ver will be noti­fied, which of our pages you have visi­ted. If you are log­ged into your YouTube account whi­le you visit our site, you ena­ble YouTube to direct­ly allo­ca­te your brow­sing pat­terns to your per­so­nal pro­fi­le. You have the opti­on to pre­vent this by log­ging out of your YouTube account.

Furthermore, after you have star­ted to play a video, YouTube will be able to pla­ce various coo­kies on your devi­ce. With the assis­tan­ce of the­se coo­kies, YouTube will be able to obtain infor­ma­ti­on about our website’s visi­tors. Among other things, this infor­ma­ti­on will be used to gene­ra­te video sta­tis­tics with the aim of impro­ving the user friend­liness of the site and to pre­vent attempts to com­mit fraud. These coo­kies will stay on your devi­ce until you dele­te them.

Under cer­tain cir­cum­stan­ces, addi­ti­o­nal data pro­ces­sing trans­ac­ti­ons may be trig­ge­red after you have star­ted to play a YouTube video, which are beyond our con­trol.

The use of YouTube is based on our inte­rest in pre­sen­ting our onli­ne con­tent in an appea­ling man­ner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legi­ti­ma­te inte­rest. If a cor­res­pon­ding agree­ment has been requested (e.g. an agree­ment to the stor­a­ge of coo­kies), the pro­ces­sing takes pla­ce exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

For more infor­ma­ti­on on how YouTube hand­les user data, plea­se con­sult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

Google Web Fonts (local embedding)

This web­si­te uses so-cal­l­ed Web Fonts pro­vi­ded by Google to ensu­re the uni­form use of fonts on this site. These Google fonts are locally instal­led so that a con­nec­ti­on to Google’s ser­vers will not be esta­blis­hed in con­junc­ti­on with this appli­ca­ti­on.

9. Payment service providers and resellers

PayPal

Among other opti­ons, we offer pay­ment via PayPal on this web­si­te. The pro­vi­der of this pay­ment pro­ces­sing ser­vi­ce is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L‑2449 Luxembourg (herein­af­ter refer­red to as „PayPal“).

If you choo­se pay­ment via PayPal, we will sha­re the pay­ment infor­ma­ti­on you enter with PayPal.

The legal basis for the sha­ring of your data with PayPal is Art. 6 Sect. 1 lit. a GDPR (con­sent) as well as Art. 6 Sect. 1 lit. b GDPR (pro­ces­sing for the ful­fil­ment of a con­tract). You have the opti­on to at any time revo­ke your con­sent to the pro­ces­sing of your data. Such a revo­ca­ti­on shall not have any impact on the effec­ti­ve­ness of data pro­ces­sing trans­ac­ti­ons that occur­red in the past.

Klarna

Among other opti­ons, we offer pay­ment through the ser­vi­ces of Klarna on this web­si­te. The pro­vi­der is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (herein­af­ter refer­red to as „Klarna“).

Klarna offers a wide spec­trum of pay­ment opti­ons (e.g. pay­ment by instal­ment). If you should deci­de to pay through Klarna (Klarna check­out solu­ti­on), Klarna will col­lect per­so­nal data from you. For spe­ci­fics, plea­se review Klarna’s Data Protection Declaration by fol­lo­wing this link: https://www.klarna.com/us/privacy-policy/.

Klarna uses coo­kies to opti­mi­se the use of Klarna check­out solu­ti­ons. The opti­mi­sa­ti­on of the check­out solu­ti­on con­sti­tu­tes a legi­ti­ma­te inte­rest as defi­ned in Art. 6 Sect. 1 lit. f GDPR. Cookies are small text files that can be sto­red on your devi­ce and that do not cau­se any dama­ge to your devi­ce. The infor­ma­ti­on stays on your devi­ce until you dele­te it. For details con­cerning the use of Klarna coo­kies, plea­se fol­low this link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

The legal basis for the sha­ring of your data with PayPal is Art. 6 Sect. 1 lit. a GDPR (con­sent) as well as Art. 6 Sect. 1 lit. b GDPR (pro­ces­sing for the ful­fil­ment of a con­tract). You have the opti­on to at any time revo­ke your con­sent to the pro­ces­sing of your data. Such a revo­ca­ti­on shall not have any impact on the effec­ti­ve­ness of data pro­ces­sing trans­ac­ti­ons that occur­red in the past.

10. Custom Services

Job Applications

We offer web­si­te visi­tors the oppor­tu­ni­ty to sub­mit job appli­ca­ti­ons to us (e.g. via e‑mail, via postal ser­vi­ces on by sub­mit­ting the onli­ne job appli­ca­ti­on form). Below, we will brief you on the sco­pe, pur­po­se and use of the per­so­nal data col­lec­ted from you in con­junc­ti­on with the appli­ca­ti­on pro­cess. We assu­re you that the col­lec­ti­on, pro­ces­sing and use of your data will occur in com­pli­an­ce with the appli­ca­ble data pri­va­cy rights and all other sta­tu­to­ry pro­vi­si­ons and that your data will always be tre­a­ted as strict­ly con­fi­den­ti­al.

Scope and pur­po­se of the col­lec­ti­on of data

If you sub­mit a job appli­ca­ti­on to us, we will pro­cess any affi­li­a­ted per­so­nal data (e.g. con­tact and com­mu­ni­ca­ti­ons data, appli­ca­ti­on docu­ments, notes taken during job inter­views, etc.), if they are requi­red to make a deci­si­on con­cerning the esta­blish­ment or an employ­ment rela­ti­ons­hip. The legal grounds for the afo­re­men­ti­o­ned are § 26 New GDPR accor­ding to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – pro­vi­ded you have given us your con­sent – Art. 6 Sect. 1 lit. a GDPR. You may revo­ke any con­sent given at any time. Within our com­pa­ny, your per­so­nal data will only be sha­red with indi­vi­du­als who are invol­ved in the pro­ces­sing of your job appli­ca­ti­on.

If your job appli­ca­ti­on should result in your recruit­ment, the data you have sub­mit­ted will be archi­ved on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the pur­po­se of imple­men­ting the employ­ment rela­ti­ons­hip in our data pro­ces­sing sys­tem.

Data Archiving Period

If we are una­ble to make you a job offer or you reject a job offer or wit­h­draw your appli­ca­ti­on, we reser­ve the right to retain the data you have sub­mit­ted on the basis of our legi­ti­ma­te inte­rests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the end of the appli­ca­ti­on pro­ce­du­re (rejec­ti­on or wit­h­dra­wal of the appli­ca­ti­on). Afterwards the data will be dele­ted, and the phy­si­cal appli­ca­ti­on docu­ments will be dest­roy­ed. The stor­a­ge ser­ves in par­ti­cu­lar as evi­den­ce in the event of a legal dis­pu­te. If it is evi­dent that the data will be requi­red after the expiry of the 6‑month peri­od (e.g. due to an impen­ding or pen­ding legal dis­pu­te), dele­ti­on will only take pla­ce when the pur­po­se for fur­ther stor­a­ge no lon­ger applies.

Longer stor­a­ge may also take pla­ce if you have given your agree­ment (Article 6 (1) (a) GDPR) or if sta­tu­to­ry data reten­ti­on requi­re­ments pre­clu­de the dele­ti­on.

Admission to the appli­cant pool

If we do not make you a job offer, you may be able to join our appli­cant pool. In case of admis­si­on, all docu­ments and infor­ma­ti­on from the appli­ca­ti­on will be trans­fer­red to the appli­cant pool in order to con­tact you in case of suit­able vacan­cies.

Admission to the appli­cant pool is based exclu­si­ve­ly on your express agree­ment (Art. 6 para. 1 lit. a GDPR). The sub­mis­si­on agree­ment is volun­ta­ry and has no rela­ti­on to the ongo­ing appli­ca­ti­on pro­ce­du­re. The affec­ted per­son can revo­ke his agree­ment at any time. In this case, the data from the appli­cant pool will be irre­vo­ca­bly dele­ted, pro­vi­ded the­re are no legal rea­sons for stor­a­ge.

The data from the appli­cant pool will be irre­vo­ca­bly dele­ted no later than two years after con­sent has been gran­ted.