Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. Contact details can be found in the “Information about the Controller” section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us, for example by entering information in a contact form. Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data, such as your browser, operating system or the time you access a page. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website functions correctly. Other data may be used to analyze your usage behavior. Where contracts can be concluded or initiated through the website, the data provided is also processed for contract proposals, orders or other service inquiries.

What rights do you have regarding your data?

You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to request rectification or erasure. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. Under certain circumstances, you also have the right to request restriction of the processing of your personal data. You furthermore have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time about these matters or other questions concerning data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be evaluated statistically, primarily using analytics programs. Detailed information about these programs is provided in the privacy policy below.

2. Hosting

Hosting through WordPress.com

This website is hosted through WordPress.com, a service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin, D02 AY86, Ireland, also operates in the European region.

When you visit this website, WordPress.com or Automattic processes technically necessary data. This may include your IP address, browser type and version, operating system, referrer URL, pages or files accessed, and the date and time of access. Processing is necessary to provide the website securely, reliably and without technical errors.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient provision of our online services. Where processing serves to initiate or perform a contract, it is additionally based on Article 6(1)(b) GDPR. Where consent is requested, processing is based on Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. Consent may be withdrawn at any time with effect for the future.

Automattic processes data using globally distributed technical infrastructure. Personal data may therefore be transferred to the USA or other countries outside the European Union or the European Economic Area. According to Automattic, it uses appropriate data protection safeguards for these transfers, particularly the European Commission’s Standard Contractual Clauses.

Data Processing Agreement

WordPress.com provides website operators with a Data Processing Addendum. Where concluded and applicable, this forms the contractual basis for Automattic to process personal data on our behalf.

Further information about Automattic’s processing of personal data is available at https://automattic.com/privacy/ and https://wordpress.com/support/your-site-and-the-gdpr/.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.

Various types of personal data are collected when you use this website.

Personal data means data that can be used to identify you personally. This privacy policy explains what data we collect, what we use it for, and how and for what purposes it is processed.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection against access by third parties is not possible.

Information about the Controller

The controller responsible for data processing on this website is:

Edeltaktik CCM

Sam Amid

Tangastraße 58

81827 München

Phone: +49 160 91331529

Email: admin@edeltaktik.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Retention Period

Unless a more specific retention period is stated in this privacy policy, we retain your personal data until the purpose of processing no longer applies. If you make a valid erasure request or withdraw consent to processing, your data will be deleted unless we have other legally permissible grounds for retaining it, such as tax or commercial retention requirements. In that case, the data will be deleted once those grounds cease to apply.

General Information about the Legal Bases for Processing Data on This Website

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR where special categories of data under Article 9(1) GDPR are processed. Where you explicitly consent to the transfer of personal data to third countries, processing is additionally based on Article

49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data is necessary to perform a contract or take pre-contractual steps, we process it on the basis of Article 6(1)(b) GDPR. Where processing is necessary to fulfill a legal obligation, we process your data on the basis of Article 6(1)(c) GDPR.

Data may also be processed on the basis of our legitimate interest under Article 6(1)(f) GDPR. The following sections explain the legal bases applicable in each case.

Recipients of Personal Data

We work with various external parties in the course of our business. This sometimes requires personal data to be transferred to those parties.

We only disclose personal data to external parties where necessary to perform a contract, where required by law, for example disclosure to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we disclose our clients’ personal data only on the basis of a valid data processing agreement. Where processing is carried out jointly, a joint controller agreement is concluded.

Withdrawal of Consent to Data Processing

Many processing operations are only possible with your explicit consent. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to Object to Data Collection in Particular Cases and to Direct Marketing (Article 21 GDPR)

WHERE PROCESSING IS BASED ON ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING FOR SUCH MARKETING, INCLUDING PROFILING TO THE EXTENT THAT IT RELATES TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of a GDPR infringement, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, or have it provided to a third party, in a commonly used, machine-readable format. If you request direct transfer to another controller, this will only be done where technically feasible.

Access, Rectification and Erasure: Within the scope of applicable law, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, as well as a right to rectification or erasure where applicable. You may contact us at any time about these matters or other questions concerning personal data.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time to do so. This right applies in the following cases:

If you dispute the accuracy of the personal data we hold about you, we generally need time to verify it. You have the right to request restriction of processing for the duration of that verification.

If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of erasure.

If we no longer need your personal data but you require it to establish, exercise or defend legal claims, you have the right to request restriction of processing instead of erasure.

If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been determined whose interests prevail, you have the right to request restriction of processing.

Where processing has been restricted, your data may, apart from storage, only be processed with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption: This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator. You can recognize an encrypted connection when your browser’s address bar changes from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

We hereby object to the use of contact details published as part of our legal notice obligations for sending unsolicited advertising or information materials. The website operators expressly reserve the right to take legal action against unsolicited advertising, such as spam emails.

4. Data Collection on This Website

Cookies

Our website uses cookies. Cookies are small data packages and do not damage your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically after your visit. Persistent cookies remain on your device until you delete them or your browser deletes them automatically.

Cookies may be set by us (first-party cookies) or by other companies (third-party cookies). Third-party cookies enable the integration of certain third-party services into websites, such as cookies used to process payments.

Cookies serve various purposes. Many are technically necessary because certain website functions, such as shopping carts or video displays, would not work without them. Others may be used to analyze usage behavior or for advertising.

Cookies required for electronic communications, to provide particular functions you request, such as a shopping cart, or to optimize the website, such as audience measurement cookies (necessary cookies), are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified.

The website operator has a legitimate interest in storing necessary cookies to provide technically error-free and optimized services. Where consent to store cookies and comparable recognition technologies has been requested, processing is based exclusively on that consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, allow them only in individual cases, reject them in particular cases or generally, and delete them automatically when you close your browser. Disabling cookies may limit this website’s functionality.

This privacy policy explains which cookies and services are used on this website.

Server Log Files

The hosting provider automatically collects and stores information in server log files that your browser transmits to us. This includes:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address

This data is not combined with other data sources.

This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of the website, which requires the collection of server log files.

Contact Form

If you send us an inquiry using the contact form, we store the information you provide, including your contact details, to process the inquiry and respond to follow-up questions. We do not disclose this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR where your inquiry relates to the performance of a contract or is necessary for pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where requested. Consent may be withdrawn at any time.

Contact through WhatsApp

Our website offers the option to contact us through an external WhatsApp link. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you click the WhatsApp link, you leave our website and are redirected to WhatsApp. WhatsApp may process personal data, particularly your phone number, communication content, metadata and technical data. We have no control over the nature or extent of this processing.

Using WhatsApp is voluntary. You can contact us by email or phone instead at any time.

Further information about WhatsApp’s processing of data is available in WhatsApp’s privacy information.

Data entered in the contact form remains with us until you request its erasure, withdraw consent to storage, or the purpose of storage no longer applies, for example once your inquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.

Inquiries by Email, Phone or Fax

If you contact us by email, phone or fax, your inquiry and all resulting personal data, such as your name and inquiry, will be stored and processed to handle your request. We do not disclose this data without your consent.

Data provided in contact inquiries remains with us until you request its erasure, withdraw consent to storage, or the purpose of storage no longer applies, for example once your request has been fully processed. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Comments on This Website

When you use the comments function, we store your comment, the time it was created, your email address and, if you do not post anonymously, your chosen username.

Storage of IP Addresses

Our comments function stores the IP addresses of users who post comments. As we do not review comments before publication, we need this data to take action against an author in the event of legal violations, such as insults or propaganda.

Subscribing to Comments

After registering, you may subscribe to comments. You will receive a confirmation email to verify that you own the email address provided. You may unsubscribe at any time using a link in the notification emails. Data entered when subscribing will then be deleted. Data you have also provided elsewhere for other purposes, such as a newsletter subscription, will remain with us.

Retention of Comments

Comments and associated data are stored and remain on this website until the content commented on has been deleted in full or the comments must be deleted for legal reasons, for example offensive comments.

Legal Basis

Comments are stored on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by sending us an informal email. Withdrawal does not affect the lawfulness of processing already carried out.

5. Social Media

Social Media Elements with Shariff

This website uses social media elements, for example Facebook, X, Instagram, Pinterest, XING, LinkedIn and Tumblr.

You can generally recognize these elements by their respective social media logos.

To protect privacy on this website, we use these elements only together with the Shariff solution. This application prevents the integrated social media elements from transferring your personal data to their providers as soon as you first visit the page.

A direct connection to the provider’s server is established only when you activate the relevant social media element by clicking its button (consent). Once activated, the provider receives information that your IP address has visited this website. If you are also logged into the relevant social media account, such as Facebook, the provider can associate your visit with your account.

Activating the plugin constitutes consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw this consent at any time with effect for the future.

This service is used to obtain the legally required consent for the use of certain technologies. Its legal basis is Article 6(1)(c) GDPR.

Facebook

This website integrates elements of the Facebook social network. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

An overview of Facebook’s social media elements is available here:

https://developers.facebook.com/docs/plugins/?locale=de_DEWhen the social media element is active, a direct connection is established between your device and Facebook’s server. Facebook learns that your IP address has visited this website. If you click the Facebook Like button while logged into your Facebook account, you can link this website’s content to your Facebook profile.

Facebook can thereby associate your visit with your account. As the website provider, we have no knowledge of the content of the data transmitted or how Facebook uses it. Further information is available in Facebook’s privacy policy at:

https://de-de.facebook.com/privacy/explanationThis service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Where the tool described here collects personal data on our website and forwards it to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers for this processing (Article 26 GDPR). Joint responsibility is limited exclusively to collecting the data and forwarding it to Facebook. Facebook’s subsequent processing is not part of that joint responsibility. Our respective obligations are set out in a joint controller agreement, available at:

https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing privacy information when using the Facebook tool and for implementing it securely on our website in accordance with data protection law. Facebook is responsible for the security of its products. You can exercise your rights regarding data processed by Facebook, such as access requests, directly with Facebook. If you exercise these rights with us, we must forward them to Facebook.

Transfers of data to the USA are based on the European Commission’s Standard Contractual Clauses.

Details are available here:

https://www.facebook.com/legal/EU_data_transfer_addendum https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.phpThe company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Each company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link:

https://www.dataprivacyframework.gov/participant/4452

X (Formerly Twitter)

This website integrates functions of X (formerly Twitter), offered by its parent company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, is responsible for processing data of people living outside the USA.

When the social media element is active, a direct connection is established between your device and X’s server. X (formerly Twitter) thereby receives information about your visit. Using X and its Re-Tweet or Repost function links the websites you visit to your X account and makes them known to other users. As the website provider, we have no knowledge of the content of the data transmitted or how X uses it. Further information is available in X’s privacy policy at:

https://twitter.com/de/privacyThis service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s Standard Contractual Clauses.

Details are available here:

https://gdpr.x.com/en/controller-to-controller-transfers.htmlYou can change your privacy settings on X (formerly Twitter) in your account settings at https://x.com/settings/account.

The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Each company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link:

https://www.dataprivacyframework.gov/participant/2710

Instagram

This website integrates functions of Instagram, offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your device and Instagram’s server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, clicking the Instagram button allows you to link this website’s content to your Instagram profile. Instagram can thereby associate your visit with your account. As the website provider, we have no knowledge of the content of the data transmitted or how Instagram uses it.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Where the tool described here collects personal data on our website and forwards it to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers for this processing (Article 26 GDPR). Joint responsibility is limited exclusively to collecting the data and forwarding it to Facebook or Instagram. Their subsequent processing is not part of that joint responsibility.

Our respective obligations are set out in a joint controller agreement, available at:

https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing privacy information when using the Facebook or Instagram tool and for implementing it securely on our website in accordance with data protection law. Facebook is responsible for the security of Facebook and Instagram products. You can exercise your rights regarding data processed by Facebook or Instagram, such as access requests, directly with Facebook. If you exercise these rights with us, we must forward them to Facebook.

Transfers of data to the USA are based on the European Commission’s Standard Contractual Clauses.

Details are available here:

https://www.facebook.com/legal/EU_data_transfer_addendum https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381Further information is available in Instagram’s privacy policy:

https://privacycenter.instagram.com/policy/The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Each company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link:

https://www.dataprivacyframework.gov/participant/4452

6. Analytics Tools and Advertising

Matomo

This website uses the open-source web analytics service Matomo.

Matomo allows us to collect and analyze data about how visitors use our website. This includes when particular pages were accessed and the region from which visitors came. We also collect various log data, such as IP address, referrer, browser and operating system, and can measure whether visitors perform particular actions, such as clicks or purchases.

This analytics tool is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing usage behavior to optimize its website and advertising. Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Hosting

We host Matomo exclusively on our own servers, so all analytics data remains with us and is not disclosed.

IONOS WebAnalytics

This website uses IONOS WebAnalytics (hereinafter IONOS), provided by 1&1 IONOS SE, Elgendorfer Straße 57, D–56410 Montabaur, Germany. IONOS can analyze visitor numbers and behavior, such as page views, visit duration and bounce rates, visitor sources, locations and technical data, such as browser and operating system versions. For this purpose, IONOS stores the following data in particular:

Referrer (previously visited website)
Requested page or file
Browser type and version
Operating system used
Device type used
Time of access
Anonymized IP address (used only to determine the location of access)

According to IONOS, data is collected in fully anonymized form and cannot be traced back to individuals. IONOS WebAnalytics does not store cookies.

Data is stored and analyzed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in statistical analysis of usage behavior to optimize its website and advertising. Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information on data collection and processing by IONOS WebAnalytics is available in IONOS’s privacy policy at:

https://www.ionos.de/terms-gtc/datenschutzerklaerung

Data Processing Agreement

We have concluded a data processing agreement for the service described above. This agreement is required under data protection law and ensures that the provider processes our website visitors’ personal data only on our instructions and in compliance with the GDPR.

WP Statistics

This website uses the WP Statistics analytics tool to evaluate visitor access statistically. The provider is Veronalabs, Tatari 64, 10134 Tallinn, Estonia (https://veronalabs.com)WP Statistics allows us to analyze the use of our website. It collects, among other things,

log data, including IP address, referrer, browser, user origin and search engine used, and actions performed on the website, such as clicks and views.

Data collected by WP Statistics is stored exclusively on our own server.

This analytics tool is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in anonymized analysis of usage behavior to optimize our website and advertising. Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

7. Newsletter

Newsletter Data

To receive the newsletter offered on this website, we require your email address and information allowing us to verify that you own the address and consent to receiving the newsletter. No other data is collected unless provided voluntarily. We use this data exclusively to send the requested information and do not disclose it to third parties.

Data entered in the newsletter subscription form is processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw consent to storage of the data and email address and their use for sending the newsletter at any time, for example using the unsubscribe link in the newsletter. Withdrawal does not affect the lawfulness of processing already carried out.

Data provided for receiving the newsletter is stored by us or the newsletter provider until you unsubscribe and is deleted from the mailing list after unsubscribing or when the purpose no longer applies. We reserve the right to delete or block email addresses from our mailing list at our discretion within the scope of our legitimate interest under Article 6(1)(f) GDPR.

Data stored by us for other purposes remains unaffected.

After you unsubscribe, your email address may be stored by us or the newsletter provider on a suppression list where necessary to prevent future mailings. This data is used only for that purpose and is not combined with other data. This serves both your interest and our legitimate interest in complying with legal requirements for newsletters (Article 6(1)(f) GDPR). Storage on the suppression list is not time-limited. You may object to storage where your interests override our legitimate interest.

Newsletters to Existing Customers

If you order goods or services from us and provide your email address, we may subsequently use it to send newsletters if we inform you in advance. In that case, the newsletter contains only direct advertising for our own similar goods or services. You may unsubscribe at any time using the link included in every newsletter.

In this case, the legal basis for sending the newsletter is Article 6(1)(f) GDPR in conjunction with Section 7(3) of the German Act against Unfair Competition (UWG).

After you unsubscribe, your email address may be stored by us on a suppression list to prevent future mailings. This data is used only for that purpose and is not combined with other data. This serves both your interest and our legitimate interest in complying with legal requirements for newsletters (Article 6(1)(f) GDPR). Storage on the suppression list is not time-limited. You may object to storage where your interests override our legitimate interest.

8. Plugins and Tools

YouTube in Privacy-Enhanced Mode

This website embeds YouTube videos. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page containing an embedded YouTube video, a connection to YouTube’s servers is established. YouTube is informed which of our pages you visited. If you are logged into your YouTube account, YouTube can associate your browsing behavior directly with your personal profile. You can prevent this by logging out of YouTube.

We use YouTube in privacy-enhanced mode. According to YouTube, videos played in this mode are not used to personalize browsing on YouTube. Advertisements shown in this mode are also not personalized. No cookies are set in privacy-enhanced mode. However, local storage elements are stored in the user’s browser and, like cookies, may contain personal data and be used for recognition. Details of privacy-enhanced mode are available here:

https://support.google.com/youtube/answer/171780Activating a YouTube video may trigger further data processing over which we have no control.

YouTube is used in the interest of presenting our online services attractively.

This constitutes a legitimate interest under Article 6(1)(f) GDPR. Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information about privacy at YouTube is available in its privacy policy at:

https://policies.google.com/privacy?hl=deThe company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Each company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5780

Vimeo

This website uses plugins from the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit a page containing a Vimeo video, a connection to Vimeo’s servers is established. Vimeo is informed which of our pages you visited and also receives your IP address, even if you are not logged into Vimeo or do not have an account. The information collected is transferred to Vimeo’s server in the USA.

If you are logged into your Vimeo account, Vimeo can associate your browsing behavior directly with your personal profile. You can prevent this by logging out of Vimeo.

Vimeo uses cookies or comparable recognition technologies, such as device fingerprinting, to recognize website visitors.

Vimeo is used in the interest of presenting our online services attractively.

Transfers of data to the USA are based on the European Commission’s Standard Contractual Clauses and, according to Vimeo, on legitimate business interests. Details are available here:

https://vimeo.com/privacyFurther information on how user data is handled is available in Vimeo’s privacy policy at:

https://vimeo.com/privacyThe company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Each company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5711

Google Fonts

This website uses Google Fonts, provided by Google, to display fonts consistently. When you access a page, your browser loads the required fonts into its cache to display text and fonts correctly.

For this purpose, your browser must connect to Google’s servers. Google thereby learns that this website was accessed through your IP address. Google Fonts is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in consistent typography on its website. Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

If your browser does not support Google Fonts, a standard font from your computer is used.

Further information about Google Fonts is available at https://developers.google.com/fonts/faq and in Google’s privacy policy:

https://www.dataprivacyframework.gov/participant/5780

Google Maps

This website uses the Google Maps mapping service, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed maps on our website.

Using Google Maps requires your IP address to be stored. This information is generally transferred to a Google server in the USA and stored there.

The website provider has no control over this transfer. When Google Maps is active, Google may use Google Fonts for consistent typography. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.

Google Maps is used in the interest of presenting our online services attractively and making the locations listed on our website easy to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR. Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Transfers of data to the USA are based on the European Commission’s Standard Contractual Clauses.

Details are available here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/Further information about how user data is handled is available in Google’s privacy policy:

https://www.dataprivacyframework.gov/participant/5780

Google reCAPTCHA

We use Google reCAPTCHA (hereinafter reCAPTCHA) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA checks whether data entered on this website, for example in a contact form, is entered by a human or an automated program. It analyzes visitor behavior using various characteristics. This analysis begins automatically when the visitor enters the website. It evaluates information such as IP address, time spent on the website and mouse movements. Data collected during the analysis is forwarded to Google.

reCAPTCHA analysis runs entirely in the background. Website visitors are not notified that an analysis is taking place.

Data is stored and analyzed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online services against abusive automated surveillance and spam. Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Further information about Google reCAPTCHA is available in Google’s privacy policy and terms of service at the following links:

https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=deThe company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Each company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5780

9. Our Own Services

OneDrive

We have integrated OneDrive into this website. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter OneDrive).

OneDrive allows us to integrate an upload area into our website where you can upload content. Uploaded content is stored on OneDrive’s servers.

When you enter our website, a connection to OneDrive is also established, allowing OneDrive to determine that you visited our website.

OneDrive is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in a reliable upload area on its website. Where appropriate consent has been requested, processing is based exclusively on Article

6(1)(a) GDPR; consent may be withdrawn at any time.

https://www.dataprivacyframework.gov/participant/6474

Data Processing Agreement

Google Drive

We have integrated Google Drive into this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Drive allows us to integrate an upload area into our website where you can upload content. Uploaded content is stored on Google Drive’s servers. When you enter our website, a connection to Google Drive is also established, allowing Google Drive to determine that you visited our website.

Google Drive is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in a reliable upload area on its website.

Where appropriate consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR; consent may be withdrawn at any time.

https://www.dataprivacyframework.gov/participant/5780

Data Processing Agreement

Source:

https://www.e-recht24.de