Data protection declaration

Responsible for data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Roman Horschig

With the following data protection declaration, we would like to inform you about which types of your personal data (hereinafter also referred to as “data”) we process for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as Such as. our social media profiles (collectively, “Online Offering”).
The terms used are not gender specific.

As of: 1. April 2020

Your Affected Rights

Under the contact Details provided by our Data protection officer, You can exercise the following Rights At any time:

• Information about Your Data stored with us and its Processing (Art. 15 GDPR),
• Correction of incorrect personal Data (Type. 16 GDPR),
• Delete Your data stored with us (Kind of. 17 GDPR),
• Restricting data Processing if we are not yet allowed to delete Your Data due to legal Obligations (Kind. 18 GDPR),
• Contradiction against the Processing of Your Data with us (Kind of. 21 GDPR) and
• Data Portability if You have consented to the Data processing or have entered into a Contract with us (Art. 20 GDPR).

If you have given us permission, you can revoke it at any time with effect for the future.

You can contact a regulatory Body at any Time with a Complaint, e.g. B. to the competent Supervisory Authority of the Federal State of Residence or to the Authority responsible for us as the responsible Authority.

A list of supervisory authorities (for the non-public sector) with address can be found at: 

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Overview of the processing

The following overview summarises the types of data processed and the purposes of its processing and refers to the data subjects.

Types of data processed

• Inventory data (e.g. names, addresses).
• Content data (e.g. text, photographs, videos).
• Contact details (e.g. e-mail, phone numbers).
• Meta/communication data (e.g. device information, IP addresses).
• Usage data (e.g. websites visited, interest in content, access times).
• Contract data (e.g. subject matter, term, customer category).
• Payment data (e.g. bank details, invoices, payment history).

Special categories of data

• Data showing racial and ethnic origin.

Categories of affected persons

• business and contractual partners.
• Interested parties.
• Communication.
• Users (e.g. website visitors, users of online services).

Purposes of processing

• Provision of our online offer and user-friendliness.
• Visit action evaluation.
• office and organizational procedures.
• Direct marketing (e.g. by e-mail or by post).
• Feedback (e.g. Collect feedback via online form).
• Interest-based and behavioral marketing.
• Contact requests and communication.
• Conversion measurement (measurement of the effectiveness of marketing measures).
• Profiling.
• Remarketing.
• Range measurement (e.g. access statistics, detection of returning visitors).
• Security.
• Tracking (e.g. interest/behavioural profiling, use of cookies).
• Contractual services and services.
• Managing and responding to requests.

Authoritative legal bases

In the following, we inform the legal bases of the General Data Protection Regulation (GDPR), on the basis of which we process the personal data. Please note that in addition to the provisions of the GDPR, the national data protection requirements in your can apply to our country of residence and residence. Should more specific legal bases be relevant in individual cases, we will inform you of them in the data protection declaration.

• Consent (Art. 6 Abs. 1 p. 1 lit. a GDPR) – The data subject has given his consent to the processing of personal data concerning him or her for a specific purpose or for several specific purposes.
• performance of the contract and pre-contractual enquiries (Art. 6 Abs. 1 p. 1 lit. B. GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures carried out at the request of the data subject.
• Legal obligation (Art. 6 Abs. 1 p. 1 lit. C. GDPR) – Processing is necessary to fulfill a legal obligation to which the controller is subject.
• Protection of vital interests (Art. 6 Abs. 1 p. 1 lit. D. GDPR) – Processing is necessary to protect the vital interests of the data subject or another natural person.
• Legitimate interests (Art. 6 Abs. 1 p. 1 lit. Q. GDPR) – The processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail.

National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation ( This includes in particular the Law on the Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and for transmission, as well as automated Decision-making on a case-by-case basis, including profiling. It also regulates the processing of data for the purposes of the employment relationship (Section 26 of the German Federal Data Protection Act), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. In addition, state data protection laws of the individual federal states can be applied.

Security

We shall take place in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different chances of occurrence and the extent of the Threats to the rights and freedoms of natural persons appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access, input, disclosure, security of data, and access to the data. availability and their separation. In addition, we have established procedures to ensure the exercise of data subjects’ rights, the erasure of data and reactions to the threat to the data. We also take into account the protection of personal data already in the development or Selection of hardware, software and procedures according to the principle of data protection, through technical design and through data protection-friendly presets.

Ip reduction: If we can or do not need to store the IP address, we will shorten or have your IP address shortened. In the case of ip address reduction, also known as “IP masking”, the last octet, i.e. the last two numbers of an IP address, is deleted (the IP address is in this context an Internet connection by the online access provider individually associated identifier). The purpose of shortening the IP address is to prevent or make it much more difficult to identify a person by their IP address.

Use of cookies

Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user’s computer. A cookie is primarily used to store the information about a user during or after his visit within an online offer. For example, the stored information can be the language settings on a web page, the login status, a shopping cart, or the place where a video was viewed. The term cookies also includes other technologies that perform the same functions as cookies (e.g. when user information is stored on the basis of pseudonymous online identifiers, also known as “user IDs”)

The following types of cookies and functions are distinguished:

• Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
• Permanent cookies: Permanent cookies remain stored even after closing the browser. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Similarly, the interests of users used for range measurement or marketing purposes may be stored in such a cookie.
• First-party cookies: First-party cookies are set by us.
• Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third party) used to process user information.
• Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to save logins or other user input or for security reasons).
• Statistics, marketing and personalization cookies: In addition, cookies are usually used in the context of range measurement as well as when a user’s interests or behaviour (e.g. viewing certain content, benefits from features, etc.) stored on individual websites in a user profile. Such profiles are used to help users, for example, content that matches their potential interests. This procedure is also referred to as “tracking”, i.e. tracking the potential interests of users. . Insofar as we use cookies or “tracking” technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.

Notes on legal bases: On what legal basis we process your personal data with the help of cookies depends on whether we ask you for your consent. If this is the case and you consent to the use of cookies, the legal basis for the processing of your data is the declared consent. Otherwise, the data processed by means of cookies will be processed on the basis of our legitimate interests (e.g. a business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfil our contractual obligations.

General notices on revocation and opposition (opt-out): Depending on whether the processing is based on consent or legal permission, you have the possibility at any time to revoke a given consent or to object to the processing of your data by cookie technologies (collectively, “opt-out”). You can first explain your objection by using the settings of your browser, e.g. by disabling the use of cookies (which may also limit the functionality of our online offer). An objection to the use of cookies for online marketing purposes can also be explained by means of a variety of services, especially in the case of tracking, through the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you can receive further notices of objection within the scope of the information on the service providers and cookies used.

Processing of cookie data on the basis of consent: Before we process or process data in the context of the use of cookies, we ask the users for revocable consent at any time. Until consent has been given, cookies are used, if necessary, which are necessary for the operation of our online offer. Their use is based on our interest and the interest of the users in the expected functionality of our online offer.

• Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
• Affected persons: Users (e.g. website visitors, users of online services).
• Legal bases: Consent (Art. 6 Abs. 1 p. 1 lit. a GDPR), Legitimate Interests (Art. 6 Abs. 1 p. 1 lit. Q. GDPR).

Commercial and business services

We process data of our contract and business partners, e.g. Customers and interested parties (collectively referred to as “contractors”) in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with the contracting parties (or pre-contractual), e.g. to answer inquiries.

We process this data for the purpose of fulfilling our contractual obligations, for the protection of our rights and for the purposes of the administrative tasks associated with this information as well as the business organization. Within the scope of the applicable law, we only pass on the data of the contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or for the fulfilment of legal obligations or is carried out with the consent of the contractual partners (e.g. telecommunications, transport and other auxiliary services involved, as well as subcontractors, banks, tax and legal advisers, payment service providers or tax authorities). About other processing forms, e.g. for marketing purposes, the contracting parties will be informed within the framework of this data protection declaration.

We will provide the contracting parties with information which data is required for the aforementioned purposes before or within the scope of data collection, e.g. in online forms, through special marking (e.g. colors) or symbols (e.g. asterisks or similar), or in person.

We delete the data after expiry of legal warranty and comparable obligations, i.e. basically after 4 years, unless the data is stored in a customer account, e.g. as long as it must be stored for legal reasons of archiving (e.g. for tax purposes usually 10 years). Data disclosed to us in the context of an order by the contractual partner, we delete in accordance with the specifications of the order, in principle after the end of the order.

Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and privacy notices of the respective third parties or platforms apply in the relationship between the users and the providers.

Collection of general Information when Visiting our Website

Type and purpose of proces
sing: When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This Information (server log files) includes, for example, the type of web browser, the operating system used, the Domain name of Your Internet service provider, Your IP address, and the like.

They are processed in particular for the following Purposes:

• Ensuring a smooth Connection Of the Website,
• Ensuring a smooth Use of our Website,
• Evaluation of system security and stability, as well as
• For further administrative purposes.

We do not use Your Data to draw Conclusions about Your Person. We may provide information of this Kind. Statistically evaluated to optimize our Website and the Technology behind it.

Legal basis:Process
ing is carried out in accordance with Art. 6 Abs. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipients
: Recipients of the data may be Technical Service Providers who work as Processors for the Operation and Maintenance Of our Website.

Storage time:
The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the Case for the data used to Provide the Website when the respective Session is over.

Provision required or required: Th
e provision of the aforementioned personal data is not required by law or contract. However, without the IP address, the Service and functionality Of our Website is not guaranteed. In addition, individual Services and Services may not be available or restricted. For this Reason, a Contradiction is ruled out.

Blogs and publication media

We use blogs or similar means of online communication and publication (hereinafter “publication medium”). The data of the readers are processed for the purposes of the publication medium only to the extent that it is necessary for its presentation and communication between authors and readers or for reasons of security. In addition, we refer to the information on the processing of visitors to our publication medium within the framework of these data protection notices.

Comments and posts: When users leave comments or other posts, their IP addresses may be stored based on our legitimate interests. This is done for our safety if someone leaves illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this Case, we can be prosecuted for the Comment or Contribution ourselves and are therefore interested in the Identity of the Author.

Furthermore, we reserve the right to process the information of the users for spam detection on the basis of our legitimate interests.

On the same Legal Basis, we reserve the right, in the Case of Surveys, to store users ‘ IP addresses for their Duration and To use Cookies to avoid multiple Votes.

The information provided in the context of the comments and contributions about the person, any contact and website information as well as the content information will be stored permanently by us until the user objects.

• Processed data types: Inventory data (e.g. names, addresses), contact details (e.g. e-mail, phone numbers), content data (e.g. text, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
• Affected persons: Users (e.g. website visitors, users of online services).
• Purposes of processing: Contractual services and services, feedback (e.g. Collect feedback via online form), security measures, manage and respond to requests.
• Legal bases: Performance of the contract and pre-contractual requests (Art. 6 Abs. 1 p. 1 lit. B. GDPR), legitimate interests (Art. 6 Abs. 1 p. 1 lit. Q. GDPR), consent (Art. 6 Abs. 1 p. 1 lit. a GDPR), protection of vital interests (Art. 6 Abs. 1 p. 1 lit. D. GDPR).

Services used and service providers:Wo
rdPress.com: hosting platform for blogs; Service providers: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Website: https://wordpress.com; Privacy Policy: https://automattic.com/de/privacy/.

Comments

Type and purpose of processi
ng: When users leave comments on our website, in addition to this information, the time of their creation and the username previously chosen by the website visitor are stored. This is for our Security, as we may be prosecuted for illegal Content on our Website, even if it was created by Users.

Legal basis:
The processing of the data entered as a comment is based on a legitimate interest (Art. 6 Abs. 1 lit. f GDPR).

By Providing the Comment Feature, we want to give You easy Interaction. Your Information will be stored for The Purpose of processing the Request as well as for possible Follow-up Questions.

Recipients
: Recipients of the data may be Processor.

Storage time:
The data will be deleted as soon as it is no longer required for the purpose of collection. This is basically the Case when the Communication with the User has been completed and the Company can see from the circumstances that the matter in question has been finally resolved.

Provision required or required: T
he provision of your personal data is voluntary. Without the Provision of Your personal Data, we will not be able To grant You access to our Comment Function.

Contact form

Type and purpose of process
ing: The data you enter will be stored for the purpose of individual communication with you. This requires providing a valid E-mail address as well as Your Name. This is used to Assign the Request and then To answer it. The Disclosure of further Data is optional.

Legal basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 Abs. 1 lit. f GDPR).

By Providing the Contact Form, we want to make It easy For you to Get in touch. Your Information will be stored for The Purpose of processing the Request as well as for possible Follow-up Questions.

If You contact us to request an Offer, the data entered into the contact Form will be Processed to carry out pre-contractual Measures (Art. 6 Abs. 1 lit. (GDPR).

Recipients
: Recipients of the data may be Processor.

Storage time:
Data will be deleted no later than 6 months after processing the request.

If there is a Contractual Relationship, we are subject to the legal Retention Periods under HGB and delete Your Data after These Deadlines have expired.

Provision required or required: T
he provision of your personal data is voluntary. However, We will only be able to process your request if You provide us with Your Name, email address and reason for the Request.

Using Google Analytics

How and purpose of processing:Thi
s website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”). Google Analytics uses so-called. “Cookies,” i.e. text Files stored on Your Computer that allow You to analyze your use of the Website. The Information generated by the Cookie about Your use of this Website Is Usually transmitted to a Google Server in the USA and stored there. However, due to the Activation of IP anonymisation on these Websites, Your IP address will be truncated by Google within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address to a server of Google in the USA is transferred and cut there. On Behalf of the Operator of this Website, Google will use this Information to evaluate Your Use of the Website, to compile reports on website activities and to provide other services related to the use of The website and The Internet. To the Website operator. It is not merged into IP address sent as part of Google Analytics from your browser with other data of Google.

The Purpose of Data Processing is to Evaluate the Use of the Website and To Compile reports on activities on the Website. On the Basis Of the use of the Website and the Internet, other connected Services will then be provided.

Legal basis:
The processing of the data is based on the consent of the user (Art. 6 Abs. 1 lit. A DSGVO).

Recipient:
Recipient of the data is Google as processor. For this purpose, we have concluded the corresponding Order processing Contract With Google.

Storage time:
The data will be deleted as soon as it is no longer necessary for our recording purposes.

Third-country transfer:
Google processes your data in the United States and has https://www.privacyshield.gov/EU-US-Framework subject to the EU_US Privacy Shield.

Provision required or required: 
The provision of your personal data is voluntary, solely on the basis of your consent. If You block access, this may result in functional Limitations on the Website.

Withdrawal of consent
: You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent. You can also collect the Data Generated by the Cookie and related to Your Use of the Website (including. Prevent Google’s IP address) and Google from processing this data by downloading and installing the browser plugin available from the following link: Browser Add On to disable Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An Opt-out cookie will be installed on Your Device. This prevents the Collection by Google Analytics for this Website and for this Browser in the future, as long as the Cookie remains installed in Your Browser.

Profiling:
The Google Analytics tracking tool can be used to assess the behaviour of visitors to the website and to analyse their interests. For this purpose, we create a pseudonymous user profile.Use of script libraries (Google Webfonts)