Responsible in the sense of the data protection laws, in particular the EU data protection basic regulation (DSGVO), is
Florian Winkler
Your rights as a data subject
You can exercise the following rights at any time by contacting our data protection officer:
Information about your data stored with us and its processing (Art. 15 DSGVO),
Correcting incorrect personal data (Art. 16 DSGVO),
Deletion of your data stored with us (Art. 17 DSGVO),
Restriction of data processing, provided that we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
opposition to the processing of your data by us (Art. 21 DSGVO) and
Data transferability, if you have consented to data processing or have concluded a contract with us (Art. 20 DSGVO).
If you have given us your consent, you can revoke it at any time with effect for the future.
You may at any time submit a complaint to a supervisory authority, e.g. to the competent supervisory authority of the federal state of your residence or to the authority responsible for us as the responsible body.
A list of the supervisory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of general information when you visit our website
the nature and purpose of the processing:
When you access our website, i.e. when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.
They are processed in particular for the following purposes:
Ensuring that the website can be connected without problems,
Ensuring a smooth use of our website,
Evaluation of system security and stability and
for other administrative purposes.
We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated by us, if necessary, in order to optimise our Internet presence and the technology behind it.
Legal basis:
Processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our justified interest in improving the stability and functionality of our website.
Recipient:
Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.
Storage period:
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website, when the respective session has ended.
Provision prescribed or necessary:
The provision of the above-mentioned personal data is not required by law or contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason an objection is excluded.
Registration on our website
the nature and purpose of the processing:
When registering to use our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we offer only to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if necessary. Of course, we will also provide you with information about the personal data we have stored about you at any time.
Legal basis:
The processing of the data entered during registration is based on the consent of the user (Art. 6 para. 1 lit. a DSGVO).
If the registration serves the fulfilment of a contract to which the person concerned is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.
Recipient:
Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.
Storage period:
Data will only be processed in this context as long as the relevant consent has been obtained. Thereafter, they will be deleted, provided that there are no legal storage obligations to the contrary. To contact us in this context, please use the contact data given at the end of this data protection declaration.
Provision prescribed or necessary:
The provision of your personal data is voluntary, solely based on your consent. Without the provision of your personal data, we cannot grant you access to our offered contents and services.
Comment function
the nature and purpose of the processing:
If users leave comments on our website, in addition to this information, the time of their creation and the user name previously selected by the website visitor are also stored. This serves our security, as we can be prosecuted for illegal content on our website, even if it was created by users.
Legal basis:
The processing of data entered as comments is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).
By providing the comment function, we would like to enable you to interact in an uncomplicated manner. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.
Recipient:
Recipients of the data may be order processors.
Storage period:
The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case when communication with the user is complete and the company can conclude from the circumstances that the matter in question has been conclusively clarified.
Provision prescribed or necessary:
The provision of your personal data is voluntary. Without the provision of your personal data we cannot grant you access to our comment function.
Contact form
the nature and purpose of the processing:
The data entered by you will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This serves to assign the inquiry and to answer it afterwards. The specification of further data is optional.
Legal basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.
If you contact us to request an offer, the data entered in the contact form will be processed for the purpose of implementing pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).
recipient:
Recipients of the data may be processors.
Storage period:
Data will be deleted at the latest 6 months after processing the request.
If a contractual relationship is established, we are subject to the statutory retention periods under the German Commercial Code (HGB) and delete your data after these periods have expired.
Provision prescribed or necessary:
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, your e-mail address and the reason for the inquiry.
Use of script libraries (Google Web Fonts)
the nature and purpose of the processing:
In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website to display fonts.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
Legal basis:
The legal basis for the integration of Google Web Fonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).
Recipient:
Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – although it is currently unclear whether and for what purposes – that the operator collects data from Google in this case.
Storage duration:
We do not collect any personal data through the integration of Google Webfonts.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://www.google.com/policies/privacy/.
Third Country Transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or necessary:
The provision of personal information is not required by law or contract. However, it may not be possible to display the content correctly using standard fonts.
Revocation of consent:
The programming language JavaScript is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.
Use of Adobe Typekit
the nature and purpose of the processing:
We use Adobe Typekit to visually design our website. Typekit is a service provided by Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter “Adobe”) which gives us access to a font library. To incorporate the fonts we use, your browser must connect to an Adobe server in the United States and download the font required for our website. This will provide Adobe with information that your IP address was used to access our website. For more information about Adobe Typekit, please refer to Adobe’s privacy policy, which can be found at https://www.adobe.com/de/privacy/policy.html
Legal basis:
The legal basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Art. 6 para. 1 lit. a DSGVO).
Recipient:
Calling up script libraries or font libraries automatically triggers a connection to the library operator. For information on the use of your data by Adobe Typekit Web Fonts, please visit https://typekit.com/ and refer to the Adobe Typekit Privacy Policy: https://www.adobe.com/de/privacy/policies/typekit.html.
Storage duration:
We do not collect personal information through the inclusion of Adobe Typekit Web Fonts.
Third Country Transfer:
Adobe is certified under the Privacy Shield Agreement, which guarantees that Adobe complies with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).
Provision required or necessary:
The provision of personal information is not required by law or contract. However, it cannot be provided without the correct display of standard font content.
Embedded YouTube videos
the nature and purpose of the processing:
On some of our websites, we embed YouTube videos The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This will tell YouTube which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by first logging out of your YouTube account.
If a YouTube video is started, the provider uses cookies that collect information about user behaviour.
For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO)
Recipient:
The call from YouTube automatically triggers a connection to Google.
Storage period and withdrawal of consent:
If you have deactivated the storage of cookies for the Google Ad Program, you will not have to reckon with any such cookies even when watching YouTube videos. YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block cookies from being stored in your browser.
Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or necessary:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.
Change of our data protection regulations
We reserve the right to adapt this data protection declaration so that it always meets the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration then applies to your renewed visit.
Questions to the data protection officer
If you have any questions regarding data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly:
The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (version #2019-04-10).