Privacy Policy

1. Data Protection Overview

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the "Information about the responsible party" section of this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us. This may include data entered into a contact form, for example.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This includes primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

How Do We Use Your Data?

Some of the data is collected to ensure the proper functioning of the website. Other data may be used for analyzing your user behavior.

Your Rights Regarding Your Data

You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. In addition, under certain circumstances, you have the right to request the restriction of the processing of your personal data. Furthermore, you have a right to lodge a complaint with the competent supervisory authority.

For this and further questions regarding data protection, you can contact us at any time.

Analysis Tools and Third-party Tools

When you visit this website, your surfing behavior may be statistically evaluated. This is primarily done using so-called analytics programs.

Detailed information about these analytics programs can be found in the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

Strato

Provider: Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter "Strato"). When you visit our website, Strato collects various log files including your IP addresses.

For more information, please refer to Strato's privacy policy: https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable presentation of our website. If consent has been requested, the processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TDDDG, to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of TDDDG. Consent can be revoked at any time.

General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We would like to point out that data transmission over the Internet (e.g., when communicating by e-mail) may have security vulnerabilities. A complete protection of the data against access by third parties is not possible.

Controller Information

The controller for data processing on this website is:

Lucie Viktorin
Freiberg 9
94571 Schaufling
Phone: +4917676618494
Email: lucie@luvik.eu

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Retention Period

Unless a specific storage period is specified within this privacy policy, your personal data will remain with us until the purpose for which it was stored no longer applies. If you assert a valid erasure request or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will occur after these reasons cease to apply.

General Information on Legal Bases for Data Processing on This Website

If you have given consent to the processing of your data, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing also occurs on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing additionally occurs on the basis of § 25(1) TDDDG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary for compliance with a legal obligation based on Art. 6(1)(c) GDPR, and for processing for our legitimate interests based on Art. 6(1)(f) GDPR. Information on the relevant legal bases will be provided in the following sections of this privacy policy.

Note on Data Transfer to Non-Secure Third Countries and Transfer to US Companies Not Certified under the EU-US Data Privacy Framework (DPF)

We use tools from companies based in non-secure third countries, including US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these states. Please note that non-secure third countries may not guarantee a level of data protection comparable to that of the EU.

We would like to point out that the USA, as a secure third country, generally provides a level of data protection comparable to that of the EU. Accordingly, data transfer to the USA is permissible if the recipient is certified under the "EU-US Data Privacy Framework" (DPF) or has appropriate additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.

Recipients of Personal Data

As part of our business activities, we work with various external bodies. In some cases, this requires the transfer of personal data to these external bodies. We only disclose personal data to external bodies if necessary for the performance of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest under Art. 6(1)(f) GDPR in the disclosure, or if another legal basis permits the disclosure. When using processors, we only transfer personal data of our customers based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

Right to Lodge a Complaint with the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

Information, Correction, and Erasure

Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing and, if necessary, a right to correct or delete this data. For this purpose and for any other questions regarding personal data, you can contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists in the following cases:

  • If you contest the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data is unlawful, but you oppose the deletion of the data and instead request restriction of the use of your personal data.
  • If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
  • If you have objected pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Advertising Emails

The use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and information materials is hereby prohibited. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

3. Data Collection on This Website

Cookies

Our websites use so-called "cookies". Cookies are small data packets that do not harm your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are necessary for the electronic communication process, for providing certain functions you requested (e.g., for the shopping cart function), or for optimizing the website (e.g., cookies for measuring the web audience) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent for the storage of cookies and similar identification technologies has been requested, processing will be carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent can be revoked at any time.

You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Information about which cookies and services are used on this website can be found in this privacy policy.

Real Cookie Banner

To manage the used cookies and similar technologies (tracking pixels, web beacons, etc.) and the corresponding consents, we use the consent tool "Real Cookie Banner". Details about how "Real Cookie Banner" works can be found at https://devowl.io/rcb/data-processing/. The legal basis for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in managing the used cookies and similar technologies and the associated consents. Providing personal data is neither contractually required nor necessary for concluding a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, provided your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.

Inquiry by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, provided your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Processing of Customer and Contract Data

We process customer data as part of our business relationship. The processing is carried out for the purpose of fulfilling our contractual obligations, in particular for the execution of orders, deliveries, and invoicing. The legal basis for processing is Art. 6(1)(b) GDPR. In addition, we process customer contact data for marketing purposes based on our legitimate interests pursuant to Art. 6(1)(f) GDPR or on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which can be revoked at any time.

Customer personal data is deleted when it is no longer necessary for the purposes of its collection and there are no legal retention periods.

Comment Function on This Website

For the comment function on this page, in addition to your comment, information on the time of creation of the comment, your email address, and, if you do not post anonymously, the username you selected will be stored.

Storage of the IP address

Our comment function stores the IP addresses of users who write comments. Since we do not check comments on this website before they are activated, we need this data to be able to take action against the author in the event of legal violations such as insults or propaganda.

Subscribe to comments

As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the specified email address. You can unsubscribe from this function at any time via a link in the info emails. The data entered as part of subscribing to comments will be deleted in this case; if you have transmitted this data to us for other purposes and at another location (e.g., newsletter order), this data will remain with us.

Duration of comments storage

The comments and the associated data are stored and remain on this website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g., offensive comments).

Legal basis

The storage of comments is based on your consent (Art. 6(1)(a) GDPR). You can revoke any consent you have given at any time. An informal message by email to us is sufficient for this purpose. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Gravatar

We have integrated Gravatar on this website. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA (hereinafter Gravatar).

Gravatar is a tool that allows personal images (avatars) to be provided for users of our website. The avatars serve as visual representations of the users and are displayed wherever a user interacts with the platform (e.g., in forums or chats). When a user interacts with the platform, their avatar is displayed based on the selection associated with their email address. This gives users' online presence a personal touch and facilitates identification as the chosen image is attributed to users when they are active online.

If you comment or interact on our website with Gravatar activated, the hash of the user's email address using Gravatar (used as ID) will be processed by Gravatar.

The use of Gravatar is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in an appealing presentation of its forums. If the corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

Further details can be found in the provider's privacy policy at https://automattic.com/privacy/.

The company has certified its adherence to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States aimed at ensuring compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000CbqcAAC&status=Active.

4. Social Media Integrations

Facebook

This website integrates elements of the social network Facebook. The service provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

For an overview of Facebook social media elements, visit: https://developers.facebook.com/docs/plugins/?locale=en_US.

When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook thus receives information that you have visited this website with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the data transmitted or its use by Facebook. For more information, see Facebook's privacy policy at: https://www.facebook.com/privacy/explanation.

The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDG. Consent can be revoked at any time.

If personal data is collected and forwarded to Facebook via this described tool on our website, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, jointly responsible for this data processing (Art. 26 GDPR). Our joint responsibility is limited solely to the collection of data and its transmission to Facebook. The processing by Facebook after transmission is not part of our joint responsibility. Our mutual obligations have been documented in a joint processing agreement. You can view the wording of this agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can exercise your data subject rights (e.g., requests for information) regarding data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obligated to forward them to Facebook.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://www.facebook.com/policy.php, and https://www.facebook.com/help/566994660333381.

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active.

X (formerly Twitter)

This website integrates features of the service X (formerly Twitter), offered by the parent company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For data processing of individuals residing outside the USA, responsibility lies with the branch Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

When the social media element is active, a direct connection is established between your device and the X server. X (formerly Twitter) thus receives information about your visit to this website. By using X (formerly Twitter) and the "Re-Tweet" or "Repost" function, the websites you visit are linked to your X (formerly Twitter) account and shared with other users. Please note that as the provider of these pages, we have no knowledge of the content of the data transmitted or its use by X (formerly Twitter). For more information, see X (formerly Twitter)'s privacy policy at: https://x.com/privacy.

The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDG. Consent can be revoked at any time.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Details can be found here: https://gdpr.x.com/en/controller-to-controller-transfers.html.

You can adjust your privacy settings for X (formerly Twitter) in your account settings at: https://x.com/settings/account.

Instagram

This website integrates features of the service Instagram, offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thus receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the data transmitted or its use by Instagram.

The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDG. Consent can be revoked at any time.

If personal data is collected and forwarded to Facebook or Instagram via this described tool on our website, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, jointly responsible for this data processing (Art. 26 GDPR). Our joint responsibility is limited solely to the collection of data and its transmission to Facebook or Instagram. The processing by Facebook or Instagram after transmission is not part of our joint responsibility. Our mutual obligations have been documented in a joint processing agreement. You can view the wording of this agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook or Instagram products. You can exercise your data subject rights (e.g., requests for information) regarding data processed by Facebook or Instagram directly with Facebook. If you assert your data subject rights with us, we are obligated to forward them to Facebook.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/, and https://www.facebook.com/help/566994660333381.

For more information, see Instagram's privacy policy: https://privacycenter.instagram.com/policy/.

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active.

Pinterest

This website uses elements of the social network Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

When you visit a page containing such an element, your browser establishes a direct connection to Pinterest's servers. This social media element transmits protocol data to Pinterest's server in the USA. This protocol data may include your IP address, the addresses of the websites visited that also contain Pinterest functions, the type and settings of the browser, date and time of the request, your use of Pinterest, and cookies.

The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDG. Consent can be revoked at any time.

For more information on the purpose, scope, further processing and use of data by Pinterest, as well as your related rights and options for protecting your privacy, please see Pinterest's privacy policy: https://policy.pinterest.com/en/privacy-policy.

LinkedIn

This website uses elements of the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. When you visit a page containing such an element, your browser establishes a direct connection to LinkedIn's servers. This social media element transmits protocol data to LinkedIn's server in the USA. This protocol data may include your IP address, the addresses of the websites visited that also contain LinkedIn functions, the type and settings of the browser, date and time of the request, your use of LinkedIn, and cookies.

The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDG. Consent can be revoked at any time.

For more information on the purpose, scope, further processing and use of data by LinkedIn, as well as your related rights and options for protecting your privacy, please see LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

WhatsApp Communication

For communication via WhatsApp, we use the services of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you use our WhatsApp service, your device establishes a connection to WhatsApp's servers. Various data can be transmitted, such as your phone number, communication content, and metadata such as time and duration of use.

The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDG. Consent can be revoked at any time by ending communication via WhatsApp and deleting our number from your contacts.

For more information on the purpose, scope, further processing and use of data by WhatsApp, as well as your related rights and options for protecting your privacy, please see WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy.

5. Analytics Tools and Advertising

WP Statistics

This website uses the analytics tool WP Statistics to statistically evaluate visitor access. The provider is Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).

WP Statistics allows us to analyze the usage of our website. WP Statistics collects log files (IP address, referrer, browser used, user origin, search engine used) and actions taken by website visitors (e.g., clicks and views).

The data collected by WP Statistics is stored exclusively on our own server.

The use of this analytics tool is based on Article 6(1)(f) GDPR. We have a legitimate interest in the anonymized analysis of user behavior to optimize both our website offering and our advertising. If consent has been obtained, processing is based exclusively on Article 6(1)(a) GDPR and § 25(1) TDDDG, to the extent that consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) as defined by TDDDG. Consent can be revoked at any time.

Pixelmate

We use Pixelmate to analyze user behavior on our website and optimize marketing measures. Pixelmate collects information about your use of our website and helps us carry out targeted advertising campaigns. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in optimizing our marketing activities. Your data will be stored until you request deletion or the purpose of data storage ceases.

Meta Pixel (formerly Facebook Pixel)

We use Meta Pixel (formerly Facebook Pixel) to track user behavior on our website and optimize our advertising campaigns on Facebook. The Pixel enables us to measure the effectiveness of our Facebook advertising and create target audiences for future advertising. Processing of this data is based on Article 6(1)(f) GDPR due to our legitimate interest in the analysis and optimization of our advertising campaigns.

Facebook Conversion API

With Facebook Conversion API, we capture interactions on our website and directly transfer them to Facebook. This helps us measure and improve the performance of our advertising campaigns. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in the analysis and optimization of our advertising campaigns.

Facebook Custom Audiences

We use Facebook Custom Audiences to display personalized advertising on Facebook. Your email address or phone number is hashed and matched with Facebook data to create tailored advertising campaigns. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in targeted advertising.

TikTok Pixels

The TikTok Pixel helps us track user behavior on our website and measure the effectiveness of our TikTok advertising. This allows us to carry out targeted advertising campaigns on TikTok. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in the analysis and optimization of our advertising campaigns.

LinkedIn Insight Tags

LinkedIn Insight Tag allows us to analyze user behavior on our website and measure the effectiveness of our LinkedIn advertising. This allows us to carry out targeted advertising campaigns on LinkedIn. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in the analysis and optimization of our advertising campaigns.

Pinterest Tags

The Pinterest Tag helps us track user behavior on our website and measure the effectiveness of our Pinterest advertising. This allows us to carry out targeted advertising campaigns on Pinterest. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in the analysis and optimization of our advertising campaigns.

Google Analytics

We use Google Analytics to analyze user behavior on our website. Google Analytics uses cookies to collect and store information about your use of our website. Processing of this data is based on Article 6(1)(f) GDPR due to our legitimate interest in the analysis and optimization of our website.

Google Ads

Google Ads allows us to display advertisements in Google search results and on the Google advertising network. We use Google Ads to carry out targeted advertising campaigns and measure the effectiveness of our advertising. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in targeted advertising.

Google Ads Remarketing

We use Google Ads Remarketing to show targeted advertisements to visitors of our website when they later visit other websites in the Google advertising network. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in targeted advertising.

Google AdSense

Google AdSense allows us to display ads on our website and generate revenue from these ads. Google AdSense uses cookies to display personalized ads. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in monetizing our website.

Google Conversion Tracking

Google Conversion Tracking helps us measure the effectiveness of our Google Ads campaigns. When you click on one of our ads, a cookie is stored on your device, allowing us to track whether you perform a specific action on our website. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in optimizing our advertising campaigns.

Google Optimize

Google Optimize helps us test different versions of our website and improve user experience. This helps us determine which changes yield the best results. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in optimizing our website.

Google Tag Manager

Google Tag Manager allows us to centrally manage and trigger website tags. This helps us improve the efficiency of our website and simplify the integration of tracking and analytics tools. Processing of your data is based on Article 6(1)(f) GDPR due to our legitimate interest in efficiently managing our website tags.

6. Newsletter Data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. Further data is not collected or is collected on a voluntary basis only. We use these data exclusively for sending the requested information and do not pass them on to third parties.

The processing of the data entered into the newsletter registration form is based exclusively on your consent (Article 6(1)(a) GDPR). You can revoke your consent to the storage of data, email address, and their use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interests pursuant to Article 6(1)(f) GDPR.

Data that has been stored by us for other purposes remains unaffected by this.

After you have been removed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings, if necessary. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) GDPR). The storage in the blacklist is not limited in time. You can object to this storage if your interests outweigh our legitimate interest.

7. Plugins and Tools

Zoom

When you participate in our meetings via Zoom, your information and personal data collected during use will be processed and stored for the purpose of conducting the meeting and further communication with you. This includes in particular your email address, your name, and any other information you disclose during the meeting.

The processing of this data is based on Art. 6(1)(b) GDPR, provided that your participation in the meeting is related to the fulfillment of a contract or necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in efficiently conducting meetings and communicating with participants (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if requested; consent can be revoked at any time.

The data entered and transmitted by you in the course of using Zoom will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after communication has ended). Mandatory legal provisions – in particular retention periods – remain unaffected.

Please note that the use of Zoom is subject to additional data protection provisions of the Zoom provider over which we have no influence. Further information can be found in Zoom's privacy policy.

Google Meet

When you participate in our meetings via Google Meet, your information and personal data collected during use will be processed and stored for the purpose of conducting the meeting and further communication with you. This includes in particular your email address, your name, and any other information you disclose during the meeting.

The processing of this data is based on Art. 6(1)(b) GDPR, provided that your participation in the meeting is related to the fulfillment of a contract or necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in efficiently conducting meetings and communicating with participants (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if requested; consent can be revoked at any time.

The data entered and transmitted by you in the course of using Google Meet will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after communication has ended). Mandatory legal provisions – in particular retention periods – remain unaffected.

Please note that the use of Google Meet is subject to additional data protection provisions of the Google provider over which we have no influence. Further information can be found in Google's privacy policy.

YouTube with Enhanced Privacy

This website embeds videos from the YouTube website. The website operator is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page on this website that includes YouTube videos, a connection to YouTube's servers is established. This informs the YouTube server about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used for personalization of browsing on YouTube. Ads played in enhanced privacy mode are also not personalized. No cookies are set in enhanced privacy mode. However, local storage elements are stored in the user's browser, which contain personal data similar to cookies and can be used for recognition. Details on enhanced privacy mode can be found here: https://support.google.com/youtube/answer/171780.

Activation of a YouTube video may trigger further data processing operations over which we have no control.

The use of YouTube serves the purpose of an appealing presentation of our online offers. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) as defined by TDDDG. Consent is revocable at any time.

For more information on data protection at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=en.

The company has been certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider's website at the following link: https://www.dataprivacyframework.gov/participant/5780.

Vimeo

This website uses plugins from the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo video, a connection to Vimeo's servers is established. This informs the Vimeo server about which of our pages you have visited. Vimeo also obtains your IP address. This occurs even if you are not logged into Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you allow Vimeo to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.

Vimeo uses cookies or comparable recognition technologies (e.g., device fingerprinting) to recognize website visitors.

The use of Vimeo serves the purpose of an appealing presentation of our online offers. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) as defined by TDDDG. Consent is revocable at any time.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on "legitimate business interests." Details can be found here: https://vimeo.com/privacy.

For more information on how Vimeo handles user data, please refer to Vimeo's privacy policy at: https://vimeo.com/privacy.

The company has been certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider's website at the following link: https://www.dataprivacyframework.gov/participant/5711.

Google Fonts (local hosting)

This site uses Google Fonts to ensure consistent font display, provided by Google.

For more information about Google Fonts, please visit https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=en.

MyFonts

This site uses MyFonts. These are fonts that are loaded into your browser when you visit our website to ensure consistent font appearance in web page display. The provider is Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801 USA. MyFonts uses cookies to ensure the functionality and integrity of the online presence. By using MyFonts, your browser can access MyFonts servers to ensure consistent presentation and function of our website. The data will be used for contractual and pre-contractual measures based on Art. 6(1)(b) GDPR, in addition to legitimate interest in ensuring the proper presentation and functionality of our online presence pursuant to Art. 6(1)(f) GDPR.

The fonts are stored on servers in the USA. A transfer of personal data to the USA is based on the "Privacy Shield" (EU-US Data Privacy Framework). More information about the handling of user data can be found in MyFonts' privacy policy: https://www.monotype.com/legal/privacy-policy.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

IP anonymization is activated on this website so that your IP address will be truncated beforehand by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google's collection and use of data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.

This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in shortened form, thus excluding the possibility of direct personal references.

We use Google Analytics to analyze and regularly improve the use of our website. With the statistics obtained, we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR.

Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/us.html, Privacy overview: https://policies.google.com/privacy?hl=en, and Privacy statement: https://support.google.com/analytics/answer/6004245?hl=en.

Google Maps

This page uses the Google Maps map service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed maps on our website.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Fonts for uniform font display purposes. When Google Maps is accessed, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an attractive presentation of our online offers and easy findability of the places we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested (e.g., consent to store cookies or access information on the user's device), the processing will be carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

The data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on how user data is handled, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=en.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards for data processing in the USA. Any company certified under the DPF commits to comply with these data protection standards. More information can be found from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Spotify

This website incorporates features of the Spotify music service. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. Spotify plugins can be identified by the green logo on this website. An overview of the Spotify plugins can be found at: https://developer.spotify.com.

This allows a direct connection between your browser and the Spotify server to be established when you visit this website via the plugin. Spotify receives the information that you have visited this website with your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of this website to your Spotify profile. Spotify can thereby associate your visit to this website with your user account.

Please note that when using Spotify, cookies from Google Analytics may be used, so your usage data when using Spotify may also be transmitted to Google. Google Analytics is a tool of the Google Group for analyzing user behavior, based in the USA. Spotify alone is responsible for this integration. We, as the website operator, have no influence on this processing.

The storage and analysis of data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the appealing auditory design of its website. If consent has been requested (e.g., consent to store cookies or access information on the user's device), the processing will be carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

For more information, please see Spotify's privacy policy: https://www.spotify.com/de/legal/privacy-policy/.

If you do not want Spotify to associate your visit to this website with your Spotify user account, please log out of your Spotify user account.

Google Forms

For the use of Google Forms to collect information on our website, the following applies: The data collected via Google Forms is used to process your inquiries or conduct surveys. Processing is based on your consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time. Your data will be deleted as soon as it is no longer necessary or you request deletion, provided that there are no statutory retention obligations.

Formsly

Formsly is used to create and manage forms on our website. The data collected via Formsly is used to process your inquiries or orders. Processing is based on your consent in accordance with Art. 6(1)(a) GDPR or for contract fulfillment in accordance with Art. 6(1)(b) GDPR. You have the right to revoke your consent at any time. Your data will be deleted as soon as it is no longer necessary or you request deletion, provided that there are no statutory retention obligations.

Use of Chatbots

We use chatbots for automated responses to inquiries on our website. The data collected via the chatbot is used for efficient customer support and is processed on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR. You have the right to object to the use of your data by the chatbot at any time. Your data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or you object to the processing.

Calendly

Calendly allows you to schedule appointments with us. The data collected via Calendly is used for appointment management and communication with you. Processing is based on your consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time. Your data will be deleted as soon as it is no longer necessary for the purpose or you request deletion, provided that there are no statutory retention obligations.

Google Calendar

Google Calendar is used for managing and planning appointments. The data collected via Google Calendar is used for organizing appointments and events. Processing is based on your consent in accordance with Art. 6(1)(a) GDPR or for contract fulfillment in accordance with Art. 6(1)(b) GDPR. You have the right to revoke your consent at any time. Your data will be deleted as soon as it is no longer necessary for the purpose or you request deletion, provided that there are no statutory retention obligations.

Facebook Connect

With Facebook Connect, you can log in to our website using your Facebook account or use certain features. The use of Facebook Connect is based on your consent in accordance with Art. 6(1)(a) GDPR. You have the right to revoke your consent at any time. Your data will be deleted as soon as it is no longer necessary for the purpose or you request deletion, provided that there are no statutory retention obligations.

Google Tag Manager

Google Tag Manager is used to manage and implement website tags. The use of Google Tag Manager is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR in the efficient management and implementation of tags. You have the right to object to the use of Google Tag Manager. For more information on data processing by Google Tag Manager, please refer to Google's privacy policy.

Affiliate Partner Programs

We participate in affiliate partner programs where we place advertising links to products or services from other providers on our website. Processing of your data is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR in the economic marketing of our products and services. Your data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or you object to the processing, provided that there are no statutory retention obligations.

Google Drive

We have integrated Google Drive on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Drive allows us to integrate an upload area on our website where you can upload content. When you upload content, it is stored on Google Drive servers. When you visit our website, a connection to Google Drive is also established, so that Google Drive can determine that you have visited our website.

The use of Google Drive is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a reliable upload area on its website. If consent has been requested (e.g., consent to store cookies or access information on the user's device), the processing will be carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards for data processing in the USA. Any company certified under the DPF commits to comply with these data protection standards. More information can be found from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Source: https://www.e-recht24.de

follow
Facebook Instagram Pinterest Tiktok Linkedin

Pages

Categories

Posts