Privacy policy

Introduction and overview

We have created this privacy statement (version 09/28/2023-322529083) in order to provide you with the best possible information in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws to explain which personal data (data for short) we as the controller - and the processors (e.g. providers) commissioned by us - process, will process in the future and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We inform you comprehensively about data that we process about you.

Privacy statements usually sound very technical and use legal terminology. This privacy statement, on the other hand, is intended to describe the most important things to you as simply and transparently as possible. As far as it is conducive to transparency, technical Terms explained in a reader friendly way and links to further information. In this way, we provide information in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible by providing the most concise, unclear and legalistic explanations possible, as is often standard practice on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is one or two pieces of information that you did not yet know.
If you still have questions, we would like to ask you to contact the responsible office mentioned below or in the imprint, to follow the existing links and to look at further information on third party sites. Our contact details can of course also be found in the imprint.

Scope

This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (order processors). By personal data, we mean information within the meaning of Art. 4 No. 1 DSGVO, such as a person's name, e-mail address and postal address. The processing of personal data ensures that we can offer and invoice our services and products, whether online or offline. The scope of this privacy policy includes:

• all online presences (websites, online stores) that we operate
• Social media appearances and e-mail communication
• mobile apps for smartphones and other devices

In short: The data protection declaration applies to all areas in which personal data is processed in a structured manner within the company via the aforementioned channels. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal basis

In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal basis of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course access this EU General Data Protection Regulation online on EUR-Lex, the access point to EU law, at. https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex32016R0679 read up.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6 paragraph 1 lit. a DSGVO): You have given us your consent to process data for a specific purpose. An example would be the storage of your entered data of a contact form.
2. Contract (Article 6 paragraph 1 lit. b DSGVO): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.
3. Legal obligation (Article 6 paragraph 1 lit. c DSGVO): If we are subject to a legal obligation, we process your data. For example, we are required by law to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate interests (Article 6 paragraph 1 lit. f DSGVO): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Further prerequisites such as the performance of recordings in the public interest and the exercise of official authority as well as the protection of vital interests do not generally occur for us. If such a legal basis is relevant, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

• In Austria this is the Federal Law on the Protection of Individuals with regard to the Processing of Personal Data (Data Protection Act), short DPA.
• In Germany applies that Federal Data Protection Act, short FDPA.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the responsible person

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or office below:
HETRA-GSS Ltd.
Christine-Englerth-Straße 8, 45665 Recklinghausen, Germany

Email: info@hetra-gss.de
Phone: +49 2361 5820539
Legal Note: https://hetra-gss.de/impressum/

Storage duration

The fact that we only store personal data for as long as is absolutely necessary for the provision of our services and products applies as a general criterion at our company. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are required by law to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

Should you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store it.

We will inform you about the specific duration of the respective data processing below, provided that we have further information on this.

Rights under the General Data Protection Regulation

In accordance with Articles 13, 14 of the GDPR, we inform you about the following rights you have to ensure that data processing is fair and transparent:

• According to Article 15 of the GDPR, you have the right to know whether we are processing data about you. If this is the case, you have the right to receive a copy of the data and the following information:
  • the purpose for which we carry out the processing;
  • the categories, i.e. the types of data that are processed;
  • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
  • how long the data will be stored;
  • the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
  • that you can complain to a supervisory authority (links to these authorities can be found below);
  • the origin of the data if we have not collected it from you;
  • whether profiling is carried out, i.e. whether data is automatically evaluated to arrive at a personal profile of you.
• You have a right to rectify data according to Article 16 of the GDPR, which means that we must correct data if you find errors.
• According to Article 17 of the GDPR, you have the right to erasure ("right to be forgotten"), which specifically means that you may request the deletion of your data.
• According to Article 18 of the GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it any further.
• According to Article 20 DSGVO, you have the right to data portability, which means that we will provide you with your data in a common format upon request.
• According to Article 21 of the GDPR, you have a right to object, which, once enforced, entails a change in processing.
  • If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then check as soon as possible whether we can legally comply with this objection.
  • If data is used to conduct direct marketing, you may object to this type of data processing at any time. We may not use your data for direct marketing thereafter.
  • If data is used to perform profiling, you can object to this type of data processing at any time. We may not use your data for profiling thereafter.
• Sie haben laut Artikel 22 DSGVO unter Umständen das Recht, nicht einer ausschließlich auf einer automatisierten Verarbeitung (zum Beispiel Profiling) beruhenden Entscheidung unterworfen zu werden.
• According to Article 77 of the GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the data processing of personal data violates the GDPR.

In short: You have rights - do not hesitate to contact the responsible body listed above with us!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website you can find at https://www.dsb.gv.at/ . In Germany, there is a data protection officer for each federal state. For more detailed information, you can contact them at Federal Commissioner for Data Protection and Freedom of Information (BfDI) contact. The following local data protection authority is responsible for our company:

North Rhine-Westphalia Data Protection Authority

State Commissioner for Data Protection: Bettina Gayk
Address: Kavalleriestraße 2-4, 40213 Düsseldorf
Phone no.: 02 11/384 24-0
E-mail address: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de/

Data processing security

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. In this way, we make it as difficult as possible for third parties to infer personal information from our data.

Article 25 of the GDPR refers to "data protection through technical design and data protection-friendly default settings" and thus means that both software (e.g., forms) and hardware (e.g., access to the server room) should always be designed with security in mind and that appropriate measures should be taken. If necessary, we will go into more detail on specific measures below.

TLS encryption with https

TLS, encryption and https sound very technical and they are. We use HTTPS (the Hypertext Transfer Protocol Secure stands for "secure hypertext transfer protocol") to transfer data over the Internet in a tap-proof way.
This means that the complete transmission of all data from your browser to our web server is secured - no one can "listen in".

In this way, we have introduced an additional layer of security and comply with data protection through technology design (Article 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
You can recognize the use of this data transmission protection by the small lock symbol at the top left of the browser, to the left of the Internet address (e.g., beispielseite.de) and the use of the https scheme (instead of http) as part of our Internet address.
If you want to know more about encryption, we recommend doing a Google search for "Hypertext Transfer Protocol Secure wiki" to get good links to more information.

Communication

When you contact us and communicate by phone, e-mail or online form, personal data may be processed.

The data will be processed for the handling and processing of your question and the related business transaction. The data is stored for as long as it is required by law.

Persons concerned

All those who seek contact with us via the communication channels provided by us are affected by the aforementioned processes.

Phone

When you call us, the call data is stored pseudonymously on the respective terminal device and with the telecommunications provider used. In addition, data such as name and telephone number may subsequently be sent by e-mail and stored for the purpose of responding to inquiries. The data is deleted as soon as the business case has been terminated and legal requirements permit.

E-Mail

If you communicate with us by e-mail, data may be stored on the respective end device (computer, laptop, smartphone,...) and data is stored on the e-mail server. The data is deleted as soon as the business case has been terminated and legal requirements permit.

Online forms

If you communicate with us using an online form, data is stored on our web server and, if necessary, forwarded to an e-mail address of ours. The data is deleted as soon as the business case has been terminated and legal requirements permit.

Legal basis

The processing of the data is based on the following legal bases:

• Art. 6 Abs. 1 lit. a DSGVO (Einwilligung): Sie geben uns die Einwilligung Ihre Daten zu speichern und weiter für den Geschäftsfall betreffende Zwecke zu verwenden;
• Art. 6 para. 1 lit. b DSGVO (contract): There is a need for the performance of a contract with you or a processor such as the telephone provider or we need to process the data for pre-contractual activities, such as the preparation of an offer;
• Art. 6 para. 1 lit. f DSGVO (Legitimate Interests): We want to operate customer inquiries and business communication in a professional framework. For this purpose, certain technical facilities such as e-mail programs, exchange servers and mobile network operators are necessary in order to be able to operate the communication efficiently.

Cookies

What are cookies?

Our website uses HTTP cookies to store user-specific data.
Whenever you browse the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

Whenever you browse the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to cookies, our site knows who you are and offers you the setting you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to cookies, our site knows who you are and offers you the setting you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

For example, cookie data can look like this:

Name: _ga
Value: GA1.2.1326744211.152322529083-9
Intended use: Differentiation of website visitors
Expiration date: After 2 years

A browser should be able to support these minimum sizes:

• Minimum 4096 bytes per cookie
• Minimum 50 cookies per domain
• At least 3000 cookies in total

What are the types of cookies?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

We can distinguish 4 types of cookies:

Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user adds a product to the shopping cart, then continues surfing on other pages and later goes to the checkout. Through these cookies, the shopping cart is not deleted even if the user closes his browser window.

Purpose cookies
These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behavior of the website with different browsers.

Targeting cookies
These cookies provide a better user experience. For example, entered locations, font sizes or form data are stored.

Advertising cookies
These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very convenient, but also very annoying.

These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very convenient, but also very annoying.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, dem Request for Comments der Internet Engineering Task Force (IETF) namens "HTTP State Management Mechanism".

Purpose of processing via cookies

The purpose ultimately depends on the cookie in question. You can find more details below or from the manufacturer of the software that sets the cookie.

What data is processed?

Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize what data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy.

Cookies storage duration

The storage period depends on the particular cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.

You can also influence the storage period yourself. You can manually delete all cookies at any time via your browser (see also "Right of objection" below). Furthermore, cookies that are based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage remains unaffected until then.

Right to object - how can I delete cookies?

How and whether you want to use cookies, you decide. Regardless of which service or website the cookies come from, you always have the option to delete, disable or only partially allow cookies. For example, you can block third-party cookies, but allow all other cookies.

If you want to determine which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete and manage cookies

Microsoft Edge: Deleting and managing cookies In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google using the search term "delete cookies Chrome" or "disable cookies Chrome" in the case of a Chrome browser.

Legal basis

The so-called "Cookie Guidelines" have been in place since 2009. This states that the storage of cookies is a Consent (Article 6 para. 1 lit. a DSGVO) is required from you. Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in Section 96 (3) of the Telecommunications Act (TKG). In Germany, the Cookie Directives were not implemented as national law. Instead, this directive was largely implemented in Section 15 (3) of the German Telemedia Act (TMG).

For absolutely necessary cookies, even if no consent has been given, there are legitimate interests (Article 6(1)(f) DSGVO), which in most cases are of an economic nature. We want to provide the visitors of the website with a pleasant user experience and for this purpose certain cookies are often absolutely necessary.

If cookies are used that are not absolutely necessary, this only happens in the case of your consent. The legal basis in this respect is Art. 6 para. 1 lit. a DSGVO.

In the following sections, you will be informed in more detail about the use of cookies, if used software uses cookies.

Application data

What is application data?

You can apply to us by e-mail, online form or via a recruiting tool for a job in our company. All data that we receive and process from you as part of an application counts as application data. In doing so, you always disclose personal data such as name, date of birth, address and telephone number.

Why do we process application data?

We process your data so that we can operate a proper selection process in relation to the advertised position. In addition, we also like to keep your application documents in our application archive. Because it often happens that for the advertised positions a cooperation does not work out for various reasons, but we are impressed by you and your application and can imagine a future cooperation very well. Provided you give us your consent, we will archive your documents so that we can easily contact you for future tasks in our company.

We guarantee that we will handle your data with particular care and only ever process your data within the legal framework. Even within our company, your data will only be forwarded to persons who are directly involved with your application. In short: Your data is in safe hands with us!

What data is processed?

Wenn Sie sich zum Beispiel bei uns per E-Mail bewerben, erhalten wir natürlich, wie oben erwähnt, auch personenbezogene Daten. Selbst die E-Mail-Adresse zählt schon zu den personenbezogenen Daten. Verarbeitet werden im Zuge eines Bewerbungsverfahrens allerdings nur jene Daten, die für unsere Entscheidung, ob wir Sie in unserem Team begrüßen wollen oder nicht, relevant sind.

Exactly what data is processed depends primarily on the job posting. In most cases, however, it is a matter of name, date of birth, contact details and proof of qualifications. If you submit the application via an online form, the data is passed on to us in encrypted form. If you send us the application by e-mail, this encryption does not take place. Therefore, we cannot assume any responsibility for the way the data is transmitted. However, once the data is on our servers, we are responsible for the lawful handling of your data.

During an application process, in addition to the data mentioned above, information about your health or ethnic origin may also be requested so that we and you can exercise the rights related to labor law, social security and social protection and, at the same time, comply with the corresponding obligations. These data are special category data.

Here is a list of possible data we receive from you and process:

• Name
• Contact address
• E-mail address
• Phone number
• Date of birth
• Information that comes from the cover letter and resume
• Proof of qualification (e.g.) Certificates
• Special category data (e.g., ethnic origin, health data, religious beliefs).
• Usage data (websites visited, access data ect.)
• Metadata (IP address, device information)

How long will the data be stored?

If we accept you as a team member in our company, your data will be further processed for the purpose of the employment relationship and kept with us at least until the employment relationship ends. All application documents will then be placed in your employee file.

If we do not offer you the job, if you decline our offer or withdraw your application, we may retain your data for up to 6 months after the conclusion of the application process due to legitimate interest (Art. 6 (1) lit. f DSGVO). After that, both your electronic data and all data from physical application documents will be completely deleted or destroyed. We retain your data, for example, so that we can still answer any follow-up questions or so that we can provide evidence of the application in the event of a legal dispute. If a legal dispute arises and we may still need the data after the 6 months have expired, we will only delete the data when there is no longer any reason to retain it. If there are legal retention obligations to fulfill, we must generally store the data for longer than 6 months.

Furthermore, we can also keep your data longer if you have given special consent for this. We do this, for example, if we can well imagine a cooperation with you in the future. Then it is helpful to have your data archived so that we can contact you without any problems. In this case, the data will be added to our applicant pool. Of course, you can revoke your consent to the longer storage of your data at any time. If there is no revocation and you do not give a new consent, your data will be deleted after 2 years at the latest.

Legal basis

Rechtsgrundlagen für die Verarbeitung Ihrer Daten sind Art. 6 Abs. 1 lit. a DSGVO (Einwilligung), Art. 6 Abs 1 lit. b DSGVO (Vertrag bzw. vorvertragliche Maßnahmen), Art. 6 Abs. 1 lit. f DSGVO (berechtigte Interessen)  und Art. 9 Abs. 2 lit. a. DSGVO (Verarbeitung besonderer Kategorien).

If we include you in our application tool, this happens on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). We would like to point out that your consent to our application pool is voluntary, has no influence on the application process and you have the option to revoke your consent at any time. The lawfulness of the processing until the time of the revocation remains unaffected.

In the case of the protection of vital interests, the data processing is carried out in accordance with Art. 9 para. 2 lit. c. DSGVO. For the purposes of health care, occupational medicine, medical diagnosis, health or social care or treatment, or for the management of health or social care systems and services, the processing of personal data is carried out in accordance with Art. 9 (2) lit. h. DSGVO. If you voluntarily provide special category data, the processing is based on Art. 9 (2) lit. a. DSGVO.

Customer data

What is customer data?

In order to be able to offer our service or contractual services, we also process data of our customers and business partners. This data always includes personal data. Customer data is all information that is processed on the basis of a contractual or pre-contractual cooperation in order to be able to provide the services offered. Customer data is therefore all collected information that we collect and process about our customers.

Why do we process customer data?

There are many reasons why we collect and process customer data. The most important is that we simply need various data to provide our services. Sometimes your e-mail address is enough, but if you purchase a product or service, for example, we also need data such as name, address, bank data or contract data. We also use the data subsequently for marketing and sales optimization, so that we can improve our overall service to our customers. Another important point is our customer service, which is always very important to us. We want you to be able to come to us at any time with questions about our offers, and for this we need at least your e-mail address.

What data is processed?

Exactly which data is stored can only be described here on the basis of categories. This always depends on which services you receive from us. Sometimes your e-mail address is enough, but if you purchasae a product or service, for example, we also need data such as name, address, bank data or contract data. In other cases, you purchase a product or service from us and for this we need significantly more information, such as your contact data, payment data and contract data.

Here is a list of possible data we receive from you and process:

• Name
• Contact address
• E-mail address
• Phone number
• Date of birth
• Payment data (invoices, bank data, payment history, etc.)
• Contract data ( term, content)
• Usage data (websites visited, access data ect.)
• Metadata (IP address, device information)

How long will the data be stored?

As soon as we no longer need the customer data to fulfill our contractual obligations and our purposes, and the data is also no longer necessary for possible warranty and liability obligations, we delete the corresponding customer data. This is the case, for example, when a business contract ends. After that, the statute of limitations is usually 3 years, although longer periods are possible in individual cases. Of course, we also comply with the statutory retention obligations. Your customer data will certainly not be passed on to third parties unless you have given explicit consent to do so.

Legal basis

Rechtsgrundlagen für die Verarbeitung Ihrer Daten sind Art. 6 Abs. 1 lit. a DSGVO (Einwilligung), Art. 6 Abs 1 lit. b DSGVO (Vertrag bzw. vorvertragliche Maßnahmen), Art. 6 Abs. 1 lit. f DSGVO (berechtigte Interessen)  und in speziellen Fällen (z. B. bei medizinischen Leistungen) Art. 9 Abs. 2 lit. a. DSGVO (Verarbeitung besonderer Kategorien).

In the case of the protection of vital interests, the data processing is carried out in accordance with Art. 9 para. 2 lit. c. DSGVO. For the purposes of health care, occupational medicine, medical diagnosis, health or social care or treatment, or for the management of health or social care systems and services, the processing of personal data is carried out in accordance with Art. 9 (2) lit. h. DSGVO. If you voluntarily provide special category data, the processing is based on Art. 9 (2) lit. a. DSGVO.

Registration

Wenn Sie sich bei ns registrieren, kann es zur Verarbeitung personenbezogener Daten kommen, sofern Sie Daten mit Personenbezug eingeben bzw. Daten wie die IP-Adresse im Zuge der Verarbeitung erfasst werden. Was wir mit dem doch recht sperrigen Begriff “personenbezogene Daten” meinen, können Sie weiter unten nachlesen.

Please only enter data that we need for the registration and for which you have the release of a third party, if you perform the registration on behalf of a third party. If possible, use a secure password that you do not use anywhere else and an email address that you check regularly.

Below we inform you about the exact nature of the data processing, denn Sie sollen sich bei uns wohl fühlen!

What is a registration?

When you register, we take certain information from you and later allow you to simply log in online and use your account with us. Having an account with us has the advantage that you do not have to re-enter everything every time. Saves time, effort and ultimately prevents errors in the provision of our services.

Why do we process personal data?

Kurz gesagt verarbeiten wir personenbezogene Daten, um die Erstellung und Nutzung eines Kontos bei uns zu ermöglichen.
Würden wir das nicht tun, müssten Sie jedes Mal alle Daten eingeben, auf eine Freigabe von uns warten und alles noch einmal eingeben. Das fänden wir und viele, viele Kunden nicht so gut. Wie würden Sie das finden?

What data is processed?

All the data you provided in the course of registration, enter during registration or enter in the course of managing your data in the account.

During registration, we process the following types of data: 

• First name
• Last name
• E-mail address
• Company name
• Street + house number
• Residence
• Postal code
• Country

When you log in, we process the data you enter when you log in, such as username and password, and data collected in the background, such as device information and IP addresses.

During account use, we process data that you enter during account use and which is created in the course of using our services.

Storage duration

Wir speichern die eingegebenen Daten zumindest für die Zeit, solange das mit den Daten verknüpfte Konto bei uns besteht und verwendet wird, solange vertragliche Verpflichtungen zwischen uns bestehen und, wenn der Vertrag endet, bis die jeweiligen Ansprüche daraus verjährt sind. Darüber hinaus speichern wir Ihre Daten solange und soweit wir gesetzlichen Verpflichtungen zur Speicherung unterliegen. Danach bewahren wir zum Vertrag gehörige Buchungsbelege (Rechnungen, Vertragsurkunden, Kontoauszüge u.a.) sowie sonstige relevante Geschäftsunterlagen für die gesetzlich vorgeschriebene Dauer (i.d.R. einige Jahre) auf.

Right of objection

You have registered, entered data and want to revoke the processing? No problem. As you can read above, the rights under the General Data Protection Regulation also exist during and after registration, login or account with us. Contact the data protection officer above to exercise your rights. If you already have an account with us, you can easily view or manage your data and texts in the account.

Legal basis

Mit Durchführung des Registrierungsvorgangs treten Sie vorvertraglich an uns heran, um einen Nutzungsvertrag über unsere Plattform zu schließen (wenn auch nicht automatisch eine Zahlungspflicht entsteht). Sie investieren Zeit, um Daten einzugeben und sich zu registrieren und wir bieten Ihnen unsere Dienstleistungen nach Anmeldung in unserem System und die Einsicht in Ihr Kundenkonto. Außerdem kommen wir unseren vertraglichen Verpflichtungen nach. Schließlich müssen wir registrierte Nutzer bei wichtigen Änderungen per E-Mail am Laufenden halten. Damit trifft Art. 6 Abs. 1 lit. b DSGVO (Durchführung vorvertraglicher Maßnahmen, Erfüllung eines Vertrags) zu.

If necessary, we also obtain your consent, e.g. if you voluntarily provide more than the absolutely necessary data or if we are allowed to send you advertising. Art. 6 para. 1 lit. a DSGVO (consent) therefore applies.

We also have a legitimate interest in knowing who we are dealing with in order to contact them in certain cases. In addition, we need to know who is using our services and whether they are being used as specified in our terms of use, so Art. 6 para. 1 lit. f DSGVO (Legitimate Interests) applies.

Note: the following sections are to be ticked by users (as required):

Registration with clear name

Since in business we need to know who we are dealing with, registration is only possible with your real name (clear name) and not with pseudonyms.

Registration with pseudonyms

Pseudonyms can be used during registration, which means that you do not have to register with us using your real name. This ensures that your name cannot be processed by us. 

IP address storage

In the course of registration, login and account use, we store the IP address in the background for security reasons in order to be able to determine the legitimate use.

Public profiles

The user profiles are publicly visible, i.e. you can see parts of the profile on the Internet even without entering username and password.

2-factor authentication (2FA)

Eine Zwei-Faktor-Authentifizierung (2FA) bietet zusätzlich Sicherheit bei der Anmeldung, da sie verhindert, dass man sich z.B. ohne Smartphone anmeldet. Diese technische Maßnahme zur Absicherung Ihres Kontos schützt Sie also vor dem Verlust von Daten oder unzulässigen Zugriffen auch wenn Benutzername und Passwort bekannt wären. Welches 2FA zum Einsatz kommt, erfahren Sie bei der Registrierung, Anmeldung und im Konto selbst.

Web hosting introduction

What is web hosting?

When you visit websites nowadays, certain information - including personal data - is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By the way, by website we mean the entirety of all web pages on a domain, i.e. everything from the home page (homepage) to the very last subpage (like this one). By domain, we mean, for example, example.de or sampleexample.com.

When you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser to do so. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We say browser or web browser for short.

To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complicated and costly task, which is why this is usually done by professional providers, the providers. These offer web hosting and thus ensure reliable and error-free storage of the website data. A whole lot of technical terms, but please stay tuned, it gets better!

To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complicated and costly task, which is why this is usually done by professional providers, the providers. These offer web hosting and thus ensure reliable and error-free storage of the website data. A whole lot of technical terms, but please stay tuned, it gets better!

Why do we process personal data?

The purposes of data processing are:

1. Professional hosting of the website and securing its operation
2. to maintain operational and IT security
3. Anonymous evaluation of access behavior for the improvement of our offer and, if necessary, for criminal prosecution or the pursuit of claims

What data is processed?

Even while you are visiting our website right now, our web server, which is the computer on which this website is stored, usually automatically stores data such as

• the complete Internet address (URL) of the accessed web page
• Browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the previously visited page (referrer URL) (e. g. https://www.beispielquellsite.de/vondabinichgekommen/)
• the hostname and IP address of the device being accessed from (e.g. COMPUTERNAME and 194.23.43.121)
• Date and time
• in files, the so-called web server log files

How long is data stored?

As a rule, the above data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot exclude the possibility that this data may be viewed by authorities in the event of unlawful conduct.

In short: Your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not share your data without consent!

Legal basis

The lawfulness of the processing of personal data in the context of web hosting results from Art. 6 para. 1 lit. f DSGVO (protection of legitimate interests), because the use of professional hosting with a provider is necessary to present the company on the Internet in a secure and user-friendly manner and to be able to pursue attacks and claims from this if necessary.

As a rule, there is a contract between us and the hosting provider for commissioned processing pursuant to Art. 28 f. DSGVO, which ensures compliance with data protection and guarantees data security.

Website Building Block Systems Introduction

What are website building systems?

We use a website building block system for our website. Building block systems are special forms of a content management system (CMS). With a building block system, website owners can create a website very easily and without programming knowledge. In many cases, web hosts also offer building block systems. By using a modular system, personal data of you may also be collected, stored and processed. In this data protection text, we provide you with general information about data processing by modular systems. You can find more detailed information in the provider's data protection statements.

Why do we use website building systems for our website?

The biggest advantage of a modular system is the ease of use. We want to provide you with a clear, simple and concise website that we can easily operate and maintain ourselves - without external support. Meanwhile, a modular system offers many helpful functions that we can use even without programming knowledge. This allows us to design our web presence according to our wishes and to offer you an informative and pleasant time on our website.

What data is stored by a modular system?

Exactly what data is stored depends, of course, on the website builder system used. Each provider processes and collects different data of the website visitor. But as a rule, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider and the date of your website visit are collected. Furthermore, tracking data (e.g. browser activity, clickstream activity, session heatmaps, etc.) may also be processed. In addition, personal data may also be collected and stored. This is mostly contact data such as e-mail address, telephone number (if you have provided it), IP address and geographical location data. You can find out exactly what data is stored in the provider's privacy policy.

How long and where is the data stored?

We will inform you about the duration of the data processing below in connection with the website construction kit system used, provided we have further information on this. You will find detailed information about this in the provider's privacy policy. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. It may be that the provider stores data from you according to its own specifications, over which we have no control.

Right of objection

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact the person responsible for the website construction system used at any time. You can find contact details either in our privacy policy or on the website of the relevant provider.

You can delete, disable, or manage cookies that providers use for their functions in your browser. Depending on which browser you use, this works in different ways. Please note, however, that all functions may then no longer work as usual.

Legal basis

You can delete, disable, or manage cookies that providers use for their functions in your browser. Depending on which browser you use, this works in different ways. Please note, however, that all functions may then no longer work as usual.

Insofar as the processing of data is not absolutely necessary for the operation of the website, the data will only be processed on the basis of your consent. This applies in particular to tracking activities. The legal basis in this respect is Art. 6 para. 1 lit. a DSGVO.

With this privacy policy, we have brought you closer to the most important general information about data processing. If you wish to obtain more detailed information in this regard, you will find further information - if available - in the following section or in the provider's privacy policy.

WordPress.com Privacy Policy

WordPress.com Privacy Policy Summary
Affected: Besucher der Website
Purpose: Optimierung unserer Serviceleistung
Verarbeitete Daten: Daten wie etwa technische Nutzungsinformationen wie Browseraktivität, Clickstream-Aktivitäten, Sitzungs-Heatmaps sowie Kontaktdaten, IP-Adresse oder Ihr geografischer Standort. Mehr Details dazu finden Sie weiter unten in dieser Datenschutzerklärung.
Speicherdauer: Es hängt vor allem von der Art der gespeicherten Daten und den konkreten Einstellungen ab.
Rechtsgrundlagen: Art. 6 Abs. 1 lit. a DSGVO (Einwilligung), Art. 6 Abs. 1 lit. f DSGVO (Berechtigte Interessen)

What is WordPress?

We use the well-known content management system WordPress.com for our website. The service provider is the American company Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.

In 2003, the company saw the light of day and in a relatively short time became one of the most popular content management systems (CMS) in the world. A CMS is a software that helps us design our website and display content in a beautiful and organized way. The content can be text, audio and video.
By using WordPress, your personal data may also be collected, stored and processed. As a rule, mainly technical data such as operating system, browser, screen resolution or hosting provider are stored. However, personal data such as IP address, geographical data or contact details may also be processed.

Why do we use WordPress?

We have many strengths, but real programming is not one of our core competencies.

Nevertheless, we want to have a powerful and attractive website that we can also manage and maintain ourselves. With a modular website system or a content management system such as WordPress, we can do just that. With WordPress, we don't have to be programming aces to offer you a beautiful website. Thanks to WordPress, we can operate our website quickly and easily even without prior technical knowledge. If technical problems occur or we have special requests for our website, there are always our specialists who feel at home in HTML, PHP, CSS and co.

Thanks to the ease of use and comprehensive functions of WordPress, we can design our website according to our wishes and offer you a good user experience.

Which data is processed by WordPress?

Non-personal data includes technical usage information such as browser activity, clickstream activity, session heatmaps and data about your computer, operating system, browser, screen resolution, language and keyboard settings, internet provider and date of the page visit.

Personal data is also collected. These are primarily contact data (e-mail address or telephone number, if you provide these), IP address or your geographical location.

WordPress can also use cookies to collect data. This often includes data about your behavior on our website. For example, it can record which subpages you particularly like to view, how long you spend on individual pages, when you leave a page again (bounce rate) or which default settings (e.g. language selection) you have made. Based on this data, WordPress can also better adapt its own marketing measures to your interests and user behavior. The next time you visit our website, you will therefore be shown our website as you have previously set it.

WordPress may also use technologies such as pixel tags (web beacons), for example to clearly identify you as a user and possibly offer interest-based advertising.

How long and where is the data stored?

How long the data is stored depends on various factors. So it mainly depends on the type of data stored and the specific settings of the website. In principle, WordPress deletes the data when it is no longer needed for its own purposes. There are of course exceptions, especially if legal obligations require the data to be stored for longer. Web server logs containing your IP address and technical data are deleted by WordPress or Automattic after 30 days. Automattic uses the data for this period to analyze the traffic on its own websites (e.g. all WordPress pages) and to resolve potential problems. Deleted content on WordPress websites is also kept in the recycle bin for 30 days to enable recovery, after which it may remain in backups and caches until it is deleted. The data is stored on Automattic's American servers.

How can I delete my data or prevent data storage?

You have the right and opportunity to access your personal data at any time and to object to its use and processing. You can also lodge a complaint with a state supervisory authority at any time.

In your browser, you also have the option of individually managing, deleting or deactivating cookies. Please note, however, that deactivated or deleted cookies may have a negative impact on the functions of our WordPress site. Depending on which browser you use, the management of cookies works slightly differently. Under the section "Cookies" you will find the corresponding links to the respective instructions of the bekanntesten Browser.

Legal basis

If you have consented to the use of WordPress, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when WordPress collects data.

We also have a legitimate interest in using WordPress to optimize our online service and present it to you in an attractive manner. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use WordPress if you have given your consent.

WordPress or Automattic processes your data in the USA, among other places. Automattic is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Automattic uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the standard contractual clauses, Automattic undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de-

You can find more details on the privacy policy and which data is processed by WordPress and in what way at https://automattic.com/privacy/.

Web Analytics Introduction

What is Web Analytics?

We use software on our website to evaluate the behavior of website visitors, known as web analytics for short. This involves collecting data that is stored, managed and processed by the respective analytic tool provider (also known as a tracking tool). The data is used to create analyses of user behavior on our website and made available to us as the website operator. In addition, most tools offer various testing options. For example, we can test which offers or content are best received by our visitors. To do this, we show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such test procedures, as for other analytics procedures, user profiles can also be created and the data stored in cookies.

Why do we run web analytics?

With our website we have a clear goal in mind: we want to deliver the best web offer on the market for our industry. To achieve this goal, we want to offer the best and most interesting offer on the one hand, and on the other hand make sure that you feel completely comfortable on our website. With the help of web analysis tools, we can take a closer look at the behavior of our website visitors and then improve our web offer for you and us accordingly. For example, we can see how old our visitors are on average, where they come from, when our website is most visited or which content or products are particularly popular. All this information helps us to optimize the website and thus best adapt it to your needs, interests and wishes.

What data is processed?

Exactly what data is stored depends, of course, on the analysis tools used. But as a rule, for example, which content you view on our website, which buttons or links you click on, when you access a page, which browser you use, which device (PC, tablet, smartphone, etc.) you use to visit the website or which computer system you use is stored. If you agreed that location data may also be collected, these may also be processed by the web analytics tool provider.

In addition, your IP address is also stored. According to the General Data Protection Regulation (DSGVO), IP addresses are personal data. However, your IP address is usually stored pseudonymously (i.e. in an unrecognizable and shortened form). For the purpose of testing, web analysis and web optimization, no direct data, such as your name, age, address or email address are stored as a matter of principle. All this data, if collected, is stored pseudonymously. Thus, you cannot be identified as a person.

How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, other cookies can store data for several years.

Duration of the data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If it is required by law, as for example in the case of accounting, this storage period may also be exceeded.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser.

Legal basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. This consent represents according to constitutes the legal basis for the processing of personal data as may occur during the collection by web analytics tools. constitutes the legal basis for the processing of personal data as may occur during the collection by web analytics tools.

In addition to consent, there is a legitimate interest on our part to analyze the behavior of website visitors and thus to improve our offer technically and economically. With the help of web analytics, we detect errors of the website, can identify attacks and improve the economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we use the tools only insofar as they have given consent.

Since web analytics tools use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy statements of the respective tools.

Information on specific web analytics tools, if any, is provided in the following sections.

Cookie Consent Management Platform Introduction

What is a Cookie Consent Management Platform?

We use a Consent Management Platform (CMP) software on our website, which helps us and you to handle used scripts and cookies correctly and safely. The software automatically creates a cookie popup, scans and controls all scripts and cookies, provides cookie consent for you as required by data protection laws, and helps us and you keep track of all cookies. With most cookie consent management tools, all existing cookies are identified and categorized. You as a website visitor then decide for yourself whether and which scripts and cookies you allow or do not allow. 

Why do we use a cookie management tool?

Our goal is to offer you the best possible transparency in the area of data protection. In addition, we are also legally obligated to do so. We want to inform you as well as possible about all tools and all cookies that can store and process data from you. It is also your right to decide for yourself which cookies you accept and which you do not. In order to give you this right, we first need to know exactly which cookies ended up on our website in the first place. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we know about all cookies and can provide you with DSGVO-compliant information about them. You can then accept or reject cookies via the consent system.

What data is processed?

Within the framework of our cookie management tool, you can manage each individual cookie yourself and have complete control over the storage and processing of your data. The declaration of your consent is stored so that we do not have to query you each time you visit our website again and we can also prove your consent if required by law. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the storage period of your cookie consent varies. In most cases, this data (e.g. pseudonymous user ID, time of consent, details of cookie categories or tools, browser, device information) is stored for up to two years.

Duration of the data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. Data that is stored in cookies is stored for different lengths of time. Some cookies are already deleted after you leave the website, others may be stored in your browser for several years. The exact duration of data processing depends on the tool used; in most cases, you should be prepared for a storage period of several years. In the respective privacy statements of the individual providers, you will usually receive precise information about the duration of data processing.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser.

Information on specific cookie management tools, if any, can be found in the following sections.

Legal basis

If you agree to cookies, personal data about you will be processed and stored via these cookies. If we are informed by your Consent (Article 6 para. 1 lit. a DSGVO) may use cookies, this consent is also the legal basis for the use of cookies or the processing of your data. In order to be able to manage the consent to cookies and to enable you to give your consent, cookie consent management platform software is used. The use of this software enables us to efficiently operate the website in a legally compliant manner, which is a legitimate interest (Article 6 para. 1 lit. f DSGVO).

Sicherheit & Anti-Spam

What is Security & Anti-Spam Software?

With so-called security & anti-spam software, you can protect yourself and we can protect ourselves from various spam or phishing emails and possible other cyberattacks. Spam is advertising mails from a mass mailing that you did not ask for yourself. Such mails are also called data garbage and can also cause costs. Phishing mails, on the other hand, are messages that aim to build trust via fake news or websites in order to obtain personal data. Anti-spam software usually protects against unwanted spam messages or malicious mails that could introduce viruses into our system, for example. We also use general firewall and security systems that protect our computers from unwanted network attacks.

Why do we use security & anti-spam software?

We place particular emphasis on security on our website. After all, it's not just our security that's at stake, but yours as well. Unfortunately, cyber threats have become part of everyday life in the world of IT and the Internet. Hackers often try to steal personal data from an IT system with the help of a cyberattack. And that is why a good defense system is absolutely necessary. A security system monitors all incoming and outgoing connections to our network or computer. In order to achieve even greater security against cyber attacks, we also use other external security services in addition to the standardized security systems on our computer. Unauthorized data traffic is thus better prevented and we protect ourselves against cybercrime.

Welche Daten werden durch Security- & Anti-Spam-Softwares verarbeitet?

Welche Daten genau erhoben und gespeichert werden hängt natürlich vom jeweiligen Dienst ab. Wir sind allerdings stets bemüht nur Programme zu verwenden, die sehr sparsam Daten erheben bzw. nur Daten speichern, die für die Erfüllung der angebotenen Leistung nötig sind. Grundsätzlich kann der Dienst Daten wie beispielsweise Name, Adresse, IP-Adresse, E-Mail-Adresse und technische Daten wie Browsertyp oder Browserversion speichern. Auch können etwaige Leistungs- und Protokolldaten erhoben werden, um mögliche eingehende Bedrohungen rechtzeitig zu erkennen. Diese Daten werden im Rahmen der Services und unter Einhaltung der geltenden Gesetze verarbeitet. Dazu zählt auch bei US-amerikanischen Anbietern (über die Standardvertragsklauseln) die DSGVO. Diese Security-Dienste arbeiten in einigen Fällen auch mit Drittanbietern zusammen, die unter Anweisung und in Übereinstimmung mit den Datenschutzrichtlinien und weiteren Sicherheitsmaßnahmen Daten speichern und/oder verarbeiten können. Die Datenspeicherung erfolgt meist über Cookies.

Duration of the data processing

We will inform you about the duration of data processing below, provided we have further information on this. For example, security programs store data until you or we revoke the data storage. In general, personal data is only stored for as long as is absolutely necessary for the provision of the services. In many cases, unfortunately, we lack precise information from the providers about the length of storage.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies or third-party security software at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser.

Since cookies may also be used with such security services, we recommend that you read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy statements of the respective tools.

Legal basis

We use security services mainly on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO) in a good security system against various cyber attacks.

Certain processing, in particular the use of cookies and the use of security functions require your consent. If you have consented that data from you can be processed and stored by integrated security services, this consent is considered the legal basis of the data processing (Art. 6 para. 1 lit. a DSGVO). Most of the services we use set cookies in your browser to store data. That is why we recommend that you read our privacy text about cookies carefully and view the privacy policy or cookie policy of the respective service provider.

Information on special tools - if available - can be found in the following sections.

Audio & Video Introduction

What are audio and video elements?

We have included audio or video elements on our website so that you can watch videos or listen to music/podcasts directly via our website. The content is provided by service providers. All content is therefore also obtained from the corresponding servers of the providers.

These are embedded functional elements of platforms such as YouTube, Vimeo or Spotify. The use of these portals is usually free of charge, but paid content can also be published. With the help of these embedded elements, you can listen to or view the respective content via our website.

When you use audio or video elements on our website, personal data about you may also be transmitted to, processed and stored by the service providers.

Why do we use audio & video elements on our website?

Of course, we want to give you the best offer on our website. And we've realized that content is no longer conveyed only in text and static images. Instead of just giving you a link to a video, we offer audio and video formats directly on our website that are entertaining or informative, and ideally both. This expands our service and makes it easier for you to access interesting content. So in addition to our text and images, we also offer video and/or audio content.

What data is stored by audio & video elements?

When you access a page on our website that has an embedded video, for example, your server connects to the service provider's server. In the process, data from you is also transferred to the third-party provider and stored there. Some data is collected and stored quite independently of whether or not you have an account with the third-party provider. This usually includes your IP address, browser type, operating system, and other general information about your terminal device. Furthermore, most providers also collect information about your web activity. This includes session duration, bounce rate, which button you clicked on, or which website you used to access the service. All this information is usually stored via cookies or pixel tags (also called web beacons). Pseudonymized data is mostly stored in cookies in your browser. You can always find out exactly what data is stored and processed in the privacy policy of the respective provider.

Duration of the data processing

You can find out exactly how long the data is stored on the servers of the third-party providers either below in the data protection text of the respective tool or in the privacy policy of the provider. In principle, personal data is only processed for as long as is absolutely necessary for the provision of our services or products. As a rule, this also applies to third-party providers. In most cases, you can assume that certain data will be stored on the servers of third-party providers for several years. Data can be stored for different lengths of time specifically in cookies. Some cookies are already deleted after leaving the website, others can be stored in your browser for several years.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser. The lawfulness of the processing until the revocation remains unaffected.

Since the integrated audio and video functions on our site usually also use cookies, you should also read our general privacy policy on cookies. In the privacy statements of the respective third-party providers, you can learn more about the handling and storage of your data.

Legal basis

If you have consented that data from you can be processed and stored by embedded audio and video elements, this consent is considered the legal basis of the data processing (Art. 6 par. 1 lit. a DSGVO). In principle, your data will also be used on the basis of our legitimate interest (Art. 6 Abs. 1 lit. f DSGVO) We store and process your data for the purpose of fast and good communication with you or other customers and business partners. Nevertheless, we only use the integrated audio and video elements if you have given your consent.

YouTube privacy policy

What is YouTube?

We have incorporated YouTube videos on our website. This way we can present you interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you call up a page on our website that has a YouTube video embedded, your browser automatically connects to the YouTube or Google servers. In the process, various data are transferred (depending on the settings). Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing in the European area.

In the following, we would like to explain in more detail what data is processed, why we have embedded YouTube videos and how you can manage or delete your data.

On YouTube, users can watch, rate, comment on and upload videos for free. Over the last few years, YouTube has become one of the most important social media channels in the world. In order for us to display videos on our website, YouTube provides a code snippet that we have built into our site.

Why do we use YouTube videos on our website?

YouTube is the video platform with the most visitors and the best content. We are committed to providing you with the best possible user experience on our website. And of course, we can't do without interesting videos. With the help of our embedded videos, we provide you with other helpful content in addition to our text and images. In addition, the embedded videos make our website easier to find on the Google search engine. Also, when we run ads via Google Ads, Google - thanks to the collected data - can really only show these ads to people who are interested in our offers.

What data is stored by YouTube?

As soon as you visit one of our pages that has a YouTube video embedded, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet provider. Other data may include contact details, any ratings, sharing of content via social media or adding to your favorites on YouTube.

If you are not signed in to a Google Account or YouTube account, Google stores data with a unique identifier associated with your device, browser, or app. For example, your preferred language setting is retained. But a lot of interaction data can't be stored because fewer cookies are set.

In the following list, we show cookies that were set in a test in the browser. On the one hand, we show cookies that are set without a logged-in YouTube account. On the other hand, we show cookies that are set with a logged-in account. The list cannot claim to be complete, because the user data always depends on the interactions on YouTube.

Name: YSC
Value: b9-CV6ojI5Y322529083-1
Intended use: This cookie registers a unique ID to store statistics of the watched video.
Expiration date: After end of session

Name: PREF
Value: f1=50000000
Intended use: This cookie also registers your unique ID. Google gets statistics about how you use YouTube videos on our website via PREF.
Expiration date: After 8 months

Name: GPS
Value: 1
Intended use: This cookie registers your unique ID on mobile devices to track GPS location.
Expiration date: After 30 minutes

Name: VISITOR_INFO1_LIVE
Value: 95Chz8bagyU
Intended use: This cookie attempts to estimate the user's bandwidth on our web pages (with embedded YouTube video).
Expiration date: After 8 months

Other cookies that are set when you are logged in with your YouTube account:

Name: APISID
Value: zILlvClZSkqGsSwI/AU1aZI6HY7322529083-
Intended use: This cookie is used to create a profile about your interests. The data is used for personalized advertisements.
Expiration date: After 2 years

Name: CONSENT
Value: YES+AT.de+20150628-20-0
Intended use: The cookie stores the status of a user's consent to use various Google services. CONSENT is also used for security purposes to verify users and protect user data from unauthorized attacks.
Expiration date: after 19 years

Name: HSID
Value: AcRwpgUik9Dveht0I
Intended use: Dieses Cookie wird verwendet, um ein Profil über Ihre Interessen zu erstellen. Diese Daten helfen personalisierte Werbung anzeigen zu können.
Expiration date: After 2 years

Name: LOGIN_INFO
Value: AFmmF2swRQIhALl6aL…
Intended use: In diesem Cookie werden Informationen über Ihre Login-Daten gespeichert.
Expiration date: After 2 years

Name: SAPISID
Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM
Intended use: This cookie works by uniquely identifying your browser and device. It is used to create a profile about your interests.
Expiration date: After 2 years

Name: SID
Value: oQfNKjAsI322529083-
Intended use: This cookie stores your Google Account ID and your last login time in digitally signed and encrypted form.
Expiration date: After 2 years

Name: SIDCC
Value: AN0-TYuqub2JOcDTyL
Intended use: Dieses Cookie speichert Informationen, wie Sie die Webseite nutzen und welche Werbung Sie vor dem Besuch auf unserer Seite möglicherweise gesehen haben.
Expiration date: After 3 months

How long and where is the data stored?

The data that YouTube receives from you and processes is stored on Google servers. Most of these servers are located in America. At https://www.google.com/about/datacenters/locations/?hl=de you can see exactly where the Google data centers are located. Your data is distributed across the servers. This means that the data can be accessed more quickly and is better protected against manipulation.

Google stores the collected data for different lengths of time. Some data you can delete at any time, others are automatically deleted after a limited time, and still others are stored by Google for a longer period of time. Some data (such as items from "My Activity", photos or documents, products) stored in your Google Account will remain stored until you delete them. Even if you are not signed into a Google account, you can delete some data associated with your device, browser, or app.

How can I delete my data or prevent data storage?

Basically, you can delete data in Google Account manually. With the automatic deletion function of location and activity data introduced in 2019, information is stored depending on your decision - either 3 or 18 months and then deleted.

Whether you have a Google account or not, you can configure your browser to delete or disable cookies from Google. Depending on which browser you use, this works in different ways. Under the section "Cookies" you will find the corresponding links to the respective instructions of the most popular browsers.

If you generally do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This way, you can decide for each individual cookie whether you allow it or not.

Legal basis

If you have consented that data from you can be processed and stored by embedded YouTube elements, this consent is considered the legal basis of the data processing (Art. 6 par. 1 lit. a DSGVO). In principle, your data will also be used on the basis of our legitimate interest (Art. 6 Abs. 1 lit. f DSGVO) stored and processed for the purpose of fast and good communication with you or other customers and business partners. Nevertheless, we only use the embedded YouTube elements if you have given your consent. YouTube also sets cookies in your browser to store data. Therefore, we recommend that you read our privacy text about cookies carefully and view the privacy policy or cookie policy of the respective service provider.

Youtube also processes data from you in the USA, among other places. Youtube and Google are active participants in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information about this on https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and through the standard contractual clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de-

Die Google Ads Datenverarbeitungsbedingungen (Google Ads Data Processing Terms), welche auf die Standardvertragsklauseln verweisen, finden Sie unter https://business.safety.google/intl/de/adsprocessorterms/.

Since YouTube is a subsidiary of Google, there is a joint privacy policy. If you want to learn more about the handling of your data, we recommend the privacy policy at https://policies.google.com/privacy?hl=de.

YouTube Subscribe Button Privacy Policy

We have installed the YouTube Subscribe button on our website. You can usually recognize the button by the classic YouTube logo. The logo shows the words "Subscribe" or "YouTube" in white letters on a red background and the white "Play" icon to the left. However, the button can also be displayed in a different design.

Our YouTube channel always offers you funny, interesting or exciting videos. With the built-in "Subscribe" button, you can subscribe to our channel directly from our website and do not have to go to the YouTube website specifically. In this way, we want to make it as easy as possible for you to access our extensive content. Please note that YouTube may store and process data about you as a result.

Wenn Sie auf unserer Seite einen eingebauten Abo-Button sehen, setzt YouTube – laut Google – mindestens ein Cookie. Dieses Cookie speichert Ihre IP-Adresse und unsere URL. Auch Informationen über Ihren Browser, Ihren ungefähren Standort und Ihre voreingestellte Sprache kann YouTube so erfahren. Bei unserem Test wurden folgende vier Cookies gesetzt, ohne bei YouTube angemeldet zu sein:

Name: YSC
Value: b9-CV6ojI5322529083Y
Intended use: This cookie registers a unique ID to store statistics of the watched video.
Expiration date: After end of session

Name: PREF
Value: f1=50000000
Intended use: This cookie also registers your unique ID. Google gets statistics about how you use YouTube videos on our website via PREF.
Expiration date: After 8 months

Name: GPS
Value: 1
Intended use: This cookie registers your unique ID on mobile devices to track GPS location.
Expiration date: After 30 minutes

Name: VISITOR_INFO1_LIVE
Value: 32252908395Chz8bagyU
Intended use: This cookie attempts to estimate the user's bandwidth on our web pages (with embedded YouTube video).
Expiration date: After 8 months

Anmerkung: These cookies were set after a test and can not claim to be complete.

If you are logged into your YouTube account, YouTube can save many of your actions/interactions on our website with the help of cookies and assign them to your YouTube account. YouTube thereby receives, for example, information on how long you surf our site, which browser type you use, which screen resolution you prefer or which actions you perform.

YouTube uses this data on the one hand to improve its own services and offers, and on the other hand to provide analyses and statistics for advertisers (who use Google Ads).

Web design introduction

What is web design?

We use several tools on our website that serve our web design. Web design is not, as often assumed, only about that our website looks pretty, but also about functionality and performance. But of course, the appropriate appearance of a website is also one of the major goals of professional web design. Web design is a branch of media design and deals with the visual as well as the structural and functional design of a website. The goal is to use web design to improve your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. User experience refers to all impressions and experiences that the website visitor experiences on a website. Usability is a sub-item of user experience. This refers to the user-friendliness of a website. The main emphasis here is on ensuring that content, subpages or products are clearly structured and that you can easily and quickly find what you are looking for. In order to provide you with the best possible experience on our website, we also use so-called third-party web design tools. In this privacy policy, the category "web design" therefore includes all services that improve the design of our website. These can be, for example, fonts, various plugins or other integrated web design functions.

Why do we use web design tools?

How you absorb information on a website depends very much on the structure, functionality and visual perception of the website. Therefore, a good and professional web design became more and more important for us as well. We are constantly working on improving our website and also see this as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, you will only visit us and take advantage of our offers if you feel completely comfortable.

Welche Daten werden durch Webdesign-Tools gespeichert?

Wenn Sie unsere Website besuchen, können Webdesign-Elemente in unseren Seiten eingebunden sein, die auch Daten verarbeiten können. Um welche Daten es sich genau handelt, hängt natürlich stark von den verwendeten Tools ab. Weiter unter sehen Sie genau, welche Tools wir für unsere Website verwenden. Wir empfehlen Ihnen für nähere Informationen über die Datenverarbeitung auch die jeweilige Datenschutzerklärung der verwendeten Tools durchzulesen. Meistens erfahren Sie dort, welche Daten verarbeitet werden, ob Cookies eingesetzt werden und wie lange die Daten aufbewahrt werden. Durch Schriftarten wie etwa Google Fonts werden beispielsweise auch Informationen wie Spracheinstellungen, IP-Adresse, Version des Browsers, Bildschirmauflösung des Browsers und Name des Browsers automatisch an die Google-Server übertragen.

Duration of the data processing

How long data is processed is very individual and depends on the web design elements used. For example, if cookies are used, the retention period can be as short as a minute or as long as a few years. Please do your research in this regard. For this purpose, we recommend on the one hand our general text section on cookies, as well as the privacy statements of the tools used. There you will usually find out exactly which cookies are used and what information is stored in them. Google font files, for example, are stored for one year. This is to improve the loading time of a website. In principle, data is only ever stored for as long as is necessary for the provision of the service. In the case of legal requirements, data may also be stored for longer.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. You can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser. However, under web design elements (mostly fonts), there is also data that cannot be deleted quite so easily. This is the case when data is automatically collected directly when a page is called up and transmitted to a third-party provider (such as Google). In this case, please contact the support of the respective provider. In the case of Google, you can reach the support under https://support.google.com/?hl=de.

Legal basis

If you have consented to web design tools being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur when web design tools are used. From our side, there is also a legitimate interest to improve the web design on our website. After all, only then can we provide you with a beautiful and professional web offer. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use web design tools insofar as you have given your consent. In any case, we want to emphasize that again here.

Information on specific web design tools - if available - is provided in the following sections.

Closing words

Congratulations! If you are reading these lines, you have really "fought" your way through our entire privacy policy, or at least scrolled this far. As you can see from the scope of our privacy policy, we take the protection of your personal data, anything but lightly.
Uns ist es wichtig, Sie nach bestem Wissen und Gewissen über die Verarbeitung personenbezogener Daten zu informieren. Dabei wollen wir Ihnen aber nicht nur mitteilen, welche Daten verarbeitet werden, sondern auch die Beweggründe für die Verwendung diverser Softwareprogramme näherbringen. In der Regel klingen Datenschutzerklärung sehr technisch und juristisch. Da die meisten von Ihnen aber keine Webentwickler oder Juristen sind, wollten wir auch sprachlich einen anderen Weg gehen und den Sachverhalt in einfacher und klarer Sprache erklären. Immer ist dies natürlich aufgrund der Thematik nicht möglich. Daher werden die wichtigsten Begriffe am Ende der Datenschutzerklärung näher erläutert.
Bei Fragen zum Thema Datenschutz auf unserer Website zögern Sie bitte nicht, uns oder die verantwortliche Stelle zu kontaktieren. Wir wünschen Ihnen noch eine schöne Zeit und hoffen, Sie auf unserer Website bald wieder begrüßen zu dürfen.

All texts are protected by copyright.

Source: Created with the Privacy Generator from AdSimpl