Privacy Policy
Privacy Policy
With this privacy policy, we would like to inform you about the nature, scope, and purpose of the processing of personal data (hereinafter also referred to as "data"). Personal data is all data that has a personal reference to you, e.g., name, address, email address, or your user behavior. The privacy policy applies to all data processing operations carried out by us, both in the context of our core business and for the online media maintained by us.
Who is responsible for data processing at our company?
The data controller is:
Daniel Maximilian Heilemann
Hüttenweg 1
49835 Wietmarschen
Germany
+49 152 08892005
daniel@motorfeuer.de
https://motorfeuer.de/impressum
Processing of your data within the framework of our company's core business
If you are our customer or business partner or are interested in our services, the nature, scope, and purpose of the processing of your data depend on the contractual or pre-contractual relationships existing between us. In this sense, the data processed by us includes all data that is or was provided by you for the purpose of using the contractual or pre-contractual services and that is required to process your inquiry or the contract concluded between us. Unless otherwise stated in the further information in this privacy policy, the processing of your data and its disclosure to third parties is limited to the data that is necessary and appropriate to answer your inquiries and/or to fulfill the contract concluded between you and us, to safeguard our rights, and to fulfill legal obligations. We will inform you before or during the data collection process which data is required for this. If we use third-party providers to provide our services, the privacy policies of the respective third-party providers apply.
Affected data:
- Inventory data (e.g., names, addresses)
- Payment data (e.g., bank details, invoices)
- Contact data (e.g., email address, telephone number, postal address)
- Contract data (e.g., subject of contract, contract duration)
Affected persons: Interested parties, business and contractual partners
Purpose of processing: Processing of contractual services, communication and answering contact inquiries, office and organizational procedures
Legal basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Your rights under the GDPR
Under the GDPR, you have the following rights, which you can assert at any time with the controller named in section 1 of this privacy policy:
- Right to information: You have the right to request information from us about whether and what data we process about you.
- Right to rectification: You have the right to request the rectification of inaccurate data or the completion of incomplete data.
- Right to erasure: You have the right to request the erasure of your data.
- Right to restriction of processing: In certain cases, you have the right to request that we restrict the processing of your data.
- Right to data portability: You have the right to request that we transmit your data to you or another controller in a structured, commonly used, and machine-readable format.
- Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible is that of your usual place of residence, your workplace, or our company headquarters.
Right of withdrawal
You have the right to withdraw your consent to data processing at any time.
Right to object
You have the right to object at any time to the processing of your data that we base on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. If you exercise your right to object, we ask you to state the reasons. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests and rights.
Notwithstanding the above, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.
Please address your objection to the contact address of the controller provided above.
When do we delete your data?
We delete your data when we no longer need it or you instruct us to do so. This means that – unless otherwise stated in the individual privacy notices of this privacy policy – we delete your data,
- when the purpose of the data processing has ceased to apply and thus the respective legal basis mentioned in the individual privacy notices no longer exists, i.e., for example,
- after the termination of the contractual or membership relations existing between us (Art. 6 para. 1 lit. a GDPR) or
- after the cessation of our legitimate interest in the further processing or storage of your data (Art. 6 para. 1 lit. f GDPR),
- if you exercise your right of withdrawal and no other legal basis for processing in the sense of Art. 6 para. 1 lit. b-f GDPR applies,
- if you exercise your right to object and there are no compelling legitimate reasons against deletion.
However, if we still need to retain (certain parts of) your data for other purposes, for example, because tax retention periods (generally 6 years for business correspondence or 10 years for accounting records) or the assertion, exercise, or defense of legal claims arising from contractual relationships (up to four years) require it, or the data is needed to protect the rights of another natural or legal person, we will only delete (the part of) your data after these periods have expired. Until the expiry of these periods, however, we will restrict the processing of this data to these purposes (fulfillment of retention obligations).
Cloud Services
We use cloud services in particular for
- storing and editing documents,
- sending documents via email or exchanging files of any kind,
- our calendar appointment management,
- preparing and executing presentations and spreadsheets,
- publishing files of any kind,
- internal and external communication via chats, audio and video conferences.
The software applications we use for these purposes are provided to us by the providers listed below on their servers. We access these servers via the Internet. Insofar as you transmit your data to us in the context of communication with us or in other processes explained by us in this privacy policy, we process this data in the cloud service we use. This means that your data is stored on the servers of the third-party cloud provider. The third-party providers process usage and metadata to secure their servers and to optimize their services. In particular, we process and store your contact, customer, and contract data.
If we make files of any kind publicly available via our website using the cloud service we use, the respective third-party cloud service provider may store cookies on your computer system if you access these files. The service provider may process the data collected in this way to analyze your user behavior or your browser settings.
We point out that, depending on the country of domicile of the service provider named below, the data specified in more detail below may be transferred to and processed on servers outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be maintained and that the enforcement of your rights may not be possible or may be difficult. If the service provider we use only offers data processing within the EU, we intend – if not already implemented – to process your data exclusively there.
Affected data:
- Inventory data (e.g., names, addresses),
- Contact data (e.g., email addresses, telephone and mobile numbers)
- Content data (e.g., photos, videos, texts),
- Usage data (e.g., access times, visited websites, interest in content),
- Metadata (e.g., IP address, computer system information)
Affected persons: Interested parties, communication partners, customers, employees (e.g., applicants, current and former employees)
Purpose of processing: Organization of office and administrative tasks
Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Cloud service providers used:
Cookies
Our website uses cookies. Cookies are small text files, consisting of a series of numbers and letters, which are stored and saved on the device you use. Cookies primarily serve to exchange information between the device you use and our website. This includes, among other things, the language settings on a website, the login status or the point at which a video was watched.
When you visit our website, two types of cookies are used:
- Temporary cookies (session cookies): These store a so-called session ID, with which various requests from your browser can be assigned to the common session. Session cookies are deleted when you log out or close your browser.
- Permanent cookies: Permanent cookies remain stored even after the browser is closed. This allows our website to recognize your computer when you return to our website. These cookies store, for example, information about language settings or login information. In addition, these cookies can be used to document and store your surfing behavior. This data can be used for statistical, marketing, and personalization purposes.
In addition to the above classification, cookies can also be distinguished according to their purpose of use:
- Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, to store logins or shopping carts for the duration of your session, or cookies that are set for security reasons.
- Statistical, marketing, and personalization cookies: These are cookies that are used for analysis purposes or for measuring reach. Such "tracking" cookies can store information about entered search terms or the frequency of page views, for example. In addition, the surfing behavior of an individual user (e.g., viewing certain content, using functions, etc.) can also be stored in a user profile. Such profiles are used to display content to users that matches their potential interests. Insofar as we use services through which cookies for statistical, marketing, and personalization purposes are stored on your device, we will inform you separately about this in the following sections of our privacy policy or when obtaining your consent.
Affected data:
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address).
Affected persons: Users of our online offers
Purpose of processing: Displaying our websites, ensuring the operation of our websites, improving our online offer, communication and marketing
Legal basis:
Legitimate interest, Art. 6 para. 1 lit. f GDPR
If we do not obtain your consent for the setting of cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, in particular its content and functions. You have the right to object to the use of cookies set by us in the context of our legitimate interest via your browser's security settings. There you have the option to determine whether you accept no cookies at all or only on request, or to specify that cookies are deleted after each time you close your browser. If cookies are deactivated for our website, not all functions of the website may be fully usable.
Consent, Art. 6 para. 1 lit. a GDPR
If we ask you for permission to set certain cookies on your device before you visit our website, and you consent to this, your consent is considered the legal basis. As part of your consent, we will inform you which cookies we set in detail. If you do not give this consent, only the technically necessary cookies that are required for the proper operation of our website and its display in your browser will be set. If you have consented to the setting of cookies, you have the right to revoke your consent at any time.
Webhosting
We use a provider to host our websites, on whose servers our websites are stored and made available on the Internet (hosting). The provider can process all data transmitted via your browser that arises when using our websites. This includes, in particular, your IP address, which the provider needs to deliver our online offer to the browser you are using, as well as all entries you make via our website. In addition, the provider we use can
- the date and time of access to our website
- time zone difference to Greenwich Mean Time (GMT)
- access status (HTTP status)
- the amount of data transferred
- the internet service provider of the accessing system
- the browser type and version you are using
- the operating system you are using
- the website from which you may have reached our website
- the pages or subpages that you visit on our website.
collect. The aforementioned data is stored as log files on the servers of our provider. This is necessary to ensure the stability and security of the operation of our website.
Affected data:
- Content data (e.g., posts, photos, videos)
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address)
Affected persons: Users of our website
Purpose of processing: Displaying our websites, ensuring the operation of our websites
Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR
Webhoster commissioned by us:
one.com
Service provider: One.com Group AB, Hyllie Stationstorg 2, 215 32 Malmö, Sweden
Website: https://www.one.com/de/
Privacy Policy: https://www.one.com/de/info/datenschutzrichtlinie
Contact
If you contact us via email, social media, telephone, fax, mail, our contact form or otherwise and provide us with personal data such as your name, telephone number or email address, or provide further information about yourself or your request, we process this data to answer your request within the framework of the existing pre-contractual or contractual relationship between us.
Affected data:
- Inventory data (e.g., names, addresses)
- Contact data (e.g., email address, telephone number, postal address)
- Content data (texts, photos, videos)
- Contract data (e.g., subject matter of the contract, contract duration)
Affected persons: Interested parties, customers, business and contractual partners
Purpose of processing: Communication and answering contact inquiries, office and organizational procedures
Legal basis: Fulfillment of contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Handling of your data in the application process
If you apply to us, we process the personal data you provide to us during the application process, such as your name, address, place of residence, age, application photo, email and telephone number, professional background including schools, training, studies. If you send the data by email or via a contact form on our online presence, the processing takes place electronically. When submitting your application via the contact form, the transmission of your data is encrypted according to the state of the art. If you send your data by email, we point out that the transmission is usually unencrypted. If an employment contract is concluded after the application process, we store your data for the purpose of processing the employment relationship in compliance with the legal provisions.
Affected data:
- Inventory data (e.g., names, addresses)
- Payment data (e.g., bank details, invoices)
- Contact data (e.g., email address, telephone number, postal address)
- Contract data (e.g., subject matter of the contract, contract duration)
Affected persons: Applicants
Purpose of processing: Handling of the application process
Legal basis: Fulfillment of contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR
Deletion: If an employment contract is not concluded, your data will be deleted after the application process or at the latest 2 months after its completion. This does not apply if legal provisions prevent deletion or if further storage of your data is necessary for evidentiary purposes, for example in proceedings under the General Equal Treatment Act (AGG). The application process is considered completed with the sending of the rejection to you.
Registration, login and user account
You have the option to register on our online platform to create a user account there. For this, the provision of personal data as shown in the input mask is necessary. The data requested there includes in particular your name, your email address, if applicable, a username and the password. This data is stored and processed by us to set up a user account for you and to enable (repeated) login. The data can be changed or deleted by you at any time. The data will not be passed on to third parties unless this serves the technical and organizational processing of the user agreement existing between us. To protect you and us from abusive registrations, we store the IP address assigned to you at the time of registration, as well as the date and time of registration.
Affected data:
- Inventory data (e.g., names, addresses)
- Contact data (e.g., email address, telephone number, postal address)
- Contract data (e.g., subject matter of the contract, contract duration)
- Payment data (e.g., bank details, invoices)
- Content data (e.g., posts, photos, videos)
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address)
Purpose of processing: Processing of contractual services, communication and answering contact inquiries, security measures.
Legal basis: Fulfillment of contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Deletion: See the section: “When do we delete your data?”. In addition, we would like to draw your attention to the fact that we will delete the data collected during registration and the content data stored in the account, subject to any legal retention obligations, as soon as you delete your account. We therefore ask you, if you wish or need to access the content data stored in your account even after deleting your account, to back it up elsewhere before deleting the account.
Your comments or ratings
You have the option to comment on our posts, express your opinion, or post content in the designated areas of our website. Since we may be held liable for infringing content in your comment (defamation, abusive criticism, incitement to hatred, forbidden depiction of violence, etc.), we store your IP address for a period of 7 days in order to be able to determine your identity if necessary.
Legal basis: Art. 6 para. 1 lit. f GDPR
Affected data:
- Inventory data (e.g., names, addresses)
- Content data (e.g., posts, photos, videos)
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address)
Purpose of processing: Fulfillment of contractual obligations, communication and processing of inquiries, obtaining feedback, security measures.
Akismet
We use “Akismet” on our website. Akismet serves to filter comments submitted by users and to identify and process comments classified as “spam”. For this purpose, the comments you submit and the communication data are transmitted to the external servers of Automattic Inc. and analyzed.
Legal basis: Fulfillment of contract and pre-contractual inquiries Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. f GDPR
Affected data:
- Inventory data (e.g., names, addresses)
- Content data (e.g., posts, photos, videos)
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address)
Purpose of processing: Fulfillment of contractual obligations, communication and processing of inquiries, obtaining feedback, security measures
Deletion: Comments and the associated data are automatically deleted by Automattic Inc. from their server after four days. If a comment has been classified as spam, it will be stored beyond this period.
Service provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA
Website: https://automattic.com/
Privacy policy: https://automattic.com/privacy/
Processing of your data when ordering in our online shop
If you place orders via our online shop, we process the information you provide during the ordering process to process your order. This includes in particular your name, your address and electronic contact details, information for processing the payment, and details of your specific order. We will inform you during the ordering process which data we require in detail.
If it is necessary for the fulfillment of the contract concluded between us, for the protection of your vital interests, or due to legal provisions, we transmit your data to third parties, such as the logistics company commissioned with the delivery, payment service providers for the purpose of payment processing, and our tax advisor, in compliance with your rights. Insofar as we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.
Shipping notifications: To provide you with the greatest possible convenience, we forward your e-mail address to our shipping service providers. They will then inform you about the status of your delivery and, if necessary, arrange details of the handover of goods directly with you. If you do not wish this, please contact us before placing your order.
User accounts: You can voluntarily create a user account where you can view and manage your orders. If you cancel your account, your data will be deleted. It is your responsibility to back up your data before canceling. We use transient cookies (see above under Cookies for the term) for storing shopping cart content and persistent cookies (see above under Cookies for the term) for storing the login status. If you place an order, register for a user account, or log in again, we store your IP address and the time of the respective user action. The purpose of storage is our legitimate interests, but also yours, in protection against misuse and other unauthorized use.
Marketing measures: We may also use the data you provide to inform you about similar interesting products and/or services by post or email after an order has been placed.
Affected data:
- Inventory data (e.g., names, addresses)
- Payment data (e.g., bank details, invoices)
- Contact data (e.g., email address, telephone number, postal address)
- Contract data (e.g., subject matter of the contract, contract duration)
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address)
Affected persons: Customers, interested parties, business and contractual partners
Purpose of processing: Processing of orders, communication and, if applicable, marketing and answering inquiries, data security, office and organizational procedures
Legal basis: Fulfillment of contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Payment Service Providers
In accordance with our legal obligations or due to our legitimate interests in efficient, secure and customer-oriented payment processing, persons who have concluded a contract or another legal relationship with us may use banks and credit institutions, as well as other payment service providers, for payment. The payment service providers offered by us process inventory data in this context, including name, address or bank details such as account/credit card number, passwords, TANs, check numbers as well as information on the concluded contract and information on the recipient of the payment.
The data collected in this context is required to enable the payment service provider to process the payment. Only the payment service provider commissioned by us collects and processes this personal information. We do not receive any information about your account or credit card connection at any time. We are informed by our payment service provider whether our customers' payment has arrived or not. It is possible that our payment service providers forward our customers' data to credit agencies to check the identity and creditworthiness of the payer. In this respect, we refer to the privacy policy and general terms and conditions (GTC) of our payment service providers.
The terms and conditions and privacy policy of the respective payment service provider apply. You can find these notices on the website of the affected service provider or in the transaction application. For further information and for asserting your rights regarding revocation and information, we refer to the provisions of the respective service provider.
Affected data:
- Inventory data (e.g., name, address),
- Usage data (e.g., visited websites, interest in certain topics, access times),
- Payment data (e.g., bank details, invoices, payment history),
- Transaction data (e.g., term, customer category, subject matter of contract),
- Communication and metadata (e.g., IP address, device or computer system information)
Purpose of processing: Effective, secure and customer-oriented payment offers (service) and processing of payments according to contractual agreement
Legal basis: Fulfillment of contract and fulfillment of pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR
Revocation options: You can revoke your consent to the use of personal data at any time vis-à-vis the respective payment service provider. Despite revocation, the payment service provider may still be entitled to process, use and transmit the personal data that are absolutely necessary for the contractual payment processing. With regard to the storage and timely deletion of personal data, we refer to the respective data protection provisions of the payment service provider.
We use the following payment service providers:
PayPal
Service provider: PayPal (Europe) S.à.r.l. et Cie., S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg
Website: https://www.paypal.com/de/webapps/mpp/home
Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full#
Rating Seal
To give you a first impression of the quality of our offers and services, we display a selection of customer reviews and the overall rating formed from all reviews via the rating seal (also called rating widget) integrated on our website. When you click on the widget, you will be redirected to the internet offering of the respective provider. There you can access all reviews of our offer. You also have the opportunity to rate us there.
The provider's seal integrated on our websites is played out via an interface from the server of the respective provider. For this purpose, when you visit our website, a data connection is established to the provider's server. Through this, the provider receives certain data that is necessary to display the content of the widget to your browser. This includes the IP address assigned to you and other access data.
Affected data:
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address).
Affected persons: Customers, users of our website
Purpose of processing: Obtaining customer feedback, as well as interest- and behavior-based marketing
Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
We use the following rating seals:
Online Advertising
We use services for displaying internet advertising. Certain user data is collected by the services we use via a cookie or pixel. This includes, in particular, information about which website you accessed our website from (so-called referrer), which pages of our website you accessed, how long you visited our pages, and which interactions you performed there. In addition, data about the browser you use, your computer system, and the device type are collected. Furthermore, such a service can also collect demographic information, such as age or gender, as pseudonymous values. If you have consented to the collection of your location data, this may also be processed, depending on the provider. To collect and store this data, the respective service places a cookie or a so-called tracking pixel on the device you are using, which also collects the IP address assigned to you. However, this is truncated via a so-called IP masking procedure, so that the IP address can no longer be assigned to your visit to our website. In principle, when the respective service is used, no clear data such as names or e-mail addresses are stored. This is only the case if you are a member of a social network that offers one of the services listed below and combines your profile with the aforementioned data material.
The data is evaluated by the service we use to generate a report with statistical statements about the number of visitors generated by the advertising and the success of the advertising measure. The reports show, among other things, the total number of users who were redirected to our website via our ads. In addition, the reports contain information about the end devices and browsers of the users, the locations of the users, and the times when the advertisement was clicked. However, the reports do not contain any information that would allow you to personally identify yourself as a user of our site.
Please note that, depending on the location of the service provider, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be maintained and that the enforcement of your rights will not be possible or will only be possible with difficulty.
Affected data:
- Usage data (e.g., access times, clicked websites)
- Communication data (e.g., information about the device used, IP address)
Affected persons: Users of our online offers
Purpose of processing: Reach measurement, success monitoring of campaigns, remarketing, and interest- and behavior-based marketing
Legal basis: If we have asked for your consent before using the respective service, this constitutes the legal basis, Art. 6 Para. 1 lit. a GDPR. Otherwise, we use the respective service based on our legitimate interest in directing visitor traffic to our website and analyzing this visitor traffic in order to continuously improve the functions, offers, and user experience, Art. 6 Para. 1 lit. f GDPR.
We use the following service providers for online advertising:
Google AdSense
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in Europe: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.com/intl/de_de/adsense/start/
Privacy policy: http://www.google.de/intl/de/policies/privacy
Google Ads
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in Europe: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://ads.google.com/home/
Privacy policy: http://www.google.de/intl/de/policies/privacy
Newsletter
We send out a newsletter at regular intervals to inform our customers, business partners, and interested parties about our offers and related news. You have the option to subscribe to our newsletter on our website and to consent to receiving the newsletter during registration. When you subscribe to our newsletter, providing your email address is mandatory. We store the email address to be able to send you the newsletter. As soon as you subscribe to our newsletter, you will receive a confirmation email to the email address provided during registration using the so-called double opt-in procedure. This email contains a link. If you click on this link, you confirm that you wish to receive the newsletter. This ensures that your email address was not misused by a third party during registration. For the same reason, we store the date and time of registration and the IP address assigned to you during registration. We do not pass on the aforementioned data to third parties.
Evaluation of user behavior
If you have consented to this, we evaluate your user behavior when sending the newsletter. For this purpose, our newsletter contains tracking pixels and tracking links. This allows us to determine whether and when you opened the newsletter and whether and which links you clicked in the newsletter.
Purpose: We evaluate the newsletter as described above in order to measure a statistical analysis of the success or failure of our newsletter.
Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR.
Prevention: You can revoke your consent to receive the newsletter at any time using the options provided above.
Deletion: We will delete your data after a revocation.
Affected data:
- Content data (e.g. posts, photos, videos)
- Usage data (e.g. access times, clicked websites)
- Communication data (e.g. information about the device used, IP address)
Affected persons: Users of our website
Purpose of processing: Displaying our websites, ensuring the operation of our websites
Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Deletion: The email address will be deleted either if you have not clicked the confirmation link 1 month after sending the confirmation email in the double opt-in procedure or immediately after you have unsubscribed from our newsletter.
Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. We offer the following options through which you can declare your revocation:
- Click on the link provided in the newsletter for this purpose
Web analysis and statistics
To record and statistically evaluate visitor flows on our website, we use web analysis services. Such services collect data including, but not limited to, from which website you accessed our website (so-called referrers), which pages of our website you accessed, how long you visited our pages, and which interactions you performed there. In addition, data about the browser you use, your computer system, and the device type are collected. Furthermore, such a service can also collect demographic information, such as age or gender, as pseudonymous values. If you have consented to the collection of your location data, this may also be processed, depending on the provider.
To collect and store this data, the web analysis service we use generally places a cookie on the device you are using, which also collects the IP address assigned to you. However, this is truncated via a so-called IP masking procedure, so that the IP address can no longer be assigned to your visit to our website. Furthermore, no clear data such as names or e-mail addresses are stored. Neither we nor the service we use know the identity of the visitors to our websites.
Please note that, depending on the country of establishment of the service provider named below, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be maintained and that the enforcement of your rights will not be possible or will only be possible with difficulty.
Affected data:
- Usage data (e.g. access times, clicked websites)
- Communication data (e.g. information about the device used, IP address).
Affected persons: Users of our online offers
Purpose of processing: Reach measurement, success monitoring of campaigns, remarketing and interest- and behavior-based marketing
Legal basis: If we have asked for your consent before using the respective service, this constitutes the legal basis, Art. 6 Para. 1 lit. a GDPR. Otherwise, we use the respective service based on our legitimate interest in analyzing the visitor flows of our websites in order to continuously improve the functions, offers, and user experience, Art. 6 Para. 1 lit. f GDPR.
We use the following web analysis services:
Google Analytics
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Privacy policy: https://policies.google.com/privacy?hl=de
Opt-out option: If you do not want your data to be used by Google Analytics, you can set a so-called opt-out plugin, which will prevent your data from being collected on our website in the future. You can obtain this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de
Google Universal Analytics
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Privacy policy: https://policies.google.com/privacy?hl=de
Cross-Device Tracking: With cross-device tracking, a user ID can be used not only to evaluate data from the websites you visit, but also data from other devices, and the user can be recognized on the other device. The user ID is assigned by us. It serves as a pseudonym. Identification of the internet user is excluded here.
Opt-out option: If you do not want your data to be used by Google Analytics, you can set a so-called opt-out plugin, which will prevent your data from being collected on our website in the future. You can obtain this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de
Jetpack
Service provider: Automattic Inc. Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA
Website: https://automattic.com
Privacy policy: https://automattic.com/privacy/
Our plugins from third-party providers
We have integrated plugins in the form of "social media buttons" from the providers we use on our website. You can identify which plugin belongs to which provider by the respective logo with which the plugin is marked. When you visit a page of our online presence where such a plugin is implemented, a connection is automatically established between your browser and the provider's servers with the respective plugin provider, and the provider places a cookie on the end device you are using. Already at this point in time, data transfer can also take place if you do not have an account with the respective operator of the social network or if you have an account there but are not logged in at the moment of visiting our website. In addition, data is transferred to the provider as a result of further interactions with the respective social plugin (e.g. clicking the "Like" button on Facebook, "Re-Tweet" button on Twitter).
Please note that, depending on the country of establishment of the service provider named below, the data specified in more detail below may be transferred and processed on servers outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be maintained and that the enforcement of your rights will not be possible or will only be possible with difficulty.
Affected data:
- Usage data (e.g. access times, clicked websites)
- Communication data (e.g. information about the device used, IP address)
Affected persons: Users of our website
Purpose of processing: Displaying our websites, offering content, ensuring the operation of our websites
Legal basis: Consent via cookie consent banner, Art. 6 para. 1 lit. a GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR
We use the following plugins:
Google (Invisible) reCAPTCHA
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: https://developers.google.com/recaptcha/docs/invisible
Privacy policy: http://www.google.de/intl/de/policies/privacy
Our online presences on social networks
We operate online presences within the social networks listed below. If you visit one of these presences, the data specified in more detail below will be collected and processed by the respective provider. As a rule, this data is collected for advertising and market research purposes and user profiles are created with it. Data can be stored in the user profiles regardless of the device you use. This is particularly the case if you are a member of the respective platform and logged in there. The user profiles can be used by the providers to display interest-based advertising to you. You have a right to object to the creation of user profiles. To exercise this, you must contact the respective provider.
If you have an account with one of the providers listed below and are logged in there when visiting our website, the respective provider may collect data about your usage behavior on our website. To prevent such a link of your data, you can log out of the provider's service before visiting our site.
For what purpose and to what extent data is collected by the provider, you can refer to the respective privacy policies of the providers, which are communicated below.
Please note that, depending on the country of establishment of the provider named below, the data collected via their platform may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be maintained and that the enforcement of your rights will not be possible or will only be possible with difficulty.
Affected data:
- Inventory and contact data (e.g. name, address, telephone number, e-mail address)
- Content data (e.g. posts, photos, videos)
- Usage data (e.g. access times, clicked websites)
- Communication data (e.g. information about the device used, IP address).
Purpose of processing: Communication and marketing, tracking and analyzing user behavior
Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interests Art. 6 para. 1 lit. f GDPR
Possibilities for objection: For the respective possibilities for objection (opt-out), please refer to the information provided by the providers linked below.
We maintain an online presence on the following social networks:
Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU office: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.facebook.com/
Privacy policy: https://www.facebook.com/about/privacy/
Privacy policy for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data
Service provider: Instagram Inc., 1601 Willow Road, Menlo Park CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU office: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Website: https://www.instagram.com/
Privacy policy: http://instagram.com/about/legal/privacy
Service provider: WhatsApp Inc. 1601 Willow Road Menlo Park, California 94025, USA
EU office: Whatsapp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.whatsapp.com/
Privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
Messenger Services
We communicate via messenger services. Messenger services are chat programs that allow users to send text messages, as well as image or video files, in real time over the internet. In addition, messenger services can also be used to transmit emoticons, electronic greeting cards, and contacts. For messages to be transmitted, participants must be connected to each other directly or via a server with a computer program (called a client) over a network such as the internet. As a rule, messages can also be sent when the conversation partner is not online – the message is then temporarily stored by the service's server and later delivered to the recipient when they are available again. Finally, these services can also be used for screen sharing and online games.
If the service uses end-to-end encryption for the content sent (texts, attachments), only the selected communication partners, but not third parties or the service provider itself, can view the message. In this respect, we recommend regularly installing updates for the service to ensure the encryption of the content. However, the service provider has the possibility to access the metadata of the communication. This includes the time and (depending on the settings) location of the communication, as well as the device you are using.
We would like to point out that, depending on the country of establishment of the provider mentioned below, the data collected via its platform may be transferred to and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be maintained and that the enforcement of your rights may not be possible or may only be possible with difficulty.
Data concerned:
- Inventory and contact data (e.g. name, telephone number, email address)
- Content data (e.g. posts, photos, videos)
- Usage data (e.g. access times, clicked websites)
- Communication data (e.g. information about the device used, IP address).
Purpose of processing: Communication and marketing
Legal basis: If we have asked for your consent before using the respective service, this constitutes the legal basis, Art. 6 (1) lit. a GDPR. In this respect, we clarify that we will not transmit your contact data to the service provider for the first time without your consent. If we communicate with you in the context of initiating a contract or within an existing contractual relationship via one of the services mentioned below, the legal basis is the fulfillment or preparation of the contract, Art. 6 (1) lit. b GDPR. Otherwise, we rely on our legitimate interests in fast and efficient communication and in fulfilling the needs of our communication partners for communication with the services mentioned below, Art. 6 (1) lit. f GDPR.
Possibilities of objection: You can revoke the consent granted to us for the use of the service mentioned below at any time. You can also object to communication via the messenger service at any time.
We use the following messenger services:
Facebook Messenger
Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU office: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.facebook.com
Privacy policy: https://www.facebook.com/about/privacy
Service provider: WhatsApp Inc. 1601 Willow Road Menlo Park, California 94025, USA
EU office: Whatsapp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.whatsapp.com/
Privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
Chat Services
We communicate via online chats and/or chatbots (hereinafter referred to as chat services). An online chat refers to the real-time exchange of text messages over the internet. Chatbots are computer programs that are generally used on websites to automatically answer user questions or to deliver notifications to users.
If you use our chat services, we collect your access data. This includes, in particular, the IP address of the requesting device, the date and time of the request, and your identification number. Furthermore, we store the content of the communication conducted via the chat services. Finally, we log your registration and your declaration of consent. We use this data to communicate with you via our chat services, to address you personally, to answer your inquiries, and to transmit any requested content.
The service provider(s) named below has/have the ability to access the metadata of the communication. This includes the time and (depending on the settings) location of the communication, as well as the device you are using and information about who communicated with whom. Access to metadata by the service provider usually occurs to optimize the service or for security reasons. In addition, the service provider may also access data for marketing purposes. You can find more information about this in the service provider's privacy policy, which we have linked below.
We would like to point out that, depending on the country of establishment of the provider mentioned below, the data collected via its platform may be transferred to and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be maintained and that the enforcement of your rights may not be possible or may only be possible with difficulty.
Data concerned:
- Inventory and contact data (e.g. name, telephone number, email address)
- Content data (e.g. text entries)
- Usage data (e.g. access times, interest in content)
- Communication data (e.g. information about the device used, IP address).
Purpose of processing: Communication and marketing
Legal basis: If we have asked for your consent before using the respective chat service, this constitutes the legal basis, Art. 6 (1) lit. a GDPR. In this respect, we clarify that we will not transmit your contact data to the service provider for the first time without your consent. If we communicate with you in the context of initiating a contract or within an existing contractual relationship via one of the services mentioned below, the legal basis is the fulfillment or preparation of the contract, Art. 6 (1) lit. b GDPR. Otherwise, we rely on our legitimate interests in fast and efficient communication and in fulfilling the needs of our communication partners for communication with the services mentioned below, Art. 6 (1) lit. f GDPR.
Possibilities of objection: You can revoke the consent granted to us for the use of the service mentioned below at any time. You can also object to the processing of your data via the chat service we use at any time.
We use the following chatbots and chat functions:
Content Services
We use certain services to display specific content or graphics (videos, images, music, fonts, maps) on our website. The services we use process the IP address assigned to you at the time of your visit to our website, as this is the only way for the respective content to be displayed in the browser you are using. In addition, the providers of these services may set further cookies on your device, through which information about your usage behavior, your interests, the device and browser you use, as well as the time and duration of your session, are collected. The providers regularly use this data for analysis, statistical, and marketing purposes. This information can also be combined with information from other sources. This applies in particular if you have an account with the service provider yourself and are logged in there at the time of the session.
We point out that, depending on the country of establishment of the service provider named below, the data specified in more detail below may be transferred to and processed on servers outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be complied with and that the enforcement of your rights may not be possible or may only be possible with difficulty.
Data concerned:
- Usage data (e.g. access times, clicked websites)
- Communication data (e.g. information about the device used, IP address)
Data subjects: Users of our website
Purpose of processing: Displaying our websites, offering content, ensuring the operation of our websites
Legal basis: Consent via cookie consent banner, Art. 6 (1) lit. a GDPR, legitimate interests, Art. 6 (1) lit. f GDPR
We use the following content services:
Google Maps
We use Google Maps on our website. Google collects and processes the IP address of the visitor. When you visit a website that integrates Google Maps, your IP address and location data (the latter usually not without your consent) are transmitted to Google, regardless of whether Google Maps is actually used or you are logged into your Google account. Your IP address is associated with your Google account if you are logged in there when visiting our website.
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.de/maps
Privacy policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de
YouTube
We use YouTube components on this website to embed videos on our web pages so that they can be played through your internet browser when you visit our web pages. During your visit to our web pages, both YouTube and Google are informed which page or subpage you have accessed by transmitting your IP address to Google's external servers in the USA. This transmission of information occurs regardless of whether the displayed videos are actually viewed or clicked on, or whether you are logged into your YouTube or Google account. This information is collected and assigned to your Google account if you are logged in there when you access our web pages.
Service provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Privacy policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de
Security Measures
Furthermore, we implement technical and organizational security measures in accordance with the state of the art to comply with data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.
Currency and Amendment of this Privacy Policy
This privacy policy is currently valid and was last updated in July 2021. Due to changes in legal or regulatory requirements, it may become necessary to adapt this privacy policy.
This privacy policy was created with the help of the data protection generator by SOS Recht. SOS Recht is a service of Mueller.legal Rechtsanwälte Partnerschaft with its registered office in Berlin.