Privacy Policy

1. Introduction

This website is operated by: Marketplace Universe GmbH.

It is very important to us to handle our website visitors’ data confidentially and to protect it in the best possible way. For this reason, we make every effort to comply with the requirements of the GDPR.

Below we explain how we process your data on our website. We use language that is as clear and transparent as possible so that you really understand what happens to your data.

2. General information

2.1 Processing of personal data and other terms

Data protection applies to the processing of personal data. Personal data means all data with which you can be personally identified. This is, for example, the IP address of the device (PC, laptop, smartphone, etc.) you are currently using. Such data is processed when ‘something happens to it’. Here, for example, the IP is transmitted from the browser to our provider and automatically stored there. This is then a processing (according to Art. 4 No. 2 GDPR) of personal data (according to Art. 4 No. 1 GDPR).

These and other legal definitions can be found in Art. 4 GDPR.

2.2 Applicable regulations/laws – GDPR, BDSG and TDDDG

The scope of data protection is regulated by law. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Federal Data Protection Act) as a national law.

In addition, the TDDDG supplements the provisions of the GDPR as far as the use of cookies is concerned.

2.3 The person responsible

The controller within the meaning of the GDPR is responsible for data processing on this website. This is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

You can reach the person responsible at:

Marketplace Universe GmbH

Thomas-Morus-Str. 18, 86916 Kaufering

info@marketplace-universe.com

2.4 How data is generally processed on this website

As we have already established, there is data (e.g. IP address) that is collected automatically. This data is mainly required for the technical provision of the website. If we also use personal data or collect other data, we will inform you of this or ask for your consent.

You consciously provide us with other personal data.

You will find detailed information on this below.

2.5 Your rights

The GDPR provides you with comprehensive rights. These include, for example, free information about the origin, recipient and purpose of your stored personal data. You can also request the rectification, blocking or erasure of this data or lodge a complaint with the competent data protection supervisory authority. You can revoke your consent at any time.

You can find out what these rights look like in detail and how to exercise them in the last section of this Privacy Policy.

2.6 Data protection – Our view

Data protection is more than just a chore for us! Personal data has great value and careful handling of this data should be a matter of course in our digitalized world. As a website visitor, you should also be able to decide for yourself what “happens” to your data, when and by whom. That is why we are committed to complying with all legal regulations, only collect the data we need and, of course, treat it confidentially.

2.7 Forwarding and deletion

The transfer and deletion of data are also important and sensitive issues. We would therefore like to briefly inform you in advance about our general approach to this.

Data will only be passed on on the basis of a legal basis and only if this is unavoidable. This may be the case in particular if it is a so-called Data Processor and a Data Processing Agreement has been concluded in accordance with Art. 28 GDPR.

We delete your data when the purpose and legal basis for processing no longer apply and the deletion does not conflict with any other legal obligations. Art. 17 GDPR also provides a ‘good’ overview of this.

For further information, please refer to this Privacy Policy and contact the controller if you have any specific questions.

2.8 Hosting

WordPress

This website uses the WordPress website construction kit system. WordPress is an open source platform for creating, managing and publishing websites and is operated for the commercial version and central services by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. The service enables the creation and management of website content, the integration of plugins for additional functions, the editing of themes and the operation of blogs and online stores. When using WordPress, IP addresses (e.g. for security and spam protection), browser information, timestamps of interactions (such as comments or logins) and user names (for registered persons, if registration is required) are typically processed; depending on the plugins used, additional data such as device information, locations or interaction data may be processed, depending on the configuration. The processing serves the technical provision, administration and security of the website, user administration and the extension of additional functions by means of plugins. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in the secure and efficient provision of the website; if additional functions are integrated by plugins and consent is required for this, the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR or § 25 para. 1 TDDDG. WordPress itself sets technically necessary cookies for the function of the website. Cookies that go beyond this (e.g. analysis or marketing cookies by plugins or external services) are only used with consent. A transfer of personal data to recipients in third countries, in particular to the USA, cannot be ruled out; in these cases, Automattic Inc. uses the standard contractual clauses of the EU Commission as guarantees for an adequate level of data protection. Personal data will be deleted as soon as the purpose of the processing no longer applies, consent is revoked or statutory retention periods expire. Further information can be found in the WordPress Privacy Policy: https://wordpress.com/privacy

2.9 Legal basis

The processing of personal data always requires a legal basis. The GDPR provides the following possibilities in Art. 6 para. 1 sentence 1:

a) The data subject has given their consent to the processing of their personal data for one or more specific purposes;

b) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

c) The processing is necessary for compliance with a legal obligation to which the controller is subject;

d) Processing is necessary in order to protect the vital interests of the data subject or of another natural person;

e) The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

In the following sections, we will provide you with the specific legal basis for the respective processing.

3. What happens on our website

When you visit our website, we process your personal data.

We use SSL or TLS encryption to provide the best possible protection against unauthorized access by third parties. You can recognize this encrypted connection by the https:// or lock symbol in the address bar of your browser.

Below you can find out what data is collected when you visit our website, for what purpose this is done and on what legal basis.

3.1 Data collection when accessing the website

When you visit the website, information is automatically stored in so-called server log files. This is the following information:

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

IP address

This data is required temporarily in order to be able to display our website to you permanently and without any problems. In particular, this data is used for the following purposes:

System security of the website

System stability of the website

Troubleshooting on the website

Establishing a connection to the website

Presentation of the website

Data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in the processing of this data, in particular our interest in the functionality of the website and its security.

Where possible, this data is stored in pseudonymized form and deleted once the respective purpose has been achieved.

If the server log files make it possible to identify the data subject, the data is stored for a maximum period of 14 days. An exception is made if a security-relevant event occurs. In this case, the server log files are stored until the security-relevant event has been resolved and finally clarified.

Otherwise, no merging with other data takes place.

3.2 Cookies

3.2.1 General information

This website uses so-called cookies. This is a data record, information that is stored in the browser of your end device and is related to our website.

The use of cookies can make it easier for visitors to navigate the website.

In our cookie consent tool, you will find all information about the cookies that we use on our website (if applicable, with your consent).

3.2.2 Rejecting cookies

You can manage all cookies that are not technically necessary directly via our cookie consent tool.

You can prevent cookies from being set by adjusting your browser settings.

Here you will find the corresponding links to frequently used browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectslug=Cookies+l%C3%B6schen&redirectlocale=en

Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de

Microsoft Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Safari: https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web and https://support.apple.com/de-de/guide/safari/sfri11471/mac.

If you are using a different browser, we recommend that you enter the name of your browser and ‘delete and manage cookies’ in a search engine and follow the official link to your browser.

Alternatively, you can also manage your cookie settings at www.aboutads.info/choices/ or www.youronlinechoices.com.

However, we must point out that a comprehensive blocking/deletion of cookies can lead to impairments in the use of the website.

3.2.3 Technically necessary cookies

We use technically necessary cookies on this website to ensure that our website functions correctly and in accordance with the applicable laws. They help to make the website user-friendly. Some functions of our website cannot be displayed without the use of cookies.

The legal basis for this is Art. 6 para. 1 lit. b, c and/or f GDPR, depending on the individual case.

3.2.4 Technically not necessary cookies

We also use cookies on our website that are not technically necessary. These cookies are used, among other things, to analyze the surfing behavior of the website visitor or to offer functions of the website that are not technically necessary.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Technically unnecessary cookies are only set with your consent, which you can revoke at any time in the cookie consent tool.

3.3 Data processing through user input

3.3.1 Own data collection

We offer the following (service) on our website: Contact us.

We collect the following data for this purpose:

Name

E-mail address

Phone number

Name, email, phone, company, job title, message

The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR.

The data will be deleted as soon as the respective purpose no longer applies and it is possible in accordance with the legal requirements.

3.3.2 Contact us

a) e-mail

When you contact us by email, we process your email address and any other data contained in the email. This data is stored on the mail server and in some cases on the respective end devices. Depending on the request, the legal basis for this is regularly Art. 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. b GDPR. The data will be deleted as soon as the respective purpose no longer applies and it is possible in accordance with the legal requirements.

b) Telephone

If you contact us by telephone, the call data may be stored in pseudonymized form on the respective end device and with the telecommunications provider used. Personal data collected during the telephone call will only be processed in order to process your request. Depending on the request, the legal basis for this is regularly Art. 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. b GDPR. The data will be deleted as soon as the respective purpose no longer applies and it is possible in accordance with the legal requirements.

c) Contact form

Pipedrive

We use the Pipedrive contact form on our website, a lead capture and contact management service provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. The Pipedrive contact form enables the transmission of contact requests, demo requests and other information directly to our CRM system, whereby requests are used, for example, to prepare quotations or for queries. The personal data entered in the form is processed; this includes in particular name, e-mail address, telephone number and other details from individually configured form fields, as well as form metadata such as timestamp, IP address and, if applicable, visit information (referrer, UTM parameters, location data if applicable). This data is processed for the purpose of establishing contact, processing and tracking user inquiries and for the automation and optimization of internal sales processes. The legal basis is Art. 6 para. 1 lit. b GDPR, as far as (pre-)contractual inquiries are concerned, otherwise Art. 6 para. 1 lit. f GDPR for our legitimate interest in efficient communication and sales optimization. When using the Pipedrive contact form, cookies are set, including essential cookies such as __cf_bm (bot protection via Cloudflare), _lfa, _lfa_consent and _lfa_test_cookie_stored for the function and analysis of the form. These cookies are necessary for the technical operation of the form and cannot be deactivated; the legal basis for essential cookies is Section 25 (2) No. 2 TDDDG; consent is not required for this. Personal data may be transferred to third countries, in particular the USA, as part of individual functional components (e.g. bot protection with Cloudflare). In these cases, the transfer is carried out in accordance with the EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR and supplementary measures in accordance with the requirements of the European Commission. The data collected via the Pipedrive contact form will generally be deleted as soon as it is no longer required for the purpose of processing or a data subject objects to further processing; further statutory retention periods remain unaffected by this. Further information can be found in Pipedrive’s Privacy Policy: https://www.pipedrive.com/en/privacy

ActiveCampaign

The contact form function of ActiveCampaign is used on this website. ActiveCampaign is a service of ActiveCampaign, LLC, 150 North Michigan Avenue, Suite 1230, Chicago, IL 60601, USA; the EU representative is EU-REP.Global GmbH, Hopfenstr. 1d, 24114 Kiel, Germany. ActiveCampaign is used to integrate contact forms that enable the collection of inquiries, newsletter registrations and other communication data. The service provides functions for lead capture, segmentation, automation of email and SMS marketing measures and CRM integration. Personal data such as email addresses (always required), full name, first and last name, telephone number, account information (e.g. company name, website, address), content of form entries and freely definable additional fields as well as usage and browser data are processed. The purpose of data processing is the implementation of communication measures, marketing management, customer care and the targeted approach of interested parties. Depending on the use, the legal basis is Art. 6 para. 1 lit. a GDPR (consent) for inquiries and newsletters and Art. 6 para. 1 lit. f GDPR (legitimate interest) for the optimization and management of business processes in the marketing area; if data is processed for technically necessary purposes, additionally § 25 para. 2 TDDDG. ActiveCampaign may set cookies in the context of form use, in particular to recognize and segment website visitors and to measure form performance; these cookies are only set with consent, the legal basis is then Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. Personal data is transferred to the USA; the standard contractual clauses of the EU Commission pursuant to Art. 46 para. 2 lit. c GDPR are used as a suitable guarantee. Personal data is stored until the purpose of processing ceases to apply, consent is withdrawn or statutory retention periods expire. Further information can be found at: https://www.activecampaign.com/legal/privacy-policy

Ninja Forms

This website uses the contact form tool Ninja Forms, offered by Saturday Drive, Inc, PO Box 406, Cleveland, Tennessee, 37364, USA. Ninja Forms provides functions to enable contact forms, lead generation, registrations, payments, file uploads and other form processes on the website. The form content entered by the user (e.g. name, email address, message, telephone number), uploaded files (depending on the configuration), IP address (if set by the website) and, if applicable, proof of consent or approval (e.g. through checkboxes) are processed. The purpose of data processing is to enable contact to be made, inquiries to be processed and other functions provided by the form, such as registration or payment processing. The legal basis for the processing of the transmitted data is Art. 6 para. 1 lit. b GDPR, as far as (pre-)contractual communication or inquiries are concerned. In other cases, the processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR and, if applicable, § 25 para. 1 TDDDG (when storing information on the end device or accessing it). Ninja Forms does not set any cookies itself; cookies are only used by optional add-on modules or integrations, then only after consent, with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 25 para. 1 TDDDG. § 25 para. 1 TDDDG as the legal basis. The data collected via the form is not transmitted to Ninja Forms or to third countries, as the data is stored exclusively on the website’s servers, unless specific integrations are activated. The data will be deleted as soon as the purpose of storage no longer applies, consent has been revoked or upon request, provided there are no legal retention periods to the contrary. Further information can be found at: https://ninjaforms.com/privacy-policy/

d) Appointment scheduling tool

Pipedrive

On our website, we use the appointment scheduling and booking function of Pipedrive, operated by Pipedrive Germany GmbH, Julie-Wolfthorn-Straße 1, 10115 Berlin, Germany. The integration makes it possible to make appointments via embedded booking widgets or calendar links and synchronizes these appointment bookings directly with our CRM system and connected calendars. The following personal data is typically processed: Name, e-mail address, telephone number, details of booked appointments and – if enabled – individual notes. The purpose of data processing is the efficient arrangement and management of appointments, the optimization of internal processes and the improvement of the customer experience through self-service options. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR for (pre-)contractual communication and Art. 6 para. 1 lit. f GDPR due to our legitimate interest in efficient appointment management. Insofar as cookies are used through the integration, this is done exclusively for the provision of the booking function and, if necessary, for functional purposes; if cookies are used beyond this (e.g. analysis or marketing), consent is obtained beforehand. The legal basis for this is Art. 6 para. 1 lit. a GDPR i.V.m. § 25 para. 1 TDDDG. Personal data is not transferred outside the European Economic Area. The stored data will be deleted as soon as it is no longer required for the appointment booking, but at the latest when the purpose no longer applies, consent is withdrawn or statutory retention obligations expire. Further information can be found at: https://www.pipedrive.com/en/privacy

3.3.3 Questionnaires/Forms

Google Forms

This website uses Google Forms. Google Forms is a service for designing and analyzing surveys and online forms. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Forms to create and integrate online forms that are used to collect messages, inquiries or other entries on our website. Google Forms sets cookies to collect and store data on our website. These cookies are only set with consent. This consent can be revoked and managed at any time in our cookie consent tool. The legal basis for this is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as this consent includes access to information in the end device of the person using the website or the storage of cookies within the meaning of the TDDDG. In addition, the legal basis for the use of Google Forms is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in creating online forms and integrating them into our website so that they work. Insofar as the data processing via the form serves to offer our contractual services, the legal basis is Art. 6 para. 1 lit. b GDPR. The data entered by the visitor in the form is stored on the Google Forms servers until the visitor requests its deletion, a given consent to storage is revoked or the purpose for storing the data no longer applies. Mandatory statutory provisions on retention periods remain unaffected. You can find more information here: https://policies.google.com/privacy?hl=de.

Pipedrive

On our website, we use the functions of Pipedrive to implement questionnaires. This is a service provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. This service enables us to create online forms to collect messages, inquiries or other input for our website and to integrate them there. Pipedrive receives the data entered in the form on our website. Pipedrive uses essential, functional, analysis and marketing cookies. They are used to ensure the functions of Pipedrive, to analyze user behavior and to conduct personalized marketing. Cookies that are not essential are only set with consent. This consent can be revoked at any time. The legal basis for this is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as this consent includes access to information in the end device of the user or the storage of cookies within the meaning of the TDDDG. In addition, the legal basis for the use of Pipedrive is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in creating online forms and integrating them into our website in a functional manner. Insofar as the data processing via the form serves to offer our contractual services, the legal basis is Art. 6 para. 1 lit. b GDPR. The data entered in the form by the website visitor will be stored on Pipedrive’s servers until the website visitor requests deletion, a given consent to storage is revoked or the purpose for storing the data no longer applies. Mandatory statutory provisions on retention periods remain unaffected. Further information: https://www.pipedrive.com/en/privacy.

ActiveCampaign

We integrate ActiveCampaign on our website, a tool for creating and managing questionnaires and forms, offered by ActiveCampaign, Inc, 1 N Dearborn St, 5th Floor, Chicago, IL 60602, USA. ActiveCampaign enables the integration of surveys and forms, the collection of responses and their statistical analysis. The data processed includes email addresses, the content entered in forms, IP addresses, time stamps and other technical metadata. The purpose of the processing is the collection and analysis of survey results, contact requests or other form content as well as the optimization of communication and marketing processes. The legal basis for data processing is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, in particular in the analysis of survey results and the improvement of the offer; in individual cases, consent pursuant to Art. 6 para. 1 lit. a GDPR may also be relevant, for example in the case of certain marketing campaigns. ActiveCampaign may use cookies to record user behavior in forms or surveys and to enable evaluations; if these cookies are not required for technical operation, they are only used with consent in accordance with Art. 6 para. 1 lit. a GDPR. Data may be transferred to the USA; standard contractual clauses (SCC) are used to ensure an appropriate level of data protection. Personal data is deleted as soon as it is no longer required for the stated purpose and there are no legal retention periods to the contrary. Further information on data processing can be found at https://www.activecampaign.com/legal/privacy-policy.

3.4 Cookie Consent Tool

Borlabs Cookie

This website uses the consent management tool Borlabs Cookie, which is operated by Benjamin A. Bornschein (Borlabs), Rübenkamp 32, 22305 Hamburg, Germany. Borlabs Cookie provides a customizable cookie consent banner that makes it possible to obtain and manage consent for various cookie categories and for the use of external services such as Google Analytics, Facebook Pixel or YouTube. In particular, information on the consent status is processed, i.e. whether and for which categories consent has been given or objected to. In addition, depending on the user’s selection, the IP address, tracking ID, session duration or usage data may also be processed, whereby these originate primarily from the integrated third-party providers. The purpose of data processing is to manage and document consent for the use of cookies and third-party services, to fulfill legal obligations to provide evidence and to control website functions that comply with data protection regulations. The legal basis for the storage of the consent itself is Art. 6 para. 1 lit. c GDPR in conjunction with Art. 7 GDPR and § 25 para. 2 no. 2 TDDDG (legitimate interests in the documentation and control of cookie and data protection settings). Borlabs Cookie sets technically necessary cookies that are required to store consent preferences (consent cookies). These cookies are functional and are stored on the basis of Art. 6 para. 1 lit. c GDPR i.V.m. § 25 para. 2 no. 2 TDDDG set. Other cookies, for example for analysis or marketing purposes, are only used on the basis of consent granted in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG activated. Borlabs Cookie does not transfer personal data to third countries. The consent data collected by Borlabs Cookie is stored for one year, provided that no statutory retention obligations require longer storage or until the users revoke their consent or the data is deleted. Further information can be found at: https://borlabs.io/datenschutz/

3.5 Website construction kit system

WordPress

This website uses the WordPress website construction kit system. WordPress is an open source platform for creating, managing and publishing websites and is operated for the commercial version and central services by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. The service enables the creation and management of website content, the integration of plugins for additional functions, the editing of themes and the operation of blogs and online stores. When using WordPress, IP addresses (e.g. for security and spam protection), browser information, timestamps of interactions (such as comments or logins) and user names (for registered persons, if registration is required) are typically processed; depending on the plugins used, additional data such as device information, locations or interaction data may be processed, depending on the configuration. The processing serves the technical provision, administration and security of the website, user administration and the extension of additional functions by means of plugins. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in the secure and efficient provision of the website; if additional functions are integrated by plugins and consent is required for this, the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR or § 25 para. 1 TDDDG. WordPress itself sets technically necessary cookies for the function of the website. Cookies that go beyond this (e.g. analysis or marketing cookies by plugins or external services) are only used with consent. A transfer of personal data to recipients in third countries, in particular to the USA, cannot be ruled out; in these cases, Automattic Inc. uses the standard contractual clauses of the EU Commission as guarantees for an adequate level of data protection. Personal data will be deleted as soon as the purpose of the processing no longer applies, consent is revoked or statutory retention periods expire. Further information can be found in the WordPress Privacy Policy: https://wordpress.com/privacy

3.6 Newsletter

ActiveCampaign

Our website uses the ActiveCampaign service to send newsletters and manage email marketing campaigns. ActiveCampaign is operated by ActiveCampaign, LLC, 1 North Dearborn Street, 5th floor, Chicago, IL 60602, United States, with EU representation by EU-REP.Global GmbH, Hopfenstr. 1d, 24114 Kiel, Germany. ActiveCampaign enables the integration of newsletter registration forms, the automated sending of newsletters, the triggering and control of e-mail campaigns based on user behavior, the analysis of campaign success and the synchronization of data with e-commerce platforms. The contact data provided during registration (such as name, email address), demographic information, preferences, data on user behavior on the website (e.g. pages visited, actions taken), attribution data (e.g. referrer, campaign source), IP address and interaction data (e.g. form submissions, bookings) are processed. The purpose of data processing is the implementation and analysis of email marketing measures, the personalization and optimization of communication, the acquisition of new leads and the improvement of the user experience. The legal basis for the use of ActiveCampaign is Art. 6 para. 1 lit. a GDPR (consent in the context of newsletter registration) and, in the case of existing customer relationships, Art. 6 para. 1 lit. f GDPR (legitimate interest in direct advertising and customer loyalty) and § 25 para. 1 TDDDG, insofar as personal data is stored or read out in the end device. ActiveCampaign uses cookies and similar technologies to track opening and click rates as well as for behavior-based automation; these are only used with express consent (Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG). Personal data is transferred to the USA. The transfer takes place on the basis of the EU standard contractual clauses pursuant to Art. 46 GDPR as a suitable guarantee for data protection. The data will be stored for as long as consent to the sending of newsletters has been given or as long as this is necessary to fulfill the purpose; after revocation of consent or if the purpose no longer applies, the data will be deleted, provided that there are no legal retention periods to the contrary. Further information can be found in ActiveCampaign’s Privacy Policy: https://www.activecampaign.com/legal/privacy-policy

3.7 Mailing service

WP Mail SMTP

We use the WP Mail SMTP service on our website to enable the sending of e-mails via SMTP servers and to ensure the deliverability of outgoing transactional e-mails. WP Mail SMTP is provided by WPBeginner, LLC, 1440 W Taylor St, Suite E #1252, Chicago, IL 60612, USA. The service is used to reliably send emails such as order confirmations, password resets or registration notifications from the web server via external SMTP services, whereby the configuration takes place directly in the WordPress backend. The free version only saves the configuration settings locally in the website database. In the paid Pro version, the delivery status, email openings and link clicks of sent emails can also be tracked. Depending on the configuration, technical data such as email delivery information, open and click rates (Pro version only) and the address data required for email communication are processed. The purpose of the processing is the reliable technical transmission and logging of system-side e-mail messages from the website as well as the optimization and monitoring of e-mail dispatch. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a functioning communication infrastructure); in the case of analysis or tracking functions in the Pro module, processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. Cookies are not used by WP Mail SMTP by default. If optional tracking functions are activated in the Pro version, analysis cookies may be set in conjunction with third-party providers; their use is based exclusively on consent. When using WP Mail SMTP, personal data may be transferred to the USA. The EU standard contractual clauses are used as suitable guarantees by WP Mail SMTP or the respective SMTP service providers involved. Data is deleted as soon as the purpose of storage no longer applies, there are no statutory retention obligations or consent has been revoked. Further information can be found in the Privacy Policy of WP Mail SMTP: https://wpmailsmtp.com/privacy-policy/

3.8 Analysis and tracking tools

ActiveCampaign

On our website we use ActiveCampaign, a platform for marketing automation and email marketing, provided by ActiveCampaign, Inc, 1 N Dearborn St, 5th Floor, Chicago, IL 60602, USA. ActiveCampaign supports the creation, management and analysis of email campaigns, contact lists and marketing automation. The data processed includes email addresses, contact data, IP addresses, usage and interaction data with sent content and technical metadata such as browser type and operating system. The purpose of the processing is the automation of marketing and communication processes, the analysis of user behavior and the optimization of campaigns. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR, provided that consent has been given, and additionally Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in effective marketing measures. ActiveCampaign sets cookies for analysis and tracking purposes in order to record user behavior on the website, measure campaign success and optimize content; these cookies are only set on the basis of Art. 6 para. 1 lit. a GDPR if consent has been given. Personal data may be transferred to the USA; standard contractual clauses (SCC) are used, among other things, to ensure an adequate level of data protection. Data is deleted as soon as it is no longer required for the stated purpose and there are no legal retention periods to the contrary. Further information on data processing can be found at https://www.activecampaign.com/legal/privacy-policy/.

Google Search Console

This website uses the Google Search Console analysis and tracking solution, which is used to monitor and optimize the visibility of websites in Google search results. The responsible provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Search Console provides tools with which key performance indicators such as impressions, clicks, average position and warnings about crawling or indexing errors and security problems can be viewed. When using Google Search Console, aggregated and anonymized data is processed, such as search queries, clicks, impressions, top landing pages, device and location summaries. No personal data of individual website visitors is processed or stored; all data is summarized in a data protection-friendly manner and no individual user profiles are created. The purpose of data processing is the analysis and optimization of website performance in the context of visibility in search engines and technical error diagnosis. The legal basis for the use is Art. 6 para. 1 lit. f GDPR, the legitimate interest in the evaluation and optimization of the online offer and the detection of technical problems. Cookies that enable visitors to be recognized or store personal data are not set by the Google Search Console. Personal data is not transferred to third countries through the use of Google Search Console. Data is only made available in aggregated and anonymized form; there is no provision for individual assignment, storage or deletion of individual user data, as no such data is collected. Further information on data protection at Google can be found at: https://policies.google.com/privacy

Zapier

We use the Zapier automation platform on our website to integrate various web applications and automate workflows. Zapier is operated by Zapier Inc., represented in the EU by DP-Dock GmbH, Ballindamm 39, 20095 Hamburg, Germany. The service makes it possible to automatically transfer data between different online services such as form solutions, CRM systems, e-commerce platforms or e-mail marketing tools. For example, website forms can be automatically linked to CRM or newsletter systems, orders can be synchronized with accounting programs or notifications about website events can be forwarded to other tools. Depending on the selection and configuration of the connected services, data such as form content entered (e.g. name, email address, payment information), communication metadata, user actions on the website and information required for account management are processed. The processing is carried out for the purpose of optimizing business processes, automating recurring tasks, reducing errors and improving the user experience on the website. The legal basis for processing is generally Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in efficient and secure automation. If processing operations are carried out to fulfill a contract, Art. 6 para. 1 lit. b GDPR also applies. If there is a data transfer that technically requires cookies, this only takes place with consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Zapier itself does not set its own cookies on end devices, but may – depending on the respective integration – set technically necessary temporary cookies for caching or transmission purposes as part of workflow processing. The type and necessity of these cookies depends on the specific connected services and workflows. Data may be transferred to third countries, in particular to Zapier Inc. in the USA. Insofar as data is transferred to the USA, this is done exclusively on the basis of the standard contractual clauses approved by the European Commission in accordance with Art. 46 para. 2 lit. c GDPR to ensure an adequate level of data protection. Data is only stored for as long as is necessary to fulfill the purposes described or as long as there is a legal obligation to retain it. If the purpose of processing ceases to apply or after consent has been withdrawn, the data will be deleted, provided that there are no conflicting statutory retention requirements. Further information on data protection at Zapier can be found at https://zapier.com/privacy.

Pipedrive

This website uses Pipedrive as an analysis and tracking service, provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. Pipedrive enables the integration of web forms for lead capture and uses tracking technologies to analyze the visit of organizations and their interactions on the website. The functions include the determination of organization names, the analysis of page views, referral data and visit duration as well as the collection of communication data via integrated forms, including names, e-mail addresses and telephone numbers as well as individual additional fields. In particular, IP addresses, organizational and contact data, pages visited, referrers, timestamps, form data and engagement information are processed. Data processing is used to identify and evaluate website visitors, generate leads, optimize marketing and sales and automate business processes. The legal basis for the processed data is consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG, insofar as analysis and tracking technologies are used; insofar as the integration of forms serves to initiate a contract, Art. 6 para. 1 lit. b GDPR also applies. Pipedrive uses analysis and tracking cookies, which are only activated with prior consent; the storage and access to this information is based on § 25 para. 1 TDDDG, the further processing according to Art. 6 para. 1 lit. a GDPR. Data is not transferred to third countries, as all personal data is processed within the European Economic Area (EEA) according to the service. The collected data will be deleted as soon as the purpose of the processing no longer applies or consent has been revoked, unless statutory retention periods require longer storage. Further information on data processing and privacy options is available in the service’s Privacy Policy: https://www.pipedrive.com/en/privacy

Elementor

This website uses Elementor to design websites and to integrate analysis and tracking solutions. Elementor is a website builder and is provided by Elementor Ltd, 40 Tuval Street, Ramat Gan, Israel. The service enables the visual creation of website content and offers the option of integrating analysis and tracking scripts such as Google Analytics or Google Tag Manager directly via Elementor modules or your own code snippets. It is also possible to implement forms, pop-ups and other interactive elements that can analyze user behavior on the website. Typical processed data categories include IP address, device and browser information, information from forms (e.g. name, email address), as well as information on page usage and interactions, if corresponding tracking tools are integrated. The data is processed for the purpose of evaluating website usage, optimizing the online offering and improving user-friendliness. The legal basis for the use of Elementor is generally Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in an appealing and functional website design and in the analysis of user behavior. If analysis and tracking technologies are used with consent, the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR i. V. m. § 25 para. 1 TDDDG. Elementor itself may use technically necessary cookies or comparable technologies, e.g. to manage session status or for pop-up functions. Analysis or marketing cookies, on the other hand, are only set if this is done via third-party services integrated by Elementor and the necessary consent has been given. Personal data is transferred to third countries in connection with Elementor, as the provider is based in Israel. Israel is considered a safe third country within the meaning of the GDPR in accordance with the European Commission’s adequacy decision. Personal data is generally deleted as soon as the purpose of the processing no longer applies or consent has been revoked, provided there are no statutory retention obligations. Further information on data protection at Elementor can be found at: https://elementor.com/old/about/privacy/

Google Tag Manager

Our website uses the tag management service Google Tag Manager, which is operated by Google Ireland Limited, Google Building, 4th Floor, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (D02 X576). With Google Tag Manager, various tracking and marketing scripts (so-called “tags”) can be centrally managed and integrated on the website without the need to make any adjustments to the source code. The service itself does not use any tracking mechanisms, but forwards data streams to the integrated third-party tags. Google Tag Manager typically processes all personal data that is transmitted through configured tagging, such as IP address, user interaction data (e.g. clicks, page views, form submissions), technical information about the browser or end device, as well as tracking IDs, geographical location data and e-commerce information. The scope depends on the respective tag configuration and the respective third-party tags. The purpose of the use is the efficient management and display of analysis and marketing tags, the evaluation of user behavior and the optimization of the online offer. The legal basis for the use is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the technically secure, efficient and economical provision of analysis and marketing services. Insofar as tracking or marketing tags are set with consent, this is done on the basis of Art. 6 para. 1 lit. a GDPR i. V. m. § 25 para. 1 TDDDG. Google Tag Manager itself does not set any cookies, but can control the triggering of cookies by integrated third-party tags. Which cookies are set in detail depends on the respective tag configuration; more detailed information on this can be found in the corresponding sections of the Privacy Policy. Google Tag Manager may transfer personal data to third countries, in particular the USA, via downstream, integrated third-party tags. Google ensures suitable guarantees for its own processing operations in accordance with Art. 46 GDPR, in particular the use of the EU standard contractual clauses. The data collected as part of the tag will be deleted as soon as the respective purpose of the processing no longer applies, the data subject withdraws consent or statutory retention obligations permit deletion. The storage period of the integrated third-party services may differ and can be found in their Privacy Policies. Further information on data protection at Google Tag Manager can be found at: https://policies.google.com/privacy?hl=de

Google Analytics

We use the analysis service Google Analytics on our website to evaluate visitor behavior and to optimize our online services. Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics collects and analyzes information about the interaction of users with our website, including page views, length of stay, clicks, navigation, geographical origin (at city and state level), device and browser information used and the origin of traffic. In addition, technical identifiers such as the anonymized IP address, cookie IDs, client IDs or user IDs are processed. If activated, demographic characteristics and interests may also be included. Processing is carried out for the purpose of measuring reach, analyzing user behavior, improving the website and checking the success of marketing measures. The legal basis for the use of Google Analytics is consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. Processing only begins after active consent has been given by the website visitor. Google Analytics uses cookies that are stored on the end device and read out corresponding information. These are analysis cookies that are used exclusively on the basis of consent. The transfer of personal data to a third country (e.g. the USA) cannot be ruled out. Insofar as data is processed outside the EU/EEA, Google uses the standard contractual clauses approved by the EU Commission as guarantees for compliance with the European level of data protection. The storage periods of Google Analytics can be configured and are 2 to 14 months by default. Collected data is deleted as soon as it is no longer required for the processing purposes or if consent is withdrawn, provided that there is no legal obligation to retain it. Further information can be found at: https://policies.google.com/privacy?hl=de

3.8.1 Google Consent Mode

We use Google Consent Mode on our website to customize the use of Google services based on your consent. This means that, depending on your consent, we either use the full functionality of these services or only carry out limited data collection.

Google Consent Mode allows a certain amount of data processing, even if consent is denied, but in anonymized form.

We use the basic consent mode. This enables us to continue collecting aggregated data even if you have not consented to certain cookies. IP addresses may be transmitted to Google. The processing serves to improve our website and to analyze conversion events in anonymized form. This enables us to better assess the performance of our marketing measures.

The processing is carried out in our legitimate interest in being able to better control and use certain functions of the Google services used on the website that require consent. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Further information on Google Consent Mode can be found at: https://support.google.com/analytics/answer/9976101.

3.9 Social media plugins

LinkedIn

Functions and content of the social network LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, D02 AD98, Ireland, are integrated on this website. LinkedIn enables the integration of social media content such as share buttons, embedded profiles and direct access to network functions such as sharing, following or logging in via LinkedIn. Personal data is processed, including IP address, browser and device data, referrer URL, timestamp of interaction, details of interactions (e.g. clicks, shares), LinkedIn profile information (e.g. member ID and profile details for logged-in users) as well as cookies and tracking IDs. The purpose of data processing is the integration and functionality of social media elements, the improvement of reach, the analysis of user behavior, targeted advertising and networking in a professional context. The legal basis for the integration and analysis is regularly Art. 6 para. 1 lit. f GDPR due to the legitimate interest in efficient information dissemination and external presentation. If personal data is processed for tracking, reach analysis or marketing cookies, this is done on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. LinkedIn uses different types of cookies, including functional cookies to provide the embedded services, analytics cookies to measure reach and marketing cookies to display personalized advertising. These cookies are only activated if consent has been given and can be revoked at any time. The transfer of personal data to third countries, in particular to the USA, cannot be ruled out. In these cases, LinkedIn uses EU standard contractual clauses in accordance with Art. 46 GDPR as appropriate safeguards to ensure an adequate level of data protection. Personal data will be deleted as soon as they are no longer required for the purposes of their processing, users revoke their consent or there are no longer any legal obligations to retain them. Further information on data processing by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy

3.10 Social media profiles

In addition to our website, our company is also present on social networks. Here
we want to present our company and create the opportunity to get in touch with us.

We also use the opportunity to place advertisements and job advertisements on social media.

In the following, we provide information about which data we and the respective social network process when you visit and
interaction with our profile.

LinkedIn

We operate a LinkedIn profile on https://www.linkedin.com/. This social network is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Interaction with our company profile

When you visit our LinkedIn profile and interact with us, we process personal data. On the one hand, the data made publicly available on the profile. On the other hand, we also process the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile with the public information. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to provide relevant and interesting content and to enable the use and functionality of our LinkedIn profile. Insofar as a request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures, our processing is based on Art. 6 para. 1 lit. b GDPR.

Page Insights

LinkedIn provides us with aggregated statistics and insights (called Page Insights) that tell us how people interact with our Company Page. Among other things, we receive information about the number of profiles that view, comment on or otherwise interact with our posts, as well as aggregated demographic and other information that helps us learn about the interaction with our page or LinkedIn profile. Page Insights provided to us by LinkedIn consist of aggregated data, and LinkedIn does not provide us with any personally identifiable information about members in relation to Page Insights. We also have no way of linking Page Insights to individual members. When placing ads, LinkedIn provides us with information about the types of people who see our ads and the success of our ads. Personal data is only passed on to us if this person has consented to such processing. We also receive information from LinkedIn that allows us to understand which of our ads led to a purchase being made or an action being taken. This data is processed for the purpose of analyzing our reach and adapting our content and ads to user interests. By evaluating this data, we can recognize how our content, our profile and our advertising are consumed. This enables us to create target-group-specific content and place advertisements in order to better market our company and our services. The processing is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. When processing personal data in the course of the so-called Page Insights, the processing is carried out in joint responsibility with LinkedIn in accordance with Art. 26 para. 1 GDPR. We have concluded a corresponding agreement with LinkedIn for this purpose, which can be viewed [here](https://legal.linkedin.com/pages-joint-controller-addendum). LinkedIn’s contact details are as follows: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For LinkedIn, you can contact the data protection officer at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.

Processing by LinkedIn

By visiting our company profile, LinkedIn may also process additional personal data. In this case, the processing is carried out under the sole responsibility of LinkedIn and without our knowledge. More information from LinkedIn on this: https://de.linkedin.com/legal/privacy-policy.

3.11 Third-party content

Wordfence

This website uses the Wordfence security plugin, provided by Defiant, Inc, 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA. Wordfence provides a web application firewall (WAF), malware scanner and various protective measures against attacks and unauthorized access to the website. The service analyzes and monitors inbound and outbound traffic, detects and blocks malicious activity, provides protection against brute force attacks, defends against malware and offers additional security features such as two-factor authentication and live traffic monitoring. When Wordfence is used, IP addresses, technical information on the browser and operating system used, information on detected attacks, access times and security-related logs are processed. The purpose of the processing is to protect the website and the data stored on it from unauthorized access, attacks and malware as well as to monitor and analyze security-related incidents. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in protecting the website and the digital infrastructure. Insofar as the use of security-related cookies is necessary, this is done exclusively for technically necessary purposes and is based on Section 25 (2) No. 2 TDDDG. Wordfence does not set analysis or marketing cookies. When Wordfence is used, personal data, in particular the IP address, may be transmitted to the USA. Wordfence (Defiant, Inc.) uses the standard contractual clauses of the European Commission pursuant to Art. 46 para. 2 lit. c GDPR as guarantees for data transmission. The stored data will be deleted as soon as the purpose for its processing no longer applies or statutory retention periods have been reached. Data required to track and defend against attacks may be stored until the respective incident has been finally clarified. Further information can be found in Wordfence’s Privacy Policy at https://www.wordfence.com/privacy-policy/.

WP Fastest Cache

Our website uses the caching plugin WP Fastest Cache, which was developed by Emre Vona and is available at https://www.wpfastestcache.com. The plugin is used to optimize the loading times and performance of the website by generating and providing static HTML cache pages, which reduces server load and loading times. No personal data, such as IP addresses or browser information, is processed by WP Fastest Cache and no cookies are set. The processing takes place exclusively for the purpose of optimizing the performance of the website. Personal data is not processed by the service, so there is no need for a legal basis under Art. 6 (1) GDPR. As WP Fastest Cache does not use cookies, cookies or other identifiers are not stored on end devices. Data is not transferred to third countries. Since no personal data is processed, there is no storage or separate deletion regulation. Further information is available at https://www.wpfastestcache.com/blog/wp-fastest-cache-and-gdpr-compliance/.

Captivate Sync™

We use the Captivate Sync™ integration from Captivate, LLC, 350 Fifth Avenue, Empire State Building, Suite 6000, New York, NY 10118, USA, on our website to synchronize podcast content between Captivate.fm and WordPress. The service enables the centralized management and automated publication of podcast episodes as well as the integration of podcast players on different pages of the website. Typically, the user ID and the API key for authentication between WordPress and Captivate.fm, podcast episode details (such as title, description and metadata) and local storage data for securing draft edits are processed. The data processing is carried out for the purpose of central administration, synchronization and automated publication of podcasts via the website. The legal basis is Art. 6 para. 1 lit. f GDPR, based on the legitimate interest in efficient website integration and convenient provision of content. As far as we are currently aware, Captivate Sync™ does not set any cookies and does not use any external tracking technologies; local storage is only used in the browser to temporarily store drafts. Personal data is transferred to the USA, whereby Captivate, LLC, as the provider, uses suitable guarantees in accordance with Art. 46 GDPR, in particular the EU standard contractual clauses. The data processed as part of Captivate Sync™ will be deleted as soon as the purpose of processing ceases to apply or users terminate the connection, provided there are no statutory retention requirements. Further information can be found at: https://www.captivate.fm/privacy

Antispam Bee

This website uses the anti-spam plugin Antispam Bee, which is developed and maintained by the German-speaking community Pluginkollektiv (information: https://antispambee.pluginkollektiv.org/documentation/). Antispam Bee is used to detect and filter spam comments as well as spam trackbacks and pingbacks by automatically checking incoming comments based on various criteria. As part of the spam check, the plugin processes local IP addresses (anonymized for checks at country level), email addresses and, if applicable, the URL of the person making the comment, the host name and the comment content. The data is processed solely for the purpose of recognizing and preventing spam and maintaining the integrity of comment functions. The legal basis is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the prevention of spam and thus in the functionality and security of the website. Antispam Bee does not set any cookies and does not keep any user or tracking logs. Personal data is not transferred to third countries, as all processing takes place locally on the website server. Stored data will be deleted after the respective purpose has expired, but at the latest when the comment is removed, consent is revoked or a request for deletion is made or after the statutory retention periods have expired. Further information on data processing by Antispam Bee can be found in the documentation at https://antispambee.pluginkollektiv.org/documentation/.

Font Awesome

This website uses the Font Awesome icon library from Fonticons, Inc, 307 S Main St, Bentonville, Arkansas, 72712, United States, to display scalable vector icons and visually enhance navigation elements, buttons and interactive website areas. Font Awesome provides a variety of icons via a Content Delivery Network (CDN), which are dynamically loaded via CSS and JavaScript libraries and embedded in the design of the website. When using Font Awesome via the CDN, no personal data such as IP addresses are stored or cookies are set according to current knowledge; no tracking or analysis measures are carried out through the integration. If the services are used directly via the Font Awesome website, information such as the IP address may be collected. The data processing takes place exclusively for the provision and integration of the icons on the website. The legal basis is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in an appealing, functional and accessible user interface. No cookies are used for the pure integration of Font Awesome via the CDN. According to the current status, personal data is not transferred to third countries when integrated via the CDN. Data that could be collected in the course of use, e.g. when visiting the Font Awesome website directly, will be deleted there after the respective legal deadlines. Further information can be found in Font Awesome’s Privacy Policy: https://fontawesome.com/privacy

UpdraftPlus

We use the third-party service UpdraftPlus on our website to back up, restore and migrate WordPress websites. UpdraftPlus is offered by UPDRAFT WP SOFTWARE LIMITED, Tramshed Tech, Griffin Street, High Street, Newport, Wales, NP20 1FX. The service enables the automated or manual creation of backups of the entire WordPress installation, including website files (e.g. themes, plugins, uploads and other user-defined directories in the wp-content folder) and database content. All data required for the backup, such as website content data and configuration information, is processed. The processing is carried out for the purpose of backing up, restoring and migrating websites and for implementing remote storage integrations, for example with cloud providers such as Dropbox, Google Drive or Amazon S3. The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in backing up and restoring website data and protecting against data loss. As far as we are currently aware, UpdraftPlus itself does not set any cookies on users’ end devices if the service is only used for backup and administration in the backend. If additional functions are integrated, this may change and must then be assessed on the basis of the respective function. Personal data is transferred to third countries in connection with optional remote storage destinations such as Dropbox, Google Drive or Amazon S3. The responsibility for the selection and data protection protection of these storage providers lies with the configuration in each individual case; EU standard contractual clauses are used where applicable. The stored data is deleted as soon as the purpose of the processing no longer applies, a backup is overwritten or users request the deletion, provided there are no legal retention periods to the contrary. Further information is available at https://teamupdraft.com/privacy/.

YOAST SEO

We use the YOAST SEO service from YOAST BV, Don Emanuelstraat 3, 6602 GX Wijchen, Netherlands, on our website for search engine optimization and to provide structured data such as Schema.org markups as well as to improve metadata and analyze content. YOAST SEO enables the management of SEO-relevant meta titles and descriptions, the generation of XML sitemaps, the addition of Schema markups for improved search results and the performance of real-time analyses for readability and SEO optimization directly in the content editor. By default, YOAST SEO does not process any personal data from visitors. Optionally, usage data from the plugin can be transmitted anonymously if this has been actively activated in the plugin settings. No data such as IP address, browser or device information of website visitors is transmitted to YOAST. Data processing is used exclusively for the technical optimization of the website for search engines and to improve visibility on the Internet. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in optimal findability and technical presentation of the website. YOAST SEO itself does not use cookies on the end devices of visitors; if optional tracking functions are activated, consent is obtained in advance (legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG). Personal data is not transferred to third countries as part of the standard use of YOAST SEO. The data collected by YOAST will be anonymized immediately or deleted after the purpose has ceased to exist, provided that there are no legal storage obligations to the contrary. Further information can be found in the Privacy Policy of YOAST SEO at: https://yoast.com/yoast-seo-shopify-privacy-policy/

Elementor

We use the Elementor page builder plugin on our website, which is operated by Elementor Ltd, Israel. Elementor enables the visual design and editing of website content via a drag-and-drop interface as well as the creation of forms, pop-ups and design elements. When using Elementor, server and system-related information such as software and versioning data, WordPress settings (e.g. permalinks, language, themes, plugins), the website URL, the email address of the WordPress administration and, when using the form functions, the content entered there, IP address and user agent are processed. By default, form-related data is stored locally on your own web server and is not transmitted to Elementor. The processing is carried out for the purpose of providing, error analysis and continuous optimization of the website functions. The legal basis is Art. 6 para. 1 lit. f GDPR, the legitimate interest in an attractive website design and functional content management, and, if applicable, Art. 6 para. 1 lit. b GDPR in the case of pre-contractual communication via forms. As things stand at present, Elementor itself does not use cookies for visitors to the website, provided that no additional functions or integrations from third-party providers are used within Elementor. There is no transfer of personal data by Elementor to third countries, as all regular data processing is carried out locally on the web server. A transfer to third countries may take place in exceptional cases if integrations are made that expressly provide for this; in this case, suitable guarantees such as the standard contractual clauses of the EU Commission are used. The data will be deleted as soon as the purpose of processing no longer applies, at the latest upon request for deletion or revocation, provided that there are no legal retention periods to the contrary. Further information can be found at: https://www.elementor.com/old/about/privacy/

Premium Addons for Elementor

Our website uses Premium Addons for Elementor, a website design extension service offered by Leap13 LLC, 16192 Coastal Hwy, Lewes, DE 19958, USA. Premium Addons for Elementor provides a variety of design widgets, templates and effects that can be used for content such as sliders, carousels, navigation menus, dynamic product presentations and animations. According to the provider, no personal data of website visitors is collected or processed as part of the standard integration; all data from elements such as Google Sheets or CSV widgets comes from sources of the website operator. The purpose of the use is the convenient extension of the website functions, in particular the improvement of design, user experience and dynamic content presentation. The legal basis for processing is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in improving the presentation and functionality of the online offer. According to the current status, Premium Addons for Elementor does not set any cookies for analysis or marketing purposes with standard integration. As the service is offered by Leap13 LLC based in the USA, a transfer of personal data to a third country cannot be ruled out, for example in the course of individual plugin customizations; in the standard case, however, no transfer takes place. According to the information currently available, personal data is only stored or processed by the service if this is technically necessary when using specific widgets; in such cases, the storage period depends on the respective processing purpose and the statutory retention obligations. Further information can be found at: https://premiumaddons.com/privacy-policy/

Borlabs Font Blocker

Our website uses the Borlabs Font Blocker, a function of the Borlabs Cookie Plugin from Borlabs, a German company, accessible via https://borlabs.io/contact/. Borlabs Font Blocker is used to block external fonts such as Google Fonts or Adobe Fonts by default and thus prevent personal data – in particular the IP address – from being transmitted to third-party providers without consent when the page is loaded. The processed data includes only technical telemetry data such as plug-in parameters for error diagnosis and product development; in principle, no personal data, no IP addresses of website visitors and no communication content is processed by Borlabs Font Blocker. The purpose is to integrate fonts in compliance with data protection regulations and to prevent the unintentional disclosure of personal data to third parties. The legal basis for the use is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in a data protection-compliant website design that meets the requirements of the ePrivacy Directive and GDPR. Borlabs Font Blocker does not use cookies or similar technologies that are relevant for end users. There is no transfer of personal data to third countries through the use of Borlabs Font Blocker. Since no personal data is processed, there is no storage period; any technical telemetry data is processed exclusively for plugin use and is not linked to website visitors. Further information on data processing by Borlabs can be found at: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Zapier

We use the Zapier automation and integration service on our website, which is operated by Zapier Inc, 548 Market St. #62411, San Francisco, CA 94104-5401, United States, and an EU representative, DP-Dock GmbH, Ballindamm 39, 20095 Hamburg, Germany. Zapier enables the automation of workflows (“Zaps”) by linking various web applications and services and automating recurring processes without programming, for example to transfer form content to third-party systems, to synchronize contact data or to automatically create appointments and notifications. When using Zapier, the following types of data in particular are processed, depending on the integrations included: Email addresses, names, communication content, form and booking data, technical usage information (including IP address), login data and any other data provided or transmitted by the connected services. This data is processed for the purpose of automating and integrating work processes on the website, increasing the efficiency of digital processes, synchronizing information between different applications and fulfilling corresponding functions in accordance with the selected workflows. The legal basis for the processing is generally Art. 6 para. 1 lit. f GDPR and – if a (pre-)contractual relationship exists according to the respective workflow used – Art. 6 para. 1 lit. b GDPR. Insofar as cookies are set via Zapier for analysis or marketing purposes, this is only done on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § Section 25 (1) TDDDG; technically necessary cookies are processed on the basis of Section 25 (2) TDDDG. Zapier may use cookies, in particular for login and session management and – depending on the specific integrations – for analysis and marketing purposes. The setting of analysis and marketing cookies takes place exclusively on the basis of prior consent. A transfer of personal data to the United States cannot be excluded in the context of the use of Zapier. Zapier uses in particular the EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR as guarantees for this. Data is stored for as long as is necessary to fulfill the respective purposes or until consent is revoked or the purpose of the data processing no longer applies, provided that there are no statutory retention obligations to the contrary. Further information can be found in Zapier’s Privacy Policy: https://zapier.com/privacy

OMGF (Optimize My Google Fonts)

On our website we use OMGF (Optimize My Google Fonts), a plugin for the local provision of Google Fonts, developed by Daan.dev (developer: Daan van den Bergh). OMGF optimizes the loading times of the website and ensures that Google fonts are no longer loaded via Google servers, but are integrated locally. This prevents personal data, in particular the IP address and browser information of website visitors, from being transmitted to Google when fonts are loaded. The service itself does not process any personal data of users and does not use cookies. The purpose of the integration is to optimize website performance and to comply with data protection regulations when using web fonts. The legal basis is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in a data protection-compliant and high-performance provision of web content. There is no transfer of personal data to third countries through the use of the plugin. No personal data is stored or processed by OMGF, so there is no storage duration regulation. Further information can be obtained by contacting the developer at https://daan.dev/contact/.

Google Fonts (local)

Fonts from Google Fonts, which are stored locally on our own server, are integrated on our website. The original fonts come from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, but are only provided locally. The fonts are integrated on the website for a uniform and appealing presentation. As the fonts are hosted locally, no personal data such as IP addresses or browser information are transmitted to Google when the website is accessed. The purpose of data processing is to optimize the visual design and user-friendliness of the website. The legal basis is the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in a uniform and appealing website presentation. Cookies are not set in connection with the provision of Google Fonts (locally). No personal data is transferred to third countries. Personal data is not stored in connection with Google Fonts; deletion is therefore not required. Further information on Google Fonts can be found at: https://fonts.google.com/about

Royal Elementor Addons

This website integrates functions of Royal Elementor Addons, an extension plugin for the WordPress page builder Elementor, provided by Business Directory Premium, 300 Graham Ave, Brooklyn, NY 11211, United States. The service provides additional widgets, templates and dynamic content features that extend the design and functionality of websites, especially for e-commerce, corporate sites, blogs, portfolios and customized lists. When Royal Elementor add-ons are integrated, no personal data of site visitors is currently processed by the widgets themselves; rather, the site’s own data such as posts, media and created fields are used to provide the functions dynamically. The purpose of data processing is to provide and display enhanced website content and to offer user-friendly, interactive website elements. The legal basis for the use of the service is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in a technically and visually optimized website design. According to consistent documentation and independent analysis, the plugin does not set any cookies for analysis, marketing or functional purposes in the browser of site visitors. Personal data is not transferred to third countries through the use of the front-end functions. There is no storage of personal data beyond the integration on this website; data is processed exclusively on the server side and removed in accordance with the general deletion principles after the purpose has ceased to apply or in the event of a justified objection. Detailed information can be found at: https://royal-elementor-addons.com/privacy-policy/

3.12 Audio and video conferencing

Zoom

Our website uses the video conferencing and communication service Zoom, provided by Zoom Video Communications, Inc, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA, for European users with services via regional subsidiaries such as ZVC Germany, ZVC Netherlands or ZVC UK. Zoom enables audio and video conferences, webinars, live chats, screen sharing and online meetings to be held directly via the website. In the course of use, IP addresses, account information, session and meeting data, registration information for webinars, engagement data (e.g. recordings, transcripts) and interaction data such as chat messages, shared files or technical usage information are usually processed. The data processing serves the provision and management of online meetings, interactive communication and the implementation and evaluation of digital events. The legal basis for the processing is regularly Art. 6 para. 1 lit. b GDPR (implementation of (pre-)contractual measures), for support or administrative processes as well as analysis purposes Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication and IT security). Depending on the integration, Zoom uses functional cookies for session management and, if necessary, analysis or marketing cookies to evaluate usage, whereby analysis and marketing cookies are only used with consent in accordance with Art. 6 Para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG are used. Functional cookies are necessary for operation and are used in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with. § 25 para. 2 TDDDG are used. Personal data is transferred to third countries, in particular to the USA, whereby Zoom uses the EU standard contractual clauses as suitable guarantees in accordance with Art. 46 para. 2 lit. c GDPR. The storage period depends on the respective purpose, i.e. data is deleted or blocked after the purpose of processing ceases to apply, if consent is revoked or objected to, or if statutory retention periods expire. Further information can be found in Zoom’s Privacy Policy: https://www.zoom.com/en/trust/privacy/privacy-statement/

Microsoft Teams

We integrate Microsoft Teams from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, on our website to provide audio and video conferencing as well as chat and collaboration functions. Microsoft Teams makes it possible to hold and participate in online meetings, video conferences and chats directly via the browser, integrate appointments, share files and communicate in real time. As a rule, profile information (e.g. name, email address, profile picture), communication content (chat messages, meeting content, shared files, recordings, transcripts), device and connection data (e.g. app version, device type, country code), usage data (usage behavior, interaction details), optional location data and, if activated, media content (images, video recordings within meetings) are processed. The purpose of data processing is to provide, conduct and follow up on online meetings and to enable efficient team communication and collaboration. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the use takes place in the context of (pre-)contractual measures, as well as Art. 6 para. 1 lit. f GDPR to safeguard the legitimate interest in a modern, efficient communication and collaboration platform. If Microsoft Teams uses cookies to provide the function, this is only done for session management and functionality with consent, which can be revoked at any time; the legal basis for this is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Data may be transferred to third countries, in particular the USA, as part of support, maintenance or subcontracting processes; Microsoft uses the EU standard contractual clauses as a suitable guarantee in accordance with Art. 46 GDPR. Data will be deleted as soon as the purpose of processing ceases to apply, if consent is withdrawn or after expiry of statutory retention periods. Further information is available at https://privacy.microsoft.com/en-us/privacystatement.

Google Meet

The Google Meet service is used on our website to conduct audio and video conferences. Google Meet is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Meet enables virtual meetings, audio and video conferences and functions such as screen sharing, live subtitling, chat and collaboration in real time. In particular, we process participants’ identity data (such as name and email address), attendance data (e.g. joining and leaving times, roles in the meeting), device information and technical metrics (device type, network data such as latency and packet loss for audio/video), location data, meeting events (e.g. presentations, surveys, reports of abuse), meeting artifacts (recordings, transcripts, if activated) as well as browser and network analysis data. The data processing is carried out for the purpose of organizing and conducting online conferences and virtual collaboration, including the provision, safeguarding and analysis of the technical functionality of the meetings. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR for contractual and pre-contractual purposes and Art. 6 para. 1 lit. f GDPR based on our legitimate interest in efficient, secure and modern communication. If functions such as recording or extended analyses are used, additional consent may be required in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Google Meet may use functional and analytical cookies to ensure the stability of the connection and to analyze performance. These cookies are only set with prior consent. The legal basis for this is Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. A transfer of personal data to third countries, in particular to the USA, cannot be ruled out in the context of support or maintenance processes. Google guarantees compliance with an appropriate level of data protection by concluding EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. The data will be deleted as soon as the purpose of the processing no longer applies, consent has been revoked or statutory retention periods have expired. Further information can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de

Google Hangouts

This website uses the Google Hangouts service for audio and video conferencing as well as for text and group chats. Google Hangouts is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Hangouts makes it possible to use text messages, voice and video calls, screen sharing and the sharing of files and photos in individual and group conversations directly via the website. As a rule, Google account information, IP addresses, communication metadata (such as timestamps), chat content, transmitted photos and files as well as device and browser information are processed. The purpose of data processing is to enable the provision of audio, video and text communication, the exchange of files and images, and the organization of online meetings. Depending on use, the legal basis is Art. 6 para. 1 lit. b GDPR (fulfillment of (pre-)contractual measures) and/or Art. 6 para. 1 lit. f GDPR (legitimate interest in effective digital communication); insofar as consent is obtained for the use of cookies or further data processing, Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. Google Hangouts may set cookies for functional and analytical purposes as part of the function; unless absolutely necessary, these are only used with consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG). Personal data may be transferred to third countries, in particular to the USA. According to Google, the EU standard contractual clauses are used as suitable guarantees for this. Personal data will be deleted as soon as the purpose of the processing no longer applies, unless there are legal obligations to retain data or consent has been revoked. Further information on data processing by Google can be found at: https://policies.google.com/privacy?hl=de

Skype for Business

Skype for Business from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, is used on our website to provide audio and video conferencing functions. Skype for Business enables real-time communication via chats, audio and video calls as well as the integration of web meetings directly via the website. Depending on use, the profile picture, user name, password, email address, location data, date of birth, contact and calendar data, presence status and IP address are processed. The purpose of the processing is to conduct and manage online conferences, chats and integration into existing workflows, including customer support and real-time collaboration. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the use is necessary for the performance of a contract or for the implementation of pre-contractual measures, and Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in efficient communication and work organization. Cookies are set by Skype for Business to ensure the functionality and security of the service; analysis and marketing cookies are only used with consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG are used. Personal data may be transferred to third countries, in particular the USA; in these cases, EU standard contractual clauses are used as suitable guarantees. The processed data will be deleted as soon as it is no longer required for the stated purposes, if consent is withdrawn or after expiry of statutory retention periods. Further information on the processing of personal data by Skype for Business can be found at: https://www.microsoft.com/en-us/privacy/privacystatement

3.13 CRM systems

Pipedrive CRM

Our website uses the Pipedrive CRM customer relationship management system from Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Harju maakond, Estonia, to support the collection, maintenance and management of customer data and the organization of the sales process. Pipedrive CRM enables the automated collection of website inquiries via contact forms as well as the management of leads, communication with interested parties and the analysis and tracking of sales activities. The processed data includes contact and company details such as name, e-mail address, communication content and history, information on website visits (e.g. IP address, time of visit, pages visited), interaction data from forms, campaign parameters (e.g. UTM parameters) and, if applicable, e-commerce-related information with corresponding integration. The purpose of the processing is the efficient processing of inquiries, management and tracking of potential business, coordination of sales and improvement of customer relationships. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, insofar as the processing is carried out to fulfill (pre-)contractual measures, as well as Art. 6 para. 1 lit. f GDPR due to the legitimate interest in optimizing sales processes and business processes. Insofar as Pipedrive CRM sets cookies for analysis or functionality purposes, this is done exclusively on the basis of a previously granted consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG; this may be the case in particular for the evaluation of visitor behavior. Personal data may be transferred to third countries, in particular to the USA. In such cases, Pipedrive uses the standard contractual clauses published by the European Commission as a suitable guarantee to ensure an adequate level of data protection. The personal data will be deleted when the purpose of processing ceases to apply, consent is revoked or upon request, provided that there are no legal retention periods to the contrary. Further information can be found in Pipedrive’s Privacy Policy at: https://www.pipedrive.com/en/privacy

ActiveCampaign

We integrate ActiveCampaign on our website, a CRM tool from ActiveCampaign, Inc, 1 N Dearborn St, 5th Floor, Chicago, IL 60602, USA. ActiveCampaign is used to centrally manage contacts and to automate communication and sales processes. Among other things, contact data (e.g. e-mail address), message content, interaction information, IP addresses and other technical metadata are processed. The purpose of the processing is to improve and automate customer management, to optimize marketing and sales processes and to analyze contact and communication results. The legal basis for data processing may be Art. 6 para. 1 lit. b GDPR, provided that the data is directly required for the fulfillment of (pre-)contractual measures (e.g. in the case of a specific request for offers or the processing of contracts). In addition, processing regularly takes place on the basis of a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR, as there is an interest in efficient customer and contact management and targeted marketing measures; in individual cases, Art. 6 para. 1 lit. a GDPR (consent) may also be relevant, for example for certain advertising campaigns or newsletter registrations. ActiveCampaign may set cookies to record user behavior and interactions; unless these cookies are required for technical operation, they are only used with consent in accordance with Art. 6 para. 1 lit. a GDPR. Personal data may be transferred to the USA; standard contractual clauses (SCC) are used for protection to ensure an adequate level of data protection. Data is deleted as soon as it is no longer required for the stated purpose and there are no legal retention periods to the contrary. Further information on data processing can be found at https://www.activecampaign.com/legal/privacy-policy.

3.14 Cloud backups

UpdraftPlus

We use the UpdraftPlus cloud backup service on our website for the automated backup and, if necessary, restoration of WordPress sites. UpdraftPlus is operated by Updraft WP Software Ltd, United Kingdom (Company No. 8570611; VAT 202 1260 80). The service enables regular, automated or manually triggered backups of the entire website, which can be stored locally or in connected cloud services and used to restore the website or migrate to other servers. In particular, website connection data for plugin activation and updates, authentication data when using third-party integrations (e.g. OAuth tokens) and technical information for performing the backups are processed. The actual backup data always remains on your own server or in the self-selected storage destination and is not transferred to UpdraftPlus. The purpose of the processing is to protect against data loss, to restore the site after technical problems and to simplify migration to other hosting environments. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the security and integrity of the website. As things currently stand, UpdraftPlus itself does not use cookies as part of the use of the website. UpdraftPlus does not transfer personal data to third countries, as the backup data remains on storage destinations selected by UpdraftPlus itself. When choosing storage in third countries (e.g. cloud services outside the EU), the respective data protection guarantees of the providers must be observed. The storage period depends on the backup strategy selected by the website operator; data is deleted as soon as it is no longer required for backup and recovery purposes or when storage is revoked, provided there are no statutory retention obligations. Further information can be found at https://updraftplus.com/data-protection-and-privacy-centre/.

Google Drive

Our website uses Google Drive, a cloud service for file storage, synchronization and collaborative editing, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Drive enables the storage, synchronization and sharing of files and folders as well as the integration and collaborative editing of documents via the website. Among other things, file names, file contents, metadata (such as creation and modification data, folder structures and file sizes), information on sharing and access activities as well as interaction data are processed, as well as authentication data of the respective Google account. The processing is carried out for the purpose of secure cloud storage, synchronization as well as for the provision and management of files and to ensure collaboration functions. The legal basis for the processing is generally Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the use of the cloud services, as well as Art. 6 para. 1 lit. f GDPR based on the legitimate interest in the efficient provision and management of data. Insofar as cookies are used, for example for authentication or to ensure functionality, these are used exclusively for functional purposes; the legal basis for this is Art. 6 para. 1 lit. f GDPR in conjunction with. § Section 25 para. 2 no. 2 TDDDG. In the context of use, personal data is transferred to Google servers in the USA; the standard contractual clauses (SCC) approved by the EU Commission are used as suitable guarantees to protect the data. Data is deleted as soon as the purpose of storage no longer applies, consent is revoked or a statutory retention period expires. Further information can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de

4. What else is important

Finally, we would like to inform you in detail about your rights and how you will be informed about changes to data protection requirements.

4.1 Your rights in detail

4.1.1 Right to information in accordance with Art. 15 GDPR

You can request information about whether your personal data is being processed. If this is the case, you can request further information on the type and manner of processing. A detailed list can be found in Art. 15 para. 1 lit. a to h GDPR.

4.1.2 Right to rectification in accordance with Art. 16 GDPR

This right includes the correction of incorrect data and the completion of incomplete personal data.

4.1.3 Right to erasure in accordance with Art. 17 GDPR

This so-called ‘right to be forgotten’ gives you the right, under certain conditions, to request the deletion of your personal data by the controller. This is generally the case if the purpose of the data processing no longer applies, if consent has been withdrawn or the initial processing took place without a legal basis. A detailed list of reasons can be found in Art. 17 para. 1 lit. a to f GDPR. This “right to be forgotten” also corresponds to the controller’s obligation under Art. 17 para. 2 GDPR to take reasonable steps to ensure that the data is generally erased.

4.1.4 Right to restriction of processing in accordance with Art. 18 GDPR

This right is subject to the conditions set out in Art. 18 para. 1 lit. a to d.

4.1.5 Right to data portability in accordance with Art. 20 GDPR

This regulates the basic right to receive your own data in a commonly used form and to transfer it to another controller. However, this only applies to data processed on the basis of consent or a contract in accordance with Art. 20 (1) (a) and (b) and insofar as this is technically feasible.

4.1.6 Right to object pursuant to Art. 21 GDPR

In principle, you can object to the processing of your personal data. This applies in particular if your interest in objecting outweighs the legitimate interest of the controller in the processing and if the processing relates to direct marketing and/or profiling.

4.1.7 Right to “individual decision-making” pursuant to Art. 22 GDPR

In principle, you have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. However, this right is also restricted and supplemented by Art. 22 (2) and (4) GDPR.

4.1.8 Further rights

The GDPR contains comprehensive rights to inform third parties about whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this only applies insofar as this is possible or feasible with reasonable effort.

We would like to take this opportunity to draw your attention once again to your right to withdraw your consent in accordance with Art. 7 (3) GDPR. However, this does not affect the lawfulness of the processing carried out up to that point.

We would also like to draw your attention to your rights under §§ 32 ff. BDSG, which, however, are largely congruent with the rights just described.

4.1.9 Right to lodge a complaint pursuant to Art. 77 GDPR

You also have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data relating to you infringes this Regulation.

5. What if the GDPR is abolished tomorrow or other changes take place?

The current status of this Privacy Policy is 20.04.2026. From time to time it is necessary to adapt the content of the Privacy Policy in order to react to actual and legal changes. We therefore reserve the right to amend this Privacy Policy at any time. We will publish the amended version in the same place and recommend that you read the Privacy Policy regularly.

Created with the kind support of Dieter macht den Datenschutz

Overview of all active Services and Service Groups

Scroll to Top