Get advice now

Privacy Policy

Preamble

Note on the applicability of the GDPR and the Swiss Data Protection Act (DSG): This privacy notice serves to provide information in accordance with both the Swiss Federal Act on Data Protection (Swiss DSG) and the General Data Protection Regulation (GDPR). For this reason, please note that the terms used in the GDPR are employed here due to its broader geographical scope and greater clarity. In particular, instead of the terms “processing” of “personal data,” “overriding interest,” and “sensitive personal data” used in the Swiss Data Protection Act (Swiss DPA), the terms “processing” of “personal data,” “legitimate interest,” and “special categories of data” used in the GDPR are employed. However, the legal meaning of these terms continues to be determined in accordance with the Swiss Data Protection Act (DSG) within the scope of its application.

With this Privacy Policy, we would like to inform you about the types of personal data we process (hereinafter also referred to as “data”), the purposes for which we process it, and the scope of such processing. This Privacy Policy applies to all processing of personal data carried out by us, both in connection with the provision of our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as “Online Offer”).

The terms used are gender-neutral.

As of March 26, 2024

Table of Contents

Person in charge

We process personal data for the purpose of sending promotional communications, which may be sent via various channels, such as email, telephone, mail, or fax, in accordance with legal requirements.

Recipients have the right to withdraw their consent at any time or to opt out of promotional communications at any time.

Following a revocation or objection, we store the data necessary to demonstrate prior authorization for contacting you or sending you communications for up to three years after the end of the year in which the revocation or objection was made, based on our legitimate interests. The processing of this data is limited to the purpose of potentially defending against claims. Based on the legitimate interest in permanently honoring the user’s revocation or objection, we also store the data necessary to prevent further contact (e.g., depending on the communication channel, the email address, phone number, or name).

PPS Perfunctio Payment Services GmbH
Astraturm | Zirkusweg 2
D-20359 Hamburg

Email address: info@perfunctio.eu

Contact the Data Protection Officer

We process personal data for the purpose of sending promotional communications, which may be sent via various channels, such as email, telephone, mail, or fax, in accordance with legal requirements.

Recipients have the right to withdraw their consent at any time or to opt out of promotional communications at any time.

Following a revocation or objection, we store the data necessary to demonstrate prior authorization for contacting you or sending you communications for up to three years after the end of the year in which the revocation or objection was made, based on our legitimate interests. The processing of this data is limited to the purpose of potentially defending against claims. Based on the legitimate interest in permanently honoring the user’s revocation or objection, we also store the data necessary to prevent further contact (e.g., depending on the communication channel, the email address, phone number, or name).


, Attorney at Law Kaspar-Ludwig Stolzenhain
Joachimsthaler Straße 24
10719 Berlin

Overview of Processing Operations

The following overview summarizes the types of data processed and the purposes of such processing, and identifies the data subjects.

Types of data processed

  • Inventory data.
  • Payment information.
  • Contact information.
  • Table of Contents.
  • Contract details.
  • Usage data.
  • Meta data, communication data, and transaction data.

Categories of data subjects

  • Prospective buyers.
  • Communication partner.
  • Users.
  • Business and contractual partners.

Purposes of processing

  • Provision of contractual services and fulfillment of contractual obligations.
  • Contact requests and communication.
  • Safety measures.
  • Direct marketing.
  • Range measurement.
  • Office and organizational procedures.
  • Managing and responding to inquiries.
  • Feedback.
  • Marketing.
  • Profiles containing user-specific information.
  • Provision of our online services and user-friendliness.
  • Information technology infrastructure.

Relevant Legal Bases

We process personal data for the purpose of sending promotional communications, which may be sent via various channels, such as email, telephone, mail, or fax, in accordance with legal requirements.

Recipients have the right to withdraw their consent at any time or to opt out of promotional communications at any time.

Following a revocation or objection, we store the data necessary to demonstrate prior authorization for contacting you or sending you communications for up to three years after the end of the year in which the revocation or objection was made, based on our legitimate interests. The processing of this data is limited to the purpose of potentially defending against claims. Based on the legitimate interest in permanently honoring the user’s revocation or objection, we also store the data necessary to prevent further contact (e.g., depending on the communication channel, the email address, phone number, or name).

Relevant Legal Bases Under the GDPR: Below is an overview of the legal bases under the GDPR on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations may apply in your country of residence or our country of incorporation. Furthermore, should more specific legal bases apply in individual cases, we will inform you of these in the Privacy Policy.

  • Consent (Art. 6(1)(a) of the GDPR) – The data subject has given consent to the processing of personal data concerning him or her for a specific purpose or for several specific purposes.
  • Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the data subject’s request.
  • Legal obligation (Art. 6(1)(c) of the GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Legitimate interests (Art. 6(1)(f) of the GDPR) – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National Data Protection Regulations in Germany: In addition to the data protection provisions of the GDPR, national data protection regulations apply in Germany. These include, in particular, the Act on the Protection against the Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). The BDSG contains, in particular, special provisions regarding the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, and the transfer of data, as well as automated decision-making in individual cases, including profiling. Furthermore, state data protection laws of the individual federal states may apply.

Note on the applicability of the GDPR and the Swiss Data Protection Act (DSG): This privacy notice serves to provide information in accordance with both the Swiss Federal Act on Data Protection (Swiss DSG) and the General Data Protection Regulation (GDPR). For this reason, please note that the terms used in the GDPR are employed here due to its broader geographical scope and greater clarity. In particular, instead of the terms “processing” of “personal data,” “overriding interest,” and “sensitive personal data” used in the Swiss Data Protection Act (Swiss DPA), the terms “processing” of “personal data,” “legitimate interest,” and “special categories of data” used in the GDPR are employed. However, the legal meaning of these terms continues to be determined in accordance with the Swiss Data Protection Act (DSG) within the scope of its application.

Safety measures

In accordance with legal requirements, and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access to, input of, and disclosure of the data, ensuring its availability, and maintaining its separation. Furthermore, we have established procedures that ensure the exercise of data subjects’ rights, the erasure of data, and responses to data breaches. Furthermore, we take the protection of personal data into account from the very beginning of the development and selection of hardware, software, and procedures, in accordance with the principle of data protection by design and through privacy-friendly default settings.

Transfer of Personal Data

In the course of our processing of personal data, such data may be transferred to or disclosed to other agencies, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, service providers entrusted with IT tasks or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into appropriate contracts or agreements with the recipients of your data to ensure the protection of your data.

International Data Transfers

Data transfer within the organization: Data transfer within the corporate group: We may transfer personal data to other companies within our corporate group or grant them access to such data. If the data transfer is for administrative purposes, it is based on our legitimate business and operational interests, or it occurs if it is necessary to fulfill our contractual obligations, or if consent from the data subjects or a legal authorization is available.

Data Processing in Third Countries: If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if processing occurs in connection with the use of third-party services or the disclosure or transfer of data to other individuals, entities, or companies, this is done solely in accordance with legal requirements. If the level of data protection in the third country has been recognized by means of an adequacy decision (Art. 45 GDPR), this serves as the basis for the data transfer. Otherwise, data transfers only take place if the level of data protection is otherwise ensured, in particular through standard contractual clauses (Art. 46(2)(c) GDPR), explicit consent, or in the case of transfers required by contract or law (Art. 49(1) GDPR). Furthermore, we will inform you of the legal basis for transfers to third countries for each individual provider from the third country, whereby adequacy decisions take precedence as the legal basis. Information on third-country transfers and existing adequacy decisions can be found on the European Commission’s website: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en?prefLang=de.

EU-US Transatlantic Data Privacy Framework: Under the so-called “Data Privacy Framework” (DPF), the European Commission has also recognized the level of data protection provided by certain U.S. companies as adequate pursuant to the adequacy decision dated July 10, 2023. You can find the list of certified companies as well as further information on the DPF on the U.S. Department of Commerce website at https://www.dataprivacyframework.gov/ (in English). We will inform you in our privacy policy which service providers we use that are certified under the Data Privacy Framework.

Rights of data subjects

We ask that you review the content of our Privacy Policy on a regular basis. We will update the Privacy Policy as soon as changes to our data processing activities make this necessary. We will notify you as soon as the changes require action on your part (e.g., consent) or any other individual notification.

Please note that any addresses and contact information for companies and organizations provided in this Privacy Policy may change over time; we ask that you verify this information before contacting them.

Rights of data subjects under the GDPR: As a data subject, you have various rights under the GDPR, which are set forth in particular in Articles 15 through 21 of the GDPR:

  • Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.
  • Right to withdraw consent: You have the right to withdraw your consent at any time.
  • Right of access: You have the right to request confirmation as to whether your personal data is being processed, as well as access to that data, further information, and a copy of the data in accordance with legal requirements.
  • Right to rectification: In accordance with legal requirements, you have the right to request that data concerning you be completed or that inaccurate data concerning you be corrected.
  • Right to erasure and restriction of processing: In accordance with legal requirements, you have the right to request that data concerning you be erased without delay, or, alternatively, to request that the processing of such data be restricted in accordance with legal requirements.
  • Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, in accordance with legal requirements, or to request that it be transmitted to another controller.
  • Complaint to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred, if you believe that the processing of your personal data violates the provisions of the GDPR.

Business Services

We process data from our contractual and business partners, such as customers and prospective customers (collectively referred to as “contractual partners”), in the context of contractual and similar legal relationships, as well as related activities, and for the purpose of communicating with contractual partners (or on a pre-contractual basis), such as to respond to inquiries.

We use this data to fulfill our contractual obligations. These include, in particular, the obligations to provide the agreed-upon services, any obligations to update the data, and to remedy warranty claims and other service disruptions. In addition, we use the data to safeguard our rights and for the administrative tasks associated with these obligations, as well as for corporate organization. Furthermore, we process the data based on our legitimate interests in both proper and sound business management and in security measures to protect our contractual partners and our business operations from misuse and threats to their data, secrets, information, and rights (e.g., the involvement of telecommunications, transportation, and other support services, as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). Within the scope of applicable law, we disclose the data of contractual partners to third parties only to the extent necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners are informed about other forms of processing, such as for marketing purposes, within the scope of this Privacy Policy.

We inform our contractual partners of the data required for the aforementioned purposes either before or during the data collection process, for example in online forms, through special markings (e.g., colors) or symbols (e.g., asterisks, etc.), or in person.

We delete the data once statutory warranty obligations and similar obligations have expired, i.e., generally after four years, unless the data is stored in a customer account, e.g., as long as it must be retained for legal archiving purposes (such as for tax purposes, typically ten years). We delete data disclosed to us by the contractual partner in connection with an order in accordance with the relevant guidelines and, as a general rule, upon completion of the order.

  • Types of data processed: Customer information (e.g., names, addresses); payment information (e.g., bank details, invoices, payment history); contact information (e.g., email addresses, phone numbers); contract information (e.g., subject matter of the contract, term, customer category).
  • Data subjects: Prospective customers. Business and contractual partners.
  • Purposes of processing: Provision of contractual services and fulfillment of contractual obligations; contact requests and communication; administrative and organizational procedures; management and response to inquiries.
  • Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR); Legal obligation (Art. 6(1)(c) GDPR); Legitimate interests (Art. 6(1)(f) GDPR).

Provision of the online service and web hosting

We process users' data in order to provide them with our online services. To this end, we process the user's IP address, which is necessary to deliver the content and features of our online services to the user's browser or device.

  • Types of data processed: Usage data (e.g., websites visited, content interests, access times). Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Provision of our online services and user-friendliness; IT infrastructure (operation and provision of information systems and technical equipment (computers, servers, etc.)). Security measures.
  • Legal basis: Legitimate interests (Art. 6(1)(f) of the GDPR).

Further information on processing procedures, methods, and services:

  • Collection of access data and log files: Access to our website is logged in the form of so-called “server log files.” Server log files may include the address and name of the accessed web pages and files, the date and time of access, the amount of data transferred, a notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider. The server log files may be used, on the one hand, for security purposes, e.g., to prevent server overload (particularly in the case of malicious attacks, so-called DDoS attacks), and, on the other hand, to ensure server capacity and stability; Legal basis: Legitimate interests (Art. 6(1)(f) GDPR). Data deletion: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.

Use of Cookies

Cookies are small text files or other storage mechanisms that store and retrieve information on end devices. For example, to save the login status in a user account, the contents of a shopping cart in an online store, the content accessed, or the functions used on a website. Cookies can also be used for various purposes, such as ensuring the functionality, security, and convenience of websites, as well as for analyzing visitor traffic.

Information Regarding Consent: Weuse cookies in accordance with legal requirements. Therefore, we obtain prior consent from users unless such consent is not required by law. In particular, consent is not required if the storage and retrieval of information—including cookies—are strictly necessary to provide users with a telemedia service (i.e., our online offering) that they have expressly requested. The revocable consent is clearly communicated to you and includes information regarding the specific use of cookies.

Information on the legal basis for data protection:The legal basis onwhich we process users’ personal data using cookies depends on whether we ask for their consent. If users consent, the legal basis for the processing of their data is their explicit consent. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g., in the business operation of our online offering and the improvement of its usability) or, if this occurs within the scope of fulfilling our contractual obligations, when the use of cookies is necessary to fulfill our contractual obligations. We explain the purposes for which we use cookies in this Privacy Policy or as part of our consent and processing procedures.

Storage duration: Withregard to storage duration, the following types of cookies are distinguished:

  • Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user leaves a website and closes their device (e.g., browser or mobile app).
  • Persistent cookies: Persistent cookies remain stored even after the device is turned off. This allows, for example, the user’s login status to be saved and preferred content to be displayed immediately when the user visits a website again. Likewise, user data collected via cookies may be used for audience measurement. Unless we provide users with explicit information regarding the type and storage duration of cookies (e.g., when obtaining consent), they should assume that these are persistent and may be stored for up to two years.

General Information on Withdrawal of Consent and Objection (Opt-out): Usersmay withdraw their consent at any time and may also object to the processing of their data in accordance with legal requirements, including through their browser’s privacy settings.

  • Legal basis: Legitimate interests (Art. 6(1)(f) of the GDPR). Consent (Art. 6(1)(a) of the GDPR).

Further information on processing procedures, methods, and services:

  • Processing of cookie data based on consent: We use a consent management solution to obtain users’ consent for the use of cookies or for the procedures and providers specified within the consent management solution. This procedure serves to obtain, log, manage, and revoke consents, particularly with regard to the use of cookies and comparable technologies used to store, read, and process information on users’ end devices. As part of this process, users’ consent is obtained for the use of cookies and the associated processing of information, including the specific processing activities and providers mentioned in the consent management process. Users also have the option to manage and revoke their consents. The consent declarations are stored to avoid repeated requests and to maintain proof of consent in accordance with legal requirements. Storage takes place on the server and/or in a cookie (so-called opt-in cookie) or via comparable technologies to enable the consent to be assigned to a specific user or their device. Unless specific information regarding the providers of consent management services is available, the following general guidelines apply: The duration of consent storage is up to two years. A pseudonymous user identifier is created, which is stored together with the time of consent, details regarding the scope of consent (e.g., relevant categories of cookies and/or service providers), as well as information about the browser, the system, and the end device used; Legal basis: Consent (Art. 6(1)(a) GDPR).

Blogs and Publications

We use blogs or similar online communication and publication platforms (hereinafter “publication platform”). Readers’ data is processed for the purposes of the publication platform only to the extent necessary for its operation and for communication between authors and readers, or for security reasons. For further details, please refer to the information regarding the processing of visitors to our publication platform provided in this Privacy Policy.

  • Types of data processed: Personal information (e.g., names, addresses); contact information (e.g., email addresses, phone numbers); content data (e.g., entries in online forms); usage data (e.g., websites visited, content interests, access times). Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Providing contractual services and fulfilling contractual obligations; feedback (e.g., collecting feedback via an online form); providing our online services and ensuring user-friendliness; security measures; managing and responding to inquiries.
  • Legal basis: Legitimate interests (Art. 6(1)(f) of the GDPR).

Further information on processing procedures, methods, and services:

  • Comments and posts: When users leave comments or other posts, their IP addresses may be stored based on our legitimate interests. This is done for our protection in case someone posts illegal content in comments or posts (insults, prohibited political propaganda, etc.). In such cases, we could be held liable for the comment or post and are therefore interested in the author’s identity.

    Furthermore, we reserve the right to process user data for the purpose of spam detection based on our legitimate interests.

    On the same legal basis, we reserve the right to store users’ IP addresses for the duration of surveys and to use cookies to prevent multiple votes.

    We will permanently store the personal information provided in comments and posts, including any contact and website information, as well as the content of such posts, until the user objects; legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Contact and Inquiry Management

When you contact us (e.g., by mail, contact form, email, phone, or social media), as well as in the context of existing user and business relationships, we process the information provided by the individuals making the inquiry to the extent necessary to respond to their inquiries and take any requested actions.

  • Types of data processed: Contact information (e.g., email addresses, phone numbers); content data (e.g., entries in online forms); usage data (e.g., websites visited, content interests, access times). Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Affected individuals: Communication partners.
  • Purposes of processing: Contact requests and communication; managing and responding to inquiries; feedback (e.g., collecting feedback via an online form); providing our online services and ensuring user-friendliness.
  • Legal basis: Legitimate interests (Art. 6(1)(f) of the GDPR). Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR).

Further information on processing procedures, methods, and services:

  • Contact Form: When users contact us via our contact form, email, or other communication channels, we process the data provided to us in this context to handle the matter raised; Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR), Legitimate interests (Art. 6(1)(f) GDPR).

Marketing communications via email, mail, fax, or telephone

We process personal data for the purpose of sending promotional communications, which may be sent via various channels, such as email, telephone, mail, or fax, in accordance with legal requirements.

Recipients have the right to withdraw their consent at any time or to opt out of promotional communications at any time.

Following a revocation or objection, we store the data necessary to demonstrate prior authorization for contacting you or sending you communications for up to three years after the end of the year in which the revocation or objection was made, based on our legitimate interests. The processing of this data is limited to the purpose of potentially defending against claims. Based on the legitimate interest in permanently honoring the user’s revocation or objection, we also store the data necessary to prevent further contact (e.g., depending on the communication channel, the email address, phone number, or name).

  • Types of data processed: Customer information (e.g., names, addresses). Contact information (e.g., email addresses, phone numbers).
  • Affected individuals: Communication partners.
  • Purposes of processing: Direct marketing (e.g., via email or mail).
  • Legal basis: Consent (Art. 6(1)(a) of the GDPR). Legitimate interests (Art. 6(1)(f) of the GDPR).

Web Analytics, Monitoring, and Optimization

Web analytics (also known as “audience measurement”) is used to analyze visitor traffic to our website and may include pseudonymized data on visitor behavior, interests, or demographic information, such as age or gender. With the help of audience measurement, we can, for example, identify when our website or its features and content are used most frequently, or encourage repeat visits. It also allows us to identify which areas require optimization.

In addition to web analytics, we can also use testing methods to test and optimize different versions of our website or its components.

Unless otherwise specified below, profiles—that is, data aggregated for a specific usage session—may be created for these purposes, and information may be stored in a browser or on a device and subsequently retrieved. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and details regarding usage times. If users have consented to the collection of their location data by us or by the providers of the services we use, the processing of location data is also possible.

In addition, users’ IP addresses are stored. However, we use an IP masking procedure (i.e., pseudonymization by truncating the IP address) to protect users. In general, no personally identifiable user data (such as email addresses or names) is stored in the context of web analytics, A/B testing, and optimization; instead, pseudonyms are used. This means that neither we nor the providers of the software used know the actual identity of the users, but only the information stored in their profiles for the purpose of the respective procedures.

Information on Legal Bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.

  • Types of data processed: Usage data (e.g., websites visited, content interests, access times). Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Audience measurement (e.g., traffic statistics, identification of returning visitors); profiles containing user-related information (creation of user profiles); provision of our online services and user-friendliness.
  • Security measures: IP masking (pseudonymization of the IP address).
  • Legal basis: Consent (Art. 6(1)(a) of the GDPR).

Further information on processing procedures, methods, and services:

  • Google Analytics: We use Google Analytics to measure and analyze the use of our online services based on a pseudonymous user identification number. This identification number does not contain any unique data, such as names or email addresses. It serves to associate analytical information with a device in order to determine which content users accessed during one or more sessions, which search terms they used, whether they revisited the content, or how they interacted with our online offering. Likewise, the time of use and its duration are stored, as well as the sources from which users access our online offering and technical aspects of their devices and browsers.
    In doing so, pseudonymous user profiles are created using information from the use of various devices, whereby cookies may be employed. Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides rough geographic location data by deriving the following metadata from IP addresses: city (and the derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based equivalents). For EU data traffic, IP address data is used exclusively for this derivation of geolocation data before being immediately deleted. It is not logged, is not accessible, and is not used for any other purposes. When Google Analytics collects measurement data, all IP queries are performed on EU-based servers before the traffic is forwarded to Analytics servers for processing; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6(1)(a) GDPR); Website: https://marketingplatform.google.com/intl/de/about/analytics/; Security measures: IP masking (pseudonymization of the IP address); Privacy policy: https://policies.google.com/privacy; Data processing agreement: https://business.safety.google/adsprocessorterms/; Basis for transfers to third countries: Data Privacy Framework (DPF); Right to object (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://myadcenter.google.com/personalizationoff. Further information: https://business.safety.google/adsservices/ (Types of processing and data processed).

Social media presence

We maintain online presences on social media platforms and, in this context, process user data in order to communicate with users active on those platforms or to provide information about us.

Please note that user data may be processed outside the European Union. This may pose risks to users, as it could, for example, make it more difficult to enforce their rights.

Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, user profiles can be created based on users’ behavior and the resulting interests. These profiles may in turn be used to display advertisements—both within and outside the networks—that are presumed to align with users’ interests. For this reason, cookies are typically stored on users’ computers to record their usage behavior and interests. Additionally, usage profiles may also store data regardless of the devices used by users (particularly if they are members of the respective platforms and are logged in there).

For a detailed description of the specific processing methods and opt-out options, please refer to the privacy policies and information provided by the operators of the respective networks.

We would also like to point out that requests for information and the exercise of data subject rights are most effectively handled directly with the service providers. Only they have access to user data and can take appropriate action and provide information directly. If you still need assistance, please feel free to contact us.

  • Types of data processed: Contact information (e.g., email addresses, phone numbers); content data (e.g., entries in online forms); usage data (e.g., websites visited, content interests, access times). Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Contact requests and communication; feedback (e.g., collecting feedback via an online form). Marketing.
  • Legal basis: Legitimate interests (Art. 6(1)(f) of the GDPR).

Further information on processing procedures, methods, and services:

  • Facebook Pages: Profiles within the Facebook social network; Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Legal basis: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Basis for transfers to third countries: Data Privacy Framework (DPF); Further information: We are jointly responsible with Meta Platforms Ireland Limited for the collection (but not the further processing) of data from visitors to our Facebook page (so-called “Fan Page”). This data includes information about the types of content users view or interact with, or the actions they take (see “Things you and others do and share” in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g., IP addresses, operating system, browser type, language settings, cookie data; see “Device Information” in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under “How do we use this information?”, Facebook also collects and uses information to provide analytics services, known as “Page Insights,” to page administrators so they can gain insights into how people interact with their pages and the content associated with them. We have entered into a special agreement with Facebook (“Information on Page Insights,” https://www.facebook.com/legal/terms/page_controller_addendum), which specifically outlines the security measures Facebook must adhere to and in which Facebook has agreed to fulfill data subject rights (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Users’ rights (in particular the rights to access, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the “Page Insights Information” (https://www.facebook.com/legal/terms/information_about_page_insights_data). Joint responsibility is limited to the collection and transfer of data to Meta Platforms Ireland Limited, a company based in the EU. Further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, particularly with regard to the transfer of data to the parent company Meta Platforms, Inc. in the United States.

Plug-ins, embedded features, and content

We incorporate functional and content elements into our online offering that are sourced from the servers of their respective providers (hereinafter referred to as “third-party providers”). These may include, for example, graphics, videos, or maps (hereinafter collectively referred to as “content”).

The integration always requires that the third-party providers of this content process the user’s IP address, as they would not be able to send the content to the user’s browser without it. The IP address is therefore necessary for the display of this content or these functions. We strive to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags allow information, such as visitor traffic on the pages of this website, to be analyzed. The pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, time of visit, and other details regarding the use of our online offering, as well as being linked to such information from other sources.

Notes on Legal Bases: When we ask users for their consent to the use of third-party providers, the legal basis for data processing is their consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.

  • Types of data processed: Usage data (e.g., websites visited, interest in content, access times); meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status); master data (e.g., names, addresses); contact data (e.g., email, phone numbers). Content data (e.g., entries in online forms).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Providing our online services and ensuring user-friendliness.
  • Legal basis: Consent (Art. 6(1)(a) of the GDPR). Legitimate interests (Art. 6(1)(f) of the GDPR).

Further information on processing procedures, methods, and services:

  • Google Fonts (fetched from Google's servers): Retrieval of fonts (and icons) for the purpose of ensuring technically secure, maintenance-free, and efficient use of fonts and icons in terms of up-to-date content and loading times, their consistent display, and compliance with any applicable licensing restrictions. The font provider is notified of the user’s IP address so that the fonts can be made available in the user’s browser. In addition, technical data (language settings, screen resolution, operating system, hardware used) is transmitted, which is necessary for the provision of the fonts depending on the devices used and the technical environment. This data may be processed on a server belonging to the font provider in the United States – When visiting our website, users’ browsers send HTTP requests to the Google Fonts Web API (i.e., a software interface for retrieving fonts). The Google Fonts Web API provides users with the Cascading Style Sheets (CSS) from Google Fonts and, subsequently, the fonts specified in the CSS. These HTTP requests include (1) the IP address used by the respective user to access the Internet, (2) the requested URL on the Google server, and (3) the HTTP headers, including the User-Agent, which describes the browser and operating system versions of the website visitors, as well as the referrer URL (i.e., the webpage on which the Google font is to be displayed). IP addresses are neither logged nor stored on Google servers, and they are not analyzed. The Google Fonts Web API logs details of the HTTP requests (requested URL, user agent, and referrer URL). Access to this data is restricted and strictly controlled. The requested URL identifies the font families for which the user wishes to load fonts. This data is logged so that Google can determine how often a specific font family is requested. With the Google Fonts Web API, the user agent must match the font generated for the respective browser type. The user agent is primarily logged for debugging purposes and used to generate aggregated usage statistics that measure the popularity of font families. These aggregated usage statistics are published on the “Analytics” page of Google Fonts. Finally, the referrer URL is logged so that the data can be used for production maintenance and to generate an aggregated report on the top integrations based on the number of font requests. According to Google, it does not use any of the information collected by Google Fonts to create profiles of end users or to serve targeted ads; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy; Basis for transfers to third countries: Data Privacy Framework (DPF). Further information: https://developers.google.com/fonts/faq/privacy?hl=de.
  • YouTube videos: Video content ; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6(1)(a) GDPR); Website: https://www.youtube.com; Privacy policy: https://policies.google.com/privacy; Basis for transfers to third countries: Data Privacy Framework (DPF). Right to object (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://myadcenter.google.com/personalizationoff.

Created using the free Datenschutz-Generator.de tool by Dr. Thomas Schwenke

Contact
Navigation
Legal Information