Privacy Policy
1. Foreword
1.1 Data protection is of particular importance to us.
1.2 This privacy policy explains the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, functions, and content (hereinafter collectively referred to as “online offering” or “website”). The privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) used to access the online offering.
2. Responsible party
The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions with data protection character is:
EXPLAIN GmbH & Co. KG
Weberstraße 14
76133 Karlsruhe
Germany
Tel.: +49 721 8308720
E-Mail: hello@explain.agency
3. Data protection officer
The data protection officer of the controller is:
DSBX GmbH
Gablonzer Straße 4
76185 Karlsruhe
explain@dsbx.one
+49 721 98615899
4. Definition of terms
4.1 Our privacy policy is based on the terms used by the European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the general public as well as for our customers and business partners.
4.2. To ensure this, we would like to explain the terms used in advance. The terms used, such as “personal data” or its “processing,” are defined in Article 4 of the General Data Protection Regulation (GDPR).
4.3. We use the following terms, among others, in this privacy policy:
4.3.1. Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
4.3.2. Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
4.3.3. Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distributing or otherwise making available, aligning or combining, restricting, erasing, or destroying.
4.3.4. Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.
4.3.5. Profiling
Profiling is any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
4.3.6. Pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
4.3.7. Controller or processor
The controller or processor is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its nomination may be provided for by Union law or the law of the Member States.
4.3.8. Processor
A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
4.3.9. Recipient
A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether they are a third party or not. However, public authorities that may receive personal data in the context of a specific investigative mandate under Union or Member State law are not considered recipients.
4.3.10. Third party
A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or processor, are authorized to process personal data.
4.3.11. Consent
Consent is any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
5. General information on data processing
5.1. Scope of processing of personal data
We collect and use personal data from our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data from our users is generally only carried out with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
5.2. Legal basis for the processing of personal data
5.2.1. Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
5.2.2. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
5.2.3 Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.
5.2.4. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.
5.2.5. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.
5.3. Data deletion and storage period
5.3.1. The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject.
5.3.2. Data will also be blocked or deleted when the storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
6. Technical and organizational measures
6.1. In order to ensure that personal data cannot be read, copied, modified, or removed without authorization during electronic transmission, transport, or storage on data carriers, we use state-of-the-art encryption technology in accordance with Art. 9 GDPR.
6.2. For security reasons and to protect the transmission of confidential content, such as requests you send to our system, this site uses TLS (Transport Layer Security) encryption. Data that you transmit to our system cannot be easily read by third parties.
6.3. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
7. Provision of the website and creation of log files
7.1. Description and scope of data processing
7.1.1. Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
7.1.2. The following data is collected:
Information about the browser type and version used
The user's operating system
The user's Internet service provider
The user's IP address
The date and time of access
Websites from which the user's system accesses our website
Websites accessed by the user's system via our website
7.1.3. The data is also stored in our system's log files. This data is not stored together with other personal data relating to the user.
7.1.4. The data is also stored in our system's log files. This does not affect the user's IP addresses or other data that enables the data to be assigned to a user. This data is not stored together with other personal data of the user.
7.2. Legal basis for data processing
7.3. The legal basis for the temporary storage of data is Art. 6 (1) lit. f GDPR.
7.4. Purpose of data processing
7.5. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
7.6. Data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
7.7. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) lit. f GDPR.
7.8. Duration of storage
7.9. The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
7.10. Right to object and right to erasure
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.
8. Use of cookies
8.1 Description and scope of data processing
8.1.1. We use cookies on this website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
8.1.2. Technically necessary cookies
8.1.2.1. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
8.1.2.2. The following data can be stored and transmitted in the cookies:
Session cookies that store certain user settings, e.g.:
1. Shopping cart contents
2. Language settings
3. Remembering search terms
4. Log-in data
Opt-out cookies, with information on whether the user has actively consented to the setting of technically necessary and non-necessary cookies.
Test cookies, with information on whether the user has allowed cookies to be set in their browser.
Cookies for analysis, advertising, and marketing purposes.
8.1.2.3. When visiting our website, users are informed about the use of technically necessary cookies via an information banner and referred to this privacy policy. In this context, there is also a note on how to prevent the storage of cookies in the browser settings.
8.1.3 Cookies that are not technically necessary
8.1.3.1. If we use cookies other than those that are technically necessary, you will be informed of this on the website.
8.2. Legal basis for data processing
8.2.1. The legal basis for the processing of personal data using cookies for analysis, marketing, and/or tracking purposes is Art. 6 (1) (a) GDPR, provided that the user has given their consent.
8.2.2. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (a) GDPR, provided that the user has given their consent. If the user has not given their consent, the legal basis is Art. 6 (1) (f) GDPR.
8.3. Purpose of data processing
8.3.1. Technically necessary cookies are used to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles.
8.4. Duration of storage, possibility of objection and removal
8.4.1. Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
8.4.1.1. When accessing our website, users are informed about the use of cookies via an information banner and asked whether they agree to the use of the specified cookies. Users are free to decide whether to make a selection and whether to give their consent. If the user does not give their consent, no cookies or only technically necessary cookies will be set and no further storage of cookies will take place.
9. Newsletter
9.1. Description and scope of data processing
9.1.1. On this website, we offer our users the opportunity to subscribe to a free newsletter.
9.1.2. We send newsletters, emails, and other electronic notifications with promotional information (hereinafter referred to as “newsletters”) only with the consent of the recipients or with legal permission. When registering for the newsletter, the data from the input mask is transmitted to us.
9.1.3. If the content of the newsletter is specifically described during registration, this description is decisive for the user's consent. Otherwise, our newsletters contain information about our products, offers, promotions, and our company.
9.1.4. The following user data is collected:
Email address
First and last name
9.1.5. The following data is also collected during registration:
IP address of the accessing computer
Date and time of registration
9.1.6. Your consent is obtained for the processing of data during the registration process and reference is made to this privacy policy.
9.1.7. Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering with someone else's email address. Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.
9.1.8. If you purchase goods or services on our website and provide your email address, we may subsequently use this address to send you a newsletter. In such cases, the newsletter will only be used to send direct advertising for our own similar goods or services.
9.1.9. No data will be passed on to third parties in connection with data processing for the purpose of sending newsletters. The data will be used exclusively for sending the newsletter.
9.2. Legal basis for data processing
9.2.1. The legal basis for processing data after the user has subscribed to the newsletter is Art. 6 (1) (a) GDPR, provided the user has given their consent.
9.2.2. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.
9.3. Purpose of data processing
9.3.1. To subscribe to the newsletter, it is sufficient to provide your email address. The user's email address is collected for the purpose of delivering the newsletter.
9.3.2. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
9.3.3. The purpose of statistical surveys is to use a user-friendly and secure newsletter system that serves both our business interests and meets the expectations of users.
9.4. Duration of storage
9.4.1. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's email address will therefore be stored for as long as the newsletter subscription is active.
9.4.2. Other personal data collected during the registration process is generally deleted after a period of seven days.
9.5. Right to object and right to erasure
9.5.1. The user concerned can cancel their subscription to the newsletter at any time. A link for this purpose is provided in every newsletter.
9.5.2. This also allows the user to revoke their consent to the storage of personal data collected during the registration process.
9.5.3. If users have only subscribed to the newsletter and have canceled this subscription, their personal data will be deleted.
10. Contact form and email contact
10.1. Description and scope of data processing
10.1.1. We use a contact form on this website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.
10.1.2. This data includes:
the email address
the first and last name
the telephone number
10.1.3. Your consent will be obtained for the processing of the data during the sending process and reference will be made to this privacy policy.
10.1.4. Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.
10.1.5. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.
10.2. Legal basis for data processing
10.2.1. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given their consent.
10.2.2. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
10.3. Purpose of data processing
10.3.1. The processing of personal data from the input mask serves us solely for the purpose of processing the contact request. In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.
10.3.2. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our IT systems.
10.4. Duration of storage
10.4.1. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
10.5. Right to object and right to erasure
10.5.1. The user has the right to revoke their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
10.5.2. In this case, all personal data stored in the course of contacting us will be deleted.
11. Google Analytics
11.1. Scope of processing of personal data
11.1.1. We use the web analytics service Google Analytics provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This service is used to analyze the surfing behavior of our users.
11.1.2 Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transferred to a Google server in the USA and stored there.
11.1.3. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission settlements.
11.1.4. Cookies are used to store personal information, such as the time of access, the location from which access originated, and the frequency of visits to our website by the data subject. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via technical procedures to third parties.
11.1.5. When individual pages of our website are accessed, the following data is stored:
Two bytes of the IP address of the user's accessing system
The accessed website
The website from which the user accessed the accessed website (referrer)
The subpages accessed from the accessed website
The length of time spent on the website
The frequency of access to the website
11.1.6. Google has recognized the EU Commission's standard contractual clauses for the transfer of personal data to third countries and thus offers a guarantee of compliance with European data protection law.
11.1.7. Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on activities within this online offering, and to provide us with further services related to the use of this online offering and the Internet. In doing so, pseudonymous user profiles may be created from the processed data.
11.1.8. The IP address transmitted by the user's browser will not be merged with other Google data.
11.1.9. We use Google Analytics to display ads placed within Google's advertising services and those of its partners only to users who have shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, which are determined based on the websites visited) that we transmit to Google (so-called “remarketing” or “Google Analytics Audiences”). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interests of users and do not appear intrusive.
11.1.10. We only use Google Analytics with IP anonymization enabled. This means that the IP address of users is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in
11.2. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is Art. 6 (1) lit. a GDPR.
11.3. Purpose of data processing
11.3.1. The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.
11.3.2. By anonymizing the IP address, the interests of users in the protection of their personal data are sufficiently taken into account.
11.4. Duration of storage
11.4.1. The data is deleted as soon as it is no longer required for our recording purposes.
In our case, this is after 13 months.
11.5. Right to object and right to erasure
11.5.1. We only use cookies that are not technically necessary with your consent. We therefore ask for your consent when you visit our website. If you actively consent, further cookies will be set. If you do not consent, no cookies will be set. If you wish to revoke your consent, you can do so at any time. To do this, please go to the cookie settings on our website and deactivate this service. By doing so, you are exercising your right of revocation.
11.5.1. For more information about Google's use of data, settings, and options for objection, please visit the websites of Google: https://www.google.com/intl/de/policies/privacy/partners („Data usage by Google when you use our partners' websites or apps“), http://www.google.com/policies/technologies/ads („Use of data for advertising purposes“), http://www.google.de/settings/ads („Manage information that Google uses to show you ads“).
12. Google Re/Marketing Services
12.1. Description and scope of data processing
12.1.1. We use the marketing and remarketing services (hereinafter referred to as “Google Marketing Services”) provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
12.1.2. Google has recognized the EU Commission's standard contractual clauses for the transfer of personal data to third countries and thus offers a guarantee of compliance with European data protection law.
12.1.3. Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner, so that users are only shown advertisements that potentially match their interests. If, for example, a user is shown advertisements for products that they have shown interest in on other websites, this is referred to as “remarketing.” For these purposes, when our website and other websites on which Google Marketing Services are active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. This file records which websites the user has visited, which content they are interested in, and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visit time, and other information about the use of the online offer. The IP address of users is also recorded, whereby we inform you within the scope of Google Analytics that the IP address is truncated within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and truncated there. The IP address is not merged with user data within other Google services. The above-mentioned information may also be linked by Google to information from other sources. When the user subsequently visits other websites, advertisements tailored to their interests may be displayed.
12.1.4. User data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store and process the name or email address of users, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who that cookie owner is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the United States.
12.1.5. The Google marketing services we use include the online advertising program “Google AdWords.” In the case of Google AdWords, each AdWords customer receives a different “conversion cookie.” Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
12.1.6. We may integrate third-party advertisements based on the Google marketing service “DoubleClick.” DoubleClick uses cookies that enable Google and its partner websites to place advertisements based on users' visits to this website or other websites on the Internet.
12.1.7. We may integrate third-party advertisements based on the Google marketing service “AdSense”. AdSense uses cookies that enable Google and its partner websites to place advertisements based on users' visits to this website or other websites on the Internet. Each time one of the individual pages of this website operated by the controller and on which a Google AdSense component has been integrated is accessed, the Internet browser on the data subject's information technology system is automatically prompted by the respective Google AdSense component to transmit data to Google for the purpose of online advertising and commission settlement. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission settlements.
Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in websites to enable log file recording and log file analysis, which allows statistical evaluation to be carried out. Using the embedded tracking pixel, Google can recognize whether and when a website was opened by a data subject and which links were clicked on by the data subject. Tracking pixels are used, among other things, to evaluate the visitor flow of a website.
Further information about Google AdSense is available at https://adsense.google.com/intl/de_de/start/.
12.1.8. We may also use the Google Optimizer service. Google Optimizer allows us to use A/B testing to track the impact of various changes to a website (e.g., changes to input fields, design, etc.). Cookies are stored on users' devices for these testing purposes. Only pseudonymous user data is processed in this process.
12.1.9. We may also use Google Tag Manager to integrate and manage Google's analytics and marketing services on our website.
12.1.10. For more information about Google's use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads, Google's privacy policy is available at https://www.google.com/policies/privacy
12.2. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) lit. a GDPR.
12.3. Purpose of data processing
Data processing is carried out in the interest of analyzing, optimizing, and economically operating the online offering.
12.4. Duration of storage
12.4.1. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.
12.5. Right to object and right to erasure
12.5.1. We only use cookies that are not technically necessary with your consent. Therefore, we ask for your consent when you visit our website. If you actively consent, further cookies will be set. If you do not consent, no cookies will be set. If you wish to revoke your consent, you can do so at any time. To do this, please go to the cookie settings on our website and deactivate this service. In doing so, you are exercising your right of revocation.
13. Google Fonts
13.1. Scope of processing of personal data
13.1.1. We use the Google Fonts service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
13.1.2. Google Fonts provides an intuitive and robust directory of open-source designer web fonts. With an extensive catalog, typography can be seamlessly integrated into any design project.
13.1.3. The service is used to integrate fonts (web fonts) into our websites. Google Fonts are integrated by means of a server call to Google, regularly via the URL https://fonts.google.com. The fonts come from various designers and are open source.
13.1.4. When users access our online offering, a request is usually transmitted to a Google server in the USA, where it is stored and processed.
13.1.5. Technically, the fonts embedded in our website are stored on a Google server and then loaded from there when the page is accessed. By using Google Fonts, Google's servers send the appropriate file to each user based on the technologies supported by the user's browser.
13.1.6. Google has recognized the EU Commission's standard contractual clauses for the transfer of personal data to third countries and thus offers a guarantee of compliance with European data protection law.
13.1.7. The connection to Google Fonts is not authenticated. When you visit our website, no cookies or login information are sent to Google via the Google Fonts service. Corresponding requests to the Google Fonts service servers are made to resource-specific domains such as googleapis.com or fonts.gstatic.com, so that requests for fonts are always separate from login information, which would otherwise be sent to Google domains, such as google.com or google.de, and could be authenticated.
13.1.8. Google Fonts logs data records of CSS and font file requests. Google assigns aggregated usage numbers for statistical purposes, such as how popular font families are, and publishes these results on an analytics page.(https://fonts.google.com/analytics).
13.1.9. Further information about the Google Fonts service can be found at https://developers.google.com/fonts/faq
13.2. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is Art. 6 (1) lit. f GDPR.
13.3. Purpose of data processing
13.3.1. Data processing is carried out in the interest of analyzing, optimizing, and economically operating the online offering in order to integrate content or service offerings from third-party providers or their content and services.
13.3.2. We use Google Fonts to design our website independently of the fonts installed on the user's system, known as system fonts, and to ensure a consistent display on different systems.
13.3.3. The purpose and scope of data collection and the further processing and use of data by Google can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de
13.4. Duration of storage
13.4.1. The data will be deleted as soon as it is no longer required for our recording purposes.
13.5. Right to object and right to erasure
13.5.1. Further information on Google's use of data, settings and options for objecting can be found on Google's websites. https://www.google.com/intl/de/policies/privacy/partners („Data usage by Google when you use our partners' websites or apps“), http://www.google.com/policies/technologies/ads („Use of data for advertising purposes“), http://www.google.de/settings/ads („Manage information that Google uses to show you ads“).
14. Google Maps
14.1. Scope of processing of personal data
14.1.1. We use the Google Maps service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
14.1.2. Google Maps is an online map service provided by Google. The earth's surface can be viewed as a street map or as an aerial or satellite image.
14.1.3. The service is used to integrate map data into our website. Google Maps is integrated by calling up a server at Google via an interface, the Google Maps API.
14.1.4. When a page of our online offering is accessed that has a corresponding map section integrated into it, a request is transmitted to a Google server in the USA, where it is stored and processed. By using Google Maps, Google's servers send the corresponding data to the user's browser to display the map material.
Translated with DeepL.com (free version)
14.1.5. Google has recognized the EU Commission's standard contractual clauses for the transfer of personal data to third countries and thus offers a guarantee of compliance with European data protection law.
14.1.6. Further information about the Google Maps service can be found at https://support.google.com/maps/
14.2. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is Art. 6 (1) lit. f GDPR.
14.3. Purpose of data processing
14.3.1. Data processing is carried out in the interest of analyzing, optimizing, and economically operating the online offering in order to integrate content or service offerings from third-party providers or their content and services.
14.3.2. We use Google Maps to integrate verified map data into our online presence.
14.3.3. The purpose and scope of data collection and the further processing and use of data by Google can be found in https://policies.google.com/privacy?hl=de
14.4. Duration of storage
14.4.1. The data will be deleted as soon as it is no longer required for our recording purposes.
14.5. Right to object and right to erasure
14.5.1. Further information on Google's use of data, settings and options for objecting can be found on Google's websites. https://www.google.com/intl/de/policies/privacy/partners („Data usage by Google when you use our partners' websites or apps“), http://www.google.com/policies/technologies/ads („Use of data for advertising purposes“), http://www.google.de/settings/ads („Manage information that Google uses to show you ads“)
15. Facebook
15.1. Description and scope of data processing
15.1.1. We use social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
15.1.2. The plugins can display interaction elements or content (e.g., videos, graphics, or text posts) and are recognizable by one of the Facebook logos (white “f” on a blue tile, the terms “Like,” “Gefällt mir,” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin.” The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
15.1.3. Facebook has recognized the standard contractual clauses of the EU Commission for the transfer of personal data to third countries and thus offers a guarantee of compliance with European data protection law.
15.1.4. When a user accesses a feature of this online offering that contains such a plugin, their device establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly from Facebook to the user's device and integrated into the online offering. The processed data can be used to create user profiles. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our state of knowledge.
15.1.5. By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.
15.2. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) lit. a GDPR.
15.3. Purpose of data processing
15.3.1. Data processing is carried out in the interest of analyzing, optimizing, and economically operating the online offering.
14.3.2. The purpose and scope of data collection and the further processing and use of data by Facebook, as well as the relevant rights and setting options for protecting the privacy of users, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
15.4. Duration of storage
15.4.1. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
15.5. Right to object and right to erasure
15.5.1. We only use cookies that are not technically necessary with your consent. We therefore ask for your consent when you visit our website. If you actively consent, further cookies will be set. If you do not consent, no cookies will be set. If you wish to revoke your consent, you can do so at any time. To do this, please go to the cookie settings on our website and deactivate this service. By doing so, you are exercising your right of revocation.
15.5.2. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
16. LinkedIn
16.1. Description and scope of data processing
16.1.1. We use components of the LinkedIn service, which is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA (“Instagram”).
16.1.2. LinkedIn is an internet-based social network that enables users to connect with existing business contacts and establish new business contacts.
16.1.3. Each time our website, which is equipped with a LinkedIn component (LinkedIn plug-in), is accessed, this component causes the browser used by the data subject to download a corresponding representation of the LinkedIn component.
16.1.4. Further information about LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins . As part of this technical process, LinkedIn receives information about which specific subpage of our website is visited by the data subject.
16.1.5. If the data subject is logged into LinkedIn at the same time, LinkedIn recognizes which specific subpage of our website the data subject visits each time they access our website and for the entire duration of their visit to our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject. If the data subject clicks on a LinkedIn button integrated into our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.
16.1.6. LinkedIn receives information via the LinkedIn component that the data subject has visited our website whenever the data subject is logged into LinkedIn at the same time as visiting our website; this occurs regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, they can prevent the transmission by logging out of their LinkedIn account before visiting our website.
16.2. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) lit. a GDPR.
16.3. Purpose of data processing
16.3.1. Data processing is carried out in the interest of analyzing, optimizing, and economically operating the online offering.
16.3.2. The purpose and scope of data collection and the further processing and use of data by LinkedIn can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy . LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy
16.4. Duration of storage
16.4.1. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
16.5. Right to object and right to erasure
16.5.1. We only use cookies that are not technically necessary with your consent. Therefore, we ask for your consent when you visit our website. If you actively consent, further cookies will be set. If you do not consent, no cookies will be set. If you wish to revoke your consent, you can do so at any time. To do this, please go to the cookie settings on our website and deactivate this service. In doing so, you are exercising your right of revocation.
16.5.2. LinkedIn offers the option to unsubscribe from email messages, SMS messages, and targeted ads, as well as to manage ad settings, at https://www.linkedin.com/psettings/guest-controls
16.5.3. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy
16.5.4. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the US.
17. YouTube
17.1. Description and scope of data processing
17.1.1. We use components of the YouTube service, which is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”).
17.1.2. YouTube is an internet video portal that allows video publishers to upload video clips free of charge and other users to view, rate, and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete films and television programs, as well as music videos, trailers, or videos created by users themselves, can be accessed via the internet portal.
17.1.3. Each time one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed about which specific subpage of our website is visited by the data subject.
17.1.4. If the data subject is logged into YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject is visiting when they call up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the data subject's YouTube account.
17.1.5. YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as visiting our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before visiting our website.
17.2. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) lit. a GDPR.
17.3. Purpose of data processing
17.3.1. Data processing is carried out in the interest of analyzing, optimizing, and economically operating the online offering.
17.3.2. The purpose and scope of data collection and the further processing and use of data by YouTube can be found in YouTube's privacy policy at https://www.google.de/intl/de/policies/privacy/
17.4. Duration of storage
17.4.1. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.
17.5. Right to object and right to erasure
17.5.1. We only use cookies that are not technically necessary with your consent. Therefore, we ask for your consent when you visit our website. If you actively consent, further cookies will be set. If you do not consent, no cookies will be set. If you wish to revoke your consent, you can do so at any time. To do this, please go to the cookie settings on our website and deactivate this service. In doing so, you are exercising your right of revocation.
17.5.2. YouTube offers the option to opt out of targeted advertising at https://www.google.de/settings/ads/authenticated authenticated.
18. YouTube page
18.1. Description and scope of data processing
18.1.1. We maintain an online presence on the social network youtube.com, which is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“YouTube”). When accessed by users who do not have their habitual residence in the European Economic Area or Switzerland, requests may be made to Google via servers of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have no influence on the possible forwarding of requests by Google.
18.1.2. Google Inc. has recognized the EU Commission's standard contractual clauses for the transfer of personal data to third countries and thus offers a guarantee of compliance with European data protection law.
18.1.3. YouTube is an Internet video portal that allows video publishers to upload video clips free of charge and other users to view, rate, and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete films and television programs, as well as music videos, trailers, or videos created by users themselves, can be accessed via the Internet portal.
18.1.4. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/ YouTube processes data in accordance with Google's data usage policy (https://www.google.de/intl/de/policies/privacy/).
18.2. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) (a) GDPR.
The legal basis for the processing of personal data in the event of the user's consent is Art. 6 (1) (a) and Art. 7 GDPR.
18.3. Purpose of data processing
18.3.1. Data processing is carried out in the interest of analyzing, optimizing, and economically operating our online offering, in particular on the basis of our interest in effectively informing users and communicating with them.
18.3.2. The purpose and scope of data collection and the further processing and use of data by YouTube can be found in YouTube's privacy policy at https://www.google.de/intl/de/policies/privacy/
18.4. Duration of storage
18.4.1. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
18.5. Right to object and right to erasure
18.5.1. We only use cookies that are not technically necessary with your consent. Therefore, we ask for your consent when you visit our website. If you actively consent, further cookies will be set. If you do not consent, no cookies will be set. If you wish to revoke your consent, you can do so at any time. To do this, please go to the cookie settings on our website and deactivate this service. In doing so, you are exercising your right of revocation.
18.5.2. YouTube offers the option to opt out of targeted advertising at https://www.google.de/settings/ads/authenticated
19. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
19.1. Right of access
19.1.1. You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
19.1.2. If such processing is taking place, you may request the following information from the controller:
(1) the purposes for which the personal data is being processed;
(2) the categories of personal data that are being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information on the origin of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
19.1.3. You have the right to request information on whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
19.2. Right to rectification
19.2.1. You have the right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you is inaccurate or incomplete. The controller must rectify the data without delay.
19.3. Right to restriction of processing
19.3.1. You may request the restriction of the processing of personal data concerning you under the following conditions:
(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise, or defense of legal claims; or
(4) you have objected to processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override your grounds.
19.3.2. If the processing of personal data concerning you has been restricted, such data may – apart from its storage – only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
19.3.3. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
19.4. Right to erasure
19.4.1. You may request the controller to erase personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay if one of the following reasons applies:
(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent on which the processing was based in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) The personal data concerning you has been processed unlawfully.
(5) The erasure of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you has been collected in relation to the offer of information society services pursuant to Art. 8 (1) GDPR.
19.5. Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17 (1) GDPR, it shall take reasonable steps, including technical measures, taking into account the available technology and the implementation costs, to inform controllers who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
19.6. Exceptions
The right to erasure does not apply if processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
(5) for the establishment, exercise or defense of legal claims.
19.7. Right to information
19.7.1. If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.
19.7.2. You have the right to be informed by the controller about these recipients.
19.8. Right to data portability
19.8.1. You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that
(1) the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR, and
(2) the processing is carried out using automated means.
19.8.2. In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.
19.8.3. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
19.9. Right to object
19.9.1. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
19.9.2. The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
19.9.3. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
19.9.4. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
19.9.5. In connection with the use of information society services, you have the option of exercising your right to object by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
19.10. Right to revoke the data protection consent declaration
You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation.
19.11. Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for entering into, or performance of, a contract between you and the controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
19.11.1. However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
19.11.2. With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
19.12. Right to lodge a complaint with a supervisory authority
19.12.1. Without prejudice to any other administrative or judicial remedy
19.12.2. remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
19.12.3. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.