▼ Table of Contents
Responsible Authority
We are happy about you visiting our website. We would like to introduce you
to the responsible authority in terms of data protection law as applicable:
Oliver Jumpertz
Koenigstr. 1b
41379 Brueggen
Phone:
+49 163 4593649
E-mail: [email protected]
General Information
Pursuant to our statutory obligations, we would like to inform you about the
collection and use of your personal data.
When you use our
website, personal data about you will be collected. This may happen by you
entering the data yourself, for example your e-mail address. But our system
also collects your data automatically, for example whenever you visit our
website. This happens irrespective of the device or the software that you
use to visit our website.
All data that you enter in our app is
provided voluntarily; there are no disadvantages to you if you do not
provide data. But without certain data, we are unable to provide services or
to conclude contracts. Whenever such information is necessary, we will point
it out to you.
On this website, the user’s personal data is only
collected within the framework of the existing data-protection law, in
particular the General Data Protection Regulation (GDPR). The legal terms
used in the text are defined in Art. 4 of the GDPR.
The GDPR
allows data processing in three cases in particular:
- in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances your data will be processed by us;
- in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;
- in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; this means in particular our interests to analyse, optimise and secure the offers on our website – meaning primarily the analysis of user behaviour, setting up profiles for advertisement purposes and storage of access data as well as the use of third-party providers.
Inventory Data
We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user. This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment). Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.
Usage Data
We also collect usage data to allow users to use the services on our
website. These may consist of: usage information (for example visited
websites or parts, duration of visit, interest in services), content data
(for example data, text, images, sounds, videos entered or uploaded by you),
meta data (for example identity of your device, location, IP address).
We will only combine usage data if and insofar as it is necessary
for billing purposes. Otherwise, we will only put together usage data
pseudonymously and only insofar as you have not objected. You may send this
objection to the address indicated in the “About Us” section or the
responsible authority indicated in this Privacy Policy at any time.
The legal basis for this data processing are our legitimate interests
pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use,
possibly also the statutory permission to store data as part of the
negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.
Hoster
Cloudflare Germany GmbH
Our Website is presented in the Internet by a service provider. We use the
service Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 München.
We have concluded a data processing agreement with our provider. With this
contract, our provider is obliged to process the data according to our
instructions. You can find more information on data processing at our
provider in his privacy policy at https://www.cloudflare.com/privacypolicy/. The legal basis for this data processing is on the one hand our
legitimate interest in a technologically perfect online offering and its
design and optimization in an economically efficient manner pursuant to Art.
6 para. 1 (f) GDPR, and, on the other hand, our contractual or
pre-contractual legal relationship in accordance with Art. 6 para. 1 (b)
GDPR.
Furthermore, our provider stores information, the so-called
server log files, each time the website is used; this is information which
is automatically transferred by your browser. In detail, this data consists
of:
- your IP address
- type and version of your browser
- host name
- time of visit
- the page from which you came to our page
- name of the page opened
- exact time of usage as well as
- the amount of data transferred
This data will only be used for statistical purposes and does not allow us to identify you as a user.
Advertisements
Before sending you advertisements, we will ask for your explicit consent
pursuant to Art. 4 no. 11 GDPR, except in cases of advertisements for
similar products to the one you already acquired. This will happen in
particular when you grant us consent to mail our newsletter or when you fill
out a contact form. You may withdraw your consent at any time in accordance
with the subsequent section “Consent”.
INSOFAR AS WE USE YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU MAY ALSO
OBJECT TO THE USE OF YOUR DATA FOR THAT PURPOSE AT ANY TIME. THIS MAY BE
DONE THROUGH ANY OF OUR MEANS OF CONTACT, PARTICULARLY BY E-MAIL TO THE
E-MAIL ADDRESS LISTED IN THE “LEGAL NOTICE” SECTION WITHOUT ANY FORMAL
REQUIREMENTS. WE WILL THEN NO LONGER USE YOUR DATA FOR DIRECT MARKETING.
First Contact through Electronic Request
If you contact us in electronic form (for example by mail, fax, phone,
messenger, etc.), we store and process the data which you have given us (for
example name, contact information, content of the request). This is based on
our legitimate interest in an effective communication with customers in
accordance with Article 6 para. 1 (a) GDPR and, as far as it concerns a
request to enter into or to perform a contract, also with Article 6 para. 1
(b) GDPR.
We will only pass on this data to third parties as far as
required for the performance of the contract (in accordance with Article 6
para. 1 (b) GDPR), by the overwhelming interest in effective services (in
accordance with Article 6 para. 1 (f) GDPR) or based on your consent (in
accordance with Article 6 para. 1 (a) GDPR) or if there is another legal
permission or obligation.
You may ask us at any time and without any
cost to provide information about the purpose of the processing, the origin
and the recipient, if any, of your data. You may also request that we
correct, delete or limit the processing of your personal data. You may
object against the (further) processing of your data at any time and you
have a right for the data to be made transferable as well as the right to
file a complaint with the competent supervisory agency.
In general,
your data will only remain stored as long as required by the purpose of the
respective data processing. A longer storage is an option, in particular
when required in order to pursue our rights, for other legitimate interests
of ours or when there is a statutory duty to keep the data longer (for
example record-keeping under tax law, statute of limitations).
Consent
Whenever we ask you for your consent for the processing of your data, we
will inform you in clear language and in an easily accessible way about the
cases for which you will be granting your consent. Any consent that we ask
you for is voluntary. Any advantage that you wish to gain by granting
consent is also available without consent; simply ask us.
Regarding any consent, you have the right to revoke any consent given to
us for the processing of your personal data at any time. You just need to
contact us without any particular formal requirement, for example through
our contact form, an e-mail to the e-mail address indicated in the “About
Us” section or a link to unsubscribe (if offered by us). Your withdrawal has
no effect on the legality of the data processing carried out up to that
point.
Storage Period
Generally, your data will only remain stored as long as required by the
purpose of the respective data processing. Storage beyond that is possible
in particular if it is still required for pursuing our rights or for other
legitimate interests of ours.
For your inventory data which were
necessary to perform a contract (including one without remuneration), this
means that we store this data until the complete performance or termination
of the contractual relationship plus the limitation period (which is
generally 2 or 3 years) plus an adequate extra time for potential
interruptions of the limitation period.
For your usage data which was
collected in the course of your use of the website, this means that we will
store it only for the time still required for the proper functionality of
our website and as long as we still have a legitimate interest. Statistical
information will be primarily stored by us in pseudonymous form.
Beyond
that, we still store your data for as long as we are required to do so by
law. This concerns in particular the tax-law requirements to keep records,
usually for 6 or even 10 years.
Users‘ Rights
You may request us at any time to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
Deletion, Correction, Limitation
You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.
Objection
The right to object to advertisement is governed by our text regarding
consent:
Regarding any consent, you have the right to revoke any consent given to
us for the processing of your personal data at any time. You just need to
contact us without any particular formal requirement, for example through
our contact form, an e-mail to the e-mail address indicated in the “About
Us” section or a link to unsubscribe (if offered by us). Your withdrawal
has no effect on the legality of the data processing carried out up to
that point.
Data Transfer
You may request us to transfer the data stored about you in machine-readable form.
Complaint
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).
Newsletter
Substack
If you subscribe to the newsletter offered on our page, we will inform you
in detail about the information we will send you, which of your data will be
stored and for what it will be used. We will not pass on your data to third
parties and we will only use it for mailing the newsletter.
We
will only mail you the newsletter if you have provided us with prior
consent. To that purpose, you will receive an e-mail from us with a link and
further details and we will ask for your consent. By confirming that link,
you declare your consent to receive the newsletter and advertisement from
us.
The basis for the storage is your consent pursuant to Art. 6
para. 1 (a) GDPR, which you grant us when you register for the newsletter.
You may withdraw that consent at any time, for which any notice to us,
without any formal requirement, is sufficient (for example through the
contact form or by e-mail or by using the link to unsubscribe, which is
included in each e-mail). This withdrawal has no effect on the legality of
the data processing carried out up to that point.
Because we are
legally required to record your consent as part of the double opt-in, your
subscription to the newsletter, the mailing of our consent e-mail and your
consent by clicking on the link will be recorded and stored with location
and time as well as with your IP address.
For mailing the
newsletter, we use (as part of our legitimate interest in a technologically
perfect processing of our customer data and analysis) the provider
Substack
Substack Inc.
111 Sutter Street, 7th Floor
San Francisco CA 94104
United States
https://substack.com/privacy.
Thus, your data will be forwarded to the USA.
In
our newsletter, we will also explicitly ask you to provide your consent to
transmitting data to our newsletter provider and to the USA. You will
declare this consent by clicking on the link, but you may revoke it at any
time. For the handling of your data by our newsletter provider, we refer you
to our newsletter provider's privacy policy (https://substack.com/privacy).
Our newsletter provider will only use your data for mailing the newsletter
and for evaluating that mailing on our behalf. In addition to that, our
newsletter provider will only use your data to improve its own service. But
our newsletter provider will not use the data to contact you directly or to
pass on your data to third parties.
The mails used by our
newsletter provider contains a “web beacon“, which will inform our
newsletter provider about the opening of the newsletter and/or the clicking
on a link contained therein by you. As part of that process, information
regarding your browser, your location and your IP address will be
transmitted to our newsletter provider. This information will be used to
optimise our communication with you.
Our newsletter provider will
also use this data, but only in a pseudonymous form (meaning that they
cannot identify you) to analyse and optimise their own services. Your data
will never be used by the newsletter provider in order to contact you.
Your data will remain stored for as long as you are in our mailing
list, as long as the storage is required to enforce our rights or as long as
it is necessary for our legitimate interests or as long as we are required
by law to keep your data stored.
Social Media
Social Media Links
General Information
We refer with links to our social media presences. When you follow any such link to the social media site, your data will be broadcasted to that site. The social media site will normally store a cookie in your browser and to your account information there, especially, if you are logged into your social media account on the site. The social media site can analyse your use of the platform and your browsing habits and will use these for targeting advertisements based on your interests. That can lead to ads being shown to you when browsing in- and outside of the social media site. Please inform yourself about the use of your data on these sites and use them only, when you agree to that use of your data, that happens on that social media site, in particular, when you are not using that social media site for the first time. We have added links to all the privacy policies of the social media site for your information.
Our website uses links to our presence in the social network of Instagram by
Instagram LLC, now Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand
Canal Harbour, Dublin 2, Irland.
It is just a normal link. Thus,
when you open our site, Instagram will not learn of your visit to our
website. But once you click on the link, you will be led to Instagram,
allowing Instagram / Facebook to learn that you have visited out site.
Your data will be forwarded by Meta Platforms Ireland on the base of the
standard contractual clauses to Meta Platforms USA. Furthermore this
provider is certified according to the EU-US Data Privacy Framework. This
means that the transfer of data to the USA is possible in a legally secure
manner on the basis of the adequacy decision concluded on 10.07.2023.
The collection and use of your data which is possibly carried out by
Instagram/Facebook after clicking on the link is beyond our knowledge or
control. You may find further information in Instagram’s privacy policy at
https://privacycenter.instagram.com/policy.
Our page uses links to our presence on the social network LinkedIn, provided
by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a
subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain
View, CA 94043, USA.
It is just a normal link, which means that
upon opening our page, LinkedIn won't learn anything of your visit to our
website. But when you click on the link, you will be taken to LinkedIn, and
then LinkedIn will also learn that you visited our page.
Thus,
your data may be forwarded to the USA.
We have neither knowledge
of, nor any influence on the possible collection and processing of your data
by LinkedIn after clicking on the link. Further information can be found in
LinkedIn's privacy policy at https://www.LinkedIn.com/legal/privacy-policy?_l=de_DE.
Our page uses links to our presence on the social network Twitter, provided
by Twitter International Company, One Cumberland Place, Fenian Street,
Dublin 2, D02 AX07 IRELAND
It is just a normal link, which means that
upon opening our page, Twitter won't learn anything of your visit to our
website. But when you click on the link, you will be taken to Twitter, and
then Twitter will also learn that you visited our page.
Thus,
your data may be forwarded to the USA.
However, we have ensured
that your data is only transferred to the USA on the basis of a contract in
accordance with the standard contractual clauses. According to the GDPR and
the EuGH, this is a legal basis for the transfer of data to the USA. This
applies in particular since the US Presidential Decree of 07.10.2022.
We have concluded an data processing agreement with this provider,
according to which this provider will only process your data on our behalf
within the scope of the GDPR and according to our instructions. Further
information can be found in the privacy policy of Twitter at https://twitter.com/privacy?lang=en.
YouTube
Our website uses links to our presence in the social network of YouTube by
YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. It is
just a normal link. Thus, when you open our site, YouTube will not learn of
your visit to our website. But once you click on the link, you will be led
to YouTube, allowing YouTube to learn that you have visited out site.
The data collected by Google may be transferred by Google to
countries outside of the EU, in particular to the USA.
However,
we have ensured that your data is only transferred to the USA on the basis
of a contract in accordance with the standard contractual clauses.
Furthermore this provider is certified according to the EU-US Data Privacy
Framework. This means that the transfer of data to the USA is possible in a
legally secure manner on the basis of the adequacy decision concluded on
10.07.2023.
You may find further information in YouTube’s
privacy policy at
https://www.google.de/intl/de/policies/privacy/.
Our Social Media Fan Page(s) - General Information
Beside
our website, we also use fan page(s) on social media platforms. Above, we
have already informed you about the data processing on our website and we
have in particular made sure that the fact alone that you access our website
is not yet forwarded to the social media platform. Following the ECJ ruling dated 5 June 2018 about social media presences, we want to inform you about the data processing during your visit to our
social media fan page(s):
On the basis of our legitimate interest
in a timely customer communication pursuant to Art. 6 para. 1 (f) GDPR as
well as for advertising and public relations purposes, we present ourselves
and our offers on social media fan page(s).
Our social media fan
page(s) usually can be accessed online independently of you having a user
account with the relevant platform or not. But in either case, your data
will be processed by the social media platform.
Each time the
social media platform is accessed, your IP address will be collected and
stored. Usually, a cookie will also be placed on your page, which will save
your visit and further data about your visit to the social media platform.
If you are logged in with the social media platform, your visit will
also be spotted by a cookie or through other technological means and will be
attributed to your user account. Thus, the social media platform is usually
able to analyse your user behaviour. In this process, a user profile with
your interests is generated, which the social media platform will use to
provide you with a user experience tailored to your interests, in particular
advertisement tailored to your interests within and outside of the social
media platform – even across different devices, if applicable. Your data may
also be used for market research. For the details, we refer you to the
following privacy policies of the social media platform(s) used by us.
We can usually also use the data of the social media platform in
order to allow you to use our fan page in accordance with your interests or
to approach you with advertising.
When you interact with our fan
page and if you are logged in with the relevant social media platform,
according to the social media page's terms of use, we can usually also
recognise your user profile and see your content.
If you do not want
this, we point you to our explanations about cookies above, with general
information about cookies and their deactivation. There, we have laid out in
general terms how you can prevent or limit cookies being stored on your
devices. Further information about the respective social media platform can
be found hereinafter.
According to the aforementioned ECJ ruling
dated 5 June 2018, we are always jointly responsible for our social media
fan page(s) together with the relevant social media platform. This means
that you may also exercise your general rights, which we have listed in
detail above under the heading “Users' Rights”, against us. To that purpose,
we refer you to our contact details at the beginning of this Privacy Policy.
Please keep in mind, though, that we have no conclusive knowledge of the
exact scope of the processing of your data by the social media platform and
have even less influence on it. Therefore, we kindly ask you to contact the
relevant social media platform in the first place regarding your rights.
We generally leave your data on the social media platform and do not
import it onto our server. But if that should occur, our general information
regarding the storage period will apply.
Further information
about the processing of your data and the storage period on the social media
platform can be found in the respective privacy policy of the social media
platform, which we have listed hereinafter.
We present ourselves on the social media platform Facebook.
Joint
Responsibility
Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
Contact
Contact Data Protection Officer
If you open our fan page on Facebook, your data will be
forwarded to the USA.
Facebook has concluded an agreement with us
https://www.facebook.com/legal/controller_addendum about our shared responsibility for processing the data, in which it
recognises its primary responsibility and guarantees in particular that you
can exercise your right to information, as described in the general part.
You may obtain more information from Facebook's privacy policy at: https://www.facebook.com/about/privacy. Your data will be forwarded by Facebook Ireland on the base of the
standard contractual clauses to Facebook USA.
Furthermore this
provider is certified according to the EU-US Data Privacy Framework. This
means that the transfer of data to the USA is possible in a legally secure
manner on the basis of the adequacy decision concluded on 10.07.2023.
Facebook also provides us with statistics as part of "Facebook
Insights" for the purpose of targeted advertising. These are created without
our participation and then provided to us. The data include information like
interaction with our page, such as likes, page activities, video views,
reach of our posts, comments, sharing of content, clicks on offers or
further information on our fan page as well as statistical data about those
interacting, such as gender, origin by country, city and language. The same
applies to groups which we may manage.
When you are logged in,
you can influence the processing of your data by Facebook considerably and
in different ways.
Here you can make changes to your timeline, i.e. what can be seen about you and
your page (while being logged in to facebook).
And you can change
your advertisement preferences here.
We have a presence on the social media platform Instagram. Instagram is now
owned by Facebook.
Jointly Responsible
Meta Platforms
Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin
2 Ireland.
Contact Data Protection Officer
Your data will be forwarded by Facebook Ireland on the base of the
standard contractual clauses to Facebook USA. Furthermore this provider is
certified according to the EU-US Data Privacy Framework. This means that the
transfer of data to the USA is possible in a legally secure manner on the
basis of the adequacy decision concluded on 10.07.2023.
We have
neither knowledge of, nor any influence on the possible collection and
processing of your data by Facebook and Instagram. Further information can
be found in Instagram's privacy policy at https://privacycenter.instagram.com/policy.
Instagram and Facebook also provide us with statistics as part of
"Facebook Insights" for the purpose of targeted advertising. These are
created without our participation and then provided to us. The data include
information like interaction with our page, such as likes, page activities,
video views, reach of our posts, comments, sharing of content, clicks on
offers or further information on our fan page as well as statistical data
about those interacting, such as gender, origin by country, city and
language. The same applies to groups which we may manage.
When you are
logged in, you can influence the processing of your data by Instagram
considerably and in different ways.
Your content, i.e. what is visible
of you and your profile, can be changed here: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/.
We have a presence on the social media platform LinkedIn.
Jointly Responsible
LinkedIn Ireland Limited Company,
Wilton
Place,
Dublin 2,
Ireland
Contact
If you open our profile on LinkedIn, your data may be forwarded
to the USA.
However, we have ensured that your data is only
transferred to the USA on the basis of a contract in accordance with the
standard contractual clauses. According to the GDPR and the EuGH, this is a
legal basis for the transfer of data to the USA. This applies in particular
since the US Presidential Decree of 07.10.2022.
We have
concluded an data processing agreement with this provider, according to
which this provider will only process your data on our behalf within the
scope of the GDPR and according to our instructions.
Further
information can be found in LinkedIn's privacy policy at
https://www.LinkedIn.com/legal/privacy-policy.
LinkedIn also provides us with statistics. These are created
without our participation and then provided to us. The data will include
interactions, for example, as well as statistical data.
When you
are logged in, you can influence the processing of your data by LinkedIn
considerably and in different ways.
For your privacy settings
with LinkedIn, LinkedIn refers you to several options that you can read
about in their privacy policy.
The LinkedIn advertising cookie
can be turned off here (opt-out):
https://www.LinkedIn.com/psettings/guest-controls/retargeting-opt-out
We have a presence on the social media platform Twitter.
Jointly
Responsible
Twitter International Company
Attn: Data Protection
Officer
One Cumberland Place, Fenian Street
Dublin 2, D02 AX07
Ireland
Contact
When using this provider, it may happen that your data is
transferred to the USA. However, we have ensured that your data is only
transferred to the USA on the basis of a contract in accordance with the
standard contractual clauses. According to the GDPR and the EuGH, this is a
legal basis for the transfer of data to the USA. This applies in particular
since the US Presidential Decree of 07.10.2022.
We have
concluded an data processing agreement with this provider, according to
which this provider will only process your data on our behalf within the
scope of the GDPR and according to our instructions. Further information can
be found in the privacy policy of Twitter at https://twitter.com/privacy?lang=en.
Twitter also provides us with statistics. These are created
without our participation and then provided to us. The data will include
interactions, for example, as well as statistical data.
When you
are logged in, you can influence the processing of your data by Twitter
considerably and in different ways.
Here you can change your privacy settings on Twitter.
Changes to the Privacy Policy
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.
This is our current valid privacy policy from 07.11.2023