Privacy Policy

1. Data Protection at a Glance

 

General Information

 

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy listed below this text.

 

Data Collection on This Website

 

Who is responsible for data collection on this website?

 

Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the Responsible Party” section of this privacy policy.

 

How do we collect your data?

 

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data you enter into a contact form.

 

Other data is collected automatically or with your consent by our IT systems when you visit the website. This primarily consists of technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you access this website.

 

How do we use your data?

 

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior.

 

What rights do you have regarding your data?

 

You have the right at any time to receive, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with future effect. In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to file a complaint with the competent supervisory authority.

 

You can contact us at any time regarding this matter or any other questions about data protection.

 

Analytics Tools and Third-Party Tools

 

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using so-called analytics programs.

 

Detailed information about these analytics programs can be found in the following privacy policy.

 

2. Hosting

 

Strato

 

We host our website with Strato. The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter “Strato”). When you visit our website, Strato collects various log files, including your IP addresses.

 

For further information, please refer to Strato’s privacy policy: https://www.strato.de/datenschutz/.

 

The use of Strato is based on Art. 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)( a of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

Data Processing

 

We have entered into a data processing agreement (DPA) with the aforementioned provider. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

3. General Information and Mandatory Disclosures

 

Data Protection

 

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this Privacy Policy.

 

When you use this website, various types of personal data are collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

 

Please note that data transmission over the Internet (e.g., when communicating via email) may have security vulnerabilities. It is not possible to completely protect data from access by third parties.

 

Information on the Data Controller

 

The data controller responsible for data processing on this website is:

 

Ullmann Media Adventures GmbH

 

Neuer Pferdemarkt 13

 

20359 Hamburg

 

Phone: Please contact us via email

 

Email: support@studiobro.net

 

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

 

Retention Period

 

Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it is processed no longer applies. If you submit a valid request for erasure or revoke your consent to data processing, your data will be erased, provided we have no other legally permissible grounds for retaining your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.

 

General Information on the Legal Bases for Data Processing on This Website

 

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data as defined in Article 9(1) of the GDPR are being processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) of the German Teleservices Data Protection Act (TTDSG). Consent may be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of precontractual measures, we process your data based on Article 6(1)(b) of the GDPR. Furthermore, we process your data, to the extent that it is necessary to comply with a legal obligation, on the basis of Article 6(1)(c) of the GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) f) of the GDPR. Information regarding the applicable legal bases in each individual case is provided in the following sections of this Privacy Policy.

 

Notice Regarding Data Transfer to the U.S. and Other Third Countries

 

Among other things, we use tools from companies based in the United States or other third countries that do not provide an adequate level of data protection. When these tools are active, your personal data may be transferred to these third countries and processed there. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in these countries. For example, U.S. companies are required to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no influence over these processing activities.

 

Withdrawal of Your Consent to Data Processing

 

Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

 

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 of the GDPR)

 

IF DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING ; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING, THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) OF THE GDPR).

 

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (IN ACCORDANCE ART. 21(2) OF THE GDPR).

 

Right to File a Complaint with the Competent Supervisory Authority

 

In the event of violations of the GDPR, data subjects have the right to file a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the location of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

 

Right to Data Portability

 

You have the right to have data that we process automatically—based on your consent or in fulfillment of a contract—provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place to the extent that it is technically feasible.

 

Access, Deletion, and Rectification

 

Within the scope of applicable legal provisions, you have the right at any time to receive, free of charge, information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as, where applicable, the right to have this data rectified or deleted. You may contact us at any time regarding this matter or any other questions about personal data.

 

Right to Restriction of Processing

 

You have the right to request the restriction of the processing of your personal data. You may contact us at any time regarding this matter. The right to restriction of processing applies in the following cases:

 

  • If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of this verification, you have the right to request that the processing of your personal data be restricted.
  • If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.

 

If you have lodged an objection under Article 21(1) of the GDPR, a balancing of your interests against ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

 

If you have restricted the processing of your personal data, this data — apart from storage — may only be processed with your consent, or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of a substantial public interest of the European Union or a Member State.

 

SSL or TLS Encryption

 

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser’s address bar.

 

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

 

Encrypted Payment Transactions on This Website

 

If, after entering into a paid contract, you are required to provide us with your payment information (e.g., account number for direct debit authorization), this information is necessary for processing the payment.

 

Payment transactions using standard payment methods (Visa/MasterCard, direct debit) are processed exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser’s address bar.

 

With encrypted communication, the payment data you transmit to us cannot be read by third parties.

 

4. Data Collection on This Website

 

Cookies

 

Our website uses so-called “cookies.” Cookies are small text files that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

 

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g., cookies for processing payment services).

 

Cookies serve various functions. Many cookies are technically necessary, as certain website features would not work without them (e.g., the shopping cart feature or the display of videos). Other cookies are used to analyze user behavior or display advertisements.

 

Cookies that are necessary for carrying out the electronic communication process, for providing specific functions you have requested (e.g., the shopping cart function), or for optimizing the website (e.g., cookies for measuring web traffic) (necessary cookies) are stored pursuant to Art. 6(1)(f) f of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6( 1(a) of the GDPR and Section 25(1) of the TTDSG); consent may be revoked at any time.

 

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

 

To the extent that cookies from third-party companies or for analytical purposes are used, we will inform you separately about this within the scope of this Privacy Policy and, if necessary, request your consent.

 

Consent with Usercentrics

 

This website uses Usercentrics’ consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).

 

When you visit our website, the following personal data is transmitted to Usercentrics:

 

  • Your consent(s) or the revocation of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your device
  • The time of your visit to the website

 

Furthermore, Usercentrics stores a cookie in your browser to be able to associate the consents you have granted or their revocation with you. The data collected in this manner is stored until you request that we delete it, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

 

Usercentrics is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6(1)(c) of the GDPR.

 

Consent with Borlabs Cookie

 

Our website uses the consent technology provided by Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter “Borlabs”).

 

When you visit our website, a Borlabs cookie is stored in your browser, which records the consents you have granted or any revocation of those consents. This data is not shared with the provider of Borlabs Cookie.

 

The collected data is stored until you request that we delete it, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details regarding data processing by the Borlabs cookie can be found at https://de.borlabs.io/kb/welche-daten -speichert-borlabs-cookie/.

 

Borlabs Cookie Consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) of the GDPR.

 

Consent with Cookiebot

 

Our website uses Cookiebot’s consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

 

When you visit our website, a connection is established with Cookiebot’s servers to obtain your consents and other declarations regarding cookie use. Cookiebot then stores a cookie in your browser, so that it can associate the consents you have granted—or their revocation—with you. The data collected in this manner is stored until you request that we delete it, delete the Cookiebot cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

 

Cookiebot is used to obtain the legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

 

Consent via ConsentManager

 

Our website uses ConsentManager’s consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter “ConsentManager”).

 

When you visit our website, a connection is established with ConsentManager’s servers to obtain your consents and other declarations regarding cookie usage. ConsentManager then stores a cookie in your browser to associate the consents you have granted—or their revocation—with your session. The data collected in this manner is stored until you request that we delete it, delete the ConsentManager provider cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

 

ConsentManager is used to obtain the legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

 

Consent with Osano

 

Our website uses Osano’s consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Osano, Inc., 3800 North Lamar Blvd, Suite 200, Austin, Texas 78756, USA (hereinafter “Osano”).

 

When you visit our website, a connection is established with Osano’s servers to obtain your consents and other declarations regarding cookie usage. Osano then stores a cookie in your browser to associate the consents you have granted—or their revocation—with your session. The data collected in this manner is stored until you request that we delete it, delete the Osano cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

 

According to Osano, data from European website visitors remains within the EU by being processed exclusively on regional servers.

 

Osano is used to obtain the legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

 

Pixelmate

 

Our website uses Pixelmate to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations.

 

Pixelmate is installed locally on our servers, so no connection is established to the servers of the Pixelmate provider. Pixelmate stores a cookie in your browser to associate the consents you have granted—or their revocation—with your account. The data collected in this manner is stored until you request that we delete it, delete the Pixelmate cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

 

Pixelmate is used to obtain the legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

 

GDPR Legal Cookie by Shopify

 

Our website uses GDPR Legal Cookie by Shopify to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify”).

 

When you visit our website, a connection is established with Shopify’s servers to obtain your consents and other declarations regarding cookie usage. Shopify then stores a cookie in your browser to associate the consents you have granted—or their revocation—with your session. The data collected in this manner is stored until you request that we delete it, delete the Shopify cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected. For details, see: https://apps.shopify.com/gdpr-legal-cookie.

 

The use of GDPR Legal Cookie by Shopify is intended to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) of the GDPR.

 

CCM19

 

Our website uses CCM19 to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter “CCM19”).

 

When you visit our website, a connection is established to the CCM19 servers to obtain your consents and other declarations regarding cookie use. CCM19 then stores a cookie in your browser to associate the consents you have granted—or their revocation—with your session. The data collected in this manner is stored until you request that we delete it, delete the CCM19 cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

 

CCM19 is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) of the GDPR.

 

Contact Form

 

If you submit inquiries to us via the contact form, the information you provide in the form—including the contact details you enter there—will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent.

 

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR) if such consent was requested; you may revoke your consent at any time.

 

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

 

Inquiries via Email, Phone, or Fax

 

If you contact us via email, phone, or fax, your inquiry—including all personal data contained therein (name, inquiry)—will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

 

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR) if such consent was requested; You may withdraw your consent at any time.

 

The data you send us via contact requests will remain with us until you request that we delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g., once your request has been fully processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

 

Jotform

 

We have integrated Jotform into this website. The provider is Jotform Inc., 111 Pine St., Suite 1815 San Francisco, California 94111, USA (hereinafter “Jotform”).

 

Jotform enables us to create online forms to collect messages, inquiries, and other submissions from our website visitors. All data you enter is processed on Jotform’s servers.

 

The use of Jotform is based on our legitimate interest in handling your inquiry as user- to determine the nature of your inquiry (Art. 6(1)(f) GDPR). If consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG, provided that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

The data you enter in the form will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

 

Data transfers to the U.S. are safeguarded by EU Standard Contractual Clauses that we have entered into with Jotform. Details can be found here: https://www.jotform.com/gdpr-compliance/dpa/.

 

Google Forms

 

We have integrated Google Forms into this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

 

Google Forms enables us to create online forms to collect messages, inquiries, and other submissions from our website visitors in a structured manner. All data you enter is processed on Google’s servers. Google Forms stores a cookie in your browser that contains a unique ID (NID cookie). This cookie stores various pieces of information, such as your language settings.

 

The use of Google Forms is based on our legitimate interest in determining your request in the most user-friendly manner possible (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

The data you enter in the form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions —in particular retention periods—remain unaffected.

 

For further information, please refer to Google’s Privacy Policy at https://policies.google.com/.

 

Registration on this Website

 

You can register on this website to use additional features on the site. We use the data you provide for this purpose solely for the purpose of using the respective offer or service for which you have registered. The required information requested during registration must be provided in full. Otherwise, we will reject the registration.

 

For important changes—such as changes to the scope of our offerings or technically necessary modifications—we will use the email address provided during registration to notify you.

 

The data entered during registration is processed for the purpose of fulfilling the user relationship established by the registration and, where applicable, to initiate further contracts (Art. 6(1)(b) GDPR).

 

We store the data collected during registration for as long as you remain registered on this website; it is subsequently deleted. Statutory retention periods remain unaffected.

 

Registration with Google

 

Instead of registering directly on this website, you can register with Google. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

To register with Google , you simply need to enter your Google username and password. Google will identify you and confirm your identity to our website.

 

When you sign in with Google, we may be able to use certain information from your account to complete your profile with us. You decide whether and which information is used through your Google privacy settings, which you can find here: https://myaccount.google.com/security and https://myaccount.google.com/permissions.

 

The data processing associated with Google registration is based on our legitimate interest in providing our users with the simplest possible registration process (Art. 6(1)(f) GDPR). Since use of the registration feature is voluntary and users can decide for themselves which access options to grant, there are no apparent conflicting overriding rights of the data subjects.

 

Registration with Facebook Connect

 

Instead of registering directly on this website, you can register using Facebook Connect. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the United States and other third countries.

 

If you choose to register via Facebook Connect and click the “Login with Facebook”/“Connect with Facebook” button, you will be automatically redirected to the Facebook platform. There, you can log in using your Facebook credentials. This links your Facebook profile to this website or our services. Through this link, we gain access to the data you have stored on Facebook. This primarily includes:

 

  • Facebook name
  • Facebook profile and cover photo
  • Facebook cover photo
  • Email address stored on Facebook
  • Facebook ID
  • Facebook friend lists
  • Facebook Likes
  • Birthday
  • Gender
  • Country
  • Language

 

This data is used to set up, provide, and personalize your account.

 

Registration via Facebook Connect and the associated data processing operations are based on your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time with future effect.

 

To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set forth in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy notices regarding the use of the Facebook tool and for ensuring the tool is implemented on our website in compliance with data protection laws. Facebook is responsible for the data security of Facebook products. Data subject rights (e.g., requests for access) regarding data processed by Facebook, you may exercise these rights directly with Facebook. If you exercise your data subject rights with us, we are obligated to forward them to Facebook.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de. facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

 

For more information, please refer to Facebook’s Terms of Service and Privacy Policy. These can be found at: https://de-de.facebook.com/about/privacy/ and https://de-de. facebook.com/legal/terms/.

 

5. Social Media

 

Facebook

 

Elements of the Facebook social network are integrated into this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the United States and other third countries.

 

You can find an overview of Facebook’s social media elements here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

 

When the social media element is active, a direct connection is established between your device and the Facebook server. This informs Facebook that you have visited this website using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. Please note that we, as the provider of these pages, have no knowledge of the content of the data transmitted or how it is used by Facebook. For more information, please see Facebook’s Privacy Policy at: https://de-de.facebook.com/privacy/explanation.

 

To the extent that consent has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be revoked at any time. To the extent that no consent has been obtained, the use of the service is based on our legitimate interest in achieving the widest possible visibility on social media.

 

To the extent that personal data is collected on our website using the tool described here and transmitted to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. The obligations we share have been set forth in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information regarding the use of the Facebook tool and for ensuring the tool is implemented on our website in a manner that complies with data protection laws. Facebook is responsible for the data security of Facebook products. Data Subject Rights (e.g., requests for information) regarding data processed by Facebook can be exercised directly with Facebook. If you exercise your data subject rights with us, we are obligated to forward these requests to Facebook.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381, and https://www.facebook.com/policy.php.

 

Twitter

 

This website incorporates features from the Twitter service. These features are provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

 

When the social media element is active, a direct connection is established between your device and the Twitter server. As a result, Twitter receives information that you have visited this website. By using Twitter and the “Retweet” function, the websites you visit are linked to your Twitter account and disclosed to other users. Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Twitter. For more information, please see Twitter’s Privacy Policy at: https://twitter.com/de/privacy.

 

If consent has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be revoked at any time. If consent has not been obtained, the use of the service is based on our legitimate interest in achieving the widest possible visibility on social media.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

 

You can change your privacy settings on Twitter in your account settings at https://twitter.com/account/settings.

 

Instagram

 

This website incorporates features from the Instagram service. These features are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

 

When the social media element is active, a direct connection is established between your device and the Instagram server. As a result, Instagram receives information that you have visited this website.

 

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Instagram.

 

To the extent that consent has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be revoked at any time. To the extent that no consent has been obtained, the use of the service is based on our legitimate interest in achieving the widest possible visibility on social media.

 

To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The processing carried out by Facebook or Instagram after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set forth in a joint processing agreement. You can find the text of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy notices when using the Facebook or Instagram tools and for ensuring the data protection-compliant implementation of the tools on our website. Facebook is responsible for the data security of the Facebook or Instagram products. Data subject rights (e.g. e.g., requests for access) regarding data processed by Facebook or Instagram can be exercised directly with Facebook. If you exercise your data subject rights with us, we are obligated to forward them to Facebook.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook.com/ legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875, and https://de-de.facebook.com/help/566994660333381.

 

For more information on this, please see Instagram’s Privacy Policy: https://instagram.com/about/legal/privacy/.

 

Tumblr

 

This website uses buttons and other elements from the Tumblr service. The provider is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA.

 

When the social media element is active, a direct connection is established between your device and the Tumblr server. As a result, Tumblr receives information that you have visited this website.

 

The Tumblr buttons allow you to share a post or page on Tumblr or to follow the provider on Tumblr. When you visit one of our websites featuring a Tumblr button, your browser establishes a direct connection to Tumblr’s servers. We have no control over the scope of data that Tumblr collects and transmits using this plugin. As of the current status, the user’s IP address and the URL of the respective website are transmitted.

 

To the extent that consent (consent) has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be revoked at any time. If no consent has been obtained, the use of the service is based on our legitimate interest in achieving the widest possible visibility on social media.

 

Further information on this can be found in the Privacy Policy at: https://www.tumblr.com/privacy/de.

 

LinkedIn

 

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

 

Each time a page on this website that contains LinkedIn elements is accessed, a connection is established to LinkedIn’s servers. LinkedIn is informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

 

To the extent that consent (consent) has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be revoked at any time. If no consent has been obtained, the use of the service is based on our legitimate interest in achieving the widest possible visibility on social media.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

 

Further information on this can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

 

XING

 

This website uses elements from the XING network. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

 

Every time one of our pages containing XING elements is accessed, a connection is established to XING’s servers. To the best of our knowledge, no personal data is stored in this process. In particular, IP addresses are not stored, nor is user behavior analyzed.

 

To the extent that consent has been obtained, the use of the above-mentioned service is based on Art. 6(1)(a) GDPR and § 25 TTDSG. Consent may be revoked at any time. If consent has not been obtained, the use of the service is based on our legitimate interest in achieving the widest possible visibility on social media.

 

For more information on data protection and the XING Share button, please see XING’s privacy policy at: https://www.xing.com/app/share?op=data_protection.

 

Pinterest

 

On this website, we use elements of the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

 

When you visit a page that contains such an element, your browser establishes a direct connection to Pinterest’s servers. This social media element transmits log data to Pinterest’s server in the United States. This log data may include your IP address, the addresses of the websites you have visited that also contain Pinterest features, the type and settings of your browser, the date and time of the request, how you use Pinterest, and cookies.

 

To the extent that consent has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be revoked at any time. To the extent that no consent has been obtained, the service is used based on our legitimate interest in achieving the widest possible visibility on social media.

 

For more information on the purpose, scope, and further processing and use of data by Pinterest, as well as your rights in this regard and options for protecting your privacy, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy.

 

6. Analytics Tools and Advertising

 

Google Tag Manager

 

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It serves solely to manage and deploy the tools integrated through it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.

 

The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the quick and straightforward integration and management of various tools on its website. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

Google Analytics

 

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s origin. This data is aggregated into a user ID and assigned to the website visitor’s respective device.

 

Furthermore, Google Analytics allows us to track, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the collected data sets and employs machine learning technologies in data analysis.

 

Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to a Google server in the United States and stored there.

 

Use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

 

Data transfer to the U.S. is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

 

Browser Plugin

 

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

 

For more information on how Google Analytics handles user data, please see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

 

Google Signals

 

We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, and YouTube history, as well as demographic data (visitor data). This data may be used for personalized advertising via Google Signals. If you have a Google Account, the visitor data from Google Signals is linked to your Google Account and used for personalized advertising. The data is also used to generate anonymized statistics on our users’ behavior.

 

Demographic Features in Google Analytics

 

This website uses the “demographic features” function feature of Google Analytics to display relevant ads to website visitors within the Google Display Network. This allows for the creation of reports containing information about the age, gender, and interests of site visitors. This data is derived from Google’s interest-based advertising as well as from third-party visitor data. This data cannot be attributed to any specific individual. You can disable this feature at any time via the ad settings in your Google account, or generally opt out of having your data collected by Google Analytics as described in the section “Objecting to Data Collection.”

 

Google Analytics E-Commerce Tracking

 

This website uses the “E-Commerce Tracking” feature of Google Analytics. Using e-commerce , the website operator can analyze the purchasing behavior of website visitors to improve its online marketing campaigns. This involves collecting information such as orders placed, average order values, shipping costs, and the time from viewing a product to purchasing it. Google may aggregate this data under a transaction ID that is assigned to the respective user or their device.

 

Google Ads

 

The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Ads enables us to display ads in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). Furthermore, targeted ads can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can evaluate this data quantitatively by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.

 

The use of this service is based on your consent pursuant to Art. 6( 1(a) of the GDPR and Section 25(1) of the TTDSG. You may revoke your consent at any time.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

 

Google AdSense

 

This website uses Google AdSense, a service for displaying advertisements. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

With the help of Google AdSense, we can display targeted advertisements from third-party companies on our site. The content of these advertisements is tailored to your interests, which Google determines based on your previous user behavior. Furthermore, contextual information—such as your location, the content of the website you are visiting, or the Google search terms you have entered—is also taken into account when selecting the appropriate ads.

 

Google AdSense uses cookies, web beacons (invisible images), and similar tracking technologies. These enable the analysis of information such as visitor traffic on these pages.

 

The information collected by Google AdSense regarding the use of this website (including your IP address) and the delivery of ad formats is transmitted to a Google server in the United States and stored there. This information may be shared by Google with its contractual partners. However, Google will not associate your IP address with any other data it holds about you.

 

Use of this service is based on your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TTDSG. You may revoke your consent at any time.

 

Data transfers to the United States are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

 

Google Ads Remarketing

 

This website uses the features of Google Ads Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Ads Remarketing allows us to assign individuals who interact with our online offering to specific target groups in order to subsequently display interest-based advertising to them on the Google Display Network (remarketing or retargeting).

 

Furthermore, the advertising audiences created with Google Ads Remarketing can be linked to Google’s cross-device features. This allows interest-based, personalized advertising messages—which have been tailored to you based on your previous usage and browsing behavior on one device (e.g., a cell phone)—to also be displayed on another of your devices (e. e.g., a tablet or PC).

 

If you have a Google account, you can opt out of personalized advertising via the following link: https://www.google.com/settings/ads/onweb/.

 

The use of this service is based on your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TTDSG. You may revoke your consent at any time.

 

Further information and the privacy policy can be found in Google’s Privacy Policy at: https://policies.google.com/technologies/ads?hl=de.

 

Facebook Pixel

 

This website uses Facebook’s visitor action pixels for conversion tracking. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the United States and other third countries.

 

This allows the behavior of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables the effectiveness of Facebook advertisements can be evaluated for statistical and market research purposes, and future advertising campaigns can be optimized.

 

The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, making it possible to link it to the respective user profile, and Facebook may use the data for its own advertising purposes in accordance with the Facebook Data Use Policy . This enables Facebook to display advertisements on Facebook pages as well as outside of Facebook. As the site operator, we have no influence over this use of the data.

 

Use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook. com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

 

To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. The obligations we share have been set forth in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy notices regarding the use of the Facebook tool and for ensuring the tool is implemented on our website in compliance with data protection laws. Facebook is responsible for the data security of Facebook products. You can exercise your data subject rights (e.g., requests for information) regarding the data processed by Facebook directly with Facebook. If you exercise your data subject rights with us, we are obligated to forward these requests to Facebook.

 

You can find further information on the protection of your privacy in Facebook’s Privacy Policy: https://de-de. facebook.com/about/privacy/.

 

You can also disable the “Custom Audiences” remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must be logged in to Facebook.

 

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/ de/praferenzmanagement/.

 

7. Newsletter

 

Newsletter Data

 

If you would like to subscribe to the newsletter offered on the website, we need your email address as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No other data is collected, or is collected only on a voluntary basis. To manage the newsletter, we use newsletter service providers described below.

 

Sendinblue

 

This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

 

Sendinblue is a service that, among other things, allows us to organize and analyze the distribution of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on Sendinblue’s servers in Germany.

 

Data Analysis by Sendinblue

 

With the help of Sendinblue, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links, if any, were clicked. This allows us, among other things, to determine which links were clicked particularly often.

 

In addition, we can determine whether certain predefined actions were taken after the newsletter was opened or a link was clicked (conversion rate). For example, we can see whether you made a purchase after clicking a link in the newsletter.

 

Sendinblue also allows us to segment newsletter recipients into different categories (“cluster” them). For example, newsletter recipients can be segmented by age, gender, or location. This enables us to better tailor the newsletters to the respective target audiences.

 

If you do not want your data analyzed by Sendinblue, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

 

For detailed information on Sendinblue’s features, please refer to the following link: https://de.sendinblue.com/newsletter-software/.

 

Legal Basis

 

Data processing is based on your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time. The lawfulness of data processing operations that have already taken place remains unaffected by the withdrawal.

 

Retention Period

 

The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, at which point it will be deleted from the newsletter distribution list. Data stored by us for other purposes remains unaffected by this.

 

After you unsubscribe from the newsletter distribution list, your e- email address may be stored by us or the newsletter service provider on a blacklist, if necessary, to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) DSG GDPR). There is no time limit on storage in the blacklist. You may object to this storage provided that your interests outweigh our legitimate interest.

 

For more details, please refer to Sendinblue’s privacy policy at: https://de.sendinblue.com/datenschutz-uebersicht/.

 

8. Plugins and Tools

 

YouTube

 

This website embeds videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

When you visit one of our web pages that embeds YouTube, a connection is established with YouTube’s servers. This notifies the YouTube server which of our pages you have visited.

 

Furthermore, YouTube may store various cookies on your device or use comparable recognition technologies (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts.

 

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

 

The use of YouTube is in the interest of presenting our online offerings in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

Further information on the handling of user data can be found in YouTube’s Privacy Policy at: https://policies.google.com/privacy?hl=de.

 

Vimeo

 

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

 

When you visit one of our pages featuring a Vimeo video, a connection is established to Vimeo’s servers. In the process, the Vimeo server is notified which of our pages you have visited. Vimeo also obtains your IP address. This applies even if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the United States.

 

If you are logged into your Vimeo account, you allow Vimeo to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your Vimeo account.

 

Vimeo uses cookies or similar recognition technologies (e.g., device fingerprinting) to recognize website visitors.

 

Vimeo is used to ensure an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) f GDPR. If consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TTDSG, provided that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses and, according to Vimeo, on “legitimate business interests.” Details can be found here: https://vimeo.com/privacy.

 

For more information on the handling of user data, please see Vimeo’s Privacy Policy at: https://vimeo.com/privacy.

 

Google Web Fonts

 

This site uses so-called web fonts provided by Google to ensure consistent font display. When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly.

 

To do this, the browser you are using must establish a connection to Google’s servers. As a result, Google becomes aware that this website has been accessed via your IP address. The use of Google Web Fonts is based on Art. 6(1)(f) f of the GDPR. The website operator has a legitimate interest in the uniform display of fonts on its website. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

If your browser does not support web fonts, a standard font from your computer will be used.

 

For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and see Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

 

Adobe Fonts

 

This website uses Adobe Web Fonts to ensure consistent display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you visit this website, your browser loads the required fonts directly from Adobe so that they can be displayed correctly on your device. In doing so, your browser establishes a connection to Adobe’s servers in the United States. As a result, Adobe becomes aware that this website has been accessed via your IP address. According to Adobe, no cookies are stored during the provision of the fonts.

 

The storage and analysis of the data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring a consistent font display on its website. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

Data transfers to the U.S. are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.

 

For more information about Adobe Fonts, visit: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.

 

Adobe’s privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html

 

Google Maps

 

This site uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

To use the features of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the United States and stored there. The provider of this site has no influence over this data transfer. When Google Maps is activated, Google may use Google Web Fonts to ensure consistent font display. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.

 

The use of Google Maps serves the interest of presenting our online offerings in an appealing manner and making it easy to locate the places listed on our website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, to the extent that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ .

 

For more information on how user data is handled, please see Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

 

SoundCloud

 

This website may include plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom). You can recognize the SoundCloud plugins by the SoundCloud logo on the relevant pages.

 

When you visit this website, a direct connection is established between your browser and the SoundCloud server once the plugin is activated. As a result, SoundCloud receives the information that you have visited this website using your IP address. If you click the “Like” or “Share” button while logged into your SoundCloud account, you can link the content of this website to your SoundCloud profile and/or share it. This allows SoundCloud to associate your visit to this website with your account. Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by SoundCloud.

 

The storage and analysis of the data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

The United Kingdom is considered a safe third country for data protection purposes. This means that the United Kingdom maintains a level of data protection equivalent to that of the European Union.

 

For more information on this, please see SoundCloud’s Privacy Policy at: https://soundcloud.com/ pages/privacy.

 

If you do not want SoundCloud to associate your visit to this website with your SoundCloud user account, please log out of your SoundCloud user account before activating content from the SoundCloud plugin.

 

Spotify

 

This website incorporates features from the Spotify music service. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize the Spotify plugins by the green logo on this website. An overview of the Spotify plugins can be found at: https://developer.spotify.com.

 

This allows a direct connection to be established between your browser and the Spotify server via the plugin when you visit this website. Spotify thereby receives the information that you have visited this website using your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of this website to your Spotify profile. This allows Spotify to associate your visit to this website with your user account.

 

Please note that when using Spotify, cookies from Google Analytics are used, which means that your usage data may also be shared with Google when you use Spotify. Google Analytics is a tool provided by the Google Group for analyzing user behavior, headquartered in the United States. Spotify is solely responsible for this integration. As the website operator, we have no influence over this processing.

 

The storage and analysis of data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the appealing audio design of its website. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

For more information, please see Spotify’s Privacy Policy: https://www.spotify.com/de/legal/privacy-policy/.

If you do not want Spotify to associate your visit to this website with your Spotify user account, please log out of your Spotify user account.

 

9. Online Marketing and Affiliate Programs

 

Affiliate Programs on This Website

 

We participate in affiliate programs. In affiliate programs, advertisements from a company (advertiser) are placed on websites operated by other companies in the affiliate network (publishers). If you click on one of these affiliate ads, you will be redirected to the advertised offer. If you subsequently complete a specific transaction (conversion), the publisher receives compensation for this. To calculate this commission, the affiliate network operator must be able to track which advertisement led you to the respective offer and through which you completed the predefined transaction. Cookies or similar tracking technologies (e.g., device fingerprinting).

 

The storage and analysis of the data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the correct calculation of its affiliate compensation. If consent has been obtained, processing is based exclusively on Article 6( 1(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

 

We participate in the following affiliate programs:

 

Amazon Associates Program

 

The provider is Amazon Europe Core S.à.r.l. For details, please refer to Amazon’s Privacy Policy at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.

 

AWIN

 

The operator of the affiliate network is AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter “AWIN”).

 

AWIN and the publisher are jointly responsible for data processing in connection with the affiliate program. Their shared obligations have been set forth in a joint processing agreement. Under this agreement, you may contact either of the controllers with your data protection concerns. The controller contacted first will respond to your inquiry. Each data controller independently provides privacy notices in accordance with Articles 13, 14, and 26 of the GDPR and takes the necessary measures to protect personal data and comply with the other provisions of the GDPR within its organization. The joint processing agreement is available in AWIN’s Terms and Conditions at the following link: https://s3.amazonaws.com/docs.awin.com/Legal/Publisher+Terms/2020/DE+Publisher+Terms+GDPR+Annex.pdf.

 

10. E-commerce and Payment Providers

 

Processing of Customer and Contract Data

 

We collect, process, and use personal customer and contract data to establish, define the terms of, and modify our contractual relationships. We collect, process, and use personal data regarding the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill for it. The legal basis for this is Article 6(1)(b) of the GDPR.

The collected customer data will be deleted upon completion of the order or termination of the business relationship and after the expiration of any applicable statutory retention periods. Statutory retention periods remain unaffected.

 

Data Transfer Upon Conclusion of a Contract for Online Stores, Retailers, and Product Shipping

 

When you order goods from us, we transfer your personal data to the shipping company responsible for delivery and to the payment service provider responsible for processing the payment. Only the data necessary for the respective service provider to fulfill its task will be disclosed. The legal basis for this is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. If you have provided the corresponding consent pursuant to Article 6( 1(a) of the GDPR, we will provide your email address to the shipping company responsible for delivery so that it can inform you via email about the shipping status of your order; you may revoke this consent at any time.

 

Data Transfer Upon Conclusion of a Contract for Services and Digital Content

 

We transfer personal data to third parties only if this is necessary for the fulfillment of the contract, such as to the financial institution responsible for processing payments.

 

No further transfer of data takes place, or only if you have expressly consented to such transfer. Your data will not be disclosed to third parties without your express consent, for example for advertising purposes.

 

The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

 

Payment Services

 

We integrate third-party payment services into our website. When you make a purchase from us, your payment data (e.g., name, payment amount, bank account information, credit card number) is processed by the payment service provider for the purpose of payment processing. The respective contractual and privacy policies of the relevant providers apply to these transactions. The use of payment service providers is based on Article 6(1)(b) of the GDPR (contract fulfillment) as well as on the interest in ensuring a payment process that is as smooth, convenient, and secure as possible (Article 6(1)( f GDPR). To the extent that your consent is requested for certain actions, Art. 6(1)(a) GDPR serves as the legal basis for data processing; consent may be revoked at any time with future effect.

 

We use the following payment services / payment service providers on this website:

 

PayOne

 

The provider of this payment service is PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt am Main (hereinafter “PayOne”). For details, please refer to PayOne’s privacy policy: https://www.payone.com/DE-de/datenschutz.