Privacy policy


This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as 'data') within the scope of providing our services, as well as within our online offering and the associated websites, features, and content, including external online presences such as our social media profiles (hereinafter collectively referred to as the 'online offering'). With regard to the terms used, such as 'processing' or 'controller,' we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller

Suite 9424
PO Box 39018
harewood
Christ Church 8545
New Zealand

Kinds of processed
Data - inventory data (e.g., personal master data, names or addresses) - contact details (e.g., e-mail, telephone numbers) - content data (e.g., text input, photographs, videos) - usage data (e.g., websites visited, interest in content , Access times) - meta / communication data (e.g. device information, IP addresses).
Categories of affected persons Visitors and users of the online offer (in the following we also refer to the affected persons collectively as "users").

Purpose of processing
Provision of the online offer, its functions and content - Answering contact inquiries and communication with users - Security measures - Reach measurement / marketing

Used terms
“Personal data” is all information that relates to an identified or identifiable natural person (hereinafter “data subject”); A natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features, which express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. "Processing" is any process or series of processes carried out with or without the help of automated processes in connection with personal data. The term goes far and includes practically every handling of data. "Pseudonymization" the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and technically and are subject to organizational measures that ensure that the personal data are not assigned to an identified or identifiable natural person.

“Profiling” means any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects that relate to a natural person, in particular aspects relating to work performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts or change of location of this natural person. The natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing is called the "responsible person" of personal data is called. "Processor" means a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible.

Relevant legal basics
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. For users from the area of application of the General Data Protection Regulation (GDPR), i.e. the EU and the EEC, the following applies if the legal basis is not mentioned in the data protection declaration:
The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 DSGVO;
The legal basis for the processing for the fulfillment of our services and the implementation of contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b GDPR;
The legal basis for processing for the fulfillment of our legal obligations is Art. 6 para. 1 lit. c GDPR;
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
The legal basis for the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Article 6(1)(e) DPA.
The legal basis for the processing to protect our legitimate interests is Art. 6 para. 1 letter f DSGVO.
The processing of data for purposes other than those for which they were collected is determined in accordance with the requirements of Art. 6 Para. 4 GDPR.
The processing of special categories of data (in accordance with Art. 9 para. 1 DSGVO) is governed by the provisions of Art. 9 para. 2 DSGVO.

Safety measures
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and severity of the risk to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.
The measures include, in particular, safeguarding of the confidentiality, integrity and availability of data by controlling physical access to data, as well as access, input, disclosure, safeguarding of availability and its seperation. Furthermore, we have established procedures to ensure that the rights of data subjects are exercised, data is deleted, and we respond to any data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings.

Cooperation with contract processors, jointly responsible parties and third parties
If we disclose data to other persons and companies (processors, joint controllers or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary to fulfill the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
IIf we disclose, transmit or otherwise grant access to data to other companies in our group of companies, this is done in particular for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the legal requirements.

Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or in the context of the use of third-party services or disclosure or transmission of data to other persons or companies happens, this only happens if it is done to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data in a third country only if the legal requirements are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations.

Rights of data subjects
You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information on such data, as well as further information and a copy of the data in accordance with legal requirements.
In accordance with the law, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
In accordance with the legal requirements, you have the right to demand that the relevant data be deleted immediately or, alternatively, to request a restriction on the processing of the data in accordance with the legal requirements. You have the right to demand that the data relating to you be deleted You have made it available to us in accordance with the legal requirements and to request that it be transmitted to other responsible parties.
They also have the right to lodge a complaint with the competent supervisory authority in accordance with legal requirements.‍
Right of withdrawal You have the right to withdraw your consent with effect for the future.

Right of objection
You can object to the future processing of data concerning you in accordance with the legal requirements at any time. The objection may in particular be made against processing for the purposes of direct advertising.‍

Cookies and right of objection for direct advertising
"Cookies" are small files that are stored on users' computers. These files can contain various information. A cookie's primary purpose is to store information about a user (or the device where the cookie is stored) during or after their visit within an online service. Temporary cookies, also known as "session cookies" or "transient cookies," are cookies that are deleted after a user leaves an online service or closes their browser. Such a cookie might store the contents of a shopping cart in an online store or a user's login status. "Permanent" or "persistent" cookies, on the other hand, remain stored even after the browser is closed. For instance, they can retain the login status when users revisit the site after several days. Additionally, such cookies can store user interests for audience measurement or marketing purposes. "Third-party cookies" refer to cookies offered by providers other than the operator responsible for the online service. Conversely, if they are only the operator's cookies, they are called "first-party cookies."
We can use temporary and permanent cookies and clarify this as part of our privacy policy. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer. A general objection to the use of cookies used for online marketing purposes can be made for a large number of services, especially in the case of tracking, via the US website http: // www. aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. Furthermore, cookies can be saved by deactivating them in the browser settings. Please note that you may then not be able to use all the functions of this online offer.

Deletion of data
The data processed by us will be deleted or its processing restricted in accordance with legal requirements. Unless explicitly stated otherwise in this privacy policy, the data stored by us will be deleted as soon as it is no longer necessary for its intended purpose, and there are no legal retention obligations preventing its deletion.
If the data is not deleted because it is necessary for other lawful purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

Changes and Updates to the Privacy Policy
We kindly ask you to regularly review the contents of our privacy policy. We adapt the privacy policy as soon as changes to the data processing we carry out necessitate it. We will inform you when changes require your action (e.g., consent) or any other individual notification.

Business-related processing
In addition, we process - contract data (e.g., subject of the contract, term, customer category) - payment data (e.g., bank details, payment history) from our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

Agency services
We process the data of our customers as part of our contractual services, which include conceptual and strategic advice, campaign planning, software and design development / advice or maintenance, implementation of campaigns and processes / handling, server administration, data analysis / consulting services and training services Inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text entries, photographs, videos), contract data (e.g., subject of the contract, term), payment data (e.g., bank details, payment history ), Usage and metadata (e.g. in the context of evaluating and measuring the success of marketing measures). In principle, we do not process special categories of personal data, unless these are part of a commissioned processing. Those affected include our customers, interested parties and their customers, users, website visitors or employees as well as third parties. The purpose of processing is to provide contractual services, billing and our customer service. The legal basis for processing results from Art. 6 Paragraph 1 lit. b GDPR (contractual services), Art. 6 Paragraph 1 lit. f GDPR (analysis, statistics, optimization, security measures). We process data that are necessary for the establishment and fulfillment of the contractual services and point out the necessity of their disclosure. Disclosure to external parties only takes place if it is necessary in the context of an order. When processing the data provided to us within the scope of an order, we act in accordance with the instructions of the client and the legal requirements for order processing in accordance with Art. 28 GDPR and do not process the data for any purposes other than the purposes of the order.
We delete the data after the expiry of legal warranty and comparable obligations. The necessity of keeping the data is reviewed every three years; in the case of legal archiving obligations, the deletion is carried out after the expiry of these obligations (6 years, according to § 257 para. 1 HGB, 10 years, according to § 147 para. 1 AO). In the case of data that has been disclosed to us by the client in the context of an order, we delete the data in accordance with the requirements of the order, in principle after the end of the order.

Privacy policy in the application process
We process the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. The processing of the applicant data takes place in order to fulfill our (pre) contractual obligations in the context of the application process within the meaning of Art. 6 para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO insofar as the processing of data is necessary for us eg in the context of legal procedures (in Germany additionally § 26 BDSG applies).
The application process requires applicants to provide us with the applicant data. The necessary applicant data are, as far as we offer an online form marked, otherwise result from the job descriptions and basically include the information on the person, postal and contact addresses and the application documents, such as cover letter, CV and the certificates. In addition, applicants can voluntarily provide us with additional information.
By submitting the application to us, the applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this data protection declaration. Insofar as special categories of personal data within the meaning of Art. 9 Para . 1 GDPR, they are also processed in accordance with Art. 9 Paragraph 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 Paragraph 1 GDPR are requested from applicants during the application process, they are also processed in accordance with Art. 9 Paragraph 2 lit. a GDPR (e.g. health data, if this is necessary for the exercise of the profession If made available, applicants can submit their applications to us using an online form on our website. The data is encrypted and transmitted to us in accordance with the latest technology.
Furthermore, applicants can send us their applications via e-mail. However, please note that e-mails are generally not sent in encrypted form and that applicants themselves must provide encryption. We can therefore take no responsibility for the transmission of the application between the sender and the reception on our server and therefore recommend rather to use an online form or the postal delivery. Instead of applying via the online form and e-mail, applicants still have the opportunity to send us the application by post.
The data provided by the applicants may be further processed by us in the event of a successful application for employment purposes. Otherwise, if the application for a job offer is not successful, the applicants' data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which the applicants are entitled to at any time.
The cancellation is subject to a legitimate cancellation of the candidate, after the expiration of a period of six months, so that we can answer any follow-up questions to the application and meet our obligations under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with the tax regulations.
Comments and contributions If users leave comments or other contributions, their IP addresses can be stored for 6 days on the basis of our legitimate interests within the meaning of Art. 1 Paragraph 7 lit. This is done for our safety if someone leaves illegal content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we can be prosecuted for the comment or contribution and are therefore interested in the identity of the author. Furthermore, we reserve the right, on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f Process user information for the purpose of spam detection.
On the same legal basis, we reserve the right to save the IP addresses of users for the duration of surveys and to use cookies in order to avoid multiple votes. The information about the person communicated in the context of the comments and contributions, any contact and website information as well as the content information will be stored permanently by us until the user objects.

Soundcloud
Our podcasts are stored on the "Soundcloud" platform offered by SoundCloud Limited, Rheinsberger Str. 76 / 77, 10115 Berlin, Germany, and are played back from there Platform.
For this purpose, we integrate so-called Soundcloud widgets into our website. It is playback software that allows users to play the podcasts. Here Soundcloud can measure which podcasts are heard to what extent and process this information pseudonym for statistical and business purposes. For this purpose, cookies can be stored in the Nuzer browsers and processed for the purpose of creating user profiles, eg for the purpose of issuing advertisements that correspond to the potential interests of the users. For users registered with Soundcloud, Soundcloud can associate the listening information with their profiles.
The use is based on our legitimate interests, ie interest in a secure and efficient provision, analysis and optimization of our audio offer acc. Art. 6 para. 1 lit. f. DSGVO.
Further information and options to object can be found in the Soundcloud privacy policy: https://soundcloud.com/pages/privacy.
Blubrry Podcasting ServicesWe use the podcast hosting and statistics service Blubrry from the provider Rawvoice, Inc., 5000 Arlington Center Blvd., Suite 2115 Upper Arlington, OH 43220, USA. The podcasts are loaded by Blubrry or transmitted via Blubrry. Blubrry processes IP addresses and device information to enable podcast downloads / playbacks and to determine statistical data, such as access numbers. This data is anonymized or pseudonymized by Blubrry before it is stored in the database.
The use is based on our legitimate interests, ie interest in a secure and efficient provision, analysis and optimization of our podcast offer in accordance with Art. 6 Paragraph 1 lit. f. GDPR. Blubrry is (currently according to its own information) certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://create.blubrry.com/resources/about-blubrry/privacy-shield/).
Further information and options to object can be found in Blubrry's data protection declaration: https://create.blubrry.com/resources/about-blubrry/privacy-policy/.
Podigee Podcast HostingWe use the Podigee podcast hosting service from Podigee UG, Am Walde 2, 56249 Herschbach, Germany. The podcasts are loaded by Podigee or transmitted via Podigee.
The use is based on our legitimate interests, ie interest in a secure and efficient provision, analysis and optimization of our podcast offer in accordance with Art. 6 Paragraph 1 lit. f. GDPR.
Podigee processes IP addresses and device information to enable podcast downloads / playbacks and to determine statistical data, such as access numbers. These data are anonymized or pseudonymized by Podigee before they are stored in the database, unless they are required for the provision of the podcasts.
Further information and options to object can be found in Podigee's data protection declaration: https://www.podigee.com/de/about/privacy/.

Contacting us
When contacting us (e.g. via contact form, email, telephone or via social media), the information provided by the user is used to process the contact request and to process it in accordance with Article 6 Paragraph 1 lit. (within the framework of contractual / pre-contractual relationships), Art. 6 Paragraph 1 lit. f. (other inquiries) GDPR processed .. The information provided by users can be processed in a customer relationship management system ("CRM system") or a comparable inquiry organization We delete the requests if they are no longer required. We review the requirement every two years; The statutory archiving obligations also apply.

Newsletter
With the following information, we inform you about the content of our newsletter, as well as the registration, dispatch, and statistical analysis procedures, along with your right to object. By subscribing to our newsletter, you agree to receive it and accept the described procedures.
Newsletter Content: We send newsletters, emails, and other electronic notifications containing promotional information (hereinafter referred to as "newsletter") only with the recipients' consent or legal permission. If the contents of the newsletter are specifically described during the registration, they are decisive for users' consent. Otherwise, our newsletters contain information about our services and us.
Double Opt-In and Logging: Registration for our newsletter occurs via a double opt-in procedure. That means after registration, you'll receive an email asking you to confirm your subscription. This confirmation is necessary to prevent someone from registering with other people's email addresses. Newsletter subscriptions are logged to meet legal requirements. This includes storing the registration and confirmation times, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.
Registration Data: To sign up for the newsletter, providing your email address is sufficient. Optionally, we ask for your name for personal addressing in the newsletter.
The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipient in accordance with Art. 6 Paragraph 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Paragraph 2 No. 3 UWG or if consent is not required , on the basis of our legitimate interests in direct marketing in accordance with Art. 6 Paragraph 1 according to the GDPR in conjunction with Section 7 Paragraph 3 UWG. The logging of the registration process is based on our legitimate interests in accordance with Art. 6 Paragraph 1 lit. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of users and also allows us to prove consent.
Cancellation/Revocation: You can cancel the receipt of our newsletter at any time, i.e., revoke your consent. You'll find an unsubscribe link at the end of each newsletter. We can store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, to demonstrate prior consent. The processing of this data is limited to the purpose of potential defense against claims. An individual deletion request is possible at any time, provided the previous existence of consent is confirmed simultaneously.
Newsletter - Mailchimp The newsletter is sent via the mailing service provider "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA. You can view the data protection provisions of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d / b / a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests in accordance with Art. 6 Paragraph 1 lit. f. GDPR and an order processing contract in accordance with Art. 28 Paragraph 3 S. 1 GDPR.
The shipping service provider can use the recipient's data in pseudonymous form, ie without assignment to a user, to optimize or improve their own services, e.g. to technically optimize the shipping and the presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties
The newsletter is sent by the mailing service provider [NAME, ADDRESS, COUNTRY]. You can view the data protection regulations of the shipping service provider here: [LINK TO THE DATA PROTECTION REGULATIONS]. The shipping service provider is used on the basis of our legitimate interests in accordance with Art. 6 Paragraph 1 lit. f. GDPR and an order processing contract in accordance with Art. 28 Paragraph 3 S. 1 GDPR.
The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
Newsletter - measurement of success The newsletters contain a so-called "web beacon", ie a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from its server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected.
This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor, if used, that of the shipping service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. Unfortunately, a separate revocation of the success measurement is not possible, in which case the entire newsletter subscription must be canceled .

Hosting and e-mailing
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, email dispatch, security services and technical maintenance services that we use for the purpose of operating this online offer. We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offer based on our legitimate interests in an efficient and secure provision of this online offer in accordance with. Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).

Content delivery network from Cloudflare
We use a so-called "Content Delivery Network" (CDN), offered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active).
A CDN is a service that helps deliver content from our online offering, especially large media files, such as graphics or scripts, using regionally distributed and Internet-connected servers. The processing of the data of the users takes place solely for the aforementioned purposes and the maintenance of the security and functionality of the CDN.
The use is made on the basis of our legitimate interests, ie interest in a secure and efficient provision, analysis and optimization of our online offer acc. Art. 6 para. 1 lit. f. DSGVO.
Further information can be found in Cloudflare's data protection declaration: https://www.cloudflare.com/security-policy.

Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC ('Google'), based on our legitimate interests (i.e., interest in analyzing, optimizing, and economically operating our online offering within the meaning of Art. 6(1)(f) GDPR). Google employs cookies. The information generated by the cookie regarding the use of the online service by users is typically transmitted to and stored on a Google server in the United States.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online service by users, compile reports on activities within this online service, and provide us with further services related to the use of this online service and internet usage. This can also involve the creation of pseudonymous user profiles based on processed data.
We use Google Analytics with IP anonymization enabled. This means that the IP address of users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area is shortened by Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by downloading and installing the browser plug-in available under the following link: http: // tools .google.com / dlpage / gaoptout? hl = de.
For more information on the use of data by Google, setting and objection options, see Google's data protection declaration (https://policies.google.com/privacy) and the settings for the display of advertisements by Google (https: // adssettings. google.com/authenticated).
The personal data of users is deleted or anonymized after 14 months.

Google Universal Analytics
We use Google Analytics in the form of "Universal Analytics". "Universal Analytics" refers to a process by Google Analytics in which the user analysis is carried out on the basis of a pseudonymous user ID and a pseudonymous profile of the user is created with information from the use of different devices (so-called "cross-device tracking") .

Targeting with Google Analytics
We use Google Analytics to display ads within Google's advertising services and its partners only to users who have shown an interest in our online offerings or who exhibit specific characteristics (such as interests in certain topics or products, determined based on visited web pages) that we transmit to Google (so-called "remarketing" or "Google Analytics audiences"). With the help of remarketing audiences, we also aim to ensure that our ads align with the potential interests of users.

Google AdWords and conversion measurement
We use the services of Google LLC, 6 Amphitheater Parkway, Mountain View, CA 1 on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online service within the meaning of Art. 1600 para. 94043 lit. DSGVO) , USA, ("Google").
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use the online marketing process Google "AdWords" to place advertisements in the Google advertising network (e.g. in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the advertisements. This allows us to display advertisements for and within our online offer in a more targeted manner in order to only present users with advertisements that potentially correspond to their interests. If, for example, a user is shown advertisements for products that he was interested in on other online offers, this is referred to as "remarketing". For these purposes, when our and other websites on which the Google advertising network is active, a code is immediately executed by Google and so-called (re) marketing tags (invisible graphics or code, also known as " Web Beacons "called) integrated into the website. With their help, an individual cookie, ie a small file, is saved on the user's device (comparable technologies can also be used instead of cookies). This file records which websites the user has visited, which content he is interested in and which offers the user has clicked, as well as technical information on the browser and operating system, referring websites, visiting time and other information on the use of the online offer.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and relating to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on the use of data by Google, setting and objection options, can be found in Google's privacy policy (https://policies.google.com/privacy) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated). The personal data of users will be deleted or anonymized after XNUMX months.

Facebook Pixels, Custom Audiences and Facebook Conversion
Within our online offer is due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes, the so-called "Facebook pixel" of the social network Facebook, by the Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook").
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
With the help of the Facebook pixel, it is on the one hand possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads we have been sent only to those Facebook users who have shown an interest in our online offer or who have certain features (eg interests in certain topics or products visited by them) Web pages determined), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook pixel we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The processing of the data by Facebook is part of Facebook's data usage policy. Accordingly, general notes on the presentation of Facebook Ads, in the data usage policy of Facebook:
https://www.facebook.com/policy. Spezielle Informationen und Details zum Facebook-Pixel und seiner Funktionsweise erhalten Sie im Hilfebereich von Facebook: https://www.facebook.com/business/help/651294705016616.
You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. In order to set which types of advertisements are shown to you within Facebook, you can call up the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, ie they are adopted for all devices such as desktop computers or mobile devices.
You can also use cookies, which are used for range measurement and advertising purposes, via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and the US website (http://www.aboutads.info/) choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Visual Website Optimizer Within our online offer, the service Visual Website Optimizer (an offer from Wingify Software) is used on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f Private Limited, 404, Gopal Heights, Netaji Subhash Place, Pitam Pura, Delhi 110034, India).
Visual Website Optimizer allows in the context of so-called "A / B-Testings", "Click tracking" and "Heatmaps" to understand how different changes of a website affect (eg changes of the input fields, the design, etc.). A / B tests serve to improve the usability and performance of online offers. For example, users are shown different versions of a website or its elements, such as input forms, on which the placement of the content or the labeling of the navigation elements can differ. Subsequently, on the basis of the behavior of the users, for example lingering on the website for a longer period of time or more frequent interaction with the elements, it can be determined which of these websites or elements better meet the needs of the user. “Click tracking” allows users to keep track of their movements within an entire online offering. Since the results of these tests are more accurate if the user interaction can be tracked over a certain period of time (e.g. can see whether a user would like to return), cookies are usually stored on the users' computers for these test purposes. "Heatmaps" are mouse movements by the users, which are combined to form an overall picture, with the help of which it can be recognized, for example, which website elements are preferred and which website elements users prefer less.
Cookies are only stored on users' devices for these test purposes. Only pseudonymous user data is processed. For further information we refer to the data protection declaration of Visual Website Optimizer: https://vwo.com/privacy-policy/.
If you do not want the Visual Website Optimizer to record your usage behavior, you can object to the data collection using this link: https: // [PLEASE-YOUR DOMAIN-INSERT] /? Vwo_opt_out = 1.

Online presence in social media
We maintain an online presence within social networks and platforms to communicate with active customers, interested parties, and users and inform them about our services.
Please note that data of users may be processed outside the European Union. This may pose risks for users, for instance, because it could make it more challenging to enforce users' rights. Concerning US providers certified under the Privacy Shield, we would like to highlight that they commit to complying with EU data protection standards.
Typically, user data is processed for market research and advertising purposes. For instance, user behavior and resulting interests can be used to create user profiles. These profiles, in turn, might be utilized to display advertisements within and beyond the platforms, presumably aligning with the users' interests. For these purposes, cookies are typically stored on users' devices, containing information about their usage behavior and interests. Additionally, data can be stored in user profiles independent of the devices used by users (especially if users are members of these platforms and are logged in).
The processing of users' personal data is based on our legitimate interests in effectively informing and communicating with users according to Art. 6(1)(f) GDPR. If users are asked for consent by the respective platform providers for the described data processing, the legal basis for processing is Art. 6(1)(a), Art. 7 GDPR.
For detailed information about the respective processing and opt-out possibilities, please refer to the linked information provided by the providers.
Regarding requests for information and the exercise of user rights, please note that these are most effectively addressed to the providers. Only the providers have access to users' data and can take appropriate measures or provide information directly. If you still require assistance, you can contact us.
- Facebook, pages, groups, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) on the basis of an agreement on joint processing of personal data - data protection declaration: https://www.facebook.com / about / privacy /, especially for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data, opt-out: https://www.facebook.com/settings?tab=ads and http: // www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
- Google / YouTube (Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA) - Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) - data protection declaration / opt-out: http://instagram.com/about/legal/privacy/.
- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Data protection declaration: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) - data protection declaration / opt-out: https://about.pinterest.com/de/privacy-policy.
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - privacy policy https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest -controls / retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - Data protection declaration / opt-out: https://privacy.xing.com/de/datenschutzerklaerung.
- Wakalet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) - Privacy Policy / Opt-Out: https://wakelet.com/privacy.html.
- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) - Privacy Policy / Opt-Out: https://soundcloud.com/pages/privacy.
Integration of services and content from third partiesWe use content or service offers from third parties within our online offer based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR) to incorporate their content and services, such as videos or fonts (hereinafter referred to as “content”).
This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of our online offer.
VimeoWe can integrate the videos of the platform “Vimeo” from the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Data protection declaration: https://vimeo.com/privacy. We point out that Vimeo can use Google Analytics and refer to the privacy policy (https://policies.google.com/privacy) and opt-out options for Google Analytics (http://tools.google.com / dlpage / gaoptout? hl = de) or the Google settings for data usage for marketing purposes (https://adssettings.google.com/).
YoutubeWe embed the videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google MapsWe integrate maps from the “Google Maps” service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, the users' IP addresses and location data, which, however, are not collected without their consent (usually in the context of the settings on their mobile devices). The data can be processed in the USA. Data protection declaration: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Twitter Within our online offer, functions and contents of the Twitter service, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offer within Twitter. If the users are members of the Twitter platform, Twitter can assign the call of the above content and functions to the profiles of the users there . Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Data protection declaration: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
Instagram Within our online offer, functions and contents of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offer within Instagram. If the users are members of the Instagram platform, Instagram can assign the above-mentioned content and functions to the profiles of the users there. Instagram privacy policy: http://instagram.com/about/legal/privacy/.
Pinterest Within our online offer, functions and contents of the Pinterest service, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, can be integrated. This can include, for example, content such as images, videos or texts and buttons with which users can share content from this online offer within Pinterest. If the users are members of the Pinterest platform, Pinterest can assign the above-mentioned content and functions to the profiles of the users there. Pinterest data protection declaration: https://about.pinterest.com/de/privacy-policy.
LinkedIn Within our online offer, functions and contents of the LinkedIn service, offered by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offer within LinkedIn. If the users are members of the LinkedIn platform, LinkedIn can assign the above-mentioned content and functions to the profiles of the users there. Data protection declaration from LinkedIn: https://www.linkedin.com/legal/privacy-policy .. LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https: //www.privacyshield. gov / participant? id = a2zt0000000L0UZAA0 & status = Active). Data protection declaration: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.