Data protection | GDPR
Data protection at a glance
General information
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit our website. The term ‘personal data’ comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.
Data collection on our website
Who is responsible for data collection on this website?
The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure that the website is error-free. Other data can be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to request the correction, blocking or deletion of this data. For this purpose, as well as for further questions regarding data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to appeal to the responsible supervisory authority.
Analysis tools and tools from third-party providers
When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following data protection declaration. You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.
General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. It is not possible to provide complete protection of data from access by third parties.
Information about the responsible party
The responsible party for data processing on this website is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. To do so, an informal message to us by email is sufficient. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.
Right of appeal to the relevant regulatory authority
In the event of violations of data protection law, the data subject has the right to file a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract delivered to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will be done only if it is technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Encrypted payment transactions on this website
If you enter into a contract which requires you to send us your payment information (e.g. account number for direct debits) in order to take out a fee-based contract, we will require this data to process your payment. Payment transactions using common means of payment (Visa/MasterCard, direct debit) are only made via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. If the communication is encrypted, the payment data you transmit to us cannot be read by third parties.
Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
Objection to advertising e-mails
We hereby object to the use of contact data published in accordance with the imprint obligation to send unsolicited advertising and information material. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.
Data collection on the website
Cookies
Websites sometimes use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit. You can adjust the settings on your browser so that you are informed when cookies are set and only allow cookies in individual cases, accept cookies in certain cases or generally exclude them and activate the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be limited. Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use (e.g. the shopping cart function), are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator's services. If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this data protection declaration.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in ‘server log files’. These are:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
Time of the server request
This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which allows the processing of data to fulfil a contract or pre-contractual measures.
Contact form
If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not share this information without your consent. The processing of the data entered into the contact form is thus exclusively based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
Processing of data (customer and contract data)
We collect, process and use personal data only insofar as it is necessary for the establishment, content organisation or change of the legal relationship (data inventory). This is done on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of our website (usage data) only to the extent required to enable the user to access our service or to bill for it. The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Embedding external media
YouTube
Our website uses plugins from the Google-owned site YouTube. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of presenting our online offers in an appealing way. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Further information on the handling of user data can be found in YouTube's data protection declaration at: https://www.google.de/intl/de/policies/privacy.
Vimeo
Our website may use plugins from the video portal Vimeo. The provider of this service is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. If you visit one of our pages featuring a Vimeo plugin, a connection to the Vimeo servers is established. Here the Vimeo server is informed about which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA. If you are logged in to your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account. For more information on how to handle user data, please refer to the Vimeo Privacy Policy at https://vimeo.com/privacy.
Google Web Fonts
This site uses so-called web fonts, provided by Google, for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you use has to establish a connection with Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a default font is used by your computer. Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy:
https://www.google.com/policies/privacy/.
ProvenExpert
Elements of the rating portal provenexpert.com (Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin) are used on this website. In doing so, data is transferred between our server and the provider's server and cookies are set. Information regarding the handling of your user data can be found in the provenexpert.com data protection declaration: www.provenexpert.com/de-de/datenschutzbestimmungen/
Tools for analysis and technical optimisation
Google Tag Manager
This website uses Google Tag Manager. This service allows website tags to be managed through a single interface. Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. Google Tool Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it will remain in place for all tracking tags, provided that they are implemented with the Google Tag Manager.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics cookies are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns to optimise both, the services offered online and the operator's advertising activities.
IP anonymisation
We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within the area of member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Preventing the storage of cookies
You can prevent cookies from being stored by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can also select or deselect certain cookies and the associated data collection in this website's settings.
Objection to data collection
You can prevent Google Analytics from collecting your data by adjusting the data protection settings below. Details on the processing triggered by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
Contract data processing
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Ads (including Conversion Tracking)
This website uses Google Ads, including the ‘Conversion Tracking’ function. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is a Google service that displays advertising in search results in return for payment. In this context, Google primarily shares non-personal data with us, such as the total number of users who viewed and clicked on ads in Google Search. With the help of the ‘conversion tracking’ function, Google and we can also track whether the user has performed certain actions. For example, we can evaluate which contact forms have been filled out and sent or which buttons have been clicked. As part of the overall data collection via Google Ads (including conversion tracking), we do not receive any information that could be used to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification. The use of Google Ads and in particular the ‘Conversion Tracking’ function is based on Art. 6 para. 1 lit. f DSGVO. We as the website operator have a legitimate interest in analysing user behaviour in order to optimise both our website and our advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time. More information about Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de. In addition, this privacy policy applies to so-called lead extensions or assets. These enable direct contact with us as part of Google Ads advertising, even without visiting this website. Further information about data processing by Google can be viewed here: https://policies.google.com/privacy
Affiliate programmes
We do not currently use any affiliate programmes.
Newsletter and email marketing
Frequency of the newsletter
Unless otherwise stated on the registration form, we send out newsletter emails irregularly, but no more than 50 per calendar year. Furthermore, we reserve the right to adjust the frequency at any time after notification. Readers will be notified of the option to cancel their current subscription with each announcement.
Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you, as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties. The processing of the data entered into the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example by clicking on the ‘Unsubscribe’ link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the members area) remains unaffected.
Active Campaign
This website may use the services of the email marketing provider ActiveCampaign, 1 N Dearborn, 5th Floor, Chicago, IL 60601, USA, for the manual and automated sending of emails. Registration in the email distribution list is voluntary. It requires consent to the transfer of your email data to ActiveCampaign. If you do not agree, you cannot use the email service. Your email address is collected, stored and used so that we can send you content by email on personal development and online business strategies. ActiveCampaign is responsible for the technical processing of contact management and email delivery. According to ActiveCampaign, customer data is not shared with third parties, but it may be made accessible to state investigative authorities by order. Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the e-mails. The legality of the data processing operations already carried out remains unaffected by the revocation. For more details, please refer to Active Campaign's privacy policy at: https://www.activecampaign.com/privacy-policy/. Contract data processing agreement: We have executed a contract with ActiveCampaign, in which we require ActiveCampaign to protect our customers' data and to refrain from sharing such data with third parties. This contract can be viewed at the following link: https://www.activecampaign.com/gdpr-updates/.
Online presence in social media and on third-party websites
This chapter was created on the basis of the data protection generator of Dr Thomas Schwenke, a lawyer.
Other online presences
We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and users who are active there and to be able to inform them about our services. We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the user behaviour and the resulting interests of the users. The user profiles can in turn be used to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to them).
Processing of personal data
The processing of users' personal data is based on our legitimate interests in effectively informing and communicating with users in accordance with Art. 6 (1) point f GDPR. If the users are asked by the respective providers for consent to the data processing (i.e. to declare their consent, e.g. by ticking a checkbox or confirming a button), the legal basis for the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. For a detailed description of the respective processing and the opt-out options, we refer to the following linked information from the providers. We would also like to point out that requests for information and the assertion of user rights can be most effectively asserted with the providers. Only the providers have access to the user data and can take appropriate measures and provide information directly. However, should you require assistance, please do not hesitate to contact us.
Overview of providers
-
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), including the Facebook and Instagram services – Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out:
https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
-
Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated
-
ProvenExpert (Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin) – Privacy Policy: www.provenexpert.com/de-de/datenschutzbestimmungen/
External service providers, subcontractors and cooperation partners
We work with external partners when it is necessary for us to do so. As a rule, you as a customer will be informed in advance. In these collaborations, personal, non-sensitive customer data is shared, unless the customer expressly objects. Details of the data exchange are recorded in writing in data processing contracts and can be viewed on request.
Any questions in this regard will, of course, be answered in detail. The personal data transmitted in the context of these collaborations usually includes IP addresses, access data, real names, email addresses and various anonymised and non-anonymised end customer data. Exceptions and additions will be indicated in individual cases and can be requested at any time. Further information – where available – can be found in the subcontractor's data protection declaration or can be requested.
Other company software not accessible via the website
No information is currently available regarding external company software.
​