Privacy Policy

BetterMove handles your data with care.

The protection of your personal data is particularly important to us at BetterMove. On this page, we provide transparent information about what data we collect, how we use it and what rights you have as a user. Your privacy is our top priority – so that you can feel secure and in good hands at all times.

Introduction and overview

We have prepared this privacy policy (version 22.07.2025-113031310) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (hereinafter referred to as data) we, as the controller, and the processors commissioned by us (e.g. providers) process and will process in the future, and what legal options you have. The terms used are gender-neutral.

In short: We provide you with comprehensive information about the data we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, on the other hand, is intended to describe the most important things as simply and transparently as possible. Where it is conducive to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We hereby inform you in clear and simple language that we only process personal data within the scope of our business activities if there is a corresponding legal basis for doing so. This is certainly not possible if you provide explanations that are as concise, unclear and legally technical as is often the standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps you will find some information that you did not know before.

If you still have questions, please contact the responsible party listed below or in the legal notice, follow the links provided, and review additional information on third-party websites. You will also find our contact details in the legal notice.

Scope

This privacy policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as the name, email address and postal address of a person. The processing of personal data ensures that we can offer and invoice our services and products, whether online or offline. The scope of this privacy policy includes:

all online presences (websites, online shops) that we operate
social media presences and email communication
mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the channels mentioned above. If we enter into legal relationships with you outside these channels, we will inform you separately if necessary.

Legal

In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e. the legal basis of the General Data Protection Regulation, which enable us to process personal data.

With regard to EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can, of course, read this EU General Data Protection Regulation online at EUR-Lex, the gateway to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you enter in a contact form.
Contract (Article 6(1)(b) GDPR): We process your data in order to fulfil a contract or pre-contractual obligations with you. For example, if we conclude a purchase contract with you, we need personal information in advance.
Legal obligation (Article 6(1)(c) GDPR): We process your data if we are subject to a legal obligation. For example, we are legally obliged to retain invoices for accounting purposes. These usually contain personal data.
Legitimate interests (Article 6(1)(f) GDPR): In the event of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and economically. This processing is therefore a legitimate interest.

Further conditions such as the performance of tasks carried out in the public interest and the exercise of official authority and the protection of vital interests do not generally apply to us. If such a legal basis should nevertheless be relevant, it will be indicated at the appropriate place.

In addition to the EU Regulation, national laws also apply:

In Austria, this is the Federal Act on the Protection of Natural Persons with Regard to the Processing of Personal Data (Data Protection Act), abbreviated to DSG.
In Germany, the Federal Data Protection Act, abbreviated to BDSG, applies.

If further regional or national laws apply, we will inform you of this in the following sections.

Contact details of the controller

If you have any questions about data protection or the processing of personal data, you will find the contact details of the controller in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR) below:

BetterMove GmbH

Andreas Bichler

Josef-Steinbacher-Straße 3a, 6300 Wörgl, Austria

Authorised representative: Andreas Bichler

Email: a.bichler@bettermove.at

Phone: +43 5332 2920100

Legal notice: https://www.bettermove.at/impressum/

Storage period

It is our general policy to store personal data only for as long as it is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

If you wish to have your data deleted or withdraw your consent to data processing, the data will be deleted as quickly as possible and to the extent that there is no obligation to store it.

We will inform you about the specific duration of the respective data processing below, provided we have further information on this.

Rights under the General Data Protection Regulation

In accordance with Articles 13 and 14 of the GDPR, we inform you of the following rights to which you are entitled in order to ensure fair and transparent data processing:

According to Article 15 of the GDPR, you have the right to obtain information about whether we process data relating to you. If this is the case, you have the right to obtain a copy of the data and the following information:
- the purpose for which we process the data;
- the categories, i.e. the types of data that are processed;
- who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
- how long the data will be stored;
- the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
- that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);
- the origin of the data if we did not collect it from you;
- whether profiling is carried out, i.e. whether data is automatically evaluated to create a personal profile of you.
According to Article 16 of the GDPR, you have the right to rectify the data, which means that we must correct any data if you find errors.
According to Article 17 of the GDPR, you have the right to erasure (‘right to be forgotten’), which specifically means that you may request the deletion of your data.
According to Article 18 of the GDPR, you have the right to restrict processing, which means that we may only store the data but not use it further.
According to Article 20 of the GDPR, you have the right to data portability, which means that we will provide you with your data in a commonly used format upon request.
According to Article 21 GDPR, you have a right to object, which, once enforced, will result in a change in the processing.
- We will then check as soon as possible whether we can legally comply with this objection.
- If data is used for direct marketing, you can object to this type of data processing at any time. We will then no longer be allowed to use your data for direct marketing.
- If data is used for profiling, you can object to this type of data processing at any time. We will then no longer be allowed to use your data for profiling.
Under Article 22 of the GDPR, you may have the right not to be subject to a decision based solely on automated processing (e.g. profiling).
Under Article 77 of the GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible party listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, please contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Austria Data Protection Authority

Head: Dr Matthias Schmidl

Address: Barichgasse 40-42, 1030 Vienna

Telephone number: +43 1 52 152-0

Email address: dsb@dsb.gv.at

Website: https://www.dsb.gv.at/

Data transfer to third countries

We only transfer or process data to countries outside the scope of the GDPR (third countries) if you consent to this processing or if there is other legal permission to do so. This applies in particular if the processing is required by law or necessary for the fulfilment of a contractual relationship and, in any case, only to the extent that this is generally permitted.

In most cases, your consent is the most important reason for us to process data in third countries. The processing of personal data in third countries such as the USA, where many software manufacturers offer services and have their server locations, may mean that personal data is processed and stored in an unexpected manner.

We expressly point out that, in the opinion of the European Court of Justice, an adequate level of protection for data transfers to the USA currently only exists if a US company that processes personal data of EU citizens in the USA is an active participant in the EU-US Data Privacy Framework. For more information, please visit: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Data processing by US services that are not active participants in the EU-US Data Privacy Framework may result in data not being processed and stored anonymously. Furthermore, US government authorities may have access to individual data. In addition, collected data may be linked to data from other services of the same provider, provided you have a corresponding user account. Where possible, we try to use server locations within the EU, if this is offered.

We will provide you with more detailed information about data transfers to third countries, where applicable, at the appropriate points in this privacy policy.

Communication

Communication Summary

👥 Data subjects: Anyone who communicates with us by telephone, email or online form

📓 Data processed: e.g. telephone number, name, email address, form data entered. You can find more details on this under the respective contact type

🤝 Purpose: Handling communication with customers, business partners, etc.

📅 Storage period: Duration of the business transaction and legal requirements

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract), Art. 6 para. 1 lit. f GDPR (legitimate interests)

When you contact us and communicate with us by telephone, email or online form, personal data may be processed.

The data will be processed for the purpose of handling and processing your enquiry and the associated business transaction. The data will be stored for as long as necessary or as required by law.

Data subjects

All persons who contact us via the communication channels provided by us are affected by the aforementioned processes.

Telephone

When you call us, the call data is stored pseudonymously on the respective end device and by the telecommunications provider used. In addition, data such as your name and telephone number may be sent by email and stored for the purpose of responding to your enquiry. The data will be deleted as soon as the business transaction has been completed and legal requirements permit.

Email

If you communicate with us by email, data may be stored on the respective end device (computer, laptop, smartphone, etc.) and data may be stored on the email server. The data will be deleted as soon as the business transaction has been completed and legal requirements permit.

Online forms

If you communicate with us using an online form, data will be stored on our web server and forwarded to an email address of ours if necessary. The data will be deleted as soon as the business transaction has been completed and legal requirements permit.

Legal

The processing of data is based on the following legal grounds:

Art. 6 para. 1 lit. a GDPR (consent): You give us your consent to store your data and use it for purposes related to the business transaction;
Art. 6 para. 1 lit. b GDPR (contract): It is necessary for the performance of a contract with you or a processor such as the telephone provider, or we need to process the data for pre-contractual activities, such as preparing an offer;
Art. 6 para. 1 lit. f GDPR (legitimate interests): We want to handle customer enquiries and business communications in a professional manner. This requires certain technical facilities, such as email programmes, Exchange servers and mobile phone operators, in order to communicate efficiently.

Data processing agreement (DPA)

In this section, we would like to explain what a data processing agreement is and why it is necessary. Because the term ‘data processing agreement’ is quite a tongue twister, we will often use the acronym DPA in this text. Like most companies, we do not work alone, but also use the services of other companies or individuals. Due to the involvement of various companies or service providers, we may pass on personal data for processing. These partners then act as processors with whom we conclude a contract, known as a data processing agreement (DPA). The most important thing for you to know is that the processing of your personal data is carried out exclusively on our instructions and must be regulated by the DPA.

Who are processors?

As a company and website owner, we are responsible for all data that we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or person who processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, public authority, agency or other body that processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

For a better understanding of the terminology, here is an overview of the three roles in the GDPR:

Data subject (you as a customer or interested party) → Controller (we as a company and client) → Processor (service providers such as web hosts or cloud providers)

Contents of a data processing agreement

As mentioned above, we have concluded a DPA with our partners who act as processors. This stipulates, first and foremost, that the processor will process the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing, but in this context, electronic conclusion of the contract is also considered ‘in writing’. The processing of personal data will only take place on the basis of the contract. The contract must contain the following:

Commitment to us as the controller
Obligations and rights of the controller
Categories of data subjects
Type of personal data
Type and purpose of data processing
Subject matter and duration of data processing
Place of data processing

Furthermore, the contract contains all the obligations of the processor. The most important obligations are:

Measures to ensure data security
Taking all possible technical and organisational measures to protect the rights of the data subject
Maintaining a data processing register
Cooperating with the data protection supervisory authority upon request
Carrying out a risk analysis with regard to the personal data received
Sub-processors may only be commissioned with the written consent of the controller

You can see what such a DPA looks like in concrete terms at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html, for example. A sample contract is presented here.

Cookies

Cookies Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: depends on the respective cookie. You can find more details below or from the manufacturer of the software that sets the cookie.

📓 Processed data: Depends on the cookie used. You can find more details below or from the manufacturer of the software that sets the cookie.

📅 Storage period: depends on the respective cookie, can vary from hours to years

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.

Below, we explain what cookies are and why they are used so that you can better understand the following privacy policy.

Whenever you surf the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically stored in the cookie folder, which is essentially the ‘brain’ of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data, such as language or personal page settings. When you return to our site, your browser transmits the ‘user-related’ information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie from the server, which the browser reuses when another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programmes and do not contain viruses, Trojans or other ‘malware’. Cookies cannot access information on your PC.

Cookie data may look like this, for example:

Name: _ga

Value: GA1.2.1326744211.152113031310-9

Purpose: Distinguishing website visitors

Expiration date: after 2 years

A browser should be able to support these minimum sizes:

At least 4096 bytes per cookie
At least 50 cookies per domain
At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

There are four types of cookies:

Essential cookies

These cookies are necessary to ensure the basic functionality of the website. For example, these cookies are needed when a user adds a product to their shopping cart, continues browsing other pages and then proceeds to checkout. These cookies ensure that the shopping cart is not deleted even if the user closes their browser window.

Functional cookies

These cookies collect information about user behaviour and whether the user receives any error messages. These cookies are also used to measure the loading time and behaviour of the website in different browsers.

Targeted cookies

These cookies ensure better user-friendliness. For example, locations entered, font sizes or form data are stored.

Advertising cookies

These cookies are also known as targeting cookies. They are used to deliver personalised advertising to the user. This can be very useful, but also very annoying.

When you visit a website for the first time, you are usually asked which of these types of cookies you would like to allow. And, of course, this decision is also stored in a cookie.

If you would like to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called ‘HTTP State Management Mechanism’.

Purpose of processing via cookies

The purpose ultimately depends on the respective cookie. You can find more details below or from the manufacturer of the software that sets the cookie.

What data is processed?

Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalise what data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy.

Storage duration of cookies

The storage duration depends on the respective cookie and is specified below. Some cookies are deleted after less than an hour, while others may remain stored on a computer for several years.

You also have control over the storage period. You can manually delete all cookies at any time via your browser (see also ‘Right to object’ below). Furthermore, cookies based on consent will be deleted at the latest after you withdraw your consent, whereby the legality of the storage remains unaffected until then.

Right to object – how can I delete cookies?

You decide how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option to delete, deactivate or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, or if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete and manage cookies

If you do not want cookies at all, you can set your browser to always inform you when a cookie is about to be set. This allows you to decide whether to accept or reject each individual cookie. The procedure varies depending on your browser. The best way to find the instructions is to search Google using the search term ‘delete cookies Chrome’ or ‘disable cookies Chrome’ if you are using the Chrome browser.

Legal basis

The so-called ‘cookie guidelines’ have been in place since 2009. These stipulate that the storage of cookies requires your consent (Article 6(1)(a) GDPR). However, there are still very different responses to these guidelines within EU countries. In Austria, however, this guideline was implemented in Section 165(3) of the Telecommunications Act (2021). In Germany, the cookie guidelines have not been implemented as national law. Instead, this directive has been largely implemented in Section 15(3) of the Telemedia Act (TMG), which was replaced by the Digital Services Act (DDG) in May 2024.

For strictly necessary cookies, even if no consent has been given, there are legitimate interests (Article 6(1)(f) GDPR), which are in most cases of an economic nature. We want to provide visitors to the website with a pleasant user experience, and certain cookies are often essential for this.

If cookies that are not strictly necessary are used, this will only be done with your consent. The legal basis for this is Article 6(1)(a) GDPR.

The following sections provide more detailed information about the use of cookies, if the software used employs cookies.

Application data

Application data summary

👥 Data subjects: Users who apply for a job with us

🤝 Purpose: Processing of an application

📓 Data processed: Name, address, contact details, email address, telephone number, proof of qualifications (certificates), possibly special categories of data.

📅 Storage period: in the event of a successful application, until the end of the employment relationship. Otherwise, the data will be deleted after the application process or stored for a certain period of time with your consent.

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), legitimate interest (Art. 6 para. 1 lit. f GDPR), Art. 6 para. 1 lit. b GDPR (contract), Art. 9 para. 2 lit. a GDPR (processing of special categories)

What is application data?

You can apply for a job at our company by email, online form or via a recruiting tool. All data that we receive and process from you in the context of an application is considered application data. In doing so, you always disclose personal data such as your name, date of birth, address and telephone number.

Why do we process application data?

We process your data so that we can conduct a proper selection process for the advertised position. In addition, we are happy to keep your application documents in our application archive. This is because it often happens that, for a variety of reasons, the advertised position does not work out, but we are impressed by you and your application and can well imagine working with you in the future. If you give us your consent, we will archive your documents so that we can easily contact you for future positions in our company.

We guarantee that we will treat your data with the utmost care and will only process it within the legal framework. Even within our company, your data will only be passed on to persons who are directly involved in your application. In short: your data is safe with us!

What data is processed?

If you apply to us by email, for example, we will of course receive personal data as mentioned above. Even your email address is considered personal data. However, during the application process, we only process data that is relevant to our decision on whether we want to welcome you to our team.

The exact data processed depends primarily on the job advertisement. In most cases, however, this includes your name, date of birth, contact details and proof of qualifications. If you submit your application via an online form, the data will be encrypted before being forwarded to us. If you send us your application by email, this encryption does not take place. We cannot therefore accept any responsibility for the transmission of your data. However, once the data is on our servers, we are responsible for handling it lawfully.

During the application process, in addition to the above-mentioned data, we may also request information about your health or ethnic origin so that we and you can exercise your rights with regard to labour law, social security and social protection and at the same time fulfil the corresponding obligations. This data is considered special category data.

Here is a list of possible data that we may receive and process from you:

Name
Contact address
Email address
Telephone number
Date of birth
Information provided in your cover letter and CV
Proof of qualifications (e.g. certificates)
Special categories of data (e.g. ethnic origin, health data, religious beliefs)
Usage data (websites visited, access data, etc.)
Metadata (IP address, device information)

How long will the data be stored?

If we accept you as a team member in our company, your data will be processed for the purpose of the employment relationship and stored by us at least until the end of the employment relationship. All application documents will then be placed in your employee file.

If we do not offer you the job, you decline our offer or withdraw your application, we may retain your data for up to 6 months after the end of the application process on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR). After this period, both your electronic data and all data from physical application documents will be completely deleted or destroyed. We retain your data so that we can answer any queries you may have or provide evidence of your application in the event of a legal dispute. If a legal dispute arises and we still need the data after the six-month period has expired, we will only delete the data when there is no longer any reason to retain it. If there are legal retention obligations to be fulfilled, we must store the data for longer than 6 months.

Furthermore, we may also store your data for longer if you have given your specific consent. We do this, for example, if we can well imagine working with you in the future. In this case, it is helpful to have your data archived so that we can contact you easily. In this case, the data will be stored in our applicant pool. You can, of course, revoke your consent to the longer storage of your data at any time. If you do not revoke your consent and do not give new consent, your data will be deleted after 2 years at the latest.

Legal basis

The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures), Art. 6 para. 1 lit. f GDPR (legitimate interests) and Art. 9 para. 2 lit. a GDPR

(processing of special categories).

If we include you in our applicant tool, this will be done on the basis of your consent (Art. 6 para. 1 lit. a GDPR). We would like to point out that your consent to be included in our application pool is voluntary, has no influence on the application process and you have the option to withdraw your consent at any time. The lawfulness of the processing until the time of withdrawal remains unaffected.

In the event of the protection of vital interests, data processing is carried out in accordance with Art. 9 para. 2 lit. c. GDPR. For the purposes of health care, occupational medicine, medical diagnostics, care or treatment in the health or social sector, or for the administration of systems and services in the health or social sector, the processing of personal data is carried out in accordance with Art. 9 para. 2 lit. h GDPR. If you voluntarily provide special categories of data, processing will be carried out on the basis of Art. 9 para. 2 lit. a GDPR.

Contact form

Contact data summary

👥 Data subjects: Website visitors who enter data in a contact form

🤝 Purpose: Processing of enquiries and communication within the framework of pre-contractual measures or in the event of existing interest in our services

📓 Processed data: Name, email address, telephone number (if provided), content of the message, IP address, technical metadata (e.g. timestamp, browser information)

📅 Storage period: The data will be deleted as soon as it is no longer required for processing the enquiry and there is no legal obligation to retain it.

⚖️ Legal basis: Consent (Art. 6 para. 1 lit. a GDPR), legitimate interest (Art. 6 para. 1 lit. f GDPR), contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR)

What is a contact form?

A contact form is a web form that you can fill out on our website to get in touch with us easily. This usually involves the transmission of personal data such as your name, your email address and your message to us. This information helps us to process your enquiries in a targeted manner and to get in touch with you.

Why do we use a contact form?

We provide a contact form so that you can communicate with us quickly and easily. Whether you have questions about our services, feedback or other concerns, you can reach us directly using the contact form. We use the data you enter exclusively to process your request and to contact you. If further steps result from the contact, such as a quotation or a contractual relationship, we will also use the data for this purpose.

What data is processed?

The specific data processed depends on the information you provide in the contact form. As a rule, this includes:

Name
Email address
Telephone number (optional)
Content of the message
Date and time of transmission
IP address and technical metadata (for security and traceability)

This information helps us to better classify and respond to your enquiry.

How long is the data stored?

We only store data from the contact form for as long as is necessary to process your enquiry. If a business relationship is established, the corresponding storage periods for customer data apply. In special cases (e.g. legal disputes), longer storage periods may apply. We will not pass on your data to third parties without your consent.

Legal basis

The legal basis for the processing of your data via the contact form is Art. 6 para. 1 lit. a GDPR (consent – by submitting the form), Art. 6 para. 1 lit. b GDPR (pre-contractual measures), and Art. 6 para. 1 lit. f GDPR (legitimate interest – efficient communication and organisation of enquiries). If you voluntarily provide special categories of personal data, processing will be carried out in accordance with Art. 9 para. 2 lit. a GDPR (consent).

Customer data

Customer data summary

👥 Data subjects: Customers or business and contractual partners

🤝 Purpose: Provision of contractually or pre-contractually agreed services, including related communication

📓 Processed data: Name, address, contact details, email address, telephone number, payment information (such as invoices and bank details), contract data (such as the term and subject matter of the contract), IP address, order data

📅 Storage period: the data will be deleted as soon as it is no longer required for the fulfilment of our business purposes and there is no legal obligation to retain it.

⚖️ Legal basis: Legitimate interest (Art. 6 para. 1 lit. f GDPR), contract (Art. 6 para. 1 lit. b GDPR)

What is customer data?

In order to provide our services or contractual services, we also process data from our customers and business partners. This data always includes personal data. Customer data refers to all information that is processed on the basis of a contractual or pre-contractual cooperation in order to provide the services offered. Customer data is therefore all information that we collect and process about our customers.

Why do we process customer data?

There are many reasons why we collect and process customer data. The most important reason is that we simply need various data to provide our services. Sometimes your email address is sufficient, but if you purchase a product or service, we also need data such as your name, address, bank details or contract details. We also use the data for marketing and sales optimisation so that we can improve our overall service to our customers. Another important point is our customer service, which is always very important to us. We want you to be able to contact us at any time with questions about our offers, and for this we need at least your email address.

What data is processed?

At this point, we can only provide a list of categories to indicate exactly which data is stored. This always depends on the services you purchase from us. In some cases, you only provide us with your email address so that we can contact you or answer your questions, for example. In other cases, you purchase a product or service from us and we require significantly more information, such as your contact details, payment details and contract details.

Here is a list of possible data that we receive and process from you:

Name
Contact address
Email address
Telephone number
Date of birth
Payment data (invoices, bank details, payment history, etc.)
Contract data (term, content)
Usage data (websites visited, access data, etc.)
Metadata (IP address, device information)

How long is the data stored?

We delete the relevant customer data as soon as we no longer need it to fulfil our contractual obligations and purposes and the data is no longer required for any warranty or liability obligations. This is the case, for example, when a business contract ends. After that, the limitation period is generally 3 years, although longer periods are possible in individual cases. We also comply with the statutory retention obligations. Your customer data will definitely not be passed on to third parties unless you have given your explicit consent.

Legal basis

The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures),

Art. 6 para. 1 lit. f GDPR (legitimate interests) and, in special cases (e.g. medical services), Art. 9 para. 2 lit. a GDPR (processing of special categories).

In the event of the protection of vital interests, data processing is carried out in accordance with Art. 9 para. 2 lit. c GDPR. For the purposes of health care, occupational medicine, medical diagnostics, care or treatment in the health or social sector, or for the administration of systems and services in the health or social sector, the processing of personal data is carried out in accordance with Art. 9 para. 2 lit. h GDPR. If you voluntarily provide special categories of data, processing will be carried out on the basis of Art. 9 (2) lit. a GDPR.

Web hosting Introduction

Web hosting Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Professional hosting of the website and securing its operation

📓 Processed data: IP address, time of website visit, browser used and other data. You can find more details below or from the respective web hosting provider.

📅 Storage period: depends on the respective provider, but usually 2 weeks

⚖️ Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is web hosting?

When you visit websites today, certain information – including personal data – is automatically generated and stored, including on this website. This data should be processed as sparingly as possible and only when justified. By website, we mean all web pages on a domain, i.e. everything from the home page to the very last subpage (like this one). By domain, we mean, for example, example.de or musterbeispiel.com.

If you want to view a website on a computer, tablet or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We refer to these as browsers or web browsers for short.

To display the website, the browser must connect to another computer where the website’s code is stored: the web server. Operating a web server is a complicated and time-consuming task, which is why it is usually handled by professional providers. These providers offer web hosting and ensure that website data is stored reliably and without errors. That’s a lot of technical terms, but please stick with it, it gets even better!

When your browser connects to your computer (desktop, laptop, tablet or smartphone) and during the transfer of data to and from the web server, personal data may be processed. On the one hand, your computer stores data, and on the other hand, the web server must also store data for a period of time to ensure proper operation.

A picture is worth a thousand words, so the following graphic illustrates the interaction between the browser, the Internet and the hosting provider.

Why do we process personal data?

The purposes of data processing are:

Professional hosting of the website and securing its operation
to maintain operational and IT security
Anonymous evaluation of access behaviour to improve our offering and, if necessary, for criminal prosecution or the pursuit of claims

What data is processed?

Even while you are visiting our website right now, our web server, which is the computer on which this website is stored, automatically stores data such as

the complete Internet address (URL) of the website you have accessed
browser and browser version (e.g. Chrome 87)
the operating system used (e.g. Windows 10)
the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen/)
the host name and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
date and time
in files known as web server log files

How long is data stored?

As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but cannot rule out that this data may be accessed by authorities in the event of illegal behaviour.

In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we do not pass on your data without your consent!

Legal basis

The lawfulness of the processing of personal data in the context of web hosting is based on Art. 6 para. 1 lit. f GDPR (protection of legitimate interests), because the use of professional hosting by a provider is necessary in order to present the company on the Internet in a secure and user-friendly manner and to be able to pursue any attacks and claims arising from this.

As a rule, there is a contract between us and the hosting provider for order processing in accordance with Art. 28 f. GDPR, which ensures compliance with data protection and guarantees data security.

Mittwald privacy policy

We use Mittwald, a web hosting tool, for our website. The service provider is the German company Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany.

You can find out more about the data processed by Mittwald in the privacy policy at https://www.mittwald.de/datenschutz.

Order processing agreement (AVV) Mittwald

We have concluded an order processing agreement (AVV) with Mittwald in accordance with Article 28 of the General Data Protection Regulation (GDPR). You can read exactly what an AVV is and, above all, what must be included in an AVV in our general section ‘Order processing agreement (AVV)’.

This agreement is required by law because Mittwald processes personal data on our behalf. It clarifies that Mittwald may only process data it receives from us in accordance with our instructions and must comply with the GDPR. The link to the data processing agreement (DPA) can be found at https://www.mittwald.de/faq/service-informationen/faq/datenschutz-alles-wichtige-zur-dsgvo.

Website construction kits Introduction

Website construction kits Privacy policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Optimisation of our services

📓 Processed data: Data such as technical usage information such as browser activity, clickstream activities, session heat maps, contact details, IP address or your geographical location. You can find more details on this below in this privacy policy and in the privacy policy of the providers.

📅 Storage duration: depends on the provider

⚖️ Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests), Art. 6 para. 1 lit. a GDPR (consent)

What are website construction kits?

We use a website builder system for our website. Website builder systems are special forms of content management systems (CMS). With a website builder system, website operators can create a website very easily and without any programming knowledge. In many cases, web hosts also offer website builders. When using a website builder, your personal data may also be collected, stored and processed. In this privacy policy, we provide general information about data processing by website builders. For more detailed information, please refer to the privacy policy of the provider.

Why do we use website builders for our website?

The biggest advantage of a modular system is its ease of use. We want to offer you a clear, simple and well-structured website that we can easily operate and maintain ourselves without external support. A modular system now offers many helpful functions that we can use without any programming knowledge. This allows us to design our website according to our wishes and offer you an informative and enjoyable experience on our website.

What data is stored by a modular system?

Exactly what data is stored depends, of course, on the website builder system used. Each provider processes and collects different data from website visitors. However, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider and the date of your website visit are usually collected. Tracking data (e.g. browser activity, clickstream activities, session heat maps, etc.) may also be processed. In addition, personal data may also be collected and stored. This is mostly contact data such as your email address, telephone number (if you have provided it), IP address and geographical location data. You can find out exactly what data is stored in the provider’s privacy policy.

How long and where is the data stored?

We will inform you about the duration of data processing below in connection with the website construction system used, provided we have further information on this. You can find detailed information on this in the provider’s privacy policy. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. The provider may store data about you according to its own criteria, over which we have no influence.

Right to object

You always have the right to access, correct and delete your personal data. If you have any questions, you can also contact the responsible person for the website builder system used at any time. You can find the contact details either in our privacy policy or on the website of the respective provider.

You can delete, deactivate or manage cookies used by providers for their functions in your browser. Depending on which browser you use, this works in different ways. Please note, however, that this may mean that not all functions will work as usual.

Legal basis

We have a legitimate interest in using a website construction kit system to optimise our online service and to present it to you in an efficient and user-friendly manner. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use the construction kit if you have given your consent.

Insofar as the processing of data is not absolutely necessary for the operation of the website, the data will only be processed on the basis of your consent. This applies in particular to tracking activities. The legal basis for this is Art. 6 para. 1 lit. a GDPR.

This privacy policy provides you with the most important general information about data processing. If you would like more detailed information, you will find further information – if available – in the following section or in the provider’s privacy policy.

Elementor privacy policy

We use the Elementor modular system for our website. The service provider is the Israeli company Elementor Ltd., Rehov Tuval 40, 5252247 Ramat Gan, Israel.

Your data may be transferred to Israel. Israel is outside the scope of the GDPR.

However, the European Commission has decided, on the basis of Art. 45 (1) GDPR, that Israel offers a level of protection comparable to that of the GDPR. You can view the decision here: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32011D0061

You can find out more about the data processed through the use of Elementor in the privacy policy at https://elementor.com/about/privacy/.

WordPress.com Privacy Policy

WordPress.com Privacy Policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Optimisation of our services

📅 Storage duration: This depends primarily on the type of data stored and the specific settings.

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is WordPress?

We use the well-known content management system WordPress.com for our website. The service provider is the American company Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.

The company was founded in 2003 and developed into one of the best-known content management systems (CMS) worldwide. A CMS is software that helps us design our website and present content in an attractive and organised manner. The content can be text, audio or video.

When you use WordPress, your personal data may also be collected, stored and processed. As a rule, mainly technical data such as operating system, browser, screen resolution or hosting provider is stored. However, personal data such as IP addresses, geographical data or contact details may also be processed.

Why do we use WordPress on our website?

We have many strengths, but real programming is not one of our core competencies.

Nevertheless, we want to have a powerful and attractive website that we can manage and maintain ourselves. With a website builder or content management system such as WordPress, this is exactly what we can do. With WordPress, we don’t need to be programming experts to offer you a beautiful website. Thanks to WordPress, we can operate our website quickly and easily without any prior technical knowledge. If technical problems arise or we have special requests for our website, we still have our experts who are at home with HTML, PHP, CSS and the like.

The ease of use and comprehensive features of WordPress allow us to design our website according to our wishes and offer you a good user experience.

What data is processed by WordPress?

Non-personal data includes technical usage information such as browser activity, clickstream activity, session heat maps and data about your computer, operating system, browser, screen resolution, language and keyboard settings, internet provider and date of page visit.

Personal data is also collected. This primarily includes contact details (e-mail address or telephone number, if you provide this), IP address or your geographical location.

WordPress may also use cookies to collect data. These often collect data about your behaviour on our website. For example, it may record which subpages you particularly like to view, how long you spend on individual pages, when you leave a page (bounce rate) or even which preferences (e.g. language selection) you have made. Based on this data, WordPress can also better tailor its own marketing measures to your interests and user behaviour. The next time you visit our website, it will therefore be displayed as you have previously set it up.

WordPress may also use technologies such as pixel tags (web beacons) to, for example, clearly identify you as a user and possibly offer you interest-based advertising.

How long and where is the data stored?

How long the data is stored depends on various factors. It depends primarily on the type of data stored and the specific settings of the website. In principle, the data is deleted by WordPress when it is no longer needed for its own purposes. There are, of course, exceptions, especially if legal obligations require longer storage of the data. Web server logs containing your IP address and technical data are deleted by WordPress or Automattic after 30 days. Automattic uses the data for this period to analyse traffic on its own websites (e.g. all WordPress sites) and to fix any problems. Deleted content on WordPress websites is also stored in the trash for 30 days to allow for recovery, after which it may remain in backups and caches until they are deleted. The data is stored on Automattic’s servers in the United States.

How can I delete my data or prevent data storage?

You have the right and the option to access your personal data at any time and to object to its use and processing. You can also lodge a complaint with a government supervisory authority at any time.

You also have the option of managing, deleting or deactivating cookies individually in your browser. Please note, however, that deactivated or deleted cookies may have a negative impact on the functionality of our WordPress site. Depending on which browser you use, managing cookies works slightly differently. Under the ‘Cookies’ section, you will find the relevant links to the instructions for the most popular browsers.

Legal basis

If you have consented to the use of WordPress, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by WordPress.

We also have a legitimate interest in using WordPress to optimise our online service and to present it in an attractive way for you. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use WordPress if you have given your consent.

WordPress and Automattic also process your data in the USA, among other places. Automattic is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Automattic uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Automattic undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More details on the privacy policy and what data is processed by WordPress and how can be found at https://automattic.com/privacy/.

Email marketing Introduction

Email marketing summary

👥 Data subjects: Newsletter subscribers

🤝 Purpose: Direct marketing via email, notification of system-related events

📓 Data processed: Data entered during registration, but at least the email address. You can find more details on this in the email marketing tool used.

📅 Storage period: Duration of the subscription

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is email marketing?

In order to keep you up to date, we also use email marketing. If you have agreed to receive our emails or newsletters, your data will also be processed and stored. Email marketing is a sub-area of online marketing. It involves sending news or general information about a company, products or services by email to a specific group of people who are interested in it.

If you wish to participate in our email marketing (usually via newsletter), you normally only need to register with your email address. To do this, fill out an online form and submit it. However, we may also ask you for your title and name so that we can address you personally.

Newsletter registration generally works using the ‘double opt-in’ procedure. After you have registered for our newsletter on our website, you will receive an email asking you to confirm your newsletter subscription. This ensures that the email address belongs to you and that no one else has registered with a different email address. We or a notification tool used by us logs each individual registration. This is necessary so that we can prove that the registration process was carried out in accordance with the law. As a rule, the time of registration, the time of confirmation of registration and your IP address are stored. In addition, any changes you make to your stored data are also logged.

Why do we use email marketing?

We naturally want to stay in touch with you and keep you up to date with the most important news about our company. To do this, we use email marketing – often referred to simply as a ‘newsletter’ – as an essential part of our online marketing. If you agree or it is permitted by law, we will send you newsletters, system emails or other notifications by email. When we use the term ‘newsletter’ in the following text, we mainly refer to emails that are sent on a regular basis. Of course, we do not want to bother you with our newsletters in any way. That is why we always strive to provide only relevant and interesting content. This allows you to learn more about our company, our services or our products. As we are constantly improving our offerings, our newsletter will also keep you informed about any news or special, lucrative promotions we may be offering. If we commission a service provider that offers a professional mailing tool for our email marketing, we do so in order to provide you with fast and secure newsletters. The purpose of our email marketing is to inform you about new offers and to help us achieve our business goals.

What data is processed?

When you subscribe to our newsletter via our website, you confirm your membership in an email list by email. In addition to your IP address and email address, your title, name, address and telephone number may also be stored. However, this will only happen if you consent to this data storage. The data marked as such is necessary for you to participate in the service offered. Providing this information is voluntary, but if you do not provide it, you will not be able to use the service. In addition, information about your device or your preferred content on our website may also be stored. You can find more information about data storage when you visit a website in the section ‘Automatic data storage’. We record your declaration of consent so that we can always prove that it complies with our laws.

Duration of data processing

If you unsubscribe from our email/newsletter distribution list, we may store your address for up to three years on the basis of our legitimate interests so that we can still prove your consent at that time. We may only process this data if we need to defend ourselves against any claims.

However, if you confirm that you have given us your consent to subscribe to the newsletter, you can submit an individual deletion request at any time. If you permanently withdraw your consent, we reserve the right to store your email address in a block list. As long as you have voluntarily subscribed to our newsletter, we will of course retain your email address.

Right of objection

If you really cannot find the link in the newsletter, please contact us by email and we will unsubscribe you from the newsletter immediately.

Legal basis

Our newsletter is sent on the basis of your consent (Article 6(1)(a) GDPR). This means that we may only send you a newsletter if you have actively subscribed to it beforehand. If applicable, we may also send you advertising messages if you have become our customer and have not objected to the use of your email address for direct marketing.

Information about specific email marketing services and how they process personal data can be found in the following sections, if available.

Mailjet Privacy Policy

Mailjet Privacy Policy Summary

👥 Data subjects: Newsletter subscribers

🤝 Purpose: Direct advertising by email, notification of relevant events

📓 Data processed: Data entered during registration, but at least the email address.

📅 Storage period: the data will be deleted once the purpose has been fulfilled

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Mailjet?

We use Mailjet, an email marketing service, on our website. The service provider is the German company Mailjet GmbH, Alt-Moabit 2, 10557 Berlin, Germany.

Mailjet was founded in 2010 by Julien Tartarin, Wilfried Durand and Thibaud Elzière to provide businesses with a service for sending, receiving and tracking emails. Since its inception, the company has grown steadily and offers features such as creating attractive email templates, segmenting target groups and measuring campaign performance.

When you use Mailjet, personal data such as your IP address, geographical data or contact details may be collected, stored and processed. In this privacy policy, we explain in more detail how Mailjet processes data so that you are fully informed.

Why do we use Mailjet on our website?

We primarily use the email marketing service to stay in touch with you and to send you the most important news quickly and easily. We always look for the simplest and best solutions for our marketing activities. That is why we chose Mailjet’s service. Although the software is very easy to use, it offers a large number of helpful features.

With Mailjet, we can customise our newsletters and adapt them to our corporate design. Mailjet also offers us useful analysis options. For example, we can see whether and when the newsletter was opened. The software also recognises which links you click on. This information helps us to tailor our offering better to your interests and wishes. Ultimately, we want to offer you a service that supports you in your endeavours.

What data is processed by Mailjet?

When you subscribe to our newsletter via our website, you confirm your membership in a Mailjet email list by email. To enable Mailjet to verify that you have registered with the ‘list provider’, the date of registration, the time and your IP address are stored.

With the help of Mailjet, we can always keep you up to date and inform you first-hand about what is happening in our company. However, you should be aware that when you subscribe to the newsletter, all data you enter (such as your email address or your first and last name) will be stored and managed on our server and by Mailjet. This also includes personal data. During the registration process, you also agree that we may send you the newsletter and you will be referred to this privacy policy. Furthermore, data such as your click behaviour in the newsletter may also be processed. This information is used to send you emails and enable certain other Mailjet functions (such as evaluating the newsletter).

How long and where is the data stored?

In principle, the data is deleted by Mailjet when it is no longer needed for its own purposes. There are, of course, exceptions, especially if legal obligations require longer storage of the data. Web server logs containing your IP address and technical data are also deleted by Mailjet when you unsubscribe from our newsletter. According to Mailjet’s privacy policy, personal data will be deleted within a maximum of 90 days after a request for deletion.

Right to object

You can unsubscribe from our newsletter at any time. To do so, simply revoke your consent to subscribe to the newsletter. This usually takes only a few seconds or one or two clicks. In most cases, you will find a link to unsubscribe from the newsletter at the end of each email. If you cannot find the link in the newsletter, please contact us by email and we will unsubscribe you from the newsletter immediately. After unsubscribing, your personal data will be deleted from our server and from Mailjet’s servers. You have the right to obtain information about your stored data free of charge and, if necessary, the right to have it deleted, blocked or corrected.

Legal basis

If you have consented to the use of Mailjet, the legal basis for the corresponding data processing is this consent. This consent constitutes the legal basis for the processing of personal data, as may occur during collection by Mailjet, in accordance with Art. 6 para. 1 lit. a GDPR (consent).

We also have a legitimate interest in using Mailjet to optimise our online service and to design attractive and informative newsletters for you. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). If consent is not required, the newsletter will be sent on the basis of the legitimate interest in direct marketing (Article 6 para. 1 lit. f), provided this is legally permitted. We record your registration process so that we can always prove that it complies with our laws.

You can find out more about the data processed by Mailjet in the privacy policy at https://www.mailjet.com/de/rechtliches/datenschutzerklaerung/.

Online marketing Introduction

Online marketing privacy policy summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Evaluation of visitor information to optimise the website.

📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. Personal data such as your name or email address may also be processed. You can find more details on this in the online marketing tool used.

📅 Storage period: depends on the online marketing tools used

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is online marketing?

Online marketing refers to all measures carried out online to achieve marketing goals such as increasing brand awareness or closing a business deal. Furthermore, our online marketing measures aim to draw people’s attention to our website. We therefore use online marketing to show our offering to many interested people. This mostly involves online advertising, content marketing or search engine optimisation. In order to use online marketing efficiently and in a targeted manner, personal data is also stored and processed. On the one hand, the data helps us to show our content only to those people who are actually interested in it, and on the other hand, we can measure the advertising success of our online marketing measures.

Why do we use online marketing tools?

We want to show our website to everyone who is interested in what we offer. We are aware that this is not possible without deliberately implemented measures. That is why we do online marketing. There are various tools that make our online marketing work easier and also provide us with suggestions for improvement based on data. This allows us to tailor our campaigns more precisely to our target group. The purpose of these online marketing tools is therefore ultimately to optimise our offering.

What data is processed?

To ensure that our online marketing works and that the success of the measures can be measured, user profiles are created and data is stored in cookies (small text files), for example. With the help of this data, we can not only place advertisements in the traditional sense, but also display our content directly on our website in the way that you prefer. There are various third-party tools that offer these functions and also collect and store data from you accordingly. The cookies mentioned above store information such as which pages you have visited on our website, how long you have viewed these pages, which links or buttons you have clicked on, or which website you came from. Technical information may also be stored, such as your IP address, which browser you are using, which device you are using to visit our website, or the time at which you accessed our website and when you left it. If you have consented to us also determining your location, we can also store and process this information.

Your IP address is stored in pseudonymised form (i.e. shortened). Unique data that directly identifies you as a person, such as your name, address or email address, is also only stored in pseudonymised form as part of advertising and online marketing processes. This means that we cannot identify you as a person, but only have the pseudonymised, stored information in the user profiles.

The cookies may also be used, analysed and used for advertising purposes on other websites that use the same advertising tools. The data may then also be stored on the servers of the advertising tool providers.

In exceptional cases, unique data (names, email addresses, etc.) may also be stored in the user profiles. This storage occurs, for example, if you are a member of a social media channel that we use for our online marketing measures and the network links data previously collected with the user profile.

For all advertising tools we use that store your data on their servers, we only ever receive summarised information and never data that identifies you as an individual. The data only shows how well advertising measures have worked. For example, we can see which measures prompted you or other users to visit our website and purchase a service or product there. Based on the analyses, we can improve our advertising in the future and tailor it even more precisely to the needs and wishes of interested persons.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. Data stored in cookies is stored for different lengths of time. Some cookies are deleted as soon as you leave the website, while others may be stored in your browser for several years. You can usually find detailed information about the individual cookies used by the provider in their respective privacy policies.

Right to object

You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. You can do this either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating or deleting cookies in your browser. The lawfulness of the processing until the withdrawal remains unaffected.

Since cookies are generally used in online marketing tools, we also recommend that you read our general privacy policy on cookies. To find out exactly which data is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

If you have consented to the use of third-party providers, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by online marketing tools.

We also have a legitimate interest in measuring online marketing measures in anonymised form in order to optimise our offering and measures with the help of the data obtained. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use the tools if you have given your consent.

Information on specific online marketing tools can be found in the following sections, if available.

Google Ad Manager Audience Extension Privacy Policy

We also use the advertising strategy tool Google Ad Manager Audience Extension for our business. The service provider is the American company Google Inc. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Google also uses standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the US) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can find out more about the data processed through the use of Google Ad Manager Audience Extension in the privacy policy at https://policies.google.com/privacy?hl=de.

Google Ads (Google AdWords) Conversion Tracking Privacy Policy

Google Ads (Google AdWords) Conversion Tracking Privacy Policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Economic success and optimisation of our services.

📅 Storage duration: Conversion cookies usually expire after 30 days and do not transmit any personal data

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Ads conversion tracking?

We use Google Ads (formerly Google AdWords) as an online marketing measure to advertise our products and services. In this way, we want to make more people aware of the high quality of our offers on the Internet. As part of our advertising measures through Google Ads, we use conversion tracking from Google Inc. on our website. In Europe, however, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With the help of this free tracking tool, we can better tailor our advertising to your interests and needs. In the following article, we will explain in more detail why we use conversion tracking, what data is stored and how you can prevent this data from being stored.

Google Ads (formerly Google AdWords) is the in-house online advertising system of Google Inc. We are convinced of the quality of our offering and want as many people as possible to discover our website. Google Ads offers the best platform for this in the online sector. Of course, we also want to gain an accurate overview of the cost-benefit factor of our advertising campaigns. That is why we use the conversion tracking tool from Google Ads.

But what exactly is a conversion? A conversion occurs when you go from being a purely interested website visitor to an active visitor. This always happens when you click on our ad and then perform another action, such as visiting our website. With Google’s conversion tracking tool, we record what happens after a user clicks on our Google Ads ad. For example, we can see whether products are purchased, services are used or whether users have signed up for our newsletter.

Why do we use Google Ads conversion tracking on our website?

We use Google Ads to draw attention to our offering on other websites. The aim is to ensure that our advertising campaigns only reach people who are interested in our offerings. The conversion tracking tool allows us to see which keywords, ads, ad groups and campaigns lead to the desired customer actions. We can see how many customers interact with our ads on a device and then make a conversion. This data allows us to calculate our cost-benefit factor, measure the success of individual advertising measures and, as a result, optimise our online marketing measures. We can also use the data obtained to make our website more interesting for you and tailor our advertising even more specifically to your needs.

What data is stored in Google Ads conversion tracking?

We have integrated a conversion tracking tag or code snippet on our website to better analyse certain user actions. When you click on one of our Google Ads, the ‘Conversion’ cookie is stored on your computer (usually in your browser) or mobile device by a Google domain. Cookies are small text files that store information on your computer.

Here is the data for the most important cookies for Google conversion tracking:

Name: Conversion

Value: EhMI_aySuoyv4gIVled3Ch0llweVGAEgt-mr6aXd7dYlSAGQ113031310-3

Purpose: This cookie stores every conversion you make on our site after you have come to us via a Google Ad.

Expiration date: after 3 months

Name: _gac

Value: 1.1558695989.EAIaIQobChMIiOmEgYO04gIVj5AYCh2CBAPrEAAYASAAEgIYQfD_BwE

Purpose: This is a classic Google Analytics cookie and is used to record various actions on our website.

Expiration date: after 3 months

Note: The _gac cookie only appears in connection with Google Analytics. The above list is not exhaustive, as Google regularly uses other cookies for analytical evaluation.

As soon as you complete an action on our website, Google recognises the cookie and stores your action as a conversion. As long as you are browsing our website and the cookie has not yet expired, we and Google recognise that you found us via our Google Ads advertisement. The cookie is read and sent back to Google Ads with the conversion data. It is also possible that other cookies are used to measure conversions. Google Ads conversion tracking can be further refined and improved using Google Analytics. For ads that Google displays in various locations on the web, cookies with the name ‘__gads’ or ‘_gac’ may be set under our domain. Since September 2017, various campaign information has been stored by analytics.js using the _gac cookie. The cookie stores this data as soon as you visit one of our pages for which automatic tagging by Google Ads has been set up. Unlike cookies set for Google domains, Google can only read these conversion cookies when you are on our website. We do not collect or receive any personal data. We receive a report from Google with statistical evaluations. This tells us, for example, the total number of users who clicked on our ad and which advertising measures were well received.

How long and where is the data stored?

At this point, we would like to point out that we have no influence on how Google uses the data it collects. According to Google, the data is encrypted and stored on secure servers. In most cases, conversion cookies expire after 30 days and do not transmit any personal data. Cookies named ‘Conversion’ and ‘_gac’ (used in connection with Google Analytics) have an expiry date of 3 months.

How can I delete my data or prevent data storage?

You have the option of not participating in Google Ads conversion tracking. If you disable the Google conversion tracking cookie via your browser, you will block conversion tracking. In this case, you will not be included in the statistics of the tracking tool. You can change your cookie settings in your browser at any time.

This works slightly differently for each browser. Under the ‘Cookies’ section, you will find the relevant links to the instructions for the most popular browsers.

If you do not want cookies at all, you can set your browser to always inform you when a cookie is about to be set. This allows you to decide for each individual cookie whether you want to allow it or not. By downloading and installing this browser plug-in at https://support.google.com/ads/answer/7395996, all ‘advertising cookies’ will also be deactivated. Please note that by deactivating these cookies, you will not prevent advertisements, only personalised advertising.

Legal basis

If you have consented to the use of Google Ads Conversion Tracking, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by Google Ads Conversion Tracking.

We also have a legitimate interest in using Google Ads Conversion Tracking to optimise our online service and marketing measures. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use Google Ads Conversion Tracking if you have given your consent.

Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Google also uses standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

If you would like to learn more about data protection at Google, we recommend Google’s general privacy policy: https://policies.google.com/privacy?hl=de.

Google Ads Similar Audiences Privacy Policy

We also use the Google Ads Similar Audiences advertising tool. The service provider is the American company Google LLC. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible.

Google processes your data in the USA, among other places. Google LLC is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information at:

https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Google also uses standard contractual clauses (= Art. 46 (2) and (3) GDPR). These model templates from the EU Commission are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the US) and stored there. Through the EU-US Data Privacy Framework and the standard contractual clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the US. The relevant implementing decision and standard contractual clauses can be found here:

https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

For more information about the data processed through the use of Google Ads Similar Audiences, please visit https://policies.google.com/privacy.

Google AdSense Privacy Policy

Google AdSense Privacy Policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Economic success and optimisation of our services.

📓 Data processed: Access statistics containing data such as access locations, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. Personal data such as your name or email address may also be processed.

📅 Storage period: depending on the cookies used and the data stored

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google AdSense?

We use Google AdSense on this website. This is an advertising programme provided by Google Inc. In Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google AdSense allows us to display advertisements on this website that are relevant to our content. This enables us to offer you advertisements that ideally represent added value for you. In this privacy policy regarding Google AdSense, we explain why we use Google AdSense on our website, which of your data is processed and stored, and how you can prevent this data storage.

The Google AdSense advertising programme has been around since 2003. Unlike Google Ads (formerly Google AdWords), you cannot place advertisements yourself. Google AdSense displays advertisements on websites such as ours. The biggest advantage of this advertising service compared to some others is that Google AdSense only shows you advertisements that are relevant to our content. Google has its own algorithm that calculates which advertisements you see. Of course, we only want to show you advertisements that interest you and offer added value. Google uses your interests and user behaviour, as well as our offering, to determine which advertisements are suitable for our website and our users. We would like to take this opportunity to mention that we are not responsible for the selection of advertisements. We only provide the advertising space on our website. Google selects the advertisements that are displayed. Since August 2013, the advertisements have also been adapted to the respective user interface. This means that regardless of whether you visit our website from your smartphone, PC or laptop, the advertisements will be adapted to your device.

Why do we use Google AdSense on our website?

Running a high-quality website requires a lot of dedication and hard work. Basically, we are never finished working on our website. We always try to maintain our site and keep it as up to date as possible. Of course, we also want this work to be economically successful. That is why we have decided to use advertisements as a source of income. However, the most important thing for us is that these advertisements do not interfere with your visit to our website. With the help of Google AdSense, you will only be shown advertisements that match our topics and your interests.

Similar to Google indexing for a website, a bot examines the relevant content and offers on the page. The advertisements are then adapted in terms of content and presented. In addition to content overlaps between the advertisement and the website offering, AdSense also supports interest-based targeting. This means that Google also uses your data to offer you advertisements tailored to your interests. This means that you receive advertisements that ideally offer you real added value, and we have a higher chance of earning a little something.

What data is stored by Google AdSense?

Cookies are used, among other things, to enable Google AdSense to display advertisements tailored to you. Cookies are small text files that store certain information on your computer.

In AdSense, cookies are used to improve advertising. Cookies do not contain any personally identifiable information. However, it should be noted that Google considers data such as ‘pseudonymous cookie IDs’ (name or other identifying feature is replaced by a pseudonym) or IP addresses to be non-personally identifiable information. However, under the GDPR, this data may be considered personal data. Google AdSense sends a cookie to your browser after every impression (this is always the case when you see an ad), every click and every other activity that leads to a call to the Google AdSense servers. If the browser accepts the cookie, it is stored there.

Third-party providers may place and read cookies in your browser or use web beacons to store data that they receive through the delivery of advertisements on the website as part of AdSense. Web beacons are small graphics that perform log file analysis and record the log file. This analysis enables statistical evaluation for online marketing.

Google may use these cookies to collect certain information about your user behaviour on our website. This includes:

Information about how you interact with an advertisement (clicks, impressions, mouse movements)
Information about whether an advertisement has already appeared in your browser at an earlier point in time. This data helps to prevent an advertisement from being displayed to you more frequently.

Google analyses and evaluates the data on the advertising material displayed and your IP address. Google primarily uses the data to measure the effectiveness of an advertisement and to improve the advertising offer. This data is not linked to personal data that Google may have about you from other Google services.

Below, we describe the cookies that Google AdSense uses for tracking purposes. We refer to a test website that has only installed Google AdSense:

Name: uid

Value: 891269189113031310-8

Purpose: The cookie is stored under the domain adform.net. It provides a uniquely assigned, machine-generated user ID and collects data about activity on our website.

Expiration date: after 2 months

Name: C

Value: 1

Purpose: This cookie identifies whether your browser accepts cookies. The cookie is stored under the domain track.adform.net.

Expiration date: after 1 month

Name: cid

Value: 8912691894970695056,0,0,0,0

Purpose: This cookie is stored under the domain track.adform.net, stands for client ID and is used to improve advertising for you. It can forward more relevant advertising to the visitor and helps to improve reports on campaign performance.

Expiration date: after 2 months

Name: IDE

Value: zOtj4TWxwbFDjaATZ2TzNaQmxrU113031310-1

Purpose: The cookie is stored under the domain doubleclick.net. It is used to register your actions after viewing or clicking on the advertisement. This allows us to measure how well an advertisement is received by our visitors.

Expiration date: after 1 month

Name: test_cookie

Value: not specified

Purpose: The ‘test_cookie’ is used to check whether your browser supports cookies. The cookie is stored under the domain doubleclick.net.

Expiration date: after 1 month

Name: CT592996

Value:733366

Purpose: Stored under the domain adform.net. The cookie is set as soon as you click on an advertisement. We were unable to obtain more detailed information about the use of this cookie.

Expiration date: after one hour

Note: This list is not exhaustive, as Google’s experience has shown that it changes its choice of cookies from time to time.

How long and where is the data stored?

Google collects your IP address and various activities you perform on the website. Cookies store this information about your interactions on our website. According to Google, the company collects and stores the information provided in a secure manner on its own Google servers in the United States.

If you do not have a Google account or are not logged in, Google usually stores the collected data with a unique identifier (ID) on your browser. The unique IDs stored in cookies are used, for example, to ensure personalised advertising. If you are logged into a Google account, Google may also collect personal data.

You can delete some of the data that Google stores at any time (see next section). Much of the information stored in cookies is automatically deleted after a certain period of time. However, there is also data that Google stores for a longer period of time. This is the case if Google needs to store certain data for an indefinite period of time for economic or legal reasons.

How can I delete my data or prevent data storage?

You always have the option to delete or disable cookies on your computer. How exactly this works depends on your browser. Under the ‘Cookies’ section, you will find the relevant links to the instructions for the most popular browsers.

If you do not want cookies at all, you can set your browser to always inform you when a cookie is about to be set. This allows you to decide for each individual cookie whether you want to allow it or not. By downloading and installing this browser plug-in at https://support.google.com/ads/answer/7395996, all ‘advertising cookies’ will also be deactivated. Please note that deactivating these cookies does not prevent advertisements, only personalised advertising.

If you have a Google account, you can disable personalised advertising on the website https://adssettings.google.com/authenticated. You will still see ads, but they will no longer be tailored to your interests. However, the ads will still be displayed based on a few factors, such as your location, browser type and search terms used.

Legal basis

If you have consented to the use of Google AdSense, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by Google AdSense.

We also have a legitimate interest in using Google AdSense to optimise our online service and marketing measures. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use Google AdSense if you have given your consent.

Google also processes your data in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/

You can find out what data Google collects and what it uses this data for at https://policies.google.com/privacy?hl=de.

Google Marketing Platform (formerly DoubleClick) Privacy Policy

We use Google Marketing Platform products on our website. These include various marketing tools such as Data Studio, Surveys, Campaign Manager 360, Display & Video 360 and Search Ads 360. The service provider is the American company Google Inc. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes your data in the United States, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the United States. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can find out more about the data processed through the use of Google Marketing Platform products in the privacy policy at https://policies.google.com/privacy?hl=de.

Cookie Consent Management Platform Introduction

Cookie Consent Management Platform Summary

👥 Data subjects: Website visitors

🤝 Purpose: Obtaining and managing consent for certain cookies and thus the use of certain tools

📓 Data processed: Data for managing cookie settings, such as IP address, time of consent, type of consent, individual consents. You can find more details on this in the tool used.

📅 Storage period: Depends on the tool used; you should expect periods of several years

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is a cookie consent management platform?

We use consent management platform (CMP) software on our website to help us and you handle scripts and cookies correctly and securely. The software automatically creates a cookie pop-up, scans and checks all scripts and cookies, provides the cookie consent required by data protection law, and helps us and you keep track of all cookies. Most cookie consent management tools identify and categorise all existing cookies. As a website visitor, you then decide for yourself whether and which scripts and cookies you allow or do not allow. The following graphic illustrates the relationship between the browser, web server and CMP.

Why do we use a cookie management tool?

Our goal is to offer you the best possible transparency in the area of data protection. We are also legally obliged to do so. We want to inform you as clearly as possible about all tools and cookies that can store and process your data. It is also your right to decide for yourself which cookies you accept and which you do not. In order to grant you this right, we first need to know exactly which cookies have landed on our website. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we are aware of all cookies and can provide you with information about them in accordance with the GDPR. You can then accept or reject cookies via the consent system.

What data is processed?

Our cookie management tool allows you to manage each individual cookie yourself and gives you complete control over the storage and processing of your data. Your consent is stored so that we do not have to ask you for it every time you visit our website and so that we can prove your consent if required by law. This is stored either in an opt-in cookie or on a server. The storage period for your cookie consent varies depending on the provider of the cookie management tool. In most cases, this data (such as pseudonymous user ID, time of consent, details of cookie categories or tools, browser, device information) is stored for up to two years.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. Data stored in cookies is stored for varying lengths of time. Some cookies are deleted as soon as you leave the website, while others may remain stored in your browser for several years.

The exact duration of data processing depends on the tool used, but in most cases you should expect a storage period of several years. You can usually find detailed information about the duration of data processing in the respective privacy policies of the individual providers.

Right to object

You also have the right and the option to revoke your consent to the use of cookies at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating or deleting cookies in your browser.

Information on specific cookie management tools, if available, can be found in the following sections.

Legal basis

If you agree to cookies, personal data about you will be processed and stored via these cookies. If we are permitted to use cookies with your consent (Article 6(1)(a) GDPR), this consent also constitutes the legal basis for the use of cookies and the processing of your data. In order to manage consent to cookies and to enable you to give your consent, we use cookie consent management platform software. The use of this software enables us to operate the website in an efficient and legally compliant manner, which constitutes a legitimate interest (Article 6(1)(f) GDPR).

CookieYes privacy policy

We use the CookieYes cookie consent management platform for our website. The service provider is the British company CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom.

Due to the United Kingdom’s withdrawal from the European Union, the GDPR no longer applies to data transfers to that country. However, the European Commission has decided, on the basis of Article 45 GDPR, that the United Kingdom offers a level of protection that is adequate in comparison to the GDPR. Data transfers to that country are therefore permitted. You can view the decision here (download): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D1772

You can find out more about the data processed through the use of CookieYes in the privacy policy at https://www.cookieyes.com/privacy-policy/.

Security & Anti-Spam

Security & Anti-Spam Privacy Policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Cyber security

📓 Data processed: Data such as your IP address, name or technical data such as browser version

You can find more details below and in the individual privacy policy texts.

📅 Storage period: most data is stored until it is no longer required to fulfil the service

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is security & anti-spam software?

Security and anti-spam software helps protect you and us from various spam or phishing emails and other possible cyber attacks. Spam refers to unsolicited advertising emails sent in bulk. Such emails are also known as junk mail and can incur costs. Phishing emails are messages that aim to build trust through fake messages or websites in order to obtain personal data. Anti-spam software usually protects against unwanted spam messages or malicious emails that could infect your system with viruses. We also use general firewall and security systems to protect our computers from unwanted network attacks.

Why do we use security and anti-spam software?

We place particular emphasis on security on our website. After all, it’s not just about our security, but above all about yours. Unfortunately, cyber threats are now part of everyday life in the world of IT and the internet. Hackers often use cyber attacks to steal personal data from IT systems. That’s why a good defence system is absolutely essential. A security system monitors all incoming and outgoing connections to our network and computers. To achieve even greater security against cyber attacks, we use additional external security services in addition to the standardised security systems on our computers. This better prevents unauthorised data traffic and protects us from cyber crime.

What data is processed by security and anti-spam software?

The exact data that is collected and stored depends on the service in question. However, we always endeavour to use only programmes that collect data very sparingly or only store data that is necessary for the performance of the service offered. In principle, the service may store data such as your name, address, IP address, email address and technical data such as browser type or browser version. Performance and log data may also be collected in order to detect potential threats in good time. This data is processed within the scope of the services and in compliance with applicable laws. This also includes the GDPR for US providers (via the standard contractual clauses). In some cases, these security services also work with third-party providers who may store and/or process data on our behalf and in accordance with our privacy policy and other security measures. Data is usually stored using cookies.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. For example, security programmes store data until you or we revoke the data storage. In general, personal data is only stored for as long as is absolutely necessary for the provision of the services. In many cases, unfortunately, we do not have precise information from the providers about the length of storage.

Right to object

You also have the right and the option to revoke your consent to the use of cookies or third-party security software at any time. You can do this either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating or deleting cookies in your browser.

As cookies may also be used by such security services, we recommend that you read our general privacy policy on cookies. To find out exactly which data is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

We use the security services primarily on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) in a good security system against various cyber attacks.

Certain processing operations, in particular the use of cookies and security functions, require your consent. If you have consented to the processing and storage of your data by integrated security services, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Most of the services we use set cookies in your browser to store data. We therefore recommend that you read our privacy policy on cookies carefully and review the privacy policy or cookie policy of the respective service provider.

Information on specific tools can be found in the following sections, if available.

Google reCAPTCHA Privacy Policy

Google reCAPTCHA Privacy Policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Optimisation of our services and protection against cyber attacks

📓 Processed data: Data such as IP address, browser information, your operating system, limited location and usage data

You can find more details below in this privacy policy.

📅 Storage duration: depending on the stored data

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is reCAPTCHA?

Our primary goal is to secure and protect our website for you and for us in the best possible way. To ensure this, we use Google reCAPTCHA from Google Inc. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With reCAPTCHA, we can determine whether you are a real person and not a robot or other spam software. By spam, we mean any unsolicited information sent to us electronically. With traditional CAPTCHAs, you usually had to solve text or image puzzles for verification purposes. With Google’s reCAPTCHA, we usually don’t have to bother you with such puzzles. In most cases, it is sufficient to simply tick a box to confirm that you are not a bot. With the new Invisible reCAPTCHA version, you don’t even have to tick a box anymore. You can find out exactly how this works and, above all, what data is used for this purpose in the course of this privacy policy.

reCAPTCHA is a free captcha service provided by Google that protects websites from spam software and abuse by non-human visitors. This service is most commonly used when you fill out forms on the Internet. A captcha service is a type of automatic Turing test designed to ensure that an action on the Internet is performed by a human and not by a bot. In the classic Turing test (named after the computer scientist Alan Turing), a human determines the difference between a bot and a human. With captchas, this is also done by a computer or a software programme. Classic captchas work with small tasks that are easy for humans to solve but present considerable difficulties for machines. With reCAPTCHA, you no longer have to actively solve puzzles. The tool uses modern risk techniques to distinguish humans from bots. All you have to do is tick the ‘I am not a robot’ text box, or with Invisible reCAPTCHA, even that is no longer necessary. With reCAPTCHA, a JavaScript element is embedded in the source code and the tool then runs in the background and analyses your user behaviour. The software uses these user actions to calculate a so-called captcha score. Google uses this score to calculate the probability that you are a human being before you even enter the captcha. reCAPTCHA and captchas in general are always used when bots could manipulate or misuse certain actions (such as registrations, surveys, etc.).

Why do we use reCAPTCHA on our website?

We only want real people on our site. Bots and spam software of all kinds can stay at home. That’s why we do everything we can to protect ourselves and offer you the best possible user experience. For this reason, we use Google reCAPTCHA from Google. This allows us to be fairly certain that we remain a ‘bot-free’ website. When you use reCAPTCHA, data is sent to Google to determine whether you are actually a human being. reCAPTCHA therefore serves to protect our website and, consequently, your security. Without reCAPTCHA, for example, a bot could register as many email addresses as possible during registration in order to subsequently ‘spam’ forums or blogs with unwanted advertising content. With reCAPTCHA, we can prevent such bot attacks.

What data is stored by reCAPTCHA?

reCAPTCHA collects personal data from users to determine whether the actions on our website are actually performed by humans. This means that the IP address and other data required by Google for the reCAPTCHA service may be sent to Google. IP addresses are almost always shortened within the member states of the EU or other signatory states to the Agreement on the European Economic Area before the data reaches a server in the USA. The IP address is not combined with other data from Google unless you are logged into your Google account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services (YouTube, Gmail, etc.) are already stored on your browser. reCAPTCHA then sets an additional cookie in your browser and captures a snapshot of your browser window.

The following list of collected browser and user data is not exhaustive. Rather, they are examples of data that, to our knowledge, are processed by Google.

Referrer URL (the address of the page from which the visitor comes)
IP address (e.g. 256.123.123.1)
Information about the operating system (the software that enables your computer to function. Well-known operating systems are Windows, Mac OS X or Linux)
Cookies (small text files that store data in your browser)
Mouse and keyboard behaviour (every action you perform with your mouse or keyboard is stored)
Date and language settings (the language or date you have set on your PC is stored)
All JavaScript objects (JavaScript is a programming language that allows websites to adapt to the user. JavaScript objects can collect all kinds of data under one name)
Screen resolution (shows how many pixels the image display consists of)

It is undisputed that Google uses and analyses this data even before you click on the ‘I am not a robot’ checkbox. With the Invisible reCAPTCHA version, you don’t even have to tick the box, and the entire recognition process runs in the background. Google does not provide detailed information about exactly how much and what data it stores.

The following cookies are used by reCAPTCHA: We refer here to the reCAPTCHA demo version from Google at https://www.google.com/recaptcha/api2/demo. All these cookies require a unique identifier for tracking purposes. Here is a list of cookies that Google reCAPTCHA has set on the demo version:

Name: IDE

Value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-113031310-8

Purpose: This cookie is set by DoubleClick (also owned by Google) to record and report a user’s actions on the website when interacting with advertisements. This allows the effectiveness of advertising to be measured and appropriate optimisation measures to be taken. IDE is stored in browsers under the domain doubleclick.net.

Expiration date: after one year

Name: 1P_JAR

Value: 2019-5-14-12

Purpose: This cookie collects statistics on website usage and measures conversions. A conversion occurs, for example, when a user becomes a buyer. The cookie is also used to display relevant advertisements to users. Furthermore, the cookie prevents a user from seeing the same advertisement more than once.

Expiration date: after one month

Name: ANID

Value: U7j1v3dZa1130313100xgZFmiqWppRWKOr

Purpose: We were unable to find much information about this cookie. In Google’s privacy policy, the cookie is mentioned in connection with ‘advertising cookies’ such as ‘DSID’, ‘FLC’, “AID” and ‘TAID’. ANID is stored under the domain google.com.

Expiration date: after 9 months

Name: CONSENT

Value: YES+AT.de+20150628-20-0

Purpose: The cookie stores the status of a user’s consent to the use of various Google services. CONSENT also serves security purposes to verify users, prevent login fraud and protect user data from unauthorised attacks.

Expiration date: after 19 years

Name: NID

Value: 0WmuWqy113031310zILzqV_nmt3sDXwPeM5Q

Purpose: NID is used by Google to tailor advertisements to your Google search. With the help of the cookie, Google ‘remembers’ your most frequently entered search queries or your previous interaction with advertisements. This ensures that you always receive tailored advertisements. The cookie contains a unique ID to collect the user’s personal preferences for advertising purposes.

Expiration date: after 6 months

Name: DV

Value: gEAABBCjJMXcI0dSAAAANbqc113031310-4

Purpose: This cookie is set as soon as you tick the ‘I am not a robot’ box. The cookie is used by Google Analytics for personalised advertising. DV collects information in anonymised form and is also used to differentiate between users.

Expiration date: after 10 minutes

Note: This list is not exhaustive, as Google’s experience has shown that it regularly changes its selection of cookies.

How long and where is the data stored?

By inserting reCAPTCHA, data from you is transferred to the Google server. Google does not clearly state where exactly this data is stored, even after repeated requests. Without confirmation from Google, it can be assumed that data such as mouse interaction, time spent on the website or language settings are stored on European or American Google servers. The IP address that your browser transmits to Google is not merged with other Google data from other Google services. However, if you are logged into your Google account while using the reCAPTCHA plug-in, the data will be merged. In this case, the different privacy policy of Google applies.

How can I delete my data or prevent data storage?

If you do not want any data about you and your behaviour to be transmitted to Google, you must log out of Google completely and delete all Google cookies before visiting our website or using the reCAPTCHA software. As a rule, data is automatically transmitted to Google as soon as you visit our site. To delete this data, you must contact Google Support at https://support.google.com/?hl=de&tid=113031310.

By using our website, you consent to Google LLC and its agents automatically collecting, processing and using data.

Please note that when using this tool, your data may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data may therefore not simply be transferred to, stored and processed in secure third countries unless there are appropriate safeguards (such as EU standard contractual clauses) between us and the non-European service provider.

Legal basis

If you have consented to the use of Google reCAPTCHA, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by Google reCAPTCHA.

We also have a legitimate interest in using Google reCAPTCHA to optimise our online service and make it more secure. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use Google reCAPTCHA if you have given your consent.

In addition, Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can find out more about reCAPTCHA on Google’s web developer page at https://developers.google.com/recaptcha/. Although Google goes into more detail about the technical development of reCAPTCHA here, you will not find any specific information about data storage and data protection issues. A good overview of the basic use of data at Google can be found in the company’s privacy policy at https://policies.google.com/privacy.

Audio & video introduction

Audio & video privacy policy summary

👥 Affected parties: Visitors to the website

🤝 Purpose: Optimisation of our services

📓 Processed data: Data such as contact details, user behaviour data, information about your device and your IP address may be stored.

You can find more details below in the relevant privacy policy texts.

📅 Storage period: Data remains stored for as long as it is necessary for the purpose of the service.

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are audio and video elements?

We have integrated audio and video elements into our website so that you can watch videos or listen to music/podcasts directly via our website. The content is provided by service providers. All content is therefore also obtained from the providers’ respective servers.

These are integrated functional elements of platforms such as YouTube, Vimeo or Spotify. The use of these portals is generally free of charge, but paid content may also be published. With the help of these integrated elements, you can listen to or view the respective content via our website.

If you use audio or video elements on our website, your personal data may also be transmitted to the service providers, processed and stored.

Why do we use audio and video elements on our website?

Of course, we want to provide you with the best possible service on our website. And we are aware that content is no longer conveyed solely through text and static images. Instead of simply providing you with a link to a video, we offer you audio and video formats directly on our website that are entertaining or informative, and ideally both. This enhances our service and makes it easier for you to access interesting content. In addition to our text and images, we therefore also offer video and/or audio content.

What data is stored by audio and video elements?

When you visit a page on our website that has an embedded video, for example, your server connects to the service provider’s server. In doing so, data from you is also transferred to the third-party provider and stored there. Some data is collected and stored regardless of whether you have an account with the third-party provider or not. This usually includes your IP address, browser type, operating system and other general information about your device. Most providers also collect information about your web activity. This includes, for example, session duration, bounce rate, which buttons you clicked on or which website you used to access the service. All this information is usually stored via cookies or pixel tags (also known as web beacons). Pseudonymised data is usually stored in cookies in your browser. You can always find out exactly which data is stored and processed in the privacy policy of the respective provider.

Duration of data processing

You can find out exactly how long the data is stored on the servers of third-party providers either further down in the privacy policy of the respective tool or in the privacy policy of the provider. As a matter of principle, personal data is only processed for as long as is absolutely necessary for the provision of our services or products. This also applies to third-party providers as a rule. In most cases, you can assume that certain data will be stored on the servers of third-party providers for several years. Data can be stored for different lengths of time, especially in cookies. Some cookies are deleted as soon as you leave the website, while others may remain stored in your browser for several years.

Right to object

You also have the right and option to withdraw your consent to the use of cookies or third-party providers at any time. You can do this either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating or deleting cookies in your browser. The legality of the processing until withdrawal remains unaffected.

Since cookies are usually also used by the integrated audio and video functions on our website, you should also read our general privacy policy on cookies. You can find more detailed information about the handling and storage of your data in the privacy policies of the respective third-party providers.

Legal basis

If you have consented to the processing and storage of your data by integrated audio and video elements, this consent constitutes the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, your data is also stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and good communication with you or other customers and business partners. However, we only use the integrated audio and video elements if you have given your consent.

YouTube privacy policy

YouTube Privacy Policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Optimisation of our services

📓 Data processed: Data such as contact details, data on user behaviour, information about your device and your IP address may be stored.

You can find more details below in this privacy policy.

📅 Storage duration: Data remains stored for as long as it is necessary for the purpose of the service.

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is YouTube?

We have integrated YouTube videos into our website. This allows us to present interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that has a YouTube video embedded in it, your browser automatically connects to the YouTube or Google servers. Various data is transferred during this process (depending on your settings). Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all data processing within the European Union.

Below, we will explain in more detail what data is processed, why we have integrated YouTube videos and how you can manage or delete your data.

On YouTube, users can watch, rate, comment on and upload videos free of charge. Over the last few years, YouTube has become one of the most important social media channels worldwide. To enable us to display videos on our website, YouTube provides a code snippet that we have incorporated into our site.

Why do we use YouTube videos on our website?

YouTube is the video platform with the most visitors and the best content. We strive to offer you the best possible user experience on our website. And, of course, interesting videos are a must. With the help of our embedded videos, we provide you with additional helpful content alongside our text and images. The embedded videos also make our website easier to find on the Google search engine. Even though we place advertisements via Google Ads, Google can only show these ads to people who are interested in our offers thanks to the data it collects.

What data is stored by YouTube?

As soon as you visit one of our pages that has a YouTube video embedded, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can usually associate your interactions on our website with your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet service provider. Additional data may include contact details, any ratings, sharing content via social media or adding it to your favourites on YouTube.

If you are not logged into a Google account or a YouTube account, Google stores data with a unique identifier linked to your device, browser or app. This ensures, for example, that your preferred language setting is retained. However, much interaction data cannot be stored because fewer cookies are set.

The following list shows cookies that were set in a browser test. We show cookies that are set without a YouTube account being logged in. We also show cookies that are set when an account is logged in. The list is not exhaustive because user data always depends on interactions on YouTube.

Name: YSC

Value: b9-CV6ojI5Y113031310-1

Purpose: This cookie registers a unique ID to store statistics about the video you have watched.

Expiration date: after the end of the session

Name: PREF

Value: f1=50000000

Purpose: This cookie also registers your unique ID. Google receives statistics via PREF about how you use YouTube videos on our website.

Expiration date: after 8 months

Name: GPS

Value: 1

Purpose: This cookie registers your unique ID on mobile devices to track your GPS location.

Expiration date: after 30 minutes

Name: VISITOR_INFO1_LIVE

Value: 95Chz8bagyU

Purpose: This cookie attempts to estimate the bandwidth of the user on our websites (with embedded YouTube videos).

Expiration date: after 8 months

Additional cookies that are set when you are logged in with your YouTube account:

Name: APISID

Value: zILlvClZSkqGsSwI/AU1aZI6HY7113031310-

Purpose: This cookie is used to create a profile of your interests. The data is used for personalised advertising.

Expiration date: after 2 years

Name: CONSENT

Value: YES+AT.de+20150628-20-0

Purpose: The cookie stores the status of a user’s consent to the use of various Google services. CONSENT also serves security purposes to verify users and protect user data from unauthorised attacks.

Expiration date: after 19 years

Name: HSID

Value: AcRwpgUik9Dveht0I

Purpose: This cookie is used to create a profile of your interests. This data helps to display personalised advertising.

Expiration date: after 2 years

Name: LOGIN_INFO

Value: AFmmF2swRQIhALl6aL…

Purpose: This cookie stores information about your login details.

Expiration date: after 2 years

Name: SAPISID

Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM

Purpose: This cookie works by uniquely identifying your browser and device. It is used to create a profile about your interests.

Expiration date: after 2 years

Name: SID

Value: oQfNKjAsI113031310-

Purpose: This cookie stores your Google account ID and your last login time in digitally signed and encrypted form.

Expiration date: after 2 years

Name: SIDCC

Value: AN0-TYuqub2JOcDTyL

Purpose: This cookie stores information about how you use the website and what advertisements you may have seen before visiting our site.

Expiration date: after 3 months

How long and where is the data stored?

The data that YouTube receives from you and processes is stored on Google’s servers. Most of these servers are located in America. At https://datacenters.google/, you can see exactly where the Google data centres are located. Your data is distributed across the servers. This makes the data faster to access and better protected against manipulation.

Google stores the collected data for different lengths of time. You can delete some data at any time, some is deleted automatically after a limited period of time, and some is stored by Google for longer periods of time. Some data (such as items from ‘My Activity’, photos or documents, products) stored in your Google Account will remain stored until you delete it. Even if you are not signed in to a Google Account, you can delete some data associated with your device, browser or app.

How can I delete my data or prevent data storage?

In principle, you can delete data in your Google account manually. With the automatic deletion feature for location and activity data introduced in 2019, information is stored for either 3 or 18 months, depending on your choice, and then deleted.

Regardless of whether you have a Google account or not, you can configure your browser to delete or disable cookies from Google.

This works differently depending on which browser you use. Under the ‘Cookies’ section, you will find the relevant links to the instructions for the most popular browsers.

If you do not want cookies at all, you can set your browser to notify you whenever a cookie is about to be set. This allows you to decide whether to accept or reject each individual cookie.

Legal basis

If you have consented to your data being processed and stored by integrated YouTube elements, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In principle, your data is also stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and good communication with you or other customers and business partners. However, we only use the integrated YouTube elements if you have given your consent. YouTube also sets cookies in your browser to store data.

We therefore recommend that you read our privacy policy on cookies carefully and review the privacy policy or cookie policy of the respective service provider. YouTube processes your data in the USA, among other places. YouTube and Google are active participants in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA.

You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Google also uses so-called standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the US) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

As YouTube is a subsidiary of Google, there is a joint privacy policy. If you would like to find out more about how your data is handled, we recommend that you read the privacy policy at https://policies.google.com/privacy?hl=de.

YouTube IFrame Player Privacy Policy

We also use the YouTube IFrame Player to embed videos on our website. The service provider is the American company Google Inc. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes your data in the USA, among other places. YouTube and Google are active participants in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can find out more about the data processed through the use of the YouTube IFrame Player in the privacy policy at https://policies.google.com/privacy?hl=de.

YouTube video widget privacy policy

We also use the YouTube video widget on our website. The service provider is the American company Google Inc. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes your data in the USA, among other places.

YouTube and Google are active participants in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can find out more about the data processed through the use of the YouTube video widget in the privacy policy at https://policies.google.com/privacy?hl=de.

Review platforms Introduction

Review platforms Summary

👥 Data subjects: Visitors to the website or a review platform

🤝 Purpose: Feedback on our products and/or services

📓 Data processed: Including IP address, email address, name. More details can be found below or on the respective review platforms.

📅 Storage duration: depending on the respective platform

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests),

What are review platforms?

You can rate our products or services on various review platforms. We participate in some of these platforms so that we can receive feedback from you and optimise our offering. If you rate us via a review platform, the privacy policy and terms and conditions of the respective review service apply. In many cases, you will also need to register in order to submit a review. Review technologies (widgets) may also be integrated into our website. When you use such an integrated tool, data is also transferred to the respective provider, processed and stored.

Many of these integrated programmes work according to a similar principle. After you have ordered a product from us or used a service, you will be asked to submit a review by email or on the website. You will usually be redirected to a review page via a link, where you can quickly and easily submit a review. Some review systems also offer an interface to various social media channels in order to make the feedback accessible to several people.

Why do we use review platforms?

Review platforms collect feedback and reviews about our offers. Your reviews provide us with quick feedback and enable us to improve our products and/or services much more efficiently. The reviews therefore help us to optimise our offers and give you and all our future customers a good overview of the quality of our products and services.

What data is processed?

With your consent, we transfer information about you and the services you have used to the relevant review platform. We do this to ensure that you have actually used one of our services. Only then can you provide genuine feedback.

The data transmitted is used solely for user identification. Which data is stored and processed depends, of course, on the providers used. In most cases, personal data such as your IP address, email address or name is also provided to the review platforms. After you submit your review, order information such as the order number of a purchased item is also forwarded to the relevant platform. If your email address is transmitted, this is done so that the review platform can send you an email after you have purchased a product. In order for us to be able to include your review on our website, we also provide the providers with the information that you have visited our site. The review platform used is responsible for the personal data collected.

How long and where is the data stored?

You can find more details about the duration of data processing below in the provider’s privacy policy, if we have further information on this. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. Personal data mentioned in a review is usually anonymised by employees of the platform used and is therefore only visible to administrators of the company. The data collected is stored on the providers’ servers and deleted by most providers after the end of the contract.

Right to object

Legal

If you have consented to the use of a review platform, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur during collection by a review portal.

We also have a legitimate interest in using a review platform to optimise our online service. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use a review platform if you have given your consent.

We hope we have been able to provide you with the most important general information about data processing by review platforms. You can find more detailed information below in the data protection texts or in the linked privacy policies of the company.

Google Customer Reviews Privacy Policy

We also use the Google Customer Reviews rating platform for our website. The service provider is the American company Google Inc. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google also uses standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the US) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The data processing terms for Google advertising products (Google Ads Controller-Controller Data Protection Terms), which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/

You can find out more about the data processed by Google in the privacy policy at https://policies.google.com/privacy?hl=de.

Web design introduction

Web design privacy policy summary

👥 Data subjects: Visitors to the website

🤝 Purpose: To improve the user experience

📓 Processed data: The data processed depends largely on the services used. In most cases, this includes your IP address, technical data, language settings, browser version, screen resolution and browser name. You can find more details in the web design tools used.

📅 Storage duration: depends on the tools used

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is web design?

We use various tools on our website that serve our web design. Contrary to popular belief, web design is not just about making our website look pretty, but also about functionality and performance. But of course, the right look for a website is also one of the main goals of professional web design. Web design is a subfield of media design and deals with the visual, structural and functional design of a website. The aim of web design is to improve your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. User experience refers to all the impressions and experiences that a website visitor has on a website. A sub-item of user experience is usability. This refers to the user-friendliness of a website. Particular importance is attached to ensuring that content, subpages and products are clearly structured and that you can find what you are looking for quickly and easily. In order to offer you the best possible experience on our website, we also use third-party web design tools. In this privacy policy, the category ‘web design’ therefore includes all services that improve the design of our website. These can include fonts, various plugins or other integrated web design functions.

Why do we use web design tools?

How you take in information on a website depends very much on the structure, functionality and visual perception of the website. That is why good, professional web design has become increasingly important to us. We are constantly working to improve our website and see this as an extended service for you as a website visitor. Furthermore, an attractive and functional website also has economic advantages for us. After all, you will only visit us and take advantage of our offers if you feel completely at ease.

What data is stored by web design tools?

When you visit our website, web design elements may be integrated into our pages that can also process data. Exactly which data this is depends, of course, on the tools used. Below you can see exactly which tools we use for our website. For more detailed information about data processing, we recommend that you also read the respective privacy policy of the tools used. There you will usually find information about which data is processed, whether cookies are used and how long the data is stored. Fonts such as Google Fonts, for example, also automatically transmit information such as language settings, IP address, browser version, browser screen resolution and browser name to Google servers.

Duration of data processing

How long data is processed is very individual and depends on the web design elements used. If cookies are used, for example, the storage period can be as short as one minute or as long as several years. Please inform yourself about this. We recommend that you read our general section on cookies and the privacy policies of the tools used. There you will usually find information about exactly which cookies are used and what information is stored in them. Google font files, for example, are stored for one year. This is to improve the loading time of a website. As a rule, data is only stored for as long as is necessary to provide the service. Data may be stored for longer if required by law.

Right to object

You also have the right and the option to revoke your consent to the use of cookies or third-party providers at any time. This can be done either via our cookie management tool or via other opt-out functions. You can also prevent data collection by cookies by managing, deactivating or deleting cookies in your browser. However, under web design elements (usually fonts), there is also data that cannot be deleted quite so easily. This is the case if data is automatically collected when a page is accessed and transmitted to a third-party provider (such as Google). In this case, please contact the support team of the relevant provider. In the case of Google, you can contact support at https://support.google.com/?hl=de.

Legal basis

If you have consented to the use of web design tools, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by web design tools.

We also have a legitimate interest in improving the web design of our website. After all, this is the only way we can provide you with an attractive and professional website. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use web design tools if you have given your consent. We would like to emphasise this again here.

Information on specific web design tools can be found in the following sections, if available.

Adobe Fonts Privacy Policy

We use Adobe Fonts, a web font hosting service, on our website. The service provider is the American company Adobe Inc. For the European area, the Irish company Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible.

Adobe processes your data in the USA, among other places. Adobe is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. You can find more information on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Adobe also uses standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Adobe undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

For more information about the standard contractual clauses at Adobe, please visit https://www.adobe.com/at/privacy/eudatatransfers.html.

You can find out more about the data processed through the use of Adobe Fonts in the privacy policy at https://www.adobe.com/at/privacy.html.

Google Fonts Local Privacy Policy

We use Google Fonts from Google Inc. on our website. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for the European region. We have integrated the Google fonts locally, i.e. on our web server – not on Google’s servers. This means that there is no connection to Google servers and therefore no data transfer or storage.

What are Google Fonts?

Google Fonts used to be called Google Web Fonts. It is an interactive directory with over 800 fonts that Googleprovides free of charge. Google Fonts allows you to use fonts without uploading them to your own server. However, in order to prevent any transfer of information to Google servers, we have downloaded the fonts to our server. In this way, we comply with data protection regulations and do not forward any data to Google Fonts.

Online map services Introduction

Online map services Privacy policy summary

👥 Affected persons: Visitors to the website

🤝 Purpose: To improve the user experience

📓 Processed data: The data processed depends largely on the services used. In most cases, this includes your IP address, location data, search terms and/or technical data. You can find more details in the tools used.

📅 Storage duration: depends on the tools used

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are online map services?

We also use online map services as an extended service for our website. Google Maps is probably the service you are most familiar with, but there are also other providers that specialise in creating digital maps. Such services enable locations, route plans or other geographical information to be displayed directly on our website. Thanks to an integrated map service, you no longer have to leave our website to view the route to a location, for example. Map sections are integrated using HTML code to ensure that the online map works on our website. The services can then display road maps, the earth’s surface or aerial or satellite images. If you use the integrated map service, data will also be transferred to the tool used and stored there. This data may also include personal data.

Why do we use online map services on our website?

Generally speaking, our aim is to make your time on our website as pleasant as possible. And of course, your time is only pleasant if you can find your way around our website easily and find all the information you need quickly and easily. We therefore thought that an online map system could significantly improve our website service.

Without leaving our website, you can easily view route descriptions, locations or even places of interest with the help of the map system. It is also very practical that you can see at a glance where our company is located, so that you can find us quickly and easily. As you can see, there are many advantages and we clearly consider online map services on our website to be part of our customer service.

What data is stored by online map services?

When you open a page on our website that has an online map function, personal data may be transmitted to the respective service and stored there. In most cases, this is your IP address, which can also be used to determine your approximate location. In addition to your IP address, data such as search terms entered and longitude and latitude coordinates are also stored.

If you enter an address for route planning, for example, this data is also stored. The data is not stored by us, but on the servers of the integrated tools. You can think of it like this: although you are on our website, when you interact with a map service, this interaction actually takes place on their website. To ensure that the service works properly, at least one cookie is usually set in your browser. Google Maps, for example, also uses cookies to record user behaviour in order to optimise its own service and to be able to display personalised advertising. You can find out more about cookies in our ‘Cookies’ section.

How long and where is the data stored?

Every online map service processes different user data. If we have further information, we will inform you about the duration of data processing below in the relevant sections on the individual tools. As a rule, personal data is only stored for as long as is necessary to provide the service. Google Maps, for example, stores certain data for a specified period of time, while other data must be deleted by you. Mapbox, for example, stores your IP address for 30 days and then deletes it. As you can see, each tool stores data for different lengths of time. We therefore recommend that you carefully review the privacy policies of the tools used.

The providers also use cookies to store data about your user behaviour with the map service. You can find more general information about cookies in our ‘Cookies’ section, but you can also find out which cookies may be used in the privacy policies of the individual providers. However, these are usually only examples and are not exhaustive.

Right to object

You always have the option and the right to access your personal data and to object to its use and processing. You can also revoke your consent at any time. The easiest way to do this is usually via the cookie consent tool. However, there are also other opt-out tools that you can use.

You can also manage, delete or deactivate cookies set by the providers used with just a few clicks of the mouse. However, this may mean that some functions of the service no longer work as usual. How you manage cookies in your browser depends on the browser you use. In the ‘Cookies’ section, you will also find links to the instructions for the most important browsers.

Legal basis

If you have consented to the use of an online map service, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by an online map service.

We also have a legitimate interest in using an online map service to optimise our service on our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use an online map service if you have given your consent. We would like to emphasise this again at this point.

Information on specific online map services can be found in the following sections, where available.

Google Maps Privacy Policy

Google Maps Privacy Policy Summary

👥 Data subjects: Visitors to the website

🤝 Purpose: Optimisation of our service

📓 Processed data: Data such as search terms entered, your IP address and also the latitude and longitude coordinates.

You can find more details on this below in this privacy policy.

📅 Storage period: depending on the stored data

⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Maps?

We use Google Maps from Google Inc. on our website. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Maps allows us to show you locations more accurately and thus tailor our services to your needs. When you use Google Maps, data is transferred to Google and stored on Google’s servers. Here we would like to explain in more detail what Google Maps is, why we use this Google service, what data is stored and how you can prevent this.

Google Maps is an internet map service provided by Google. With Google Maps, you can search for the exact locations of cities, landmarks, accommodation or businesses online via a PC, tablet or app. If businesses are listed on Google My Business, additional information about the company is displayed alongside its location. To show how to get there, map sections of a location can be integrated into a website using HTML code. Google Maps shows the earth’s surface as a street map or as an aerial or satellite image. Thanks to Street View images and high-quality satellite images, very accurate representations are possible.

Why do we use Google Maps on our website?

All our efforts on this page are aimed at providing you with a useful and meaningful experience on our website. By integrating Google Maps, we can provide you with the most important information about various locations. You can see at a glance where our company is located. The directions always show you the best or fastest way to get to us. You can call up directions for routes by car, public transport, on foot or by bike. For us, providing Google Maps is part of our customer service.

What data is stored by Google Maps?

In order for Google Maps to provide its service in full, the company must collect and store data from you. This includes the search terms you enter, your IP address and your latitude and longitude coordinates. If you use the route planner function, the start address you enter is also stored. However, this data is stored on the Google Maps website. We can only inform you about this, but we have no influence over it. Since we have integrated Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behaviour. Google primarily uses this data to optimise its own services and to provide you with individual, personalised advertising.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID

Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ113031310-5

Purpose: NID is used by Google to tailor advertisements to your Google search. With the help of the cookie, Google ‘remembers’ your most frequently entered search queries or your previous interaction with advertisements. This ensures that you always receive tailored advertisements. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.

Expiration date: after 6 months

Note: We cannot guarantee that the information provided about the stored data is complete. Changes can never be ruled out, especially when cookies are used. To identify the NID cookie, we created a separate test page that only included Google Maps.

How long and where is the data stored?

Google’s servers are located in data centres around the world. However, most servers are located in America. For this reason, your data is also stored primarily in the USA. You can find out exactly where Google’s data centres are located here: https://datacenters.google/

Google distributes the data across various data carriers. This makes the data faster to access and better protected against any attempts at manipulation. Each data centre also has special emergency programmes. If, for example, there are problems with Google’s hardware or a natural disaster paralyses the servers, the data remains fairly secure.

Google stores some data for a specified period of time. For other data, Google only offers the option of deleting it manually. The company also anonymises information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 or 18 months.

How can I delete my data or prevent data storage?

With the automatic deletion feature for location and activity data introduced in 2019, information about your location and web/app activity is stored for either 3 or 18 months, depending on your choice, and then deleted. You can also manually delete this data from your history at any time via your Google Account.

If you want to prevent location tracking completely, you must pause the ‘Web & App Activity’ section in your Google account. Click on ‘Data & personalisation’ and then on the ‘Activity controls’ option. Here you can turn activities on or off.

You can also disable, delete or manage individual cookies in your browser. Depending on which browser you use, this works slightly differently. Under the ‘Cookies’ section, you will find the relevant links to the instructions for the most popular browsers.

If you do not want cookies at all, you can set your browser to always inform you when a cookie is about to be set. This allows you to decide whether to accept or reject each individual cookie.

Legal basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as may occur during collection by Google Maps.

We also have a legitimate interest in using Google Maps to optimise our online service. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use Google Maps if you have given your consent.

In addition, Google uses so-called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the US) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

If you would like to learn more about Google’s data processing, we recommend that you review the company’s privacy policy at https://policies.google.com/privacy?hl=de.

Explanation of terms used

We always strive to make our privacy policy as clear and understandable as possible. However, this is not always easy, especially when it comes to technical and legal issues. It often makes sense to use legal terms (such as personal data) or certain technical terms (such as cookies, IP address). However, we do not want to use these without explanation. Below you will find an alphabetical list of important terms used that we may not have covered sufficiently in the previous privacy policy. If these terms have been taken from the GDPR and are definitions, we will also cite the GDPR texts here and add our own explanations where necessary.

Supervisory authority

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the following definitions apply:

‘Supervisory authority’ means an independent public authority established by a Member State in accordance with Article 51;

Explanation: ‘Supervisory authorities’ are always independent public bodies that also have the power to issue instructions in certain cases. They are responsible for carrying out what is known as state supervision and are located in ministries, special departments or other authorities. For data protection in Austria, there is an Austrian data protection authority, and for Germany, each federal state has its own data protection authority.

Processor

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Explanation: As a company and website owner, we are responsible for all data that we process about you. In addition to the controllers, there may also be so-called processors. This includes any company or person who processes personal data on our behalf. Processors can therefore include service providers such as tax advisors, hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

Third party

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term

‘third party’ means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or the processor, are authorised to process personal data;

Explanation: The GDPR basically only explains what a ‘third party’ is not. In practice, any ‘third party’ who also has an interest in the personal data but does not belong to the above-mentioned persons, authorities or institutions is a third party. For example, a parent company can act as a ‘third party’. In this case, the subsidiary is the controller and the parent company is the ‘third party’. However, this does not mean that the parent company is automatically entitled to view, collect or store the personal data of the subsidiary.

Restriction of processing

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the following terms shall have the following meanings:

‘Restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future;

Explanation: It is your right to request that processors restrict the further processing of your personal data at any time. To do this, specific personal data such as your name, date of birth or address are marked in such a way that further processing is no longer possible. For example, you could restrict processing so that your data can no longer be used for personalised advertising.

Consent

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

‘Consent’ of the data subject means any freely given, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by other clear affirmative actions, signifies agreement to the processing of personal data relating to him or her;

Explanation: On websites, such consent is usually obtained via a cookie consent tool. You are probably familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to the processing of your data. In most cases, you can also make individual settings and decide for yourself which data processing you allow and which you do not. If you do not give your consent, no personal data may be processed. In principle, consent can of course also be given in writing, i.e. not via a tool.

Health data

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

‘health data’ means personal data related to the physical or mental health of a natural person, including the provision of health services, and which reveal information about their health status;

Explanation: Health data therefore includes all stored information relating to your own health. This is often data that is also recorded in a patient file. This includes, for example, which medications you use, X-ray images, your entire medical history and, as a rule, your vaccination status.

Personal data

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

‘personal data’ means any information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’); An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific and sufficient to establish the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Explanation: Personal data is therefore all data that can be used to identify you as a person. This usually includes data such as:

Name
Address
Email address
Postal address
Telephone number
Date of birth
Identification numbers such as social security number, tax identification number, identity card number or registration number
Bank details such as account number, credit information, account balances and much more.

According to the European Court of Justice (ECJ), your IP address is also considered personal data. IT experts can use your IP address to determine at least the approximate location of your device and, subsequently, identify you as the connection owner. Therefore, the storage of an IP address also requires a legal basis within the meaning of the GDPR. There are also so-called ‘special categories’ of personal data that are particularly sensitive. These include:

racial and ethnic origin
political opinions
religious or philosophical beliefs
trade union membership
genetic data, such as data obtained from blood or saliva samples
biometric data (information about psychological, physical or behavioural characteristics that can identify a person).
Health data
Data on sexual orientation or sex life

Profiling

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term

‘profiling’ means any form of automated processing of personal data consisting of the use of such personal data to the extent that it produces an assessment concerning any aspect of a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

Explanation: Profiling involves gathering various pieces of information about a person in order to learn more about them. In the web sector, profiling is often used for advertising purposes or for credit checks. Web or advertising analysis programmes, for example, collect data about your behaviour and interests on a website. This results in a specific user profile that can be used to target advertising to a specific audience.

Controller

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term:

‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of Member States, the controller or the specific criteria for its nomination may be provided for by Union law or the law of Member States;

Explanation: In our case, we are responsible for the processing of your personal data and are therefore the ‘controller’. If we pass on collected data to other service providers for processing, they are “processors”. For this purpose, a ‘data processing agreement (DPA)’ must be signed.

Processing

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term ‘processing’ means:

‘processing’ means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction;

Note: When we refer to processing in our privacy policy, we mean any type of data processing. As mentioned above in the original GDPR declaration, this includes not only the collection but also the storage and processing of data.

Final

Congratulations! If you are reading this, you have really ‘fought your way through’ our entire privacy policy, or at least scrolled down to this point. As you can see from the scope of our privacy policy, we take the protection of your personal data very seriously.

It is important to us to inform you to the best of our knowledge and belief about the processing of personal data.

However, we do not just want to tell you what data is processed, but also explain the reasons for using various software programmes. Data protection declarations usually sound very technical and legal. However, as most of you are not web developers or lawyers, we wanted to take a different approach and explain the facts in simple and clear language. Of course, this is not always possible due to the nature of the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy.

If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible body. We hope you enjoy your visit and look forward to welcoming you back to our website soon.

BetterMove handles your data with care.

Privacy Policy

Table of contents

Introduction and overview

Scope

Legal

Contact details of the controller

Storage period

Rights under the General Data Protection Regulation

Austria Data Protection Authority

Data transfer to third countries

Communication

Data subjects

Telephone

Email

Online forms

Legal

Data processing agreement (DPA)

Who are processors?

Contents of a data processing agreement

Cookies

What are cookies?

What types of cookies are there?

Purpose of processing via cookies

What data is processed?

Storage duration of cookies

Right to object – how can I delete cookies?

Legal basis

Application data

What is application data?

Why do we process application data?

What data is processed?

How long will the data be stored?

Legal basis

Contact form

What is a contact form?

Why do we use a contact form?

What data is processed?

How long is the data stored?

Legal basis

Customer data

What is customer data?

Why do we process customer data?

What data is processed?

How long is the data stored?

Legal basis

Web hosting Introduction

What is web hosting?

Why do we process personal data?

What data is processed?

How long is data stored?

Legal basis

Mittwald privacy policy

Order processing agreement (AVV) Mittwald

Website construction kits Introduction

What are website construction kits?

Why do we use website builders for our website?

What data is stored by a modular system?

How long and where is the data stored?

Right to object

Legal basis

Elementor privacy policy

WordPress.com Privacy Policy

What is WordPress?

Why do we use WordPress on our website?

What data is processed by WordPress?

How long and where is the data stored?

How can I delete my data or prevent data storage?

Legal basis

Email marketing Introduction

What is email marketing?

Why do we use email marketing?

What data is processed?

Duration of data processing

Right of objection

Legal basis

Mailjet Privacy Policy

What is Mailjet?

Why do we use Mailjet on our website?

What data is processed by Mailjet?