Privacy policy

2. name and address of the data protection officer

The data protection officer of the controller is

3. general information on data processing

3.1 Scope of the processing of personal data

As a matter of principle, we only process personal data of our users to the extent necessary to provide a
functional website and our content and services. The processing
personal data of our users takes place regularly only with the consent of the user. One exception
applies in cases in which prior consent cannot be obtained for factual reasons.
is not possible and the processing of the data is permitted by law.

3.2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data
Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis. During processing
of personal data necessary for the performance of a contract to which the data subject is party,
is required, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to
Processing operations that are necessary to carry out pre-contractual measures. As far as a
processing of personal data is necessary for compliance with a legal obligation to which our company is subject.
company, Art. 6 para. 1 lit. c GDPR as the legal basis.

In the event that vital interests of the data subject or another natural person
processing of personal data is required, Art. 6 para. 1 lit. d GDPR as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party
and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest,
Art. 6 para. 1 lit. f GDPR as the legal basis for processing.

3.3 Data erasure and storage duration

The personal data of the data subject will be erased or blocked as soon as the purpose of the processing has ceased.
Storage not applicable. Data may also be stored if this is required by the European
or national legislator in Union regulations, laws or other provisions to which the
responsible person was provided for. Blocking or deletion of the data also takes place if a
storage period prescribed by the aforementioned standards expires, unless there is a necessity for the
further storage of the data is necessary for the conclusion or fulfillment of a contract.

3.4 Validity

This privacy policy informs users about the nature, scope and purpose of the collection and
Use of personal data by the responsible provider. The survey takes place in our
Online platforms such as website, blog, store and event pages.

4. provision of the website and creation of log files

4.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system
of the calling computer.

The following data is collected:

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites that are accessed by the user’s system via our website

4.2 Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR.

4.3 Purpose of data processing

Storage in log files takes place to ensure the functionality of the website. In addition, the
Data to optimize the website and to ensure the security of our information technology systems. One
The data is not analyzed for marketing purposes in this context.

4.4 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
are. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
is finished.

If the data is stored in log files, this is the case after six months at the latest. One
Storage beyond this is possible. In this case, the IP addresses of the users are
deleted or alienated, so that an assignment of the calling client is no longer possible.

4.5 Possibility of objection and removal

The collection of data for the provision of the website and the storage of data in log files is necessary for the
operation of the website. Consequently, the user does not have any
Possibility of objection.

5. use of cookies

5.1 Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the browser or by the browser on the user’s computer.
stored on the user’s computer system. When a user accesses a website, a cookie can be stored on the
operating system of the user. This cookie contains a characteristic character string that
enables a clear identification of the browser when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website
require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

• Software operating data, e.g. language setting, time zone, etc.
• Articles in a shopping cart
• Login information

5.2 Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) GDPR.
lit. f GDPR.

5.3 Purpose of data processing

The purpose of using technically necessary cookies is to facilitate the use of websites for users.
simplify. Some functions of our website cannot be offered without the use of cookies.
This requires the browser to be recognized even after a page change.

The user data collected by technically necessary cookies is not used to create user profiles.
used.

5.4 Duration of storage, objection and removal options

Cookies are stored on the user’s computer and transmitted to our website. Therefore, you as
users also have full control over the use of cookies. By changing the settings in
You can deactivate or restrict the transmission of cookies in your browser. Already
Stored cookies can be deleted at any time. This can also be automated. Are cookies
deactivated for our website, you may no longer be able to use all functions of the website.
be fully utilized.

6th Newsletter

6.1 Description and scope of data processing

You can subscribe to a free newsletter on our website. In the process
When you register for the newsletter, the data from the input mask is transmitted to us.

If you purchase goods or services on our website and enter your e-mail address,
this can subsequently be used by us to send a newsletter. In such a case
exclusively direct advertising for own similar goods or services via the newsletter
shipped.

6.2 Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is, if available
consent of the user Art. 6 para. 1 lit. a GDPR.

Another legal basis for sending the newsletter as a result of the sale of goods or services is
§ 7 para. 3 UWG.

6.3 Purpose of data processing

The purpose of collecting the user’s e-mail address is to deliver the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services.
or the e-mail address used.

6.4 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
are. The user’s e-mail address is therefore stored for as long as the subscription to the newsletter is active.

The other personal data collected as part of the registration process is generally deleted after a period of time.
deleted after six months.

6.5 Possibility of objection and removal

The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose
There is a corresponding link in every newsletter. This also constitutes a revocation of the consent of the
storage of the personal data collected during the registration process.

7th registration

7.1 Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data.
register. The data from the input mask will be transmitted to us and stored. Only relevant
data is collected, e.g. contact data (surname, first name, e-mail addresses, etc.) or content data.

The following data is also stored at the time of registration:

• The IP address of the user
• Date and time of registration

As part of the registration process, the user’s consent to the processing of this data is obtained.

7.2 Legal basis for data processing

If the registration serves the fulfillment of a contract to which the user is a party, or the
implementation of pre-contractual measures, the additional legal basis for the processing is
of the data Art. 6 para. 1 lit. b GDPR. Otherwise, consent pursuant to Art. 6 para. 1 lit. a was obtained.

7.3 Purpose of data processing

Registration of the user is necessary for the fulfillment of a contract with the user or for the execution of a contract.
pre-contractual measures or for the provision and review of content in blog systems, mailing lists
or discussion platforms are required.

7.4 Disclosure of data to third parties

An order or the user’s request for an offer or individual contact
may result in forwarding to a partner company. In this case, explicit reference is made to the possible
and the corresponding consent was obtained. The data will be forwarded to if required:

• Affiliated sales partners
• Hotels and restaurants for events and training courses
• Logistics partner

7.5 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
are.

This is necessary for the data collected during the registration process for the performance of a contract or to
implementation of pre-contractual measures is the case if the data is required for the implementation of the
contract are no longer required. Even after the contract has been concluded, there may be a need to store personal data.
data of the contractual partner in order to comply with contractual or legal obligations.

7.6 Possibility of objection and removal

As a user, you have the option of canceling your registration at any time. The about you
stored data can be changed at any time.

If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures
necessary, premature deletion of the data is only possible insofar as contractual or legal obligations do not apply.
obligations prevent deletion.

8. contact form and e-mail contact

8.1 Description and scope of data processing

A contact form is available on our website, which can be used to contact us electronically.
can be used. If a user makes use of this option, the data entered in the input mask will be deleted.
transmitted to us and stored. Only relevant data is collected, e.g. contact details (surname, first name,
e-mail addresses, etc.) or content data.

The following data is also stored at the time the message is sent:

• The IP address of the user
• Date and time of registration

Your consent will be obtained for the processing of the data as part of the sending process and this consent will be referred to.
Privacy policy referred to.

Alternatively, you can contact us via the e-mail address provided. In this case
the user’s personal data transmitted with the e-mail is stored.

No data will be passed on to third parties in this context. The data is used exclusively
is used to process the conversation.

8.2 Legal basis for data processing

The legal basis for the processing of the data is Art. 6 (1) GDPR if the user has given consent.
lit. a GDPR.

Legal basis for the processing of data transmitted in the course of sending an e-mail
are processed, Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, then
Additional legal basis for the processing Art. 6 para. 1 lit. b GDPR.

8.3 Purpose of data processing

The processing of the personal data from the input mask serves us to process the establishment of contact as well as
for customer care and quality management. In the case of contact by e-mail, this also includes the
necessary legitimate interest in the processing of the data. Otherwise, the consent of the user
required.

The other personal data processed during the sending process is used to prevent misuse of the
contact form and to ensure the security of our information technology systems.

8.4 Disclosure of data to third parties

An order or the user’s request for an offer or individual contact
may result in forwarding to a partner company. In this case, explicit reference is made to the possible
and the corresponding consent was obtained. The data will be forwarded to if required:

• Affiliated sales partners
• Hotels and restaurants for events and training courses
• Logistics partner

8.5 Publication of data

When success stories are submitted, the data collected is stored with the name of the user.
published on the website. In this case, explicit reference is made to the possible disclosure and the
corresponding approval has been obtained.

8.6 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
the purpose expires or the user’s consent has been revoked.

The additional personal data collected during the sending process will be deleted at the latest after
deleted after a period of six months.

8.7 Possibility of objection and removal

The user has the option to withdraw their consent to the processing of personal data at any time.
revoked. If the user contacts us by e-mail, they can object to the storage of their personal data.
at any time. In such a case, the conversation cannot be continued.

In this case, all personal data stored in the course of contacting us will be deleted.
deleted.

9. publication of job advertisements / online job applications

9.1 Description and scope of data processing

The application data will be collected electronically by us for the purpose of processing the application procedure and
processed. Various data is processed, e.g. name, telephone number, e-mail address, etc. These
Data is generally used for contact and communication.

No information is processed that cannot be used in accordance with the General Equal Treatment Act
(ethnic origin, gender, religion or ideology, disability, age or sexual identity).
Information on illnesses, pregnancy, ethnic origin, political views, philosophical or religious beliefs
religious beliefs, trade union membership, physical or mental health
or sex life, we also ask you not to transmit them. The same applies to content that is suitable,
rights of third parties (e.g. copyrights, press law or general rights of third parties).

If an application is followed by the conclusion of an employment contract, the data transmitted may be used to
purposes of the usual organizational and administrative process in compliance with the relevant legal requirements.
regulations are stored by us in a personnel file.

9.2 Legal basis for data processing

Legal basis for the processing of data transmitted in the course of sending an e-mail
are processed, Art. 6 para. 1 lit. f and Art. 6 para. 1 lit. a GDPR. If the e-mail contact is aimed at the conclusion of a
contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

9.3 Purpose of data processing

The processing of personal data from an e-mail serves us solely to process the request.
application process and employee recruitment and at the same time includes your necessary, legitimate interest
in the processing of the data.

9.4 Duration of storage

The deletion of the transmitted data takes place automatically three months after rejection of the application
after announcement. This does not apply if, due to legal requirements (for example, the burden of proof under the
General Equal Treatment Act) a longer storage period is necessary or a longer storage period is required.
in our database of interested parties.

9.5 Possibility of objection and removal

The user has the option to withdraw their consent to the processing of personal data at any time.
revoked. If there are no legitimate interests of the controller or the user, the personal data will be
Data deleted immediately. In the cases provided for by law, the deletion may be replaced by a
blocking of the data.

10. blog systems, mailing lists and discussion platforms

10.1 Description and scope of data processing

Within these systems, it is possible to post comments, write guest articles or participate in a
to participate in the discussion. Only relevant data is collected, e.g. contact data (surname, first name, e-mail addresses,
etc.) or content data.

The following data is also stored at the time of registration:

• The IP address of the user
• Date and time of registration

If comments are posted, they can be subscribed to by other users. At the time of the
Commenting will inform the other users. No personal data is stored in the comments.
Data is transmitted which allows direct identification.

Furthermore, we reserve the right, on the basis of our legitimate interests acc. Art. 6 para. 1 lit. f. GDPR,
to process user data for the purpose of spam detection or to delete posts that violate the
violate the personal rights of third parties.

The data provided in the comments and contributions will be stored by us until the user objects.
permanently stored.

10.2 Legal basis for data processing

The legal basis for the processing of the data results from personal consent
pursuant to Art 6 para. 1 lit. a or the interests of the controller pursuant to Art. 6 para. 1 lit. f.

10.3 Purpose of data processing

For marketing purposes, employee and customer recruitment and the provision of general information, we operate
systems mentioned above. The focus here is on providing corresponding user groups with general information from the
business area of the person responsible.

10.4 Duration of storage

The content and communication data provided within the scope of the systems will be stored by us until the user objects.
permanently stored. Log data is deleted after six months at the latest.

10.5 Possibility of objection and removal

The user has the option to withdraw their consent to the processing of personal data at any time.
revoked. We may retain the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests.
interests before we delete them in order to be able to prove a previously given consent. The
Processing of this data is limited to the purpose of a possible defense against claims. A
individual request for deletion is possible at any time, provided that the former existence of a
Consent is confirmed.

11. order processing in the online store and customer account

We process our customers’ data as part of the ordering processes in our online store in order to provide them with the
Selection and ordering of the selected products and services, as well as their payment and delivery, or
execution.

11.1 Processing of data

The processed data includes inventory data, communication data, contract data, payment data and the following
The data subjects affected by the processing include our customers, interested parties and other
Business partner. The processing is carried out for the purpose of providing contractual services in the context of operating
of an online store, billing, delivery and customer service. Here we use session cookies for the
storage of the shopping cart content and permanent cookies for storing the login status.

11.2 Legal basis for data processing

The processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order transactions) and c
(Legally required archiving) GDPR. The information marked as required for the
justification and fulfillment of the contract. We only disclose the data to third parties in the
within the scope of delivery, payment or within the scope of legal authorizations and obligations towards
legal advisors and authorities. The data will only be processed in third countries if this is necessary for the
fulfillment of the contract (e.g. at the customer’s request for delivery or payment).

11.3 Storage of data

Users can optionally create a user account in which they can view their orders in particular.
As part of the registration process, users are provided with the required mandatory information. The user accounts are
are not public and cannot be indexed by search engines. When users delete their user account
have terminated the contract, their data will be deleted with regard to the user account, subject to their
Storage is required for reasons of commercial or tax law. Art. 6 para. 1 lit. c GDPR is necessary.
Information in the customer account shall remain until its deletion with subsequent archiving in the event of a
legal obligation. It is the responsibility of users to delete their data before the end of the contract in the event of termination.
secure.

As part of the registration and renewed logins as well as the use of our online services, we store the
IP address and the time of the respective user activity. The storage takes place on the basis of our
legitimate interests, as well as the user in protection against misuse and other unauthorized use. One
This data will not be passed on to third parties unless it is necessary for the pursuit of our legitimate interests.
claims or there is a legal obligation to do so pursuant to Art. Art. 6 para. 1 lit. c GDPR.

11.4 Duration of storage

The deletion takes place after the expiry of statutory warranty and comparable obligations, which
The need to retain the data is reviewed every three years; in the case of statutory retention periods
archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and
tax law (10 years) retention obligation).

12. external payment service providers

We use external payment service providers through whose platforms users and we can make payment transactions.
can make.

As part of the fulfillment of contracts, we use payment service providers on the basis of Art. 6 para. 1
lit. b. GDPR. We also use external payment service providers on the basis of our legitimate interests.
Interests acc. Art. 6 para. 1 lit. b. GDPR in order to provide our users with effective and secure payment options.
offer.

12.1 Legal basis for data processing

The data processed by the payment service providers includes inventory data, such as the name and the
address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums, and
the contract-, sum- and recipient-related information. The information is required to process the transactions
to be carried out. However, the data entered will only be processed by the payment service providers and, in the case of
saved these. This means that we do not receive any account or credit card-related information, but only
Information with confirmation or negative information about the payment. Under certain circumstances, the data
transmitted by the payment service providers to credit agencies. The purpose of this transmission is to
Identity and credit check. In this regard, we refer to the general terms and conditions and data protection information of
Payment service provider.

Payment transactions are subject to the terms and conditions and data protection information of the respective
Payment service providers, which can be accessed within the respective websites or transaction applications. We
also refer to these for further information and assertion of revocation, information and other rights.
Rights of data subjects. PayPal and Computop

13. use of third-party providers

13.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). The use
is carried out on the basis of Art. 6 para. 1 p. 1 lit. f. GDPR. Google Analytics uses so-called “cookies”,
text files that are stored on your computer and that enable an analysis of your use of the website.
enable.

13.1.1 Storage of data

The following information generated by the cookie about your use of the website is usually sent to a
transferred to Google servers in the USA and stored there:

• Browser type/version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer (IP address)
• Time of the server request

The IP address transmitted by your browser as part of Google Analytics is not combined with other data from
Google merged. We have also added the code “anonymizeIP” to Google Analytics on this website.
extended. This guarantees that your IP address is masked so that all data is collected anonymously. Only in
In exceptional cases, the full IP address is transmitted to a Google server in the USA and stored there.
shortened.

13.1.2 Evaluation of the data

On behalf of the operator of this website, Google will use this information to evaluate your use of the website.
to compile reports on website activity and to provide other services relating to website activity and internet usage.
services associated with the use of the website and the Internet vis-à-vis the website operator.
provide. You can prevent the storage of cookies by selecting the appropriate settings in your browser software.
However, we would like to point out that in this case you may not be able to use all the functions of this website.
functions of this website to their full extent.

13.1.3 Prevention of processing

You can also prevent the collection of data generated by the cookie and related to your use of the website.
related data (including your IP address) to Google as well as the processing of this data by Google by
download and install the browser plugin available at the following link:

tools.google.com/dlpage/gaoptout

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection
by Google Analytics by clicking on this link. An opt-out cookie is set, which
prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this
browser and only for our website and is stored on your device. Delete the cookies in this
browser, you must set the opt-out cookie again. You will find information on the integration of the opt-out cookie
under:

developers.google.com/analytics/devguides/collection/gajs/

We continue to use Google Analytics to collect data from double-click cookies and also AdWords for statistical purposes.
evaluate. If you do not wish to do this, you can do so via the Ads Preferences Manager

https://myadcenter.google.com/home

deactivate. Further information on data protection in connection with Google Analytics can be found in the
Google Analytics Help

https://policies.google.com/privacy

13.2 Google Adwords

We also use the Google advertising tool “Google Adwords” to advertise our website. As part of this, we use
We use the “Conversion Tracking” analysis service of Google Inc., 1600 Amphitheatre Parkway,
Mountain View, CA 94043 USA, hereinafter referred to as “Google”.

13.2.1 Storage of data

If you have reached our website via a Google ad, a cookie will be stored on your computer.
Cookies are small text files that your Internet browser places and stores on your computer. These so-called
“Conversion cookies” lose their validity after 30 days and are not used to store your personal data.
Identification. If you visit certain pages of our website and the cookie has not yet expired, you can
we and Google recognize that you, as a user, have clicked on one of our ads placed on Google and have been redirected to
were forwarded to our site.

13.2.2 Processing of the data

The information collected with the help of “conversion cookies” is used by Google to compile visit statistics for
to create our website. These statistics tell us the total number of users who have clicked on our ad.
and also which pages of our website were subsequently accessed by the respective user. We resp.
However, other advertisers via “Google Adwords” do not receive any information with which users can identify themselves.
can be personally identified.

13.2.3 Prevention of processing

You can prevent the installation of “conversion cookies” by setting your browser accordingly.
e.g. settings that generally deactivate the automatic setting of cookies or specifically prevent only the
Cookies from the domain “googleadservices.com” blocked.

You can find Google’s privacy policy in this regard at the following link:

https://services.google.com/sitestats/de.html

13.3 Google Maps

We use the “Google Maps” component of Google Inc. on our website, 1600 Amphitheatre Parkway, Mountain
View, CA 94043 USA, hereinafter referred to as “Google”.

Each time the “Google Maps” component is called up individually, Google sets a cookie in order to display the
The website on which the “Google Maps” component is integrated processes user settings and data.

13.3.1 Processing of the data

As a rule, this cookie is not deleted when the browser is closed, but expires after
after a certain period of time, unless you delete it manually beforehand.

13.3.2 Prevention of processing

If you do not agree with this processing of your data, you have the option of canceling the service.
of “Google Maps” and thus prevent the transmission of data to Google. In addition
you must deactivate the Java Script function in your browser. However, we would like to point out that in
In this case, you will not be able to use “Google Maps” or only to a limited extent.

The use of “Google Maps” and the information obtained via “Google Maps” is carried out in accordance with the
Google Terms of Use

http://www.google.de/intl/de/policies/terms/regional.html

and the additional terms and conditions for “Google Maps”

https://www.google.com/intl/de_de/help/terms_maps.html

13.4 Google Fonts

We use the “Google Fonts” component of Google Inc. on our website, 1600 Amphitheatre Parkway, Mountain
View, CA 94043 USA, hereinafter referred to as “Google”.

13.4.1 Processing of the data

Google Fonts logs records of CSS and font requests. Aggregated user numbers
determine how popular certain font families are and are published on our Analytics page.
Data from Google’s web crawler also determines which websites use Google fonts.
This data is published and is available in the BigQuery database of Google Fonts. More
Information on collection and processing can be found in Google’s privacy policy.

https://policies.google.com/privacy?hl=de

13.4.2 Prevention of processing

If you do not agree with this processing of your data, you have the option of canceling the service.
of “Google Maps” and thus prevent the transmission of data to Google. In addition
you must deactivate the Java Script function in your browser. However, we would like to point out that in
In this case, you will not be able to use “Google Maps” or only to a limited extent.

The use of “Google Maps” and the information obtained via “Google Maps” is carried out in accordance with the
Google Terms of Use

http://www.google.de/intl/de/policies/terms/regional.html

and the additional terms and conditions for “Google Maps”

https://www.google.com/intl/de_de/help/terms_maps.html

13.5 reddit

Data is collected on this website for marketing, market research and optimization purposes – on the basis of
legitimate interests of the website operator (pursuant to Art. 6 para. 1 lit. f GDPR). For this purpose, a JavaScript-based
code from Reddit, which collects company data and analyzes its use. The recorded information is sent via
hashed (i.e. via a one-way function) and directly pseudonymized. This means: No personal
conclusions about you as a visitor to the site.

13.5.1 Processing and storage of data

The data stored on reddit® is deleted as soon as it is no longer required for its intended purpose.
are no longer required and the deletion does not conflict with any statutory retention obligations.

13.5.2 Prevention of processing

You can prevent the “conversion cookies” by making the appropriate settings in your browser –
e.g. completely deactivate the automatic setting of cookies or specifically block cookies from reddit®.

13.6 Facebook

We use components from the provider facebook.com on our website. Facebook is a service of Facebook Inc,
1601 S. California Ave, Palo Alto, CA 94304, USA.

With every single visit to our website that is equipped with such a component, this component
component that the browser you are using displays a corresponding representation of the component of Facebook
downloads. Through this process, Facebook is informed about which specific page of our
website is currently being visited by you.

13.6.1 Storage of data

When you visit our site while you are logged in to Facebook, Facebook recognizes the data collected by
information collected by the component about which specific page you are visiting and assigns this information to your
personal account on Facebook. For example, click on the  “Like” button or
If you make comments, this information will be sent to your personal user account on Facebook.
and stored there. In addition, the information that you have visited our site is stored,
passed on to Facebook. This happens regardless of whether you click on the component or not.

13.6.2 Prevention of processing

If you object to this transmission and storage of data about you and your behavior on our website to and
by Facebook, you must log out of Facebook before you visit our site.
visit. Facebook’s data protection information provides more detailed information on this, in particular on the collection and
Use of the data by Facebook, your rights in this regard and the setting options
to protect your privacy:

https://de-de.facebook.com/about/privacy/

You can find an overview of the Facebook plugins at

https://developers.facebook.com/docs/plugins/

13.7 LinkedIn

We use components of the LinkedIn network on our website. LinkedIn is a service of LinkedIn
Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. With every single visit to our website, which is linked to
is equipped with such a component, this component causes the browser you are using to send a
downloads the corresponding representation of the component from LinkedIn.

13.7.1 Use for LinkedIn Ads

For individual marketing purposes, e-mail data is transferred to our partner LinkedIn. The
The transfer takes place in compliance with the concluded order data processing.

13.7.2 Storage of data

This process informs LinkedIn which specific page of our website you have visited.
website is currently being visited. If you click on the LinkedIn “Recommend button” while
you are logged into your LinkedIn account, you can view the content of our pages on your LinkedIn profile.
link. This enables LinkedIn to associate your visit to our pages with your LinkedIn user account.

13.7.3 Prevention of processing

If you do not want LinkedIn to associate your data with your account, you must log out before visiting
log out of LinkedIn from our website. Information about the purpose and scope of the data collection and the further
processing and use of the data by LinkedIn as well as setting options to protect your privacy.
For privacy information, please refer to LinkedIn’s privacy policy.

13.8 Gravatar (profile pictures)

We use the Gravatar service of Automattic Inc. within our online offer and especially in the blog, 60
29th Street #343, San Francisco, CA 94110, USA.

13.8.1 Storage of data

Gravatar is a service where users register and store profile pictures and their e-mail addresses
can. If users with the respective e-mail address on other online presences (especially in blogs)
posts or comments, their profile pictures can be displayed next to the posts or comments.
comments are presented. For this purpose, the e-mail address provided by the users is sent to Gravatar for the purpose of
Checking whether a profile is stored for it is transmitted in encrypted form. This is the only purpose
the transmission of the e-mail address and it will not be used for other purposes, but thereafter
deleted.

Gravatar is used on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f)
GDPR, because with the help of Gravatar we offer the authors  of articles and comments the opportunity to
offer to personalize their posts with a profile picture.

By displaying the images, Gravatar obtains the IP address of the users, as this is required for a
communication between a browser and an online service is necessary. Further information on the survey and
Gravatar’s use of data can be found in Automattic’s privacy policy:

https://automattic.com/privacy/

13.8.2 Prevention of processing

If users do not want a user picture linked to their email address at Gravatar to be displayed in the
comments, you should use an e-mail address that is not registered with Gravatar to comment.
is. We would also like to point out that it is also possible to enter an anonymous e-mail address or no e-mail address at all.
if users do not wish their e-mail address to be sent to Gravatar.
Users can completely prevent the transfer of data by not using our comment system.

13.9 Akismet (anti-spam check)

Our online offering uses the Akismet service, which is provided by Automattic Inc, 60 29th Street #343, San Francisco, CA
94110, USA, is offered. The use is based on our legitimate interests within the meaning of Art. 6 para.
1 lit. f) GDPR.

13.9.1 Storage of data

With the help of this service, comments from real people are distinguished from spam comments. To this end, all
of a comment is sent to a server in the USA, where it is analyzed and stored for comparison purposes.
stored for days. If a comment has been classified as spam, the data for this time will be deleted.
stored beyond. This information includes the name entered, the e-mail address, the IP address, the
Comment content, the referrer, details of the browser and computer system used and the time of the entry.

Further information on the collection and use of data by Akismet can be found in the data protection information
from Automattic:

https://automattic.com/privacy/

13.9.2 Prevention of processing

Users are welcome to use pseudonyms or refrain from entering their name or e-mail address. You
can completely prevent the transfer of data by not using our comment system.

14 Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights
rights vis-à-vis the controller:

14.1 Right to information

You can request confirmation from the data controller as to whether the data concerning you
personal data are processed. If such processing has taken place, you can request the
responsible for the following information:

• the purposes for which the personal data are processed
• the categories of personal data that are processed
• the recipients or categories of recipients to whom the personal data concerning you have been disclosed
  personal data have been or will be disclosed
• the planned duration of the storage of the personal data concerning you or, if specific information
  are not possible, criteria for determining the storage period
• the existence of a right to rectification or erasure of personal data concerning you, a right to
  Right to restriction of processing by the controller or right to object to such processing
  Processing
• the existence of a right to lodge a complaint with a supervisory authority
• all available information about the origin of the data if the personal data is not stored by
  collected from the data subject
• the existence of automated decision-making, including profiling, in accordance with Art. 22
  Abs. 1 and 4 GDPR and – at least in these cases – meaningful information about
  the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
  the person concerned

You have the right to request information as to whether the personal data concerning you has been included in a
third country or to an international organization. In this context you can
request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR  in connection with the transfer
to be taught.

14.2 Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller, provided that the
processed personal data concerning you is incorrect or incomplete. The person responsible
must make the correction without delay.

14.3 Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of data concerning you
personal data:

• if you contest the accuracy of the personal data concerning you for a period of time that enables the
  controller to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data, and
  request the restriction of the use of personal data instead;
• the controller no longer needs the personal data for the purposes of the processing.
  but you need them for the establishment, exercise or defense of legal claims.
  need, or
• if you object to the processing pursuant to Art. 21 para. 1 GDPR and have not yet lodged an objection
  it has been established whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may be
– apart from their storage – only with your consent or for the assertion, exercise or defense of legal claims.
defense of legal claims or for the protection of the rights of another natural or legal person.
person or for reasons of important public interest of the Union or of a Member State
be processed.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the
responsible before the restriction is lifted.

14.4 Right to erasure

14.4.1 Obligation to delete

You can request from the controller that the personal data concerning you
deleted immediately and the controller is obliged to delete this data immediately.
if one of the following reasons applies:

• The personal data relating to you are necessary for the purposes for which they were collected or otherwise processed.
  were processed in this way are no longer necessary.
• You revoke your consent on which the processing is based in accordance with. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit.
  a GDPR and there is no other legal basis for the processing.
• You create acc. Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing.
  legitimate grounds for the processing, or you object to the processing pursuant to Art. Art. 21 para. 2 GDPR Objection to
  the processing.
• The personal data concerning you has been processed unlawfully.
• The deletion of personal data concerning you is necessary to fulfill a legal obligation.
  obligation under Union law or the law of the Member States to which the controller is subject.
  is subject to.
• The personal data concerning you have been collected in relation to the offer of information society services.
  pursuant to Art. 8 para. 1 GDPR is collected.

14.4.2 Information to third parties

If the controller has made the personal data concerning you public and is obliged pursuant to Art. Art. 17
Abs. 1 GDPR to erase the personal data, the controller shall, taking into account the available
technology and the cost of implementation, including technical measures, to safeguard the
data controllers who process the personal data that you
As the data subject, you may request the erasure of any links to, or copy or replication of, those personal data.
replications of this personal data.

14.4.3 Exceptions

The right to erasure does not exist if the processing is necessary for the following reasons:

• to exercise the right to freedom of expression and information
• for compliance with a legal obligation which requires processing by Union or Member State law
  Member State to which the controller is subject or for the performance of a task carried out in the
  is in the public interest or in the exercise of official authority vested in the controller.
  was transferred
• for reasons of public interest in the area of public health in accordance with
  Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
• for archiving purposes in the public interest, scientific or historical research purposes
  or for statistical purposes in accordance with. Art. 89 para. 1 GDPR, insofar as the right referred to in section 14.4.1
  is likely to render impossible or seriously impair the achievement of the objectives of that processing.
  impaired
• for the assertion, exercise or defense of legal claims

14.5 Right to information

Do you have the right to rectification, erasure or restriction of processing vis-à-vis the
controller is obliged to inform all recipients to whom the personal data concerning you have been
personal data have been disclosed, the right to rectification or erasure of the data or restriction of
of the processing, unless this proves to be impossible or is associated with a
disproportionate effort.

You have the right to be informed about these recipients by the controller.

14.6 Right to data portability

You have the right to access the personal data concerning you that you have provided to the controller,
in a structured, commonly used and machine-readable format. You also have the right
to another controller without hindrance from the controller to which the personal data have been provided.
data have been provided, provided that

• the processing is based on consent pursuant to Art. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or to
  a contract acc. Art. 6 para. 1 lit. b GDPR is based and
• the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be
data are transmitted directly from one controller to another controller, insofar as this is technically feasible.
is feasible. The freedoms and rights of other persons must not be impaired by this.

The right to data portability does not apply to the processing of personal data that is necessary for
is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in
public authority vested in the controller.

14.7 Right of objection

You have the right, for reasons arising from your particular situation, to object at any time to the
Processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR takes place,
to object; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can
demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
freedoms, or the processing serves the assertion, exercise or defense of legal claims.
legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object to the processing of your personal data,
object at any time to the processing of personal data concerning you for the purposes of such processing.
advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to processing for direct marketing purposes, the personal data concerning you will be
personal data will no longer be processed for these purposes.

You have the option, in connection with the use of information society services –
notwithstanding Directive 2002/58/EC – to exercise your right to object by automated means,
where technical specifications are used.

14.8 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. Through the
revocation of consent, the lawfulness of the processing carried out on the basis of the consent until the revocation is
processing is not affected.

14.9 Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing.
including profiling – to be subject to a decision based on personal data concerning you that is
legal effect or significantly impairs you in a similar way. This does not apply if the
Decision

• necessary for the conclusion or performance of a contract between you and the controller
  is,
• based on Union or Member State law to which the controller is subject,
  is permissible and these legal provisions contain appropriate measures to safeguard your rights and freedoms.
  and your legitimate interests, or
• with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para.
1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and suitable measures to safeguard the data
rights and freedoms and their legitimate interests.

With regard to the above-mentioned cases, the controller shall take appropriate measures to safeguard the rights and freedoms of data subjects.
freedoms  and to protect your legitimate interests, including at least the right to obtain the intervention of a person
of a person on the part of the controller, to express his or her point of view and to contest the decision
belongs.

14.10 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to
lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your
place of work or the place of the alleged infringement, if you believe that the alleged infringement has occurred.
processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of
the status and outcome of the complaint, including the possibility of a judicial review.
Legal remedy pursuant to Art. 78 GDPR.

15. age of majority and legal capacity

Only when you reach the age of majority and legal capacity can you effectively enter into the
collection, processing and use of your data. For this reason, we can use your data if you
are not yet 16 years old cannot be stored in this system. With the consent of this privacy policy
you declare that you have legal capacity after reaching the age of majority.

If you are not of legal age or legally competent, we do not wish to recognize you as a
Losing applicants. For this reason, we would be delighted to welcome you to our office,
to receive your application.

16. safety measures

We use the widespread SSL procedure (Secure Socket Layer) within the website visit in conjunction with the
highest encryption level supported by your browser. As a rule, these are
This is a 256-bit encryption.

We also use suitable technical and organizational security measures to protect your personal data.
data against accidental or intentional manipulation, partial or complete loss,
destruction or against unauthorized access by third parties. Our security measures are
continuously improved in line with technological developments.