Privacy Notice (Art. 13 GDPR)

In accordance with Article 13 of the GDPR, we are providing you with the legal bases for our data processing activities. Unless the legal basis is specifically stated in the privacy notice, the following applies: The legal basis for obtaining consent is Article 6(1)(a) in conjunction with Article 7 of the GDPR. The legal basis for processing to fulfill our services, carry out contractual measures, and respond to inquiries is Article 6(1)(b) of the GDPR. The legal basis for processing to fulfill our legal obligations is Article 6(1)(c) of the GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

 

​Data Deletion and Retention Periods

We adhere to the principles of data minimization pursuant to Article 5(1)(c) of the GDPR and data retention limits pursuant to Article 5(1)(e) of the GDPR. We store your personal data only for as long as is necessary to achieve the purposes stated here or as required by the retention periods prescribed by law. Once the respective purpose no longer applies or upon expiration of these retention periods, the corresponding data will be deleted as soon as possible.

 

​External Links

This website may contain links to third-party websites or to other websites under our control. If you follow a link to a website outside our control, please note that these websites have their own privacy policies. We assume no responsibility or liability for these third-party websites or their privacy policies. Therefore, before using these websites, please review their privacy policies to ensure you agree with them.

You can identify external links by the fact that they are displayed in a slightly different color from the rest of the text or are underlined. Your cursor will highlight external links when you move it over them. Only when you click on an external link will your personal data be transmitted to the link’s destination. In doing so, the operator of the other website receives, in particular, your IP address, the time at which you clicked the link, the page on which you clicked the link, as well as additional information that you can find in the privacy policy of the respective provider.

Please also note that some links may result in the transfer of data outside the European Economic Area. This could allow foreign authorities to access your data. You may not have any legal recourse against such access to your data. If you do not want your personal data to be transferred to the linked site or to be exposed to unwanted access by foreign authorities, please do not click on any links.

​

Rights of the Data Subject

As a data subject under the GDPR, you have the right to exercise various rights. The rights of data subjects under the GDPR include the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20). RIGHT OF WITHDRAWAL: Certain data processing activities may only take place with your explicit consent. You have the option to withdraw your consent at any time. However, this does not affect the lawfulness of the data processing prior to the withdrawal. RIGHT TO OBJECT: If the processing is based on Article 6(1)(e) or (f) of the GDPR, you, as the data subject, may object at any time to the processing of your personal data on grounds relating to your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Article 4(4) of the GDPR. Unless we can demonstrate a legitimate interest in the processing that outweighs your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims, we will cease processing your data upon receipt of your objection.

If the processing of personal data is used for direct marketing purposes, you also have the right to object at any time. The same applies to profiling related to direct marketing. In this case as well, we will no longer process your personal data once you object. RIGHT TO FILE A COMPLAINT WITH A SUPERVISORY AUTHORITY: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy. RIGHT TO DATA PORTABILITY: If your data is processed automatically based on consent or the performance of a contract, you have the right to receive this data in a structured, commonly used, and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, provided this is technically feasible. RIGHT TO ACCESS, CORRECTION, AND DELETION: You have the right to access your processed personal data, including information regarding the purpose of data processing, the categories of data, the recipients, and the duration of storage. If you have any questions on this topic or on other matters related to personal data, you are welcome to contact us using the contact information provided in the legal notice. RIGHT TO RESTRICTION OF PROCESSING: You may at any time request the restriction of the processing of your personal data. To do so, you must meet one of the following conditions:

​

• You dispute the accuracy of the personal data. While the accuracy is being verified, you have the right to request that processing be restricted.

• If processing is unlawful, you may request restriction of the use of the data as an alternative to erasure.

• If we no longer need your personal data for the purposes of processing, but you need the data to assert, exercise, or defend legal claims, you may request restriction of processing as an alternative to erasure.

• If you object to the processing pursuant to Article 21(1) of the GDPR, a balancing of your interests against ours will be conducted. Until this balancing is completed, you have the right to request the restriction of processing.

​Restriction of processing means that, apart from storage, personal data may only be processed with your consent or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

 

Provision of the Website (Web Host)

When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting provider.

​

These are:

• IP address of the website visitor’s device

• Device used

• Hostname of the accessing computer

• Visitor’s operating system

• Browser type and version

• Name of the file accessed

• Time of the server request

• Amount of data

• Information indicating whether the data retrieval was successful

This data is not combined with other data sources.

​

​Instead of hosting this website on our own server, we may also have it hosted on the server of an external service provider (hosting company), which we have listed above in this case. The personal data collected by this website is then stored on the hosting company’s servers. In addition to the data mentioned above, the web host also stores for us, for example, contact inquiries, contact details, names, website access data, meta and communication data, contract data, and other data generated via a website.

​

The legal basis for processing this data is Article 6(1)(f) of the GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website. If the website is accessed to enter into contract negotiations with us or to conclude a contract, this serves as an additional legal basis (Art. 6(1)(b) GDPR). In the event that we have commissioned a hosting provider, a data processing agreement exists with this service provider.

​

Use of Local Storage Items, Session Storage Items, and Cookies

Our website uses local storage items, session storage items, and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your device. This data typically includes user preferences, such as a website’s “day” or “night mode,” and remains stored until you manually delete it. Session storage is very similar to local storage, except that the data is stored only for the duration of the current session, i.e., until you close the current tab. After that, the session storage items are deleted from your device. Cookies are pieces of information that a web server (a server that provides web content) stores on your device to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after you finish visiting a website, or stored permanently (permanent cookies) on your device until you delete them yourself or your web browser deletes them automatically.

​

​These objects may also be stored on your device by third-party companies when you visit our site (third-party requests). This allows us, as the operator, and you, as a visitor to this website, to use certain services provided by third parties that are integrated into this website. Examples include the processing of payment services or the display of videos.

​

​These mechanisms have a wide range of applications. They can improve a website’s functionality, manage shopping cart features, enhance the security and user experience of the website, and perform analyses of visitor traffic and behavior. Depending on the specific functions, these must be classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website (e.g., cookies to measure visitor behavior), then their use is based on Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in storing local storage items, session storage items, and cookies to ensure the technically flawless and optimized provision of our services. In all other cases, the storage of local storage items, session storage items, and cookies occurs only with your explicit consent (Art. 6(1)(a) GDPR).

​If local storage items, session storage, or third-party cookies are used for analytical purposes, we will inform you of this separately in this privacy notice. We will request your consent, which you may revoke at any time.

​

Use of External Services

Our website uses external services. External services are third-party services that are integrated into our website. This may be done for various reasons, such as embedding videos or ensuring the security of the website. When using these services, personal data is also transferred to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website prior to their use, which you may revoke at any time (Art. 6(1)(a) GDPR).

​

Content Delivery Network (CDN)

We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. To this end, the service provider that operates this network processes your IP address and information about when you visited our website. You can find further information about data processing by this service provider in its privacy policy.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest in using a Content Delivery Network is to ensure that our website is displayed as quickly, securely, and reliably as possible.

​

Amazon CloudFront

We use the Amazon CloudFront service on our website. The service is provided by Amazon Web Services EMEA S.à r.l., 38 Avenue John F. Kennedy, L-1855, Luxembourg.

Use of this service may result in data being transferred to a third country (the United States). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider’s privacy policy at the following URL: https://aws.amazon.com/de/privacy/.

​

Content Management System

A content management system enables the creation, editing, organization, and presentation of digital content. We use a content management system to create content for our website. This allows us to design a more appealing website.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest lies in the technically flawless presentation and optimization of the website.

​

Website Builder and Hosting (Wix)

Our website is created and operated using the website builder provided by Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel.

Wix stores data on servers in various countries, including the EU, the US, and Israel. From the European Union’s data protection perspective, Israel is considered a country with an adequate level of data protection.

For more information on data protection at Wix, please visit:

https://de.wix.com/about/privacy

​

Data Protection Software

To better comply with data protection requirements, we use specialized software. This software helps us ensure compliance with data protection regulations.

Data processing will only take place if you consent to it (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR) . Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g., via the consent banner or other options provided on this website), we will cease this data processing. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

​

ALFRIGHT Privacy Policy

We use the ALFRIGHT Privacy Policy service on our website. The provider of this service is Lukmann Consulting GmbH, Packerstraße 183, A-8561 Söding, Austria.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

This service helps us keep our privacy policy up to date and compliant with the law. Therefore, we rely on the legal basis of legitimate interest. Link: www.alfright.eu/datenschutzerklaerung/

​

Usercentrics (Consent Management Platform)

We use the Usercentrics Consent Management Platform on our website to obtain our users’ consent for the storage of certain cookies or the use of certain technologies and to document this in compliance with data protection regulations.

The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

When you visit our website, a connection is established with Usercentrics’ servers to obtain and manage your consents and other declarations regarding cookie usage. Usercentrics stores a cookie in your browser to track the consents you have granted or revoked.

The data collected in this manner is stored until you request its deletion, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.

For more information on data protection at Usercentrics, please visit:

https://usercentrics.com/de/datenschutzerklaerung/​

​

Sentry (Error Analysis)

We use the Sentry service on our website to analyze technical errors and improve the stability of our website. The service is provided by Functional Software, Inc., 132 Hawthorne St, San Francisco, CA 94107, USA.

Sentry helps us identify and resolve technical issues and crashes on our website. In doing so, technical information such as error messages, browser information, device type, or time of access may be processed.

Processing may also take place on servers in the United States. The provider is certified under the EU-U.S. Data Privacy Framework and thereby ensures an adequate level of data protection.

Use of the service is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, as we have an interest in the technical stability and security of our website.

For more information on data protection at Sentry, please visit: https://sentry.io/privacy/

​

Hosting

 

Hosting refers to the provision of web space and the files stored on it by a web host.

 

This involves the transmission and storage of personal data on the web host’s servers. In particular, users’ IP addresses, metadata, and communication data, as well as data regarding website visits, are processed. When a website visitor accesses the site, a connection is established to the web host’s servers. This involves the processing of the website visitor’s personal data.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest consists in being able to display our website and make it available on the Internet.

​

Domain Registration (IONOS)

Our domain is still registered with IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

Data required for domain registration (e.g., the owner’s name, address, and email address) is stored and processed by IONOS in accordance with legal requirements.

Further information on data protection at IONOS: https://www.ionos.de/terms-gtc/terms-privacy

 

Email Services (IONOS)

If you contact us via email or subscribe to our newsletter, the emails are processed by IONOS SE.

IONOS stores and processes your data exclusively for the purpose of handling your inquiries, sending newsletters, and managing email communication.

Further information on data protection at IONOS:

https://www.ionos.de/datenschutzerklaerung

​

Performance Optimization

We use tools on our website designed to optimize its performance. This is intended to improve the user experience when visiting the website.

Data processing will only take place if you consent to it (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g., via the consent banner or other options provided on this website), we will cease this data processing. The lawfulness of the processing carried out prior to withdrawal remains unaffected.

​

PagePulse

We use the PagePulse service on our website. The service is provided by SolTech, 23 Crummer Road, Ponsonby, Auckland, New Zealand.

Use of this service may result in data being transferred to a third country (New Zealand). The European Commission has confirmed an adequate level of data protection for this country through an adequacy decision.

Further information can be found in the provider’s privacy policy at the following URL: https://pagepulse.co/legal/privacy-policy.

​

Contact Forms

Our website offers the option to contact us via a contact form. To contact us using this form, we require your contact information in particular.

If you provide your consent, the legal basis is Article 6(1)(a) of the GDPR. This consent may be withdrawn at any time.

When you submit inquiries regarding our products, services, or our company, the processing is carried out for the purpose of fulfilling a contract or taking pre-contractual measures in accordance with Article 6(1)(b) of the GDPR. Additionally, there may be a legitimate interest in maintaining business relationships or responding to your inquiry for other reasons. In this case, the legal basis for the processing of your data would be Article 6(1)(f) of the GDPR.

The data will be deleted once we have fully responded to your inquiry and no other retention obligations prevent this.