PRIVACY POLICY

Web analytics and marketing

We use the following service for the purpose of web analytics. Cookies may be used on various pages in the context of web analytics. Cookies are text files which are placed on your computer and enable an unimpeded visit to our website, among other things. Cookies are used in the context of so-called usage profiles. In doing so, you are assigned a pseudonym under which the usage data will be stored.

Google Analytics

This website uses Google Analytics, a Web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies. In the context of using cookies, we draw on your consent to the data collection. If you do not give your consent to the data usage when you first visit our website, we will not record your usage behaviour and other personal data which could arise during your website visit and, thus, also not use them for subsequent usage analytics or for remarketing campaigns. This also applies to third-party cookies such as this Google Analytics plugin. If you agree to the processing of your data in the context of the opt-in procedure (confirmation of the cookie banner), the lawfulness of the processing of your data is based on a consent in accordance with point (a) of the first sentence of Article 6 (1) GDPR, and we shall use your data for the purposes of marketing and evaluating your usage behaviour within the scope of your given consent. The information the cookie generates in relation to your usage of this website is generally transmitted to a server of Google LLC in the USA where it is then stored. Information regarding the usage of this website and your IP address may possibly be transmitted to a Google server in the USA and also be stored on that server. The data transmission is lawful by virtue of your consent in accordance with point (a) of the first sentence of Article 49 (1) GDPR. If IP anonymisation is enabled on this website, Google will, however, truncate your IP address beforehand within a Member State of the European Union or in another state that is party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and truncated there. Google will use this information on behalf of this website’s operator to evaluate your usage of the website, to compile reports about the website activities, and to provide further services to the website operator in connection with the website usage and Internet usage. The IP address which your browser transmits in the context of Google Analytics will not be combined with any other data held by Google unless you have, in the settings of a Google account, configured the web and app activity settings to permit such combination by Google. Further information on the terms and conditions of use and on data privacy can be found at: https://marketingplatform.google.com/about/analytics/terms/us/ (English) https://marketingplatform.google.com/about/analytics/terms/de/  (German) and https://policies.google.com/?hl=en&gl=en (English) https://policies.google.com/?hl=de&gl=de (German). On our website, Google Analytics has been supplemented with the code “anonymizeIp” to be able to collect IP addresses anonymously (so-called IP masking). You can also prevent the collection of data by Google Analytics by clicking on the link below. This will set an opt-out cookie that will prevent collection of your data with future effect when visiting this website: Click here to opt-out of Google Analytics Please note that, if you delete your cookies, the opt-out cookie will also be deleted and you may possibly have to re-enable it.

Conversion Tracking via Google Ads

We use the online advertising program "Google Ads" and its conversion tracking functionality. Google Ads is an online advertising service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Conversion tracking allows us to understand if users complete certain actions on our website. When you click on an ad served by Google, a conversion tracking cookie is placed on your device. These cookies expire after 30 days and do not contain personal data that can identify you. The information collected using the conversion cookie helps us compile conversion statistics. We can see the total number of users who clicked on our ads and what actions they took. However, we do not receive any information that personally identifies users. Google Ads also enables us to show ads in Google search results and on third-party websites based on the keywords you enter on Google (keyword targeting). Additionally, targeted ads may be displayed based on user data Google has collected (e.g., location data and interests) (audience targeting). As the website operator, we can analyze this data quantitatively to understand which search terms led to the display of our ads and how many clicks they received.

The use of these services is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. For more information on Google Ads conversion tracking, please visit:

https://policies.google.com/privacy/frameworks
https://business.safety.google/controllerterms/
https://policies.google.com/privacy?hl=de

The company is certified in accordance the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the US which is intended to ensure compliance with European data protection standards for data processing in the US. Each company certified under the DPF commits to adhering to these data protection standards. For more information, please visit:

https://www.dataprivacyframework.gov/participant/5780

Newsletter

If you have subscribed to our Newsletter, we process your provided data on the basis of your consent pursuant to point (a) of the first sentence of Article 6 (1) GDPR in order to send you our Newsletter on a regular basis. To subscribe, it suffices to provide an e-mail address. The other information is provided voluntarily. During the subscription process, we use the so-called double opt-in procedure in which, after you have given your consent to receive the newsletter, you must expressly confirm your e-mail address again in a second step. Only then is the service enabled. For legal reasons, we also store the IP address and the date on which you subscribed. You may withdraw your consent at any time with effect for the future. You will find a link to withdraw your consent at the end of each Newsletter e-mail. You can, of course, also withdraw your consent via the other contact options offered.

Forwarding of data

We forward data to other third parties if, and to the extent that, we have delegated the performance of tasks to them. Data are forwarded only insofar as necessary for performing the delegated tasks. We work together with the following companies:

• VMB Visuelle Medien Brunk GbR, Reiegelgrube 7, 55543 Bad Kreuznach, Germany
• ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstrasse 68, 02742 Friedersdorf, Germany

Furthermore, service providers can be entrusted with tasks e.g. in the following areas:

• IT maintenance
• IT development
• IT provisioning
• Legal counsel

The data are forwarded exclusively on the basis of a legal standard or a suitable contract pursuant to Article 26 or Article 28 GDPR that ensures compliance with all statutory data protection guidelines. Apart from that, data are forwarded exclusively in the context of the legally provided cases, for example in the event of a legal obligation to disclose information to law enforcement authorities. In these cases, the forwarding of the data is lawful in accordance with point (c) of the first sentence of Article 6 (1) GDPR.

Forwarding of data to a third country

The forwarding of data to a third country is intended. This forwarding takes place on the basis of your given consent. The following companies are recipients of your provided data:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company of the group in the USA)

Where data are transmitted to a third country on the basis of consent, without an adequacy decision or other suitable safeguards being in place, it is necessary to refer to the associated heightened risk of the data processing arising from the transmission, on the basis of point (a) of the first sentence of Article 49 (1) GDPR. We would nevertheless like to assure you that, through the diligent selection and constant review of the standards of our contractual partners, potential risks are successfully minimised.

Duration of data storage

We erase your personal data without undue delay as soon as the data are no longer required for the fulfilment of contractual and legal obligations or for the exercise of our legitimate interests. Where a contractual relationship exists, personal data are held at least for as long as is necessary for the fulfilment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual period itself, since the data may remain relevant in the context of the limitation periods, even after the end of the contract. Moreover, data may only be erased after the expiry of any retention periods prescribed under tax and commercial law. The criteria for the duration of the storage of cookies can be found in the relevant section.

Data subjects’ rights

As the data subject of the processing of personal data, you have the following rights: You have the right to request confirmation as to whether personal data concerning yourself are being processed. Where this is the case, you have the right to information about these personal data and to the information set out in detail under Article 15 GDPR. You have the right to demand that the Controller rectify without undue delay any inaccurate personal data concerning yourself and, where applicable, complete any incomplete personal data concerning yourself (Article 16 GDPR). You have the right to demand that the Controller erase personal data concerning yourself without undue delay if any of the individual grounds set out in Article 17 GDPR apply, e.g. where the data are no longer necessary in relation to the purposes for which they were collected (right to erasure). You have the right to demand that the Controller restrict processing if any of the conditions set out in Article 18 GDPR apply, e.g. if you have objected to the processing, for the duration of the Controller’s review. You have the right to receive the personal data concerning yourself, which you provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance by us, provided that the processing of these data is based on your consent or on a contract and the processing is carried out by automated means (Article 20 GDPR). When exercising the right to data portability, you have the right to have the personal data transmitted directly by us to another controller, where technically feasible (right to data portability). You have the right to object at any time to the processing of personal data concerning yourself, on grounds relating to your particular situation. The Controller will then no longer process these personal data unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of the establishment, exercise or defence of legal claims (Article 21 GDPR). With respect to the exercise of your rights, you can contact us at any time via the contact options offered on our website.

Right to object to direct marketing

In individual cases, we process personal data for the purpose of direct marketing. In this case, you have the right to object at any time to the processing of personal data concerning yourself for such marketing purposes (Article 21 GDPR). If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. The objection can be filed at any time, without formal requirements, via one of the contact options stated in this Data Protection Declaration or in our imprint.

Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning yourself infringes GDPR (Article 77 GDPR). You can assert this right before a supervisory authority in the member state of your habitual residence, place of work or place of the alleged infringement. In Rhineland-Palatinate, the competent supervisory authority is the Rhineland-Palatinate State Commissioner for Data Protection and Freedom of Information. Further information is available at the following link: https://www.datenschutz.rlp.de/de/startseite/ (German-language only) However, you can of course also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact for data protection topics is to use the contact details provided above.

Obligation to provide data

You are principally under no obligation to provide data. The provision of data may, however, be necessary in order for you to be able to use certain functions or to enter into a contract. If you fail to provide the required data, you will be unable to use certain functions and services and to enter into a contract.

Up-to-datedness and amendment of this data protection information

This data protection information is up-to-date as of November 2022. We reserve the right to revise this data protection information as necessary to reflect legal and technical developments or in connection with the offer of new products and services. Should we revise our data protection policy, we will announce this directly on our homepage in this Policy.