PRIVACY POLICY

This pri­va­cy poli­cy cla­ri­fies the scope and pur­po­se of the pro­ces­sing of per­so­nal data (her­ein­af­ter refer­red to as ‘data’) within our online offer and the asso­cia­ted web­sites, func­tions and con­tent as well as exter­nal online pre­sen­ces, such as our social media pro­fi­le (her­ein­af­ter coll­ec­tively refer­red to as ‘online offer’). With regard to the terms used, such as ‘pro­ces­sing’ or ‘con­trol­ler’, we refer to the defi­ni­ti­ons in Art. 4 of the Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR).

Repre­sen­ted by:
Repre­sen­ted by the Exe­cu­ti­ve Board in accordance with § 26 BGB

Chair­man of the Exe­cu­ti­ve Board: Prof. Dr.-Ing. Joa­quin Diaz
Depu­ty Chair­man: Diet­mar Bernert

Link zum Impres­sum: https://www.bvbs.de/impressum/
Cont­act ines.prokop@bvbs.de

Types of data processed:

– Bestands­da­ten (z.B. Name).
– Kon­takt­da­ten (z.B. E‑Mail).
– Inhalts­da­ten (z.B. Text­ein­ga­ben, Foto­gra­fien, Vide­os).
– Nut­zungs­da­ten (z.B., besuch­te Web­sei­ten, Inter­es­se an Inhal­ten, Zugriffs­zei­ten).
– Meta-/Kom­mu­ni­ka­ti­ons­da­ten (z.B., Gerä­te-Infor­ma­tio­nen, IP-Adressen).

Cate­go­ries of data subjects

Visi­tors and users of the online offer (her­ein­af­ter we also refer to the data sub­jects coll­ec­tively as ‘users’).

Pur­po­se of the processing

– Zur­ver­fü­gung­stel­lung des Online­an­ge­bo­tes, sei­ner Funk­tio­nen und Inhal­te.
– Beant­wor­tung von Kon­takt­an­fra­gen und Kom­mu­ni­ka­ti­on mit Nut­zern.
– Sicher­heits­maß­nah­men.
– Reichweitenmessung/Marketing

Ter­mi­no­lo­gy used

‘Per­so­nal data’ means any infor­ma­ti­on rela­ting to an iden­ti­fied or iden­ti­fia­ble natu­ral per­son (her­ein­af­ter ‘data sub­ject’); an iden­ti­fia­ble natu­ral per­son is one who can be iden­ti­fied, direct­ly or indi­rect­ly, in par­ti­cu­lar by refe­rence to an iden­ti­fier such as a name, an iden­ti­fi­ca­ti­on num­ber, loca­ti­on data, an online iden­ti­fier (e.g. coo­kie) or to one or more fac­tors spe­ci­fic to the phy­si­cal, phy­sio­lo­gi­cal, gene­tic, men­tal, eco­no­mic, cul­tu­ral or social iden­ti­ty of that natu­ral person.

‘Pro­ces­sing’ means any ope­ra­ti­on or set of ope­ra­ti­ons which is per­for­med on per­so­nal data or on sets of per­so­nal data, whe­ther or not by auto­ma­ted means. The term is broad and covers prac­ti­cal­ly any hand­ling of data.

‘Pseud­ony­mi­sa­ti­on’ means the pro­ces­sing of per­so­nal data in such a man­ner that the per­so­nal data can no lon­ger be attri­bu­ted to a spe­ci­fic data sub­ject wit­hout the use of addi­tio­nal infor­ma­ti­on, pro­vi­ded that such addi­tio­nal infor­ma­ti­on is kept sepa­ra­te­ly and is sub­ject to tech­ni­cal and orga­ni­sa­tio­nal mea­su­res to ensu­re that the per­so­nal data are not attri­bu­ted to an iden­ti­fied or iden­ti­fia­ble natu­ral person

‘Pro­fil­ing’ means any form of auto­ma­ted pro­ces­sing of per­so­nal data con­sis­ting of the use of per­so­nal data to eva­lua­te cer­tain per­so­nal aspects rela­ting to a natu­ral per­son, in par­ti­cu­lar to ana­ly­se or pre­dict aspects con­cer­ning that natu­ral person’s per­for­mance at work, eco­no­mic situa­ti­on, health, per­so­nal pre­fe­ren­ces, inte­rests, relia­bi­li­ty, beha­viour, loca­ti­on or movements.

Con­trol­ler’ means the natu­ral or legal per­son, public aut­ho­ri­ty, agen­cy or other body which, alo­ne or joint­ly with others, deter­mi­nes the pur­po­ses and means of the pro­ces­sing of per­so­nal data.

‘Pro­ces­sor’ means a natu­ral or legal per­son, public aut­ho­ri­ty, agen­cy or other body which pro­ces­ses per­so­nal data on behalf of the controller.

Rele­vant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data pro­ces­sing. If the legal basis is not sta­ted in the pri­va­cy poli­cy, the fol­lo­wing appli­es: The legal basis for obtai­ning con­sent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for pro­ces­sing to ful­fil our ser­vices and imple­ment con­trac­tu­al mea­su­res and respond to enqui­ries is Art. 6 para. 1 lit. b GDPR, the legal basis for pro­ces­sing to ful­fil our legal obli­ga­ti­ons is Art. 6 para. 1 lit. c GDPR, and the legal basis for pro­ces­sing to pro­tect our legi­ti­ma­te inte­rests is Art. 6 para. 1 lit. f GDPR. In the event that vital inte­rests of the data sub­ject or ano­ther natu­ral per­son requi­re the pro­ces­sing of per­so­nal data, Art. 6 para. 1 lit. d GDPR ser­ves as the legal basis.

Secu­ri­ty measures

We take appro­pria­te tech­ni­cal and orga­ni­sa­tio­nal mea­su­res in accordance with Art. 32 GDPR, taking into account the sta­te of the art, the cos­ts of imple­men­ta­ti­on and the natu­re, scope, con­text and pur­po­ses of pro­ces­sing as well as the risk of vary­ing likeli­hood and seve­ri­ty for the rights and free­doms of natu­ral per­sons, to ensu­re a level of secu­ri­ty appro­pria­te to the risk.

The mea­su­res include, in par­ti­cu­lar, safe­guar­ding the con­fi­den­tia­li­ty, inte­gri­ty and avai­la­bi­li­ty of data by con­trol­ling phy­si­cal access to the data, as well as the access, input, trans­fer, safe­guar­ding of avai­la­bi­li­ty and its sepa­ra­ti­on. Fur­ther­mo­re, we have estab­lished pro­ce­du­res that ensu­re the exer­cise of data sub­ject rights, the dele­ti­on of data and the respon­se to data thre­ats. Fur­ther­mo­re, we take the pro­tec­tion of per­so­nal data into account as ear­ly as the deve­lo­p­ment and sel­ec­tion of hard­ware, soft­ware and pro­ce­du­res, in accordance with the prin­ci­ple of data pro­tec­tion through tech­no­lo­gy design and data pro­tec­tion-fri­end­ly default set­tings (Art. 25 GDPR).

Coope­ra­ti­on with pro­ces­sors and third parties

If we dis­c­lo­se data to other per­sons and com­pa­nies (pro­ces­sors or third par­ties) as part of our pro­ces­sing, trans­fer it to them or other­wi­se grant them access to the data, this will only be done on the basis of legal per­mis­si­on (e.g. if the trans­fer of data to third par­ties, such as pay­ment ser­vice pro­vi­ders, is neces­sa­ry for the ful­film­ent of the con­tract in accordance with Art. 6 para. 1 lit. b GDPR), you have con­sen­ted, a legal obli­ga­ti­on pro­vi­des for this or on the basis of our legi­ti­ma­te inte­rests (e.g. when using agents, web hosts, etc.).

If we com­mis­si­on third par­ties with the pro­ces­sing of data on the basis of a so-cal­led ‘order pro­ces­sing con­tract’, this is done on the basis of Art. 28 GDPR.

Trans­fers to third countries

If we pro­cess data in a third coun­try (i.e. out­side the Euro­pean Uni­on (EU) or the Euro­pean Eco­no­mic Area (EEA)) or if this occurs in the con­text of the use of third-par­ty ser­vices or dis­clo­sure or trans­fer of data to third par­ties, this will only take place if it is done to ful­fil our (pre)contractual obli­ga­ti­ons, on the basis of your con­sent, on the basis of a legal obli­ga­ti­on or on the basis of our legi­ti­ma­te inte­rests. Sub­ject to legal or con­trac­tu­al aut­ho­ri­sa­ti­ons, we only pro­cess or have the data pro­ces­sed in a third coun­try if the spe­cial requi­re­ments of Art. 44 et seq. GDPR are met. This means, for exam­p­le, that the pro­ces­sing takes place on the basis of spe­cial gua­ran­tees, such as the offi­ci­al­ly reco­g­nis­ed deter­mi­na­ti­on of a level of data pro­tec­tion cor­re­spon­ding to the EU (e.g. for the USA through the ‘Pri­va­cy Shield’) or com­pli­ance with offi­ci­al­ly reco­g­nis­ed spe­cial con­trac­tu­al obli­ga­ti­ons (so-cal­led ‘stan­dard con­trac­tu­al clauses’).

Rights of the data subjects

You have the right to request con­fir­ma­ti­on as to whe­ther the data in ques­ti­on is being pro­ces­sed and to request infor­ma­ti­on about this data as well as fur­ther infor­ma­ti­on and a copy of the data in accordance with Art. 15 GDPR.

You have accor­din­gly. Art. 16 GDPR, you have the right to request the com­ple­ti­on of data con­cer­ning you or the rec­ti­fi­ca­ti­on of inac­cu­ra­te data con­cer­ning you.

In accordance with Art. 17 GDPR, you have the right to demand that the data in ques­ti­on be dele­ted imme­dia­te­ly or, alter­na­tively, to demand that the pro­ces­sing of the data be rest­ric­ted in accordance with Art. 18 GDPR.

You have the right to request to recei­ve the data con­cer­ning you that you have pro­vi­ded to us in accordance with Art. 20 GDPR and to request its trans­fer to other controllers.

Sie haben fer­ner gem. Art. 77 DSGVO das Recht, eine Beschwer­de bei der zustän­di­gen Auf­sichts­be­hör­de ein­zu­rei­chen.
Wider­rufs­recht
Sie haben das Recht, erteil­te Ein­wil­li­gun­gen gem. Art. 7 Abs. 3 DSGVO mit Wir­kung für die Zukunft zu widerrufen

Right of cancellation

You have the right to with­draw your con­sent in accordance with Art. 7 para. 3 GDPR with effect for the future

Coo­kies and the right to object to direct advertising

‘Coo­kies’ are small files that are stored on users’ com­pu­ters. Dif­fe­rent infor­ma­ti­on can be stored within the coo­kies. A coo­kie is pri­ma­ri­ly used to store infor­ma­ti­on about a user (or the device on which the coo­kie is stored) during or after their visit to an online ser­vice. Tem­po­ra­ry coo­kies, or ‘ses­si­on coo­kies’ or ‘tran­si­ent coo­kies’, are coo­kies that are dele­ted after a user lea­ves an online ser­vice and clo­ses their brow­ser. The con­tent of a shop­ping bas­ket in an online shop or a log­in sta­tus, for exam­p­le, can be stored in such a coo­kie. ‘Per­ma­nent’ or ‘per­sis­tent’ coo­kies are coo­kies that remain stored even after the brow­ser is clo­sed. For exam­p­le, the log­in sta­tus can be saved if the user visits the web­site after seve­ral days. The inte­rests of users can also be stored in such a coo­kie and used for reach mea­su­re­ment or mar­ke­ting pur­po­ses. ‘Third-par­ty coo­kies’ are coo­kies that are offe­red by pro­vi­ders other than the con­trol­ler who ope­ra­tes the online ser­vice (other­wi­se, if they are only the controller’s coo­kies, they are refer­red to as ‘first-par­ty cookies’).

We may use tem­po­ra­ry and per­ma­nent coo­kies and pro­vi­de infor­ma­ti­on about this in our pri­va­cy policy.

If users do not want coo­kies to be stored on their com­pu­ter, they are asked to deac­ti­va­te the cor­re­spon­ding opti­on in the sys­tem set­tings of their brow­ser. Saved coo­kies can be dele­ted in the sys­tem set­tings of the brow­ser. The exclu­si­on of coo­kies can lead to func­tion­al rest­ric­tions of this online offer.

A gene­ral objec­tion to the use of coo­kies used for online mar­ke­ting pur­po­ses can be declared for a lar­ge num­ber of ser­vices, espe­ci­al­ly in the case of track­ing, via the US web­site http://www.aboutads.info/choices/ or the EU web­site http://www.youronlinechoices.com/. Fur­ther­mo­re, the sto­rage of coo­kies can be achie­ved by swit­ching them off in the brow­ser set­tings. Plea­se note that you may then not be able to use all the func­tions of this website.

Dele­ti­on of data

The data pro­ces­sed by us will be dele­ted or its pro­ces­sing rest­ric­ted in accordance with Art. 17 and 18 GDPR. Unless express­ly sta­ted in this pri­va­cy poli­cy, the data stored by us will be dele­ted as soon as it is no lon­ger requi­red for its inten­ded pur­po­se and the dele­ti­on does not con­flict with any sta­tu­to­ry reten­ti­on obli­ga­ti­ons. If the data is not dele­ted becau­se it is requi­red for other and legal­ly per­mis­si­ble pur­po­ses, its pro­ces­sing will be rest­ric­ted. This means that the data is blo­cked and not pro­ces­sed for other pur­po­ses. This appli­es, for exam­p­le, to data that must be retai­ned for com­mer­cial or tax law reasons.

Accor­ding to legal requi­re­ments in Ger­ma­ny, data is stored in par­ti­cu­lar for 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 no. 1 and 4, para. 4 HGB (books, records, manage­ment reports, accoun­ting vou­ch­ers, com­mer­cial books, docu­ments rele­vant for taxa­ti­on, etc.) and 6 years in accordance with § 257 para. 1 no. 2 and 3, para. 4 HGB (com­mer­cial letters).

Accor­ding to legal requi­re­ments in Aus­tria, the reten­ti­on peri­od is 7 years in accordance with § 132 para. 1 BAO (accoun­ting docu­ments, receipts/invoices, accounts, receipts, busi­ness papers, state­ment of inco­me and expen­ses, etc.), 22 years in con­nec­tion with real estate and 10 years for docu­ments in con­nec­tion with elec­tro­ni­cal­ly pro­vi­ded ser­vices, tele­com­mu­ni­ca­ti­ons, radio and tele­vi­si­on ser­vices that are pro­vi­ded to non-entre­pre­neurs in EU mem­ber sta­tes and for which the Mini-One-Stop-Shop (MOSS) is used.

Comm­ents and contributions

If users lea­ve comm­ents or other con­tri­bu­ti­ons, their IP addres­ses may be stored on the basis of our legi­ti­ma­te inte­rests within the mea­ning of Art. 6 para. 1 lit. f. GDPR for 7 days. GDPR may be stored for 7 days. This is done for our secu­ri­ty in case someone lea­ves ille­gal con­tent in comm­ents and posts (insults, pro­hi­bi­ted poli­ti­cal pro­pa­gan­da, etc.). In this case, we our­sel­ves may be pro­se­cu­ted for the com­ment or post and are the­r­e­fo­re inte­res­ted in the iden­ti­ty of the author.

Fur­ther­mo­re, we reser­ve the right, on the basis of our legi­ti­ma­te inte­rests pur­su­ant to Art. 6 para. 1 lit. f. GDPR, to pro­cess the infor­ma­ti­on pro­vi­ded by users for the pur­po­se of spam detection.

The data pro­vi­ded in the con­text of comm­ents and con­tri­bu­ti­ons will be stored by us per­ma­nent­ly until the user objects.

Com­ment subscriptions

The fol­low-up comm­ents can be sub­scri­bed to by users with their con­sent in accordance with Art. 6 para. 1 lit. a GDPR. Users will recei­ve a con­fir­ma­ti­on email to veri­fy that they are the owner of the email address ente­red. Users can unsub­scri­be from ongo­ing com­ment sub­scrip­ti­ons at any time. The con­fir­ma­ti­on email will con­tain infor­ma­ti­on on the can­cel­la­ti­on opti­ons. For the pur­po­ses of pro­ving the user’s con­sent, we store the time of regis­tra­ti­on tog­e­ther with the user’s IP address and dele­te this infor­ma­ti­on when users unsub­scri­be from the subscription.

You can can­cel your sub­scrip­ti­on at any time, i.e. revo­ke your con­sent. We may store the unsub­scri­bed email addres­ses for up to three years on the basis of our legi­ti­ma­te inte­rests befo­re dele­ting them in order to be able to pro­ve that con­sent was pre­vious­ly given. The pro­ces­sing of this data is limi­t­ed to the pur­po­se of a pos­si­ble defence against claims. An indi­vi­du­al request for dele­ti­on is pos­si­ble at any time, pro­vi­ded that the for­mer exis­tence of con­sent is con­firm­ed at the same time.

Retrie­val of pro­fi­le pic­tures from Gravatar

We use the Grava­tar ser­vice of Auto­mat­tic Inc, 60 29th Street #343, San Fran­cis­co, CA 94110, USA, within our online offe­ring and in par­ti­cu­lar in the blog.

Grava­tar is a ser­vice whe­re users can regis­ter and store pro­fi­le pic­tures and their email addres­ses. If users lea­ve posts or comm­ents on other online pre­sen­ces (espe­ci­al­ly in blogs) with the respec­ti­ve e‑mail address, their pro­fi­le pic­tures can be dis­play­ed next to the posts or comm­ents. For this pur­po­se, the email address pro­vi­ded by users is trans­mit­ted to Grava­tar in encrypt­ed form for the pur­po­se of che­cking whe­ther a pro­fi­le is stored for it. This is the sole pur­po­se of trans­mit­ting the email address and it will not be used for any other pur­po­se, but will be dele­ted afterwards.

Grava­tar is used on the basis of our legi­ti­ma­te inte­rests within the mea­ning of Art. 6 para. 1 lit. f) GDPR, as we use Grava­tar to offer post and com­ment aut­hors the oppor­tu­ni­ty to per­so­na­li­se their posts with a pro­fi­le picture.

By dis­play­ing the images, Grava­tar lear­ns the IP address of the user, as this is neces­sa­ry for com­mu­ni­ca­ti­on bet­ween a brow­ser and an online ser­vice. Fur­ther infor­ma­ti­on on the coll­ec­tion and use of data by Grava­tar can be found in Automattic’s pri­va­cy poli­cy: https://automattic.com/privacy/.

If users do not want a user image lin­ked to their email address at Grava­tar to appear in the comm­ents, they should use an email address that is not stored at Grava­tar to com­ment. We would also like to point out that it is also pos­si­ble to use an anony­mous e‑mail address or no e‑mail address at all if users do not wish their own e‑mail address to be sent to Grava­tar. Users can com­ple­te­ly pre­vent the trans­fer of data by not using our com­ment system.

Making cont­act

When cont­ac­ting us (e.g. by cont­act form, e‑mail, tele­pho­ne or via social media), the user’s details are pro­ces­sed to pro­cess the cont­act enquiry and its hand­ling in accordance with Art. 6 para. 1 lit. b) GDPR. The user’s details may be stored in a cus­to­mer rela­ti­onship manage­ment sys­tem (‘CRM sys­tem’) or com­pa­ra­ble enquiry organisation.

We dele­te the enqui­ries if they are no lon­ger requi­red. We review the neces­si­ty every two years; the sta­tu­to­ry archi­ving obli­ga­ti­ons also apply.

Coll­ec­tion of access data and log files

We, or our hos­ting pro­vi­der, coll­ect data on the basis of our legi­ti­ma­te inte­rests within the mea­ning of Art. 6 para. 1 lit. f. GDPR. GDPR, we coll­ect data about every access to the ser­ver on which this ser­vice is loca­ted (so-cal­led ser­ver log files). The access data includes the name of the web­site acces­sed, file, date and time of access, amount of data trans­fer­red, noti­fi­ca­ti­on of suc­cessful access, brow­ser type and ver­si­on, the user’s ope­ra­ting sys­tem, refer­rer URL (the pre­vious­ly visi­ted page), IP address and the reques­t­ing provider.

Log file infor­ma­ti­on is stored for secu­ri­ty reasons (e.g. to inves­ti­ga­te misu­se or fraud) for a maxi­mum of 7 days and then dele­ted. Data who­se fur­ther sto­rage is requi­red for evi­dence pur­po­ses is excluded from dele­ti­on until the respec­ti­ve inci­dent has been final­ly clarified.

Goog­le Analytics

On the basis of our legi­ti­ma­te inte­rests (i.e. inte­rest in the ana­ly­sis, opti­mi­sa­ti­on and eco­no­mic ope­ra­ti­on of our online offer within the mea­ning of Art. 6 para. 1 lit. f. GDPR), we use Goog­le Ana­ly­tics, a web ana­ly­sis ser­vice pro­vi­ded by Goog­le LLC (‘Goog­le’). GDPR), we use Goog­le Ana­ly­tics, a web ana­ly­tics ser­vice pro­vi­ded by Goog­le LLC (‘Goog­le’). Goog­le uses coo­kies. The infor­ma­ti­on gene­ra­ted by the coo­kie about the use of the online offer by the user is usual­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored there.

Goog­le is cer­ti­fied under the Pri­va­cy Shield Agree­ment and thus offers a gua­ran­tee of com­pli­ance with Euro­pean data pro­tec­tion law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Goog­le will use this infor­ma­ti­on on our behalf to ana­ly­se the use of our online offer by users, to com­pi­le reports on the acti­vi­ties within this online offer and to pro­vi­de us with fur­ther ser­vices asso­cia­ted with the use of this online offer and the use of the Inter­net. Pseud­ony­mi­sed user pro­files can be crea­ted from the pro­ces­sed data.

We only use Goog­le Ana­ly­tics with acti­va­ted IP anony­mi­sa­ti­on. This means that the IP address of users is trun­ca­ted by Goog­le within mem­ber sta­tes of the Euro­pean Uni­on or in other signa­to­ry sta­tes to the Agree­ment on the Euro­pean Eco­no­mic Area. Only in excep­tio­nal cases will the full IP address be trans­mit­ted to a Goog­le ser­ver in the USA and trun­ca­ted there.

The IP address trans­mit­ted by the user’s brow­ser will not be mer­ged with other Goog­le data. Users can pre­vent the sto­rage of coo­kies by set­ting their brow­ser soft­ware accor­din­gly; users can also pre­vent the coll­ec­tion of data gene­ra­ted by the coo­kie and rela­ted to their use of the online offer to Goog­le and the pro­ces­sing of this data by Goog­le by down­loa­ding and instal­ling the brow­ser plug-in available at the fol­lo­wing link: http://tools.google.com/dlpage/gaoptout?hl=de.

Fur­ther infor­ma­ti­on on the use of data by Goog­le, set­ting and objec­tion opti­ons, can be found in Google’s pri­va­cy poli­cy (https://policies.google.com/technologies/ads) and in the set­tings for the dis­play of adverts by Goog­le (https://adssettings.google.com/authenticated).

Users’ per­so­nal data is dele­ted or anony­mi­sed after 14 months.

Goog­le Doubleclick

On the basis of our legi­ti­ma­te inte­rests (i.e. inte­rest in the ana­ly­sis, opti­mi­sa­ti­on and eco­no­mic ope­ra­ti­on of our online offer within the mea­ning of Art. 6 para. 1 lit. f. GDPR), we use the ser­vices of Goog­le LLC, 1600 Amphi­theat­re Park­way, Moun­tain View, CA 94043 USA (‘Goog­le’). GDPR) the ser­vices of Goog­le LLC, 1600 Amphi­theat­re Park­way, Moun­tain View, CA 94043, USA, (‘Goog­le’).

Goog­le is cer­ti­fied under the Pri­va­cy Shield Agree­ment and thus offers a gua­ran­tee of com­pli­ance with Euro­pean data pro­tec­tion law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the Goog­le ‘Dou­ble­click’ online mar­ke­ting pro­cess to place adverts in the Goog­le adver­ti­sing net­work (e.g. in search results, in vide­os, on web­sites, etc.). Dou­ble Click is cha­rac­te­ri­sed by the fact that ads are dis­play­ed in real time based on the pre­su­med inte­rests of users. This allows us to dis­play adverts for and within our online offe­ring in a more tar­ge­ted man­ner in order to pre­sent users only with adverts that poten­ti­al­ly match their inte­rests. If, for exam­p­le, a user is shown adverts for pro­ducts that they were inte­res­ted in on other online offers, this is refer­red to as ‘remar­ke­ting’. For the­se pur­po­ses, when our and other web­sites on which the Goog­le adver­ti­sing net­work is acti­ve are acces­sed, a code from Goog­le is exe­cu­ted direct­ly by Goog­le and so-cal­led (re)marketing tags (invi­si­ble gra­phics or code, also known as ‘web bea­cons’) are inte­gra­ted into the web­site. With their help, an indi­vi­du­al coo­kie, i.e. a small file, is stored on the user’s device (com­pa­ra­ble tech­no­lo­gies can also be used ins­tead of coo­kies). This file records which web­sites the user has visi­ted, which con­tent they are inte­res­ted in and which offers the user has cli­cked on, as well as tech­ni­cal infor­ma­ti­on about the brow­ser and ope­ra­ting sys­tem, refer­ring web­sites, time of visit and other infor­ma­ti­on about the use of the online offer.

The IP address of the user is also recor­ded, wher­eby this is shor­ten­ed within mem­ber sta­tes of the Euro­pean Uni­on or in other con­trac­ting sta­tes of the Agree­ment on the Euro­pean Eco­no­mic Area and only in excep­tio­nal cases is it trans­mit­ted in full to a Goog­le ser­ver in the USA and shor­ten­ed the­re. Goog­le may also com­bi­ne the afo­re­men­tio­ned infor­ma­ti­on with such infor­ma­ti­on from other sources. If the user sub­se­quent­ly visits other web­sites, they may be shown adverts tail­o­red to their inte­rests based on their user profile.

User data is pro­ces­sed pseud­ony­mously within the Goog­le adver­ti­sing net­work. This means that Goog­le does not store and pro­cess the user’s name or email address, for exam­p­le, but pro­ces­ses the rele­vant data in rela­ti­on to coo­kies within pseud­ony­mi­sed user pro­files. This means that, from Google’s per­spec­ti­ve, the adverts are not mana­ged and dis­play­ed for a spe­ci­fi­cal­ly iden­ti­fied per­son, but for the coo­kie owner, regard­less of who this coo­kie owner is. This does not app­ly if a user has express­ly allo­wed Goog­le to pro­cess the data wit­hout this pseud­ony­mi­sa­ti­on. The infor­ma­ti­on coll­ec­ted by Goog­le mar­ke­ting ser­vices about users is trans­mit­ted to Goog­le and stored on Google’s ser­vers in the USA.

Fur­ther infor­ma­ti­on on the use of data by Goog­le, set­ting and objec­tion opti­ons, can be found in Google’s pri­va­cy poli­cy (https://policies.google.com/technologies/ads) and in the set­tings for the dis­play of adverts by Goog­le (https://adssettings.google.com/authenticated).

Online pre­sence in social media

We main­tain online pre­sen­ces within social net­works and plat­forms in order to com­mu­ni­ca­te with the cus­to­mers, inte­res­ted par­ties and users acti­ve the­re and to inform them about our ser­vices. When acces­sing the respec­ti­ve net­works and plat­forms, the terms and con­di­ti­ons and data pro­ces­sing gui­de­lines of their respec­ti­ve ope­ra­tors apply.

Unless other­wi­se sta­ted in our pri­va­cy poli­cy, we pro­cess users’ data if they com­mu­ni­ca­te with us within the social net­works and plat­forms, e.g. wri­te posts on our online pre­sen­ces or send us messages.

Inte­gra­ti­on of third-par­ty ser­vices and content

On the basis of our legi­ti­ma­te inte­rests (i.e. inte­rest in the ana­ly­sis, opti­mi­sa­ti­on and eco­no­mic ope­ra­ti­on of our online offer within the mea­ning of Art. 6 para. 1 lit. f. GDPR), we use con­tent or ser­vice offers from third-par­ty pro­vi­ders within our online offer. GDPR) con­tent or ser­vice offers from third-par­ty pro­vi­ders in order to inte­gra­te their con­tent and ser­vices, such as vide­os or fonts (her­ein­af­ter uni­form­ly refer­red to as ‘con­tent’).

This always pre­sup­po­ses that the third-par­ty pro­vi­ders of this con­tent reco­g­ni­se the IP address of the user, as they would not be able to send the con­tent to their brow­ser wit­hout the IP address. The IP address is the­r­e­fo­re requi­red to dis­play this con­tent. We endea­vour to only use con­tent who­se respec­ti­ve pro­vi­ders only use the IP address to deli­ver the con­tent. Third-par­ty pro­vi­ders may also use so-cal­led pixel tags (invi­si­ble gra­phics, also known as ‘web bea­cons’) for sta­tis­ti­cal or mar­ke­ting pur­po­ses. Pixel tags can be used to ana­ly­se infor­ma­ti­on such as visi­tor traf­fic on the pages of this web­site. The pseud­ony­mous infor­ma­ti­on may also be stored in coo­kies on the user’s device and may con­tain, among other things, tech­ni­cal infor­ma­ti­on about the brow­ser and ope­ra­ting sys­tem, refer­ring web­sites, visit time and other infor­ma­ti­on about the use of our online offer, as well as being lin­ked to such infor­ma­ti­on from other sources.

You­tube

We inte­gra­te the vide­os of the plat­form ‘You­Tube’ of the pro­vi­der Goog­le LLC, 1600 Amphi­theat­re Park­way, Moun­tain View, CA 94043, USA. Pri­va­cy poli­cy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

Goog­le Fonts

We inte­gra­te the fonts (‘Goog­le Fonts’) of the pro­vi­der Goog­le LLC, 1600 Amphi­theat­re Park­way, Moun­tain View, CA 94043, USA. Pri­va­cy poli­cy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated. https://adssettings.google.com/authenticated.

Crea­ted with the help of Datenschutz-Generator.de