Privacy Notice

1. Scope of processing personal data
In principle, we only process personal data of our users insofar as this is necessary for the provision of a functional website and to provide our content and services. 

2. Legal basis for the processing of personal data
a) Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR)
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Abs. 1 lit. a (GDPR) serves as the legal basis.

b) Contract fulfilment and pre-contractual inquires (Art. 6 Para. 1 S. 1 lit. b. GDPR)
When processing personal data that is required to fulfil a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures at a data subject’s request.

c) Legal obligation (Art. 6 Para. 1 S. 1 lit. c. GDPR)
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as the legal basis.

d) Protection of vital interests (Art. 6 Para. 1 S. 1 lit. d. GDPR)
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR serves as the legal basis.

e) Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR) 
If processing is necessary to persue a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subjects do not outweigh the first-mentioned interests, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing.

In addition to the GDPR, there is national law, which may contain special regulations. 

3. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as processing is no longer necessary to achieve the processing purpose. Further storage can take place if this is required or permitted under European or national laws or other provisions which the controller is subject to. The data will also be blocked or deleted if such storage period set out in such provisions expires unless there is a need for further storage of the data in order to conclude or fulfil a contract. 
 

In order to ensure an appropriate level of protection of your data, technical and organizational measures are taken in accordance with the legal requirements, particularly taking into account the following criteria: 

1) state-of-the-art
2) implementation costs
3) type, scope and purpose of processing
4) the probability of occurrence and extent of the threat to the rights and freedoms of natural persons.

In addition, when selecting the measures, particular emphasis is placed on securing confidentiality, integrity and the availability of data.

For example, SSL encryption is used to protect the transmitted data during data exchange. You can recognize this by „https://“ in the URL and by the lock symbol displayed in the browser in the address bar.  

Procedures are implemented that adequately enable the exercise of data subject rights, such as deletion. 
In addition, data protection is taken into account through data protection friendly default settings (privacy by default) and technology design (privacy by design). 
 

As part of the processing of personal data, data may be transmitted to other companies, legally independent organizational units or persons or disclosed to them. This is the case, for example, with IT service providers such as the present web hosting by qwertiko GmbH (Waldstrasse 41-43, 76133 Karlsruhe; Germany) or the internet agency Navigate AG (Waldstrasse 41-43, 76133 Karlsruhe, Germany).

We generally process your data in countries inside the European Union (“EU”),or the European Economic Area (“EEA”).

If service providers, such as Google Ireland Limited with the parent company Google LLC in the USA, process data outside of the EU/EEA, this is done in accordance with the legal requirements. Please find details on the transfer to countries outside the EU and/or the EEA in the following sections of this privacy notice, including the relevant countries and the relevant safeguards for such transfer.

We only process data in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, or in the presence of certifications or binding internal data protection regulations. 
 

1. Description and scope of data processing
This website is hosted by the web hosting provider qwertiko GmbH (Waldstraße 41-43, 76133 Karlsruhe, Germany) on their servers.

Every time our website is accessed, our system automatically collects data and information from the device you are using (e.g., your computer or mobile device). The following data is collected:  

(1) information about the browser type and the version used
(2) the user’s operating system
(3) the user’s IP address
(4) date and time of access
(5) websites from which the user’s system reached our website.

The data is stored in the log files on our system. This data is not stored together with other personal data of the user. 

2. Relevant data subjects
The relevant data subject is the respective website visitor. 

3. Legal basis for data processing 
The processing is based on our and our website visitors’ legitimate interest in the safe use of our website and systems and to provide you with information on our products and services and the best possible user experience. The legal basis for the processing is Art. 6 Para. 1 lit. f GDPR. To the extent we use cookies to collect your data, please find detailed information on cookies in Sec. VIII. ff. and in our cookie policy in the footer of our website.

4. Purpose of data processing
We process personal data to enable the website to be delivered to the users’ devices (e.g. computer) and to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

5. Duration of storage
The data will be deleted or anonymized after 14 days at the latest. 

6. Possibility of objection and removal
You have the right to object to the processing of your data on grounds relating to your particular situation. In such case, we will only continue processing your data if we can demonstrate compelling legitimate ground overriding your interests, rights, and freedoms.
 

1. Description and scope of data processing
There is a contact form on the website that can be used to contact us electronically, for example to request information about our products and services, to make general contact or to make an appointment. If you use this option, the data entered in the input mask will be transmitted to us and saved. In addition to voluntary information and your message content, we require at least the following information from you:

1. name
2. email address.

This information is required to process your request, to address you correctly and to send you an answer.

At the time the message is sent, the following data is also stored:

(1) date and time of dispatch
(2) sender address and sender name
(3) subject (if specified by you).

Your consent is obtained for the processing of the data during the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us via the email address provided (especially the address in the imprint and when contacting us). In this case, the e-mail with the transmitted personal data of the user will be received and saved. The same applies to sending emails to you.

It should be expressly pointed out that contact on the Internet, especially by email, is generally not fully encrypted. Encryption only takes place on the transport route if no end-to-end encryption method is used. We therefore exclude the assumption of responsibility for incompletely encrypted transmission paths between sender and recipient. 

2. Relevant data subjects
The relevant data subject is the respective communication partner.

3. Legal basis for data processing
If you use our contact form, the legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.

If you reach out to us via email, we process your data based on our legitimate interests in processing your request and providing you with the best possible service, and to ensure the integrity of our IT systems. In such case, the legal basis for processing the data that is transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR.

If the aim of the email contact is to conclude a contract, the legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

4. Purpose of data processing
We process your data to answer your questions, process your request, offer you the best possible service, to prevent misuse of the contact from, and to ensure the security of our information technology systems. In addition, the data can be processed for the purpose of recognizing SPAM. 

5. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. Usually, the data stored at the time the message was sent will be deleted after 180 days at the latest.

6. Possibility of objection and removal
The users are free not to provide consent and have the option at any time to revoke their consent to the processing of personal data they provided using the contact form. If the user contacts us by email, they can object to the processing of their personal data at any time. In such case, we will, however, not be able to process your request, to answer your questions, and the conversation cannot be continued.

In case of withdrawal of consent or objection to the processing, all personal data stored in the course of contacting us will be deleted.
 

1. Description and scope of data processing
The website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s device. When a user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.

Basically, cookies can be distinguished by their purpose:
•    Necessary cookies: cookies that are essential to display the website correctly; 
•    Functional cookies: cookies to store user information so that it does not have to be entered again (e.g., language setting); 
•    Performance and analytical cookies: cookies to optimize our website; 
•    Marketing cookies: cookies to display targeted advertising; 
•    Sharing cookies: cookies to improve the interactivity of our website with other services (e.g., social networks)).
Please find detailed information on the cookies we use on our website in the following sections and in our cookie policy linked in the footer of our website.

2. Relevant data subjects
The relevant data subject is the respective user, e.g. website visitor.

3. Legal basis for data processing
Unless cookies are strictly necessary to display the website to you, we will use cookies only with your express consent. We use technically necessary cookies based on our legitimate interest in enabling your use of our website in a safe and secure manner, providing you with the best possible user experience and to inform you about our products and services. Insofar, the legal basis for the processing of personal data using necessary cookies is Art. 6 Para. 1 lit. f GDPR.

4. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages.

5. Duration of storage, possibility of objection and removal
Cookies are stored on the user’s device and transmitted to our website from there. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent. The cookies used on our website are generally deleted after 30 days at the latest. Please find detailed information on the relevant retention periods in the following sections.
 

1. Scope of processing personal data
We use the open source software tool Matomo provided by our service provider InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand (“Matomo”) on our website to analyse the surfing behaviour of our users. The software places a cookie on the user’s device. If individual pages of our website are called up, the following data in particular is stored:
(1) two bytes of the IP address of the selected system of the user 
(2) the accessed website
(3) the website from which the user reached the accessed website (referrer) 
(4) the sub-pages that are accessed from the accessed website
(5) the time spent on the website
(6) the frequency with which the website is accessed
(7) your used operating system, your screen resolution, your browser.
The software runs exclusively on the servers of our provider qwertiko GmbH (Waldstrasse 41-43, 76133 Karlsruhe, Germany). The user’s personal data is only stored there. The data will not be passed on to third parties.

The software is set up in the way that the IP addresses are not saved in full, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). Accordingly, it is no longer possible to assign the shortened IP address to the accessing device, e.g., your computer. 

2. Relevant data subjects
The relevant data subject is the respective website visitor.

3. Legal basis for data processing
The legal basis for processing user’s personal data is consent pursuant to Art. 6 Para. 1 lit. a GDPR.

4. Purpose of data processing
The processing of the personal data of the users enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.

5. Duration of storage
The data will be deleted as soon as it is no longer required for our tracking purposes.

6. Possibility of objection and removal
We only use Matomo with your consent. You can revoke your consent at any time by clicking on the cookie settings in the footer of our website.

You can find more information about the privacy settings of the Matomo software under the following link: https://matomo.org/docs/privacy/.

We have integrated YouTube videos into our online offer, which are stored on  http://www.youtube.com and can be played directly from our website. No videos are displayed or loaded when you visit our site, so no data about you as a user is transmitted to YouTube. Personal data can only be transmitted to YouTube when you want to preview or play the videos. We have no influence on this data transfer. A preview or playback is only possible if you set the “YouTube” cookie settings to “on” for the entire website. The service provider for YouTube videos is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find detailed information in the data protection declaration at https://policies.google.com/privacy.

If the „YouTube“ cookie setting is activated, the following applies. 

1. Scope of processing personal data
The scope of the processing of personal data depends on the settings made by the service provider. Depending on the setting, usage data (e.g. websites visited, access times or interest in certain content), meta-/communication data (e.g. IP address, device information) or interactions with content and functions can be processed. You can find setting options in particular at https://policies.google.com/privacy?hl=en#infochoices.

The service provider collects data regardless of whether YouTube provides a user account that you are logged in to, or whether there is no user account. If you are logged in to other services of the service provider (e.g. Gmail), your data will be assigned to your account. If you do not wish to be assigned to your profile, you should log out of YouTube before activating the cookie settings. 

2. Relevant data subjects
The relevant data subject is the respective website visitor.

3. Legal basis for data processing
Your data will only be processed and transferred to YouTube with your consent. You can revoke your consent at any time by clicking on the cookie settings in the footer of our website.

4. Purpose of data processing
The processing of personal data serves the provision of our online offer and user-friendliness.

The service provider stores your data as a usage profile and uses it, for example, for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

5. Duration of storage
The storage period for personal data depends on the specifications and the settings made by the server provider.

6. Possibility of objection and removal
Your data will only processed and transferred to YouTube with your consent. You can revoke your consent at any time by clicking on the cookie settings in the footer of our website. Furthermore, by changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for your website, it is possible that not all functions of the website can be used in full. The data protection settings can be adjusted at https://policies.google.com/privacy.
 

On this website we use the Google Maps service to display (geographical) maps. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. No maps are displayed or loaded when you visit our site, so no data about you as a user is transmitted to Google Maps. Personal data can only be transmitted to Google Maps when you display the maps. We have no influence on this data transfer. The maps can only be displayed if you set the “Google Maps” cookie settings to “on” for the entire website. The service provider of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find detailed information in the data protection declaration at policies.google.com/privacy.

Google is certified for the processing of personal data while ensuring a high level of data protection pursuant to an adequacy decision of the EU Commission. The decision is available here: https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj?locale=en. The certification is available here: https://www.dataprivacyframework.gov/list.

If the cookie setting „Google Maps“ is switched on, the following applies.

1. Scope of processing personal data
The scope of the processing of personal data depends on the settings made by the service provider. Depending on the setting, usage data (e.g. websites visited, access times or interest in certain content), meta / communication data (e.g. IP address, device information) or interactions with content and functions can be processed. You can find setting options in particular at https://policies.google.com/privacy?hl=en#infochoices.

The data collection by the service provider takes place regardless of whether the service provider provides a user account that you are logged in to or whether there is no user account. If you are logged in to other services or the service provider (e.g. Gmail), your data will be assigned to your account. If you do not want to assignment to your profile, you should log out of Google Maps before activating the cookie settings. 

2. Relevant data subjects
The relevant data subject is the respective website visitor.

3. Legal basis for data processing 
Your data will only processed and transferred to Google with your consent. You can revoke your consent at any time by clicking on the cookie settings in the footer of our website.

4. Purpose of data processing
The processing of personal data serves the provision of our online offer and user-friendliness.

The service provider stores your data as usage profiles and uses them, for example, for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

5. Duration of storage
The storage period for personal data depends on the specifications and the settings made by the service provider. 

6. Possibility of objection and removal
Your data will only processed and transferred to Google with your consent. You can revoke your consent at any time by clicking on the cookie settings in the footer of our website.

Cookies are stored on the users’ computer and transmitted to our website from there. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used in full. The data protection settings of the service provider can be adjusted at https://policies.google.com/privacy.