Privacy Policy

General Information

The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy listed below this text.

-

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact information in this privacy policy.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is

“Robert Wisniewski, Rosa-Luxemburg-Straße 34, 03044 Cottbus, 0355 86 95 0187 - biuro@hebebuehnen-kroemer.de”

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

The controller has appointed a data protection officer, who can be contacted as follows: “Robert Wisniewski, Rosa-Luxemburg-Straße 34, 03044 Cottbus, 0355 86 95 0187 - biuro@hebebuehnen-kroemer.de”

-

How do we collect your data?

We collect your data, on the one hand, when you provide it to us. This may include, for example, data you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website via our IT systems. This primarily consists of technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you access this website.

-

What do we use your data for?

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated through the website, the data provided will also be processed for contract offers, orders, or other order inquiries.

-

What rights do you have regarding your data?

You have the right at any time to receive, free of charge, information about the source, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with future effect. In addition, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the competent supervisory authority. You may contact us at any time regarding this matter or any other questions about data protection.

-

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be analyzed for statistical purposes. This is primarily done using so-called analytics tools. You can find detailed information about these analytics tools in the privacy policy below.

To the extent that we obtain your consent for certain processing operations involving personal data, such processing is based on Article 6(1)(a) of the GDPR.

If the processing of personal data is necessary for the performance of a contract to which you are a party, it is carried out on the basis of Article 6(1)(b) of the GDPR. This also applies to processing operations necessary for the implementation of pre-contractual measures.

To the extent that the processing of personal data is necessary to comply with a legal obligation to which we are subject, such processing is based on Article 6(1)(c) of the GDPR.

If the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, it is based on Article 6(1)(d) of the GDPR.

If the processing is carried out to safeguard a legitimate interest of our company or a third party, and your interests, fundamental rights, and freedoms do not override this interest, then Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

-

To the extent that cookies or similar technologies are used in the context of data processing, the storage of information on your device or access to information already stored on your device is based on Section 25(1) of the TTDSG in conjunction with Article 6(1)(a) of the GDPR, provided that your consent is required for this purpose.

To the extent that the storage of information on your device or access to information already stored on your device is absolutely necessary, this is done on the basis of Section 25(2) sentence 2 of the TTDSG.

-

Disclosure of Personal Data

Your personal data will only be transferred to third parties or disclosed to them if there is legal authorization to do so or if there is another relevant legal basis. Recipients may include, in particular, payment service providers, to the extent necessary for the performance of the contract.

In addition, we transfer personal data to authorities entitled to receive such information to the extent that we are required to do so by law or by court order.

To the extent that we use external service providers for individual processing operations, this is done within the framework of commissioned processing pursuant to Art. 28 GDPR. We enter into corresponding contracts with these service providers to ensure that personal data is processed exclusively in accordance with our instructions and in compliance with applicable data protection requirements.

When you use our website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the personal data that your browser automatically transmits to our server. When you visit our website, we process the data listed below, which is technically necessary to display the website to you and to ensure the stability and security of our systems.

The legal basis for storing information on your device or accessing information already stored on your device, to the extent that this is strictly necessary, is Section 25(2)(2) of the German Telemedia Act (TDDDG). The subsequent processing of personal data is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).

-

In particular, the following data is processed:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred in bytes
• The website from which the request originates
• Browser used
• Operating system used
• The IP address is deleted or anonymized as soon as it is no longer technically necessary for the provision and use of our online services.

We use external payment service providers to process payments in our online store. In doing so, we process personal data that is necessary to complete the payment and fulfill the purchase agreement.

The legal basis for this processing is Article 6(1)(b) of the GDPR.

-

Payment Processing via Mollie

We use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, to handle the technical processing of most payment methods.

Mollie acts as a technical payment service provider and enables the use of various payment methods, in particular SEPA Direct Debit, Online Bank Transfer, Open Banking, credit and debit cards, digital wallets such as Apple Pay and Google Pay, as well as other comparable payment methods.

The following personal data is processed in particular as part of payment processing:

• Name
• Billing and shipping address
• Email address
• IP address
• Order and transaction data
• Payment amount
• Currency
• Payment status
• Technical payment information

The recipient of the data is Mollie B.V. as well as the respective selected payment provider, to the extent necessary to execute the payment.

Further information on data processing by Mollie can be found in Mollie’s privacy policy at:

https://www.mollie.com/de/legal/privacy

-

Payment Method: PayPal

If you select PayPal as your payment method during the ordering process, the payment will be processed by the payment service provider PayPal.

The provider is PayPal Europe S.à r.l. et Cie S.C.A., 22 24 Boulevard Royal, L 2449 Luxembourg.

PayPal is an independently responsible payment service provider. The processing of personal data is carried out by PayPal in accordance with PayPal’s own privacy policy.

The following data is processed in particular:

• Name
• Address
• Email address
• IP address
• Payment amount
• Order and transaction data

PayPal may share personal data with affiliated companies or service providers and may also transfer data to third countries, in particular to the United States.

Processing is based on Art. 6(1)(b) of the GDPR.

Further information on data processing by PayPal can be found at:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

-

Payment Methods with Credit Checks

When certain payment methods are selected, a credit check may be performed. In this case, personal data will be transmitted to the respective payment service provider, which acts as an independent data controller.

This applies in particular to payment methods offered by the following providers:

Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

Billie GmbH, Charlottenstraße 4, 10969 Berlin, Germany

The data is processed for the purpose of payment processing and, if necessary, to conduct a credit check. In doing so, the providers may obtain further information from credit bureaus and share personal data with affiliated companies or service providers.

The credit check may involve automated decision-making.

You can find further information on the respective data processing in the privacy policies of the providers mentioned.

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website visits, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR).

If consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

-

We use the following hosting provider(s):

maxcluster GmbH

Lise-Meitner-Straße 1b

33104 Paderborn

-

Data Processing

We have entered into a Data Processing Agreement (DPA) for the use of the service mentioned above. This is a contract required by data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

We offer an online store for purchasing our products. In this context, we process your personal data on the basis of Article 6(1)(b) of the GDPR. Required information necessary for the execution of contracts is marked separately; additional information is optional. The data required for the conclusion, performance, or termination of a contract includes:

• First name, last name
• Company name (if applicable)
• Billing and shipping address
• Phone number
• Email address
• Billing and payment information

Unless we use your contact information for marketing purposes, we store the data collected for contract processing until the statutory retention periods expire. Retention periods under commercial and tax law require us to store the necessary information for a period of up to ten years (following the conclusion of the contract)

-

As part of the order processing, we may share your necessary data (title, first and last name, address, and company name if applicable) with external shipping partners for the purpose of fulfilling the contract (Art. 6(1)(b) GDPR), who will use this data to process and deliver your order. The third parties mentioned are logistics service providers, shipment tracking services, and returns processing providers.

-

For package or freight deliveries, we also share your name, address, phone number, and email address with our contracted service providers and—where applicable—data processors so that they can process the delivery and send you a link to track the package via email.

-

The legal basis for the data processing involved here is Article 6(1)(b) of the GDPR, insofar as the processing of your data is necessary for the performance of purchase contracts, delivery agreements, and the handling of your requests. Furthermore, the legal basis for the data processing associated with this is Article 6(1)(f) of the GDPR (balancing of interests, based on our interest in enabling you to track your shipment and thus ensuring smooth delivery, and in handling all your requests in the most efficient and suitable manner for you).

-

Order Processing

We use the service provider weclapp GmbH, Friedrich-Ebert-Straße 28, 97318 Kitzingen, Germany, to process orders.

As part of the order processing, your name, address, and, if applicable, other personal data are transmitted to weclapp in accordance with Art. 6(1)(b) of the GDPR. The transmission is carried out exclusively for the purpose of processing and fulfilling your online order and only to the extent actually necessary for this purpose.

Privacy Policy

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

-

Information on the Data Controller

The data controller responsible for data processing on this website is:

Kroemer GmbH

Rosa-Luxemburg-Straße 34

03044 Cottbus

Managing Director: Lars Krömer, B.B.A.

Phone: +49 (0) 355 869 501 87

Email: info@hebebuehnen-kroemer.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

-

Retention Period

Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it was collected no longer applies. If you submit a valid request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.

-

General Information on the Legal Basis for Data Processing on This Website

If you have consented to the data processing, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data as defined in Article 9(1) of the GDPR are being processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is additionally carried out on the basis of Section 25(1) TDDDG.

Consent may be revoked at any time.

If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data if it is necessary to comply with a legal obligation on the basis of Article 6(1)(c) of the GDPR.

Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The legal bases applicable in each individual case are described in the following sections of this Privacy Policy.

-

Recipients of Personal Data

As part of our business operations, we collaborate with various external parties. In some cases, this requires the transfer of personal data to these external parties.

We only disclose personal data to external parties if this is necessary for the performance of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) of the GDPR, or if another legal basis permits the disclosure of data. When using data processors, we only transfer our customers’ personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

-

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may withdraw any consent you have already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

-

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)( E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, exercise, or defense of legal claims (objection under Art. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) OF THE GDPR).

-

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place where the alleged violation occurred. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

-

Right to Data Portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, either for yourself or for a third party, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

-

Access, Correction, and Deletion

In accordance with applicable legal provisions, you have the right at any time to request, free of charge, information about your stored personal data, its source and recipients, and the purpose of the data processing, as well as the right to have this data corrected or deleted, if applicable. You may contact us at any time regarding this matter or any other questions about personal data.

-

Right to Restriction of Processing

You have the right to request that the processing of your personal data be restricted. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure.

If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.

If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests against ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data—apart from its storage—may only be processed with your consent or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of a substantial public interest of the European Union or a Member State.

-

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Cookies

Our website uses so-called “cookies.” Cookies are small data packets that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain third-party services within websites (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are necessary for the execution of the electronic communication process, for the provision of certain functions you have requested (e.g., for the shopping cart function), or for the optimization of the website (e.g., cookies for measuring web traffic) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent may be revoked at any time.

You can configure your browser to be notified when cookies are set and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for specific cases or generally, and to enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website. If additional cookies and services are used on this website, you can find this information in this privacy policy.

-

Contact Form

If you submit inquiries to us via the contact form, we will store the information you provide in the form—including the contact details you enter there—for the purpose of processing your inquiry and in case we have follow-up questions. We will not share this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if such consent was requested; consent may be revoked at any time.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

-

Inquiries via Email, Phone, or Fax

If you contact us via email, phone, or fax, your inquiry—including all personal data contained therein (name, inquiry)—will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if such consent was requested; consent may be revoked at any time.

The data you send to us via contact requests will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

-

Inquiries via WhatsApp Business

You have the option to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the “Business version” of WhatsApp for this purpose.

If you contact us via WhatsApp in connection with a specific business matter, such as an order, we will store and use the mobile phone number you provide, as well as your first and last name (if provided by you), in accordance with Art. 6(1)(b) of the GDPR, to process and respond to your inquiry. As part of this communication, we may also ask you for additional information (such as order number, customer number, address, or email address) to be able to assign your inquiry to a specific transaction.

For general inquiries, such as those regarding our range of services, availability, or our website, we also store and use the mobile phone number provided on WhatsApp, as well as your first and last name (if provided), in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in providing you with the requested information efficiently and promptly.

Your data will be used exclusively to process your inquiry via WhatsApp and will not be shared with third parties.

Please note that WhatsApp Business accesses the address book of the mobile device we use and automatically transfers the phone numbers stored therein to the servers of Meta Platforms Inc. in the United States. For the use of our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact information of users who have contacted us via WhatsApp.

By using WhatsApp for the first time, each person accepts the WhatsApp Terms of Service and consents to the transfer of their phone number from the address book in accordance with Art. 6(1)(a) GDPR. The transmission of data from users who do not use WhatsApp or have not contacted us via WhatsApp is excluded.

For more information on the purpose and scope of data collection, as well as the processing and use of data by WhatsApp and your rights regarding the protection of your privacy, please refer to WhatsApp’s privacy policy: WhatsApp Privacy Policy.

We have entered into a data processing agreement with the provider in accordance with Article 28 of the GDPR to ensure the protection of our website visitors’ data and to prevent disclosure to third parties.

In the context of the aforementioned processing, data may be transferred to servers operated by Meta Platforms Inc. in the United States. Meta Platforms Inc. has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards through an adequacy decision by the European Commission.

-

Comment Feature / Ratings on This Website

When you use the comment feature on this site, in addition to your comment, we also store the time the comment was posted, your email address, and—if you are not posting anonymously—the username you have chosen.

-

Storage of IP Addresses

Our comment feature stores the IP addresses of users who post comments. Since we do not review comments on this website before they are published, we need this information to be able to take action against the author in the event of legal violations, such as insults or propaganda.

-

How long comments are stored

Comments and the associated data are stored and remain on this website until the content to which they refer has been completely deleted or until the comments must be deleted for legal reasons (e.g., offensive comments).

-

Legal Basis

Comments are stored based on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. To do so, simply send us an informal email. The lawfulness of any data processing that has already taken place remains unaffected by the withdrawal.

-

Customer Account / Registration

You have the option to create a customer account with us, which allows you to check your order status or view your order history, among other things. Creating a customer account is not required to place an order.

When registering, in addition to an email address and a password, you must provide mandatory information required to conclude and fulfill the contract (first and last name, email address); all other information is voluntary.

Furthermore, when you use the online shop, we store additional data in your account, namely the contents of your shopping cart and information regarding completed orders.

This personal data is processed for the purpose of creating and maintaining a customer account to enable the convenient placement and viewing of orders via our online shop, as well as—when placing orders—to establish, fulfill, and process the concluded contracts.

The legal basis for processing the data is your consent pursuant to Art. 6(1)(a) GDPR. If the registration serves to fulfill a contract to which you are a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Art. 6(1)(b) GDPR.

Your data will only be used for as long as necessary for the existing customer relationship. Additionally, you can view and modify the data stored about you in your customer account at any time. You have the option to cancel your user account at any time. In this case, your data will be deleted, unless we are required to retain it due to commercial and tax law regulations.

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics enables us to analyze how our website is used.

Google (Universal) Analytics is used on this website exclusively without the use of cookies. This means that Google (Universal) Analytics does not store cookies on your device at any time.

Instead, your browser’s local storage is used. An individual ID assigned by Google (Universal) Analytics is stored there, which can be used to analyze the use of our website. Certain usage information is processed via this ID. This includes your IP address. However, Google truncates the last digits of this address to prevent direct personal identification.

The collected information is transmitted to Google’s servers and processed there. This may also involve a transfer to Google LLC, which is based in the United States.

Google processes the collected information on our behalf to evaluate the use of our website, create reports on website activity, and provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics and truncated by Google is not combined with other data held by Google. The data collected via Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing operations described above, including the storage of the ID in your browser’s local storage, take place exclusively if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to our website. You may revoke any consent you have already given at any time with future effect.

To exercise your right to revoke consent, you can download and install the browser plugin available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, or if you are using a mobile browser, you can withdraw your consent by clicking the “Disable Google (Universal) Analytics” link. This sets an opt-out cookie that prevents future tracking by Google (Universal) Analytics on this website. This opt-out cookie applies only to the browser you are using and only to this domain. If you delete the cookies in this browser, you will need to click the link again.

A data processing agreement has been concluded with Google to ensure the protection of our website visitors’ data and to prevent unauthorized disclosure to third parties.

Further legal information regarding Google (Universal) Analytics can be found at:

https://business.safety.google/intl/de/privacy/

https://policies.google.com/privacy?hl=de&gl=de

https://policies.google.com/technologies/partner-sites

-

Demographic Information

Google (Universal) Analytics can use the “demographic information” feature. This allows for the creation of statistical reports that provide insights into the age, gender, and interests of website visitors. This is based primarily on advertising data and information from third-party providers.

The data collected in this process cannot be linked to any specific individual and is deleted after a retention period of two months.

-

Google Signals

As an extension of Google (Universal) Analytics, Google Signals may be used on this website. Google Signals enables the creation of cross-device reports.

If you have enabled personalized ads and your devices are linked to your Google account, Google may—subject to your consent to the use of Google (Universal) Analytics pursuant to Art. 6(1)(a) GDPR—analyze your usage behavior across devices and create data models, including those related to cross-device conversions.

We do not receive any personal data from Google, but only statistical analyses. If you wish to prevent cross-device analysis, you can disable the “Personalized ads” feature in your Google Account settings. For more information, please visit:

https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

For more information about Google Signals, please visit:

https://support.google.com/analytics/answer/7532985?hl=de

-

UserIDs

As a further extension of Google (Universal) Analytics, the “UserIDs” feature can be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6(1)(a) GDPR, have created a customer account on this website, and log in to this account on various devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the U.S., Google has joined the EU-U.S. Data Privacy Framework. This framework is based on an adequacy decision by the European Commission and is intended to ensure compliance with European data protection standards.

-

YouTube with Enhanced Privacy Settings

This website embeds videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit a page on this website that includes a YouTube video, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalize your browsing experience on YouTube. Ads displayed in enhanced privacy mode are also not personalized. No cookies are set in enhanced privacy mode. Instead, however, so-called local storage elements are stored in the user’s browser; these contain personal data similar to cookies and can be used for recognition purposes. Details on enhanced privacy mode can be found here:

https://support.google.com/youtube/answer/171780.

In some cases, further data processing operations may be triggered after a YouTube video is activated, over which we have no control. The use of YouTube is in the interest of presenting our online offerings in an appealing manner.

This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Further information on data protection at YouTube can be found in their privacy policy at:

https://policies.google.com/privacy?hl=de.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF commits to complying with these data protection standards. You can obtain further information on this from the provider at the following link:

https://www.dataprivacyframework.gov/participant/5780.

-

Google Fonts (locally hosted)

This site uses so-called Google Fonts, provided by Google, to ensure consistent font display. The Google Fonts are installed locally. No connection to Google’s servers is established.

For more information about Google Fonts, visit

https://developers.google.com/fonts/faq and see Google’s Privacy Policy:

https://policies.google.com/privacy?hl=de.

-

Font Awesome (locally hosted)

This site uses Font Awesome to ensure consistent font styling. Font Awesome is installed locally. No connection is made to servers operated by Fonticons, Inc.

For more information about Font Awesome, please see the Font Awesome Privacy Policy at:

https://fontawesome.com/privacy.

-

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to verify whether data entry on this website (e.g., in a contact form) is performed by a human or by an automated program. To do this, reCAPTCHA analyzes the website visitor’s behavior based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, the duration of the website visitor’s stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

In this context, Google acts solely as a data processor within the meaning of Art. 28 GDPR and will not use the data collected in this manner for its own purposes. The use of the tool is based on a Data Processing Agreement (DPA) with Google.

The storage and analysis of the data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from SPAM. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

-

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link:

https://www.dataprivacyframework.gov/participant/5780.