Privacy policy

Created on 14 November, 2022 | 91 views | 75 minutes read

Introduction and Overview

We have written this privacy statement (version 11/14/2022-322326656) in order to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the controller - and the processors (e.g. providers) commissioned by us - process, will process in the future and what lawful options you have. The terms used are to be understood as gender-neutral.

In short, we provide you with comprehensive information about data we process about you.

Privacy statements usually sound very technical and use legal terminology. This privacy statement, on the other hand, is intended to describe the most important things to you as simply and transparently as possible. To the extent that it is conducive to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. In this way, we inform you in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible by providing the most concise, unclear and legalistic explanations possible, as is often standard practice on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is one or two pieces of information that you did not yet know.

If you still have questions, we would like to ask you to contact the responsible party named below or in the imprint, to follow the available links and to look at further information on third-party sites. Our contact details can of course also be found in the imprint.

Scope of application

This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (order processors). By personal data, we mean information within the meaning of Art. 4 No. 1 DSGVO, such as a person's name, e-mail address and postal address. The processing of personal data ensures that we can offer and invoice our services and products, whether online or offline. The scope of this privacy policy includes:

all online presences (websites, online stores) that we operate

social media presences and email communications

mobile apps for smartphones and other devices

In short, the data protection declaration applies to all areas in which personal data is processed in the company via the aforementioned channels in a structured manner. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal basis

In the following privacy statement, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.

As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, which you can of course read online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

Consent (Article 6(1)(a) DSGVO): You have given us your consent to process data for a specific purpose. An example would be the storage of your entered data of a contact form.

Contract (Article 6(1) lit. b DSGVO): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.

Legal obligation (Article 6(1)(c) DSGVO): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.

Legitimate interests (Article 6(1)(f) DSGVO): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website in a secure and economically efficient manner. This processing is therefore a legitimate interest.

Other conditions, such as the performance of recordings in the public interest and the exercise of official authority, as well as the protection of vital interests, do not generally arise for us. If such a legal basis should nevertheless be relevant, it will be indicated at the appropriate place.

In addition to the EU Regulation, national laws also apply:

In Austria, this is the Federal Act on the Protection of Individuals with regard to the Processing of Personal Data (Data Protection Act), or DSG for short.

In Germany, the Federal Data Protection Act, or BDSG for short, applies.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the person responsible

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or body below:

Egzon Thaqi

Königreichweg 16 U

94315 Straubing

Imprint: https://fypify.com/impressum/

Storage period

The fact that we store personal data only as long as it is absolutely necessary for the provision of our services and products applies as a general criterion with us. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are required by law to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

Should you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store it.

We will inform you about the specific duration of the respective data processing below, provided we have further information on this.

Rights according to the General Data Protection Regulation

Pursuant to Articles 13, 14 DSGVO, we inform you about the following rights you are entitled to in order to ensure fair and transparent processing of data:

According to Article 15 DSGVO, you have the right to information about whether we process data from you. If this is the case, you have the right to receive a copy of the data and to know the following information:

For what purpose we are processing;

the categories, i.e. the types of data that are processed;

who receives this data and if the data is transferred to third countries, how security can be guaranteed;

how long the data will be stored;

the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;

that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);

The origin of the data if we have not collected it from you;

Whether profiling is carried out, i.e. whether data is automatically evaluated to arrive at a personal profile of you.

You have a right to rectification of data according to Article 16 GDPR, which means that we must correct data if you find errors.

You have the right to erasure ("right to be forgotten") according to Article 17 GDPR, which specifically means that you may request the deletion of your data.

According to Article 18 of the GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.

According to Article 20 of the GDPR, you have the right to data portability, which means that we will provide you with your data in a standard format upon request.

According to Article 21 DSGVO, you have the right to object, which entails a change in processing after enforcement.

If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then check as soon as possible whether we can legally comply with this objection.

If data is used to conduct direct advertising, you may object to this type of data processing at any time. We may then no longer use your data for direct marketing.

If data is used to carry out profiling, you may object to this type of data processing at any time. We may no longer use your data for profiling thereafter.

According to Article 22 of the GDPR, you may have the right not to be subject to a decision based solely on automated processing (for example, profiling).

You have the right to lodge a complaint under Article 77 of the GDPR. This means that you can complain to the data protection authority at any time if you believe that the data processing of personal data violates the GDPR.

In short, you have rights - do not hesitate to contact the responsible party listed above with us!

If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Bavaria Data Protection Authority

State Commissioner for Data Protection: Prof. Dr. Thomas Petri

Address: Wagmüllerstr. 18, 80538 Munich, Germany

Telephone number: 089/21 26 72-0

E-mail address: poststelle@datenschutz-bayern.de

Website: https://www.datenschutz-bayern.de/

Data transfer to third countries

We only transfer or process data to countries outside the EU (third countries) if you consent to this processing, if this is required by law or contractually necessary, and in any case only to the extent that this is generally permitted. Your consent is in most cases the most important reason that we have data processed in third countries. Processing personal data in third countries such as the U.S., where many software vendors provide services and have their server locations, may mean that personal data is processed and stored in unexpected ways.

We expressly point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. Data processing by US services (such as Google Analytics) may result in data not being processed and stored anonymously, where applicable. Furthermore, US government authorities may be able to access individual data. In addition, it may happen that collected data is linked with data from other services of the same provider, if you have a corresponding user account. Where possible, we try to use server locations within the EU, if this is offered.

We will inform you in more detail about data transfer to third countries, if applicable, at the appropriate places in this privacy policy.

Security of data processing

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. In this way, we make it as difficult as possible, within the scope of our possibilities, for third parties to infer personal information from our data.

Article 25 of the GDPR refers to "data protection by technical design and by data protection-friendly default settings" and thus means that both software (e.g., forms) and hardware (e.g., access to the server room) are always designed with security in mind and that appropriate measures are taken. In the following, we will go into more detail on specific measures, if necessary.

TLS encryption with https

TLS, encryption and https sound very technical and they are. We use HTTPS (Hypertext Transfer Protocol Secure stands for "secure hypertext transfer protocol") to transfer data over the Internet in a tap-proof manner.

This means that the complete transmission of all data from your browser to our web server is secured - no one can "listen in".

In this way, we have introduced an additional layer of security and comply with data protection by design of technology (Article 25(1) DSGVO). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.

You can recognize the use of this protection of data transmission by the small lock symbol at the top left of the browser, to the left of the Internet address (e.g., beispielseite.de) and the use of the scheme https (instead of http) as part of our Internet address.

If you want to know more about encryption, we recommend a Google search for "Hypertext Transfer Protocol Secure wiki" to get good links to further information.

Communication

Communication summary

Affected parties: anyone who communicates with us by phone, email, or online form.

Data processed: e.g. telephone number, name, e-mail address, form data entered. You can find more details on this in the respective contact type used.

Purpose: Handling of communication with customers, business partners, etc.

Storage period: Duration of the business case and legal requirements.

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. b DSGVO (contract), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

If you contact us and communicate by phone, e-mail or online form, personal data may be processed.

The data is processed for the handling and processing of your question and the related business transaction. The data is stored for as long as it is required by law.

Persons concerned

All those who seek contact with us via the communication channels provided by us are affected by the aforementioned processes.

Telephone

When you call us, the call data is stored pseudonymously on the respective terminal device and with the telecommunications provider used. In addition, data such as name and telephone number may subsequently be sent by e-mail and stored for the purpose of responding to your inquiry. The data is deleted as soon as the business case has been closed and legal requirements permit.

E-mail

If you communicate with us by e-mail, data may be stored on the respective end device (computer, laptop, smartphone,...) and data is stored on the e-mail server. The data will be deleted as soon as the business case has been closed and legal requirements allow it.

Online forms

If you communicate with us using online forms, data is stored on our web server and may be forwarded to an e-mail address of ours. The data will be deleted as soon as the business case has been terminated and legal requirements permit.

Legal basis

The processing of data is based on the following legal bases:

Art. 6 para. 1 lit. a DSGVO (consent): You give us your consent to store and further use your data for purposes related to the business case;

Art. 6 para. 1 lit. b DSGVO (contract): There is a need for the performance of a contract with you or a processor such as the telephone provider, or we need to process the data for pre-contractual activities, such as preparing an offer;

Art. 6 para. 1 lit. f DSGVO (Legitimate Interests): We want to conduct customer inquiries and business communications in a professional manner. For this purpose, certain technical facilities such as e-mail programs, exchange servers and mobile operators are necessary in order to be able to operate the communication efficiently.

Order processing agreement (AVV)

In this section, we would like to explain what an order processing contract is and why it is needed. Because the word "order processing agreement" is quite a mouthful, we will also use just the acronym AVV more often here in the text. Like most companies, we do not work alone, but also use the services of other companies or individuals ourselves. Through the involvement of various companies or service providers, it may be that we pass on personal data for processing. These partners then act as processors with whom we conclude a contract, the so-called order processing agreement (AVV). The most important thing for you to know is that the processing of your personal data is carried out exclusively according to our instructions and must be regulated by the GCU.

Who are processors?

As a company and website owner, we are responsible for all the data we process from you. In addition to the responsible parties, there may also be so-called processors. This includes any company or person that processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, authority, institution or other body that processes personal data on our behalf is considered a processor. Consequently, processors can be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft, for example.

For a better understanding of the terminology, here is an overview of the three roles in the GDPR:

Data subject (you as a customer or interested party) → controller (we as a company and client) → processor (service provider such as web hoster or cloud provider).

Content of an order processing contract

As mentioned above, we have concluded an AVV with our partners who act as processors. This states, first and foremost, that the processor will process the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing, although in this context the electronic conclusion of the contract is also considered "in writing". Only on the basis of the contract will the processing of personal data take place. The contract must contain the following:

Commitment to us as the controller

Obligations and rights of the data controller

Categories of data subjects

Nature of the personal data

Nature and purpose of the data processing

Subject and duration of data processing

Place of performance of the data processing

Furthermore, the contract contains all obligations of the processor. The most important obligations are:

to ensure data security measures

to take possible technical and organizational measures to protect the rights of the data subject

to keep a data processing directory

cooperate with the data protection supervisory authority upon its request

carry out a risk analysis in relation to the personal data received.

Sub-processors may only be engaged with the written consent of the data controller.

You can see what such an AVV looks like in concrete terms, for example, at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html. A sample contract is presented here.

Cookies summary

Data subject: Visitors to the website

Purpose: depending on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie.

Data processed: Depending on the cookie used in each case. More details can be found below or from the manufacturer of the software that sets the cookie.

Storage duration: Depending on the respective cookie, can vary from hours to years.

Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit.f DSGVO (Legitimate Interests).

What are cookies?

Our website uses HTTP cookies to store user-specific data.

In the following, we explain what cookies are and why they are used so that you can better understand the following privacy policy.

Whenever you browse the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing can't be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to cookies, our site knows who you are and offers you the setting you are used to. In some browsers each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser, such as Chrome, and the web server. In this case, the web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies also cannot access information on your PC.

For example, cookie data may look like this

Name: _ga

Wert: GA1.2.1326744211.152322326656-9

Purpose: to distinguish website visitors

Expiration date: after 2 years

A browser should be able to support these minimum sizes

At least 4096 bytes per cookie

At least 50 cookies per domain

At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we use in particular depends on the services we use and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

We can distinguish 4 types of cookies:

Essential cookies.

These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user adds a product to the shopping cart, then continues browsing on other pages, and only later goes to the checkout. These cookies do not delete the shopping cart even if the user closes his browser window.

Purpose cookies

These cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behavior of the website with different browsers.

Target-oriented cookies

These cookies provide a better user experience. For example, entered locations, font sizes or form data are saved.

Advertising cookies

These cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very convenient, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these cookie types you want to allow. And of course, this decision is also stored in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".

Purpose of processing via cookies

The purpose ultimately depends on the cookie in question. You can find more details below or from the manufacturer of the software that sets the cookie.

What data is processed?

Cookies are little helpers for a lot of different tasks. Unfortunately, it is not possible to generalize what data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy.

Storage duration of cookies

The storage duration depends on the respective cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.

You can also influence the storage period yourself. You can manually delete all cookies at any time via your browser (see also "Right to object" below). Furthermore, cookies that are based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage remains unaffected until then.

Right of objection - how can I delete cookies?

You decide how and whether you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option to delete, disable or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find it in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome.

Safari: Manage cookies and website data with Safari.

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: delete and manage cookies

Microsoft Edge: delete and manage cookies

If you generally don't want cookies, you can set your browser to notify you whenever a cookie is about to be set. This way, you can decide for each cookie whether to allow it or not. The procedure varies depending on the browser. It is best to search for the instructions in Google using the search term "delete cookies Chrome" or "disable cookies Chrome" in the case of a Chrome browser.

Legal basis

Since 2009, there are the so-called "Cookie Guidelines". It is stated therein that the storage of cookies requires your consent (Article 6 (1) lit. a DSGVO). Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in Section 96 (3) of the Telecommunications Act (TKG). In Germany, the Cookie Directives were not implemented as national law. Instead, the implementation of this directive took place largely in § 15 para.3 of the Telemedia Act (TMG).

For absolutely necessary cookies, even in the absence of consent, there are legitimate interests (Article 6 para. 1 lit. f DSGVO), which in most cases are of an economic nature. We want to provide visitors to the website with a pleasant user experience and for this purpose certain cookies are often absolutely necessary.

Insofar as cookies that are not absolutely necessary are used, this is only done in the case of your consent. The legal basis in this respect is Art. 6 para. 1 lit. a DSGVO.

In the following sections, you will be informed in more detail about the use of cookies, insofar as software used uses cookies.

Customer data

Customer data summary

Data subjects: customers or business and contractual partners.

Purpose: Provision of the contractually or pre-contractually agreed services, including associated communication.

Data processed: Name, address, contact data, e-mail address, telephone number, payment information (such as invoices and bank data), contract data (such as term and subject matter of the contract), IP address, order data.

Storage period: the data is deleted as soon as it is no longer required for the provision of our business purposes and there is no legal obligation to retain it.

Legal basis: Legitimate interest (Art. 6 para. 1 lit. f DSGVO), contract (Art. 6 para. 1 lit. b DSGVO).

What is customer data?

In order to be able to offer our service or contractual services, we also process data of our customers and business partners. Among these data there are always personal data. Customer data is all information that is processed on the basis of a contractual or pre-contractual cooperation in order to be able to provide the services offered. Customer data is therefore all collected information that we collect and process about our customers.

Why do we process customer data?

There are many reasons why we collect and process customer data. The most important one is that we simply need various data to provide our services. Sometimes your email address is enough here, but if you purchase a product or service, for example, we also need data such as name, address, bank data or contract data. We also use the data subsequently for marketing and sales optimization, so that we can improve our overall service to our customers. Another important point is our customer service, which is always very important to us. We want you to be able to come to us at any time with questions about our offers, and for this we need at least your e-mail address.

What data is processed?

Which data exactly are stored, can be given here only on the basis of categories. This always depends on which services you receive from us. In some cases, you only give us your e-mail address so that we can contact you, for example, or so that we can answer your questions. In other cases, you purchase a product or service from us and for this we need significantly more information, such as your contact details, payment details and contract details.

Here is a list of possible data we receive from you and process:

Name

Contact address

E-mail address

Telephone number

Date of birth

Payment data (invoices, bank data, payment history etc.)

Contract data ( duration, content)

Usage data (websites visited, access data ect.)

Metadata (IP address, device information)

How long is the data stored?

As soon as we no longer need the customer data to fulfill our contractual obligations and our purposes, and the data is also not necessary for possible warranty and liability obligations, we delete the corresponding customer data. This is the case, for example, when a business contract ends. After that, the statute of limitations is usually 3 years, although longer periods are possible in individual cases. Of course, we also comply with the statutory retention obligations. Your customer data will certainly not be passed on to third parties unless you have explicitly given your consent.

Legal basis

Legal bases for the processing of your data are Art. 6 para 1 lit. a DSGVO (consent), Art. 6 para 1 lit. b DSGVO (contract or pre-contractual measures), Art. 6 para 1 lit. f DSGVO (legitimate interests) and in special cases (e.g. medical services) Art. 9 para 2 lit. a. DSGVO (processing of special categories).

In the case of the protection of vital interests, data processing is carried out in accordance with Art. 9 para. 2 lit. c. DSGVO. For purposes of health care, occupational medicine, medical diagnostics, health or social care or treatment, or for the management of health or social care systems and services, the processing of personal data is carried out in accordance with Art. 9 (2) lit. h. DSGVO. If you voluntarily provide special category data, the processing is based on Art. 9 (2) lit. a. DSGVO.

Registration

Registration summary

Data subjects: all persons who register, create an account, log in and use the account.

Data processed: Email address, name, password and other data collected in the course of registration, login and account use.

Purpose: To provide our services. Communication with customers in connection with the services.

Storage period: As long as the company account associated with the texts exists and thereafter usually 3 years.

Legal basis: Art. 6 para. 1 lit. b DSGVO (contract), Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

When you register with us, personal data may be processed if you enter personal data or data such as the IP address is collected in the course of processing. You can read below what we mean by the rather unwieldy term "personal data".

Please only enter data that we need for registration and for which you have the approval of a third party, if you are registering on behalf of a third party. If possible, use a secure password that you do not use anywhere else and an email address that you check regularly.

In the following we will inform you about the exact way of data processing, because we want you to feel comfortable with us!

What is a registration?

With a registration we take certain data from you and make it possible for you later to simply log in online and use your account with us. Having an account with us has the advantage that you don't have to re-enter everything every time. Saves time, effort and ultimately prevents errors in the provision of our services.

Why do we process personal data?

In short, we process personal data to enable you to create and use an account with us.

If we didn't do that, you would have to enter all the data each time, wait for us to approve it, and enter it all again. We and many, many customers would not like that. What would you think?

What data is processed?

All the data you provided during registration, enter during registration or enter during the management of your data in the account.

During registration we process the following types of data:

First name

Last name

E-mail address

Company name

Street + house number

Residence

Postal code

Country

During registration, we process the data you enter during registration, such as username and password, and data collected in the background, such as device information and IP addresses.

During account use, we process data that you enter during account use and which is created in the course of using our services.

Storage period

We store the data entered at least for as long as the account linked to the data exists with us and is used, for as long as contractual obligations exist between us and, if the contract ends, until the respective claims arising from it have lapsed. In addition, we store your data as long as and to the extent that we are subject to legal obligations to store it. According to this, we keep accounting records pertaining to the contract (invoices, contract documents, account statements, etc.) for 10 years (§ 147

AO) and other relevant business documents for 6 years (§ 247 HGB) after they are created.

Right of objection

You have registered, entered data and would like to revoke the processing? No problem. As you can read above, the rights under the General Data Protection Regulation also exist during and after registration, login or account with us. Contact the data protection officer above to exercise your rights. If you already have an account with us, you can easily view or manage your data and texts in the account.

Legal basis

By carrying out the registration process, you are entering into a pre-contractual agreement with us to conclude a contract of use via our platform (although this does not automatically give rise to an obligation to pay). You invest time to enter data and register and we provide you with our services after logging into our system and viewing your customer account. We also fulfill our contractual obligations. Finally, we need to keep registered users informed of important changes by email. Thus, Art. 6 para. 1 lit. b DSGVO (implementation of pre-contractual measures, fulfillment of a contract) applies.

If necessary, we also obtain your consent, e.g. if you voluntarily provide more than the absolutely necessary data or if we may send you advertising. Art. 6 para. 1 lit. a DSGVO (consent) therefore applies.

We also have a legitimate interest in knowing who we are dealing with in order to contact you in certain cases. In addition, we need to know who is using our services and whether they are being used as specified in our Terms of Use, so Art. 6(1)(f) DSGVO (Legitimate Interests) applies.

Note: the following sections are to be ticked by users (as required):

Registration with clear name

Since we need to know who we are dealing with in business operations, registration is only possible with your real name (clear name) and not with pseudonyms.

Registration with pseudonyms

Pseudonyms can be used for registration, which means that you do not have to register with us using your real name. This ensures that your name cannot be processed by us.

Storage of the IP address

In the course of registration, login and account use, we store the IP address in the background for security reasons, in order to be able to determine the legitimate use.

Public profile

User profiles are publicly visible, i.e. parts of the profile can be seen on the Internet without entering a user name and password.

2-factor authentication (2FA)

Two-factor authentication (2FA) provides additional security when logging in, as it prevents you from logging in without a smartphone, for example. This technical measure to secure your account thus protects you from data loss or unauthorized access even if username and password were known. You will find out which 2FA is used during registration, login and in the account itself.

Push Messages Introduction

Push messages summary

Affected parties: push message subscribers.

Purpose: Notification about system relevant and interesting events.

Data processed: Data entered during registration, usually also location data. More details can be found with the respective push message tool used.

Storage duration: Data mostly stored for as long as necessary to provide the services.

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. b DSGVO (contract).

What are push messages?

We also use so-called push notification services on our website, with which we can always keep our users up to date. This means that if you have agreed to the use of such push messages, we can send you short news using a software tool. Push messages are a text message form that appear directly to you on your smartphone or other devices, such as tablets or PCs, if you have signed up for them. You will receive these messages even if you are not on our website or not actively using our service. In the process, data about your location and usage behavior may also be collected and stored.

Why do we use push messages?

On the one hand, we use push messages to be able to fully provide our services that we have contractually agreed with you. On the other hand, the messages also serve our online marketing. We can use these messages to bring you closer to our service or our products. Especially when there is news in our company, we can inform you about it immediately. We want to get to know the preferences and habits of all our users as well as possible in order to continuously improve our offer.

What data is processed?

In order for you to receive push messages, you must also confirm that you want to receive them. The data accumulated during the consent process is also stored, managed and processed. This is necessary so that it can be proven and recognized that a user has agreed to receive the push messages. For this purpose, a so-called device token or push token is stored in your browser. Usually, the data of your location or the location of the terminal device you are using is also stored.

To ensure that we also always send interesting and important push messages, the handling of the messages is also statistically evaluated. For example, we can then see whether and when you open the message. With the help of these insights, we can adapt our communication strategy to your wishes and interests. Although this stored data can be assigned to you, we do not want to check you as an individual. Rather, we are interested in the collected data of all our users so that we can make optimizations. You can find out exactly what data is stored in the data protection declarations of the respective service providers.

Duration of data processing

How long the data is processed and stored depends primarily on the tool we use. You can learn more about the data processing of the individual tools below. The privacy statements of the providers usually state exactly which data is stored and processed and for how long. In principle, personal data is only processed for as long as is necessary to provide our services. If data is stored in cookies, the storage period varies greatly. The data can be deleted immediately after leaving a website, but it can also remain stored for several years. Therefore, you should look at each individual cookie in detail if you want to know more about the data storage. In most cases, you will also find informative information about the individual cookies in the privacy statements of the individual providers.

Legal basis

It may also be that the push messages are necessary so that certain obligations that are in a contract can be fulfilled. For example, so that we can provide you with technical or organizational news. Then the legal basis is Art. 6 para. 1 lit. b DSGVO.

If this is not the case, the push messages will only be sent based on your consent. Our push messages may in particular have promotional content. The push messages may also be sent depending on your location, which your end device displays. The above-mentioned analytical evaluations are also based on your consent to receive such messages. The legal basis in this respect is Art. 6 (1) lit. a DSGVO. Of course, you can revoke your consent or change various settings in the settings at any time.

FoxPush privacy policy

We use FoxPush, a push messaging service, for our website. The service provider is FoxPush, LLC, a United Arab Emirates company (Media City, Building 4, Office G15, Dubai, United Arab Emirates). To learn more about the data processed through the use of FoxPush, please see the Privacy Policy at https://www.foxpush.com/privacy_policy.html.

Online Marketing Introduction

Online Marketing Privacy Policy Summary

Data subjects: visitors to the website

Purpose: Evaluation of visitor information to optimize the web offer.

Data processed: Access statistics containing data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. Personal data such as name or email address may also be processed. More details on this can be found with the respective online marketing tool used.

Storage duration: depending on the online marketing tools used.

Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit.f DSGVO (Legitimate Interests).

What is online marketing?

Online marketing refers to all measures that are carried out online in order to achieve marketing goals such as increasing brand awareness or closing a deal. Furthermore, our online marketing measures aim to draw people's attention to our website. In order to be able to show our offering to many interested people, we therefore engage in online marketing. This usually involves online advertising, content marketing or search engine optimization. To enable us to use online marketing efficiently and in a targeted manner, personal data is also stored and processed. On the one hand, the data helps us to show our content only to those people who are really interested in it, and on the other hand, we can measure the advertising success of our online marketing measures.

Why do we use online marketing tools?

We want to show our website to everyone who is interested in what we have to offer. We are aware that this is not possible without consciously set measures. That is why we do online marketing. There are various tools that make it easier for us to work on our online marketing measures and, in addition, always provide suggestions for improvement via data. This allows us to target our campaigns more precisely to our target group. So the purpose of these online marketing tools we use is ultimately to optimize our offering.

What data is processed?

In order for our online marketing to work and the success of the measures to be measured, user profiles are created and data is stored in cookies (these are small text files), for example. With the help of this data, we can not only place advertisements in the classical sense, but also directly on our website, display our content in the way you prefer. For this purpose, there are various third-party tools that offer these functions and accordingly also collect and store data from you. In the named cookies are stored, for example, which web pages you have visited on our website, how long you have viewed these pages, which links or buttons you click or from which website you have come to us. In addition, technical information may also be stored. For example, your IP address, which browser you use, from which device you visit our website or the time when you accessed our website and when you left it again. If you have consented that we may also determine your location, we may also store and process this.

Your IP address is stored in pseudonymized form (i.e. shortened). Unique data that directly identifies you as a person, such as your name, address or e-mail address, is also only stored in pseudonymized form as part of the advertising and online marketing processes. We can therefore not identify you as a person, but we have only the pseudonymized stored information in the user profiles.

Under certain circumstances, the cookies can also be deployed on other websites that work with the same advertising tools, analyzed and used for advertising purposes. The data may then also be stored on the servers of the advertising tools providers.

In exceptional cases, unique data (name, e-mail address, etc.) may also be stored in the user profiles. This storage occurs, for example, if you are a member of a social media channel that we use for our online marketing measures and the network links previously received data with the user profile.

With all the advertising tools we use that store data from you on their servers, we only ever receive aggregated information and never data that makes you recognizable as an individual. The data only shows how well set advertising measures worked. For example, we see which measures have persuaded you or other users to come to our website and purchase a service or product there. Based on the analyses, we can improve our advertising offer in the future and adapt it even more precisely to the needs and wishes of interested persons.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. Data that is stored in cookies is stored for different lengths of time. Some cookies are deleted as soon as you leave the website, others may be stored in your browser for several years. In the respective data protection declarations of the individual providers, you will usually receive detailed information about the individual cookies used by the provider.

Right of objection

Since online marketing tools may generally use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy statements of the respective tools.

Legal basis

If you have consented to third-party providers being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 (1) lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur when collected by online marketing tools.

On our part, there is also a legitimate interest in measuring online marketing measures in anonymized form in order to optimize our offer and our measures with the help of the data obtained. The corresponding legal basis for this is Art. 6 Para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the tools if you have given your consent.

You will find information on specific online marketing tools - if available - in the following sections.

Partner Programs Introduction

Partner Programs Privacy Policy Summary

Data subjects: Visitors to the website

Purpose: economic success and optimization of our service performance.

Storage period: personal data is mostly stored by partner programs until it is no longer needed.

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

What are affiliate programs?

We use partner programs of different providers on our website. By using a partner program, data from you may be transferred to the respective partner program provider, stored and processed. In this data protection text, we will give you a general overview of data processing by partner programs and show you how you can also prevent or revoke a data transfer. Each partner program (also called affiliate program) is based on the principle of commission. On our website a link or an advertisement including a link is placed and if you are interested in it and click on it and purchase a product or service this way, we receive a commission for it (advertising reimbursement).

Why do we use affiliate programs on our website?

Our goal is to provide you with a pleasant time with lots of helpful content. For this purpose we put a lot of work and time into the development of our website. With the help of affiliate programs we have the possibility to get paid a little bit for our work. Each affiliate link is of course always related to our topic and shows offers that might interest you.

Which data are processed?

In order to track whether you have clicked on a link we have used, the affiliate program provider must know that it was you who followed the link via our website. Thus, there must be a correct assignment of the partner program links used to the subsequent actions (business transaction, purchase, conversion, impression, etc.). Only then can the settlement of commissions work.

In order for this assignment to work, a value can be attached to a link (in the URL) or information can be stored in cookies. In these, for example, the page from which you came (referrer), when you clicked on the link, an identifier of our website, which offer it is and a user identifier are stored.

This means that as soon as you interact with products and services of a partner program, this provider also collects data from you. Exactly which data is stored depends on the individual provider. For example, the Amazon affiliate program distinguishes between active and automatic information. Active information includes name, email address, phone number, age, payment information or location information. Automatically stored information in this case includes user behavior, IP address, device information and the URL.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. In general, personal data is only processed as long as it is necessary for the provision of services and products. Data that is stored in cookies is stored for different lengths of time. Some cookies are already deleted after you leave the website, others may be stored in your browser for several years unless they are actively deleted. The exact duration of data processing depends on the provider used; in most cases, you should be prepared for a storage period of several years. In the respective data protection statements of the individual providers, you will usually receive precise information about the duration of data processing.

Right of objection

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact responsible persons of the partner program provider used at any time. Contact details can be found either in our specific privacy policy or on the website of the relevant provider.

You can delete, deactivate or manage cookies that providers use for their functions in your browser. Depending on which browser you use, this works in different ways.

Legal basis

If you have consented to affiliate programs being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data, as may occur during the collection by a partner program.

From our side, there is also a legitimate interest in using a partner program to optimize our online service and our marketing measures. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the partner program insofar as you have given your consent.

Information on specific partner programs, you will receive - if available - in the following sections.

Content Delivery Networks Introduction

Content Delivery Networks Privacy Policy Summary

Data subjects: Visitors to the website

Purpose: Optimization of our service performance (in order to load the website faster).

Data processed: Data such as your IP address.

You can find more details below and in the individual privacy texts.

Storage period: most of the time the data is stored until it is no longer required for the fulfillment of the service

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

What is a content delivery network?

We use a so-called content delivery network on our website. In most cases, such a network is simply called a CDN. A CDN helps us to load our website quickly and smoothly, regardless of your location. In the process, your personal data is also stored, managed and processed on the servers of the CDN provider used. In the following, we will go into more detail about the service and its data processing. You can find detailed information on how your data is handled in the respective provider's privacy policy.

Each Content Delivery Network (CDN) is a network of regionally distributed servers that are all connected via the Internet. Via this network, website content (especially very large files) can be delivered quickly and smoothly even during large load peaks. The CDN creates a copy of our website on your servers for this purpose. Since these servers are distributed worldwide, the website can be delivered quickly. Consequently, the data transfer to your browser is significantly shortened by the CDN.

Why do we use a Content Delivery Network for our website?

A fast loading website is part of our service. Of course, we know how annoying it is when a website loads at a snail's pace. Most of the time, people even lose patience and look for the distance before the website is fully loaded. Of course, we want to avoid that. That's why a fast-loading website is a natural part of our website offering. With a Content Delivery Network our website will load much faster in your browser. The use of the CDN is especially helpful if you are abroad, because the website is delivered from a server near you.

What data is processed?

When you request a website or the content of a website and it is cached in a CDN, the CDN forwards the request to the server closest to you and the server delivers the content. Content delivery networks are built so that JavaScript libraries can be downloaded and hosted on npm and Github servers. Alternatively, most CDNs allow WordPress plugins to be loaded if they are hosted on WordPress.org. Your browser may send personal data to the content delivery network we use. This is data such as IP address, browser type, browser version, which web page is loaded or time and date of the page visit. This data is collected and also stored by the CDN. Whether cookies are used for data storage depends on the network used. Please read the data protection texts of the respective service.

Right of objection

If you wish to completely prevent this data transfer, you can install a JavaScript blocker (see for example https://noscript.net/) on your PC. Of course, our website will then no longer be able to offer the usual service (such as fast loading speed).

Legal basis

If you have consented to the use of a content delivery network, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as may occur during the collection by a content delivery network.

From our side, there is also a legitimate interest in using a content delivery network to optimize our online service and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the tool if you have given your consent.

You will find information on specific content delivery networks - if available - in the following sections.

Payment Provider Introduction

Payment provider privacy policy summary

Data subjects: Visitors to the website.

Purpose: Enabling and optimizing the payment process on our website.

Data processed: Data such as name, address, bank data (account number, credit card number, passwords, TANs, etc.), IP address and contract data.

More details can be found with the respective payment provider tool used.

Storage duration: depending on the payment provider used.

Legal basis: Art. 6 para. 1 lit. b DSGVO (fulfillment of a contract).

What is a payment provider?

We use online payment systems on our website that allow us and you a secure and smooth payment process. In the process, personal data may also be sent to the respective payment provider, stored and processed there, among other things. Payment providers are online payment systems that allow you to place an order via online banking. In this case, the payment processing is carried out by the payment provider you have chosen. We then receive information about the payment made. This method can be used by any user who has an active online banking account with PIN and TAN. There are hardly any banks that do not offer or accept such payment methods.

Why do we use payment providers on our website?

Of course we want to offer the best possible service with our website and our integrated online store, so that you feel comfortable on our site and use our offers. We know that your time is precious and especially payment processes have to work quickly and smoothly. For these reasons we offer you various payment providers. You can choose your preferred payment provider and pay in the usual way.

What data is processed?

Exactly what data is processed depends, of course, on the respective payment provider. But basically, data such as name, address, bank data (account number, credit card number, passwords, TANs, etc.) are stored. These are necessary data to be able to carry out a transaction at all. In addition, any contractual data and user data, such as when you visit our website, what content you are interested in or which sub-pages you click on, may also be stored. Your IP address and information about the computer you are using are also stored by most payment providers.

The data is usually stored and processed on the servers of the payment providers. We as the website operator do not receive this data. We are only informed whether the payment worked or not. For identity and credit checks, it may happen that payment providers forward data to the appropriate body. For all payment transactions, the business and data protection principles of the respective provider always apply. Therefore, please always take a look at the general terms and conditions and the privacy policy of the payment provider. You also have the right to have data deleted or corrected at any time. Please contact the respective service provider regarding your rights (right of revocation, right to information and right to be affected).

Duration of data processing

We will inform you about the duration of data processing below provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If it is required by law, for example in the case of accounting, this storage period may be exceeded. For example, we keep accounting documents relating to a contract (invoices, contract documents, account statements, etc.) for 10 years (§ 147 AO) and other relevant business documents for 6 years (§ 247 HGB) after they are created.

Right of objection

You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact responsible persons of the payment provider used at any time. Contact details can be found either in our specific privacy policy or on the website of the relevant payment provider.

You can delete, disable or manage cookies that payment providers use for their functions in your browser. Depending on which browser you use, this works in different ways. Please note, however, that the payment process may then no longer work.

Legal basis

We therefore offer other payment service providers in addition to traditional banking/credit institutions for the processing of contractual or legal relationships (Art. 6 para. 1 lit. b DSGVO). The privacy statements of the individual payment providers (such as Amazon Payments, Apple Pay or Discover) will provide you with a detailed overview of data processing and data storage. In addition, you can always contact the responsible parties if you have any questions about data protection-related topics.

You can learn more about the specific payment providers - if available - in the following sections.

External online platforms Introduction

External online platforms Privacy policy summary

Data subjects: Visitors to the website or visitors to the external online platforms.

Purpose: Presentation and optimization of our service performance, contact with visitors, interested parties.

Processed data: Data such as phone numbers, email addresses, contact details, user behavior data, information about your device and your IP address.

More details can be found at the respective platform used.

Storage period: depending on the platforms used.

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

What are external online platforms?

In order to be able to offer our services or products outside of our website, we also use external platforms. These are mostly online marketplaces such as Amazon or eBay. In addition to our responsibility of data protection, the data protection provisions of the external platforms we use also apply. This is specifically the case if our products are purchased via the platform. So if there is a payment transaction. Furthermore, most platforms also use your data to optimize their own marketing measures. For example, the platform can, with the help of collected data, tailor advertisements precisely to the interests of customers and website visitors.

Why do we use external online platforms?

In addition to our website, we also want to offer our products and services on other platforms in order to bring more customers closer to our offering. External online marketplaces, such as Amazon, Ebay, and even Digistore24, offer large sales websites that offer our products to people who may not be familiar with our website. It may also happen that built-in elements on our site redirect to an external online platform. Data that is processed and stored by the online platform used serves the company on the one hand to log the payment process, but also to be able to perform web analyses.

The aim of these analyses is to be able to develop more precise and personalized marketing and advertising strategies. Depending on your behavior on a platform, appropriate conclusions can be drawn about your interests with the help of the evaluated data and so-called user profiles can be created. In this way, it is also possible for the platforms to present you with tailored advertisements or products. In most cases, cookies are set in your browser for this purpose, which store data about your usage behavior.

Please note that when using the platforms or our built-in elements, data about you may also be processed outside the European Union, as online platforms, for example Amazon or eBay, are American companies. As a result, you may not be able to claim or enforce your rights with regard to your personal data as easily.

What data is processed?

Exactly what data is stored and processed depends on the external platform in question. But usually it is data such as phone numbers, email addresses, data you enter in a contact form, user data such as which buttons you click, when you visited which pages, information about your device and your IP address. Very often, most of this data is stored in cookies. If you have your own profile on an external platform and are also logged in there, data can be linked to the profile. The collected data is stored on the servers of the platforms used and processed there. You can find out exactly how an external platform stores, manages and processes data in the respective privacy policy. If you have any questions about data storage and data processing or wish to assert corresponding rights, we recommend that you contact the platform directly.

Duration of data processing

We will inform you about the duration of data processing below, provided we have further information on this. For example, Amazon stores data until it is no longer needed for its own purpose. In general, we only process personal data for as long as it is absolutely necessary for the provision of our services and products.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies at any time. This works either via our cookie management tool or via opt-out functions at the respective external platform. Furthermore, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser.

Since cookies may be used, we also recommend our general privacy policy on cookies. To find out exactly what data is stored and processed by you, you should read the privacy statements of the respective external platforms.

Legal basis

If you have consented that data from you can be processed and stored by external platforms, this consent is considered the legal basis of the data processing (Art. 6 (1) lit. a DSGVO). In principle, if consent has been given, your data will also be stored and processed on the basis of a legitimate interest (Art. 6 (1) (f) DSGVO) in fast and good communication with you or other customers and business partners. If we have integrated elements of external platforms on our website, we will nevertheless only use these if you have given your consent.

Information on specific external platforms - if available - can be found in the following sections.

Web Design Introduction

Web design Privacy policy Summary

Data subjects: Visitors to the website

Purpose: To improve the user experience.

Data processed: Which data is processed depends heavily on the services used. Mostly it is about IP address, technical data, language settings, browser version, screen resolution and name of the browser. You can find more details about this in the respective web design tools used.

Storage duration: depending on the tools used.

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

What is web design?

We use various tools on our website that serve our web design. Web design is not, as often assumed, only about our website looking pretty, but also about functionality and performance. But of course, the appropriate appearance of a website is also one of the major goals of professional web design. Web design is a branch of media design and deals with the visual as well as the structural and functional design of a website. The goal is to use web design to improve your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. User experience refers to all impressions and experiences that the website visitor experiences on a website. Usability is a sub-item of user experience. This refers to the user-friendliness of a website. The main emphasis here is on ensuring that content, subpages or products are clearly structured and that you can easily and quickly find what you are looking for. In order to provide you with the best possible experience on our website, we also use so-called third-party web design tools. In this privacy policy, the category "web design" therefore includes all services that improve the design of our website. These can be, for example, fonts, various plugins or other integrated web design functions.

Why do we use web design tools?

How you absorb information on a website depends very much on the structure, functionality and visual perception of the website. Therefore, a good and professional web design became more and more important for us as well. We are constantly working on improving our website and see this also as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, you will only visit us and make use of our offers if you feel completely comfortable.

What data is stored by web design tools?

When you visit our website, there may be web design elements embedded in our pages that can also process data. Exactly what data is involved depends, of course, heavily on the tools used. Further below you can see exactly which tools we use for our website. We recommend that you also read the respective privacy policy of the tools used for more detailed information on data processing. In most cases, you will find out there which data is processed, whether cookies are used and how long the data is stored. Through fonts such as Google Fonts, for example, information such as language settings, IP address, browser version, browser screen resolution and browser name are also automatically transmitted to the Google servers.

Duration of data processing

How long data is processed is highly individual and depends on the web design elements used. For example, if cookies are used, the retention period can be as short as a minute or as long as a few years. Please make yourself clear in this regard. For this purpose, we recommend on the one hand our general text section on cookies, as well as the privacy statements of the tools used. There you will usually find out exactly which cookies are used and what information is stored in them. Google font files, for example, are stored for one year. This is to improve the loading time of a website. In principle, data is only ever stored for as long as is necessary for the provision of the service. In the case of legal requirements, data may also be stored for longer.

Right of objection

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. You can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser. However, under web design elements (mostly fonts), there is also data that cannot be deleted quite so easily. This is the case when data is automatically collected directly when a page is called up and transmitted to a third-party provider (such as Google). In this case, please contact the support of the respective provider. In the case of Google, you can reach the support at https://support.google.com/?hl=de.

Legal basis

If you have consented to web design tools being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as may occur when web design tools are used. From our side, there is also a legitimate interest to improve the web design on our website. After all, only then can we provide you with a beautiful and professional web offer. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use web design tools insofar as you have given your consent. In any case, we want to emphasize this again here.

Information on specific web design tools - if available - can be found in the following sections.

Google Fonts Privacy Policy

Google Fonts Privacy Policy Summary

Data subjects: Visitors to the website.

Purpose: Optimization of our service performance.

Processed data: Data such as IP address and CSS and font requests.

More details can be found below in this privacy policy.

Storage period: Font files are stored by Google for one year.

Legal basis: Art. 6 para. 1 lit. a DSGVO (Consent), Art. 6 para. 1 lit. f DSGVO (Legitimate Interests).

What are Google Fonts?

On our website, we use Google Fonts. These are the "Google Fonts" of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

For the use of Google Fonts you do not have to log in or provide a password. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you don't need to worry that your Google account information, while using Google Fonts, will be transmitted to Google. Google records the usage of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We'll take a detailed look at exactly what this data storage looks like.

Google Fonts (formerly Google Web Fonts) is a directory of over 800 fonts that Google makes available to your users for free.

Many of these fonts are released under the SIL Open Font License, while others are released under the Apache license. Both are free software licenses.

Why do we use Google Fonts on our website?

Google Fonts allows us to use fonts on our own website, and not have to upload them to our own server. Google Fonts is an important component to keep the quality of our website high. All Google Fonts are automatically optimized for the web and this saves data volume and is a great advantage especially for mobile use. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can sometimes visually distort texts or entire web pages. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). So, we use Google Fonts so that we can display our entire online service as beautifully and consistently as possible.

What data is stored by Google?

When you visit our website, the fonts are reloaded via a Google server. Through this external call, data is transmitted to the Google servers. In this way, Google also recognizes that you or your IP address is visiting our website. The Google Fonts API is designed to reduce the use, storage, and collection of end-user data to what is necessary for proper font delivery. API, by the way, stands for "Application Programming Interface" and is used, among other things, as a data transmitter in software.

Google Fonts stores CSS and font requests securely at Google and is thus protected. Through the collected usage figures, Google can determine how well the individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites are using Google fonts. This data is published to the Google Fonts BigQuery database. Entrepreneurs and developers use Google's BigQuery web service to be able to examine and move large amounts of data.

However, it is still important to remember that each Google Font request also automatically transmits information such as language settings, IP address, browser version, browser screen resolution, and browser name to Google's servers. Whether this data is also stored cannot be clearly determined or is not clearly communicated by Google.

How long and where is the data stored?

Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This allows us to use fonts with the help of a Google stylesheet. A stylesheet is a format template that can be used to easily and quickly change the design or font of a website, for example.

The font files are stored by Google for one year. Google thus pursues the goal of fundamentally improving the loading time of web pages. If millions of web pages refer to the same fonts, they are cached after the first visit and immediately reappear on all other web pages visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.

How can I delete my data or prevent data storage?

Those data that Google stores for a day or a year cannot be easily deleted. The data is automatically transmitted to Google when the page is called up. To delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=322326656. Data storage you prevent in this case only if you do not visit our site.

Unlike other web fonts, Google allows us unlimited access to all fonts. So we can have unlimited access to a sea of fonts and get the most out of our website. You can find out more about Google Fonts and other issues at https://developers.google.com/fonts/faq?tid=322326656. Google does address privacy-related issues there, but it doesn't really include detailed information about data storage. It is relatively difficult to get really precise information from Google about stored data.

Legal basis

If you have consented to Google Fonts being used, the legal basis of the corresponding data processing is this consent. According to Art. 6 (1) lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data, as may occur in the case of collection by Google Fonts.

From our side, there is also a legitimate interest in using Google Font to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google Font if you have given your consent.

Google also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the legality and security of data processing.

As a basis for data processing at recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which also correspond to the standard contractual clauses for Google Fonts, can be found at https://business.safety.google/adsprocessorterms/.

You can also find out what data is generally collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

Content Search Providers Introduction

Content search provider privacy policy summary

Data subjects: Visitors to the website

Purpose: Improving the user experience.

Data processed: Which data is processed depends largely on the services used. Mostly it is IP address, search interests and/or technical data. You can find more details about this in the respective tools used.

Storage duration: depends on the tools used.

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

What is a content search provider?

By now, we have published quite a lot of content on our website. And of course we don't want these to be forgotten just because they can't be found. That's why we use a content search provider on our website. You're probably familiar with major search engines like Google. Content search providers are basically also search engines, but unlike Google, they don't search the entire web for content, but only the website you are on. Using a text field, you can enter terms that match the content you are looking for, and the search program will find the articles you are looking for. If you use the integrated search function, personal data about you may also be processed.

Why do we use a content search provider?

If you look around our website, you will quickly notice how much useful content we have already published over the years. There are real treasures among them and we want you to find them quickly without having to click around. With a content search feature right on our website, you can quickly and easily find the content you're looking for using keywords that match the topic you're looking for. This feature is really handy and we also see it as our task to make your life on our website as pleasant and helpful as possible. That is why we decided to include a content search program in our website.

What data is processed?

When you use the search function on our website, the integrated content search provider (such as Algolia Places or Giphy) may automatically receive and store data from you. This is technical data about your browser as well as data such as your IP address, device ID and the search terms you entered. Please note that IP addresses are personal data. The privacy statements of the providers state that this information is collected and stored in order to increase security and improve their own services. The automatically collected usage data, which does not include personal data and is processed in anonymized form, can also be used for analysis purposes. Some providers also pass on this anonymized data to third parties. In order to find out more about this, we recommend that you read the specific data protection declarations of the individual providers carefully. In order for the services to function properly, cookies are also usually set in your browser. You can learn more about cookies in our general section "Cookies". You can find out whether and which cookies the individual search tools use - if available - below or in the corresponding privacy statements of the integrated tools.

How long and where is the data stored?

As a general rule, each content search provider processes different data. Therefore, this general section cannot specifically address the data processing of the individual tools. However, usually the services store personal data only as long as it is necessary for the smooth functioning of the tools. Some services (such as Giphy) also retain personal data longer if required by legal obligations. In depersonalized form, data is retained longer by most providers as well. Content search providers may also use cookies to store various data. You can read more about this in our general section on cookies. If you want to know about the specific cookies that a search provider uses, we recommend that you read the privacy policy of the providers we use. In most cases, you will find an exemplary list of the cookies used there.

Right to object

Always be aware: if you do not want, no personal data of yours may be processed. You always have the right to access your personal data and object to its use. You can also revoke your consent at any time via the cookie consent tool or via other opt-out options. You can also easily manage, delete or deactivate used cookies yourself via your browser. If you delete cookies, it could be that some functions of the tool no longer work. So please do not be surprised about that. How you manage cookies in your browser also depends on the browser you use. In the section "Cookies" you will also find links to the instructions of the most important browsers.

Legal basis

If you have consented to the use of a content search provider, the legal basis of the corresponding data processing is this consent. According to Art. 6 (1) lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by a content search provider.

We also have a legitimate interest in using a content search provider to optimize our service on our website. The corresponding legal basis for this is Art. 6 (1) lit. f DSGVO (Legitimate Interests). However, we only ever use a content search provider if you have given your consent. We definitely want to have this stated again at this point.

You will find information on specific content search providers - if available - in the following sections.

Online Booking Systems Introduction

Online booking systems Privacy policy summary

Data subjects: Visitors to the website.

Purpose: Improve user experience and organization.

Data processed: What data is processed depends largely on the services used. Mostly it is IP address, contact and payment data and/or technical data. You can find more details about this in the respective tools used.

Storage duration: depends on the tools used.

Legal basis: Art. 6 para. 1 lit. a DSGVO (consent), Art. 6 para. 1 lit. f DSGVO (legitimate interests).

What is an online booking system?

To enable you to make bookings via our website, we use one or more booking systems. Appointments, for example, can be easily created online this way. A booking system is a software application integrated into our website that displays available resources (such as free appointments) and through which you can book directly online and usually also pay. You probably already know such booking systems from the catering or hotel industry. In the meantime, however, such systems are used in a wide variety of industries. Depending on the tool and settings, booking systems can be used both internally for us and for customers like you. In the process, personal data is usually also collected and stored from you.

In most cases, the booking works as follows: You will find the booking system on our website, where you can book an appointment for a service directly with a mouse click and by entering your data, and usually pay for it right away. You may be able to enter various information about yourself via a form. Please be aware that all the data you enter may be stored and managed in a database.

Why do we use an online booking system?

In a way, we see our website also as a free service for you. We want you to get helpful information and to feel comfortable on our site. This includes an online service that makes booking appointments or services as easy as possible for you. Gone are the days when you had to wait days for a booking confirmation via phone or e-mail. With an online booking system, you have everything done in just a few clicks and can get back to other things. The system also makes it easier for us to manage all bookings and appointments. Therefore, we consider such a booking system absolutely useful for you as well as for us.

What data is processed?

Of course, we cannot tell you in this general information text about booking system exactly what data is processed. This always depends on the tool used and the functions and possibilities it contains. Many booking systems offer a number of other features in addition to the conventional booking function. For example, many systems also have an external online payment system (e.g. from Stripe, Klarna or Paypal) and a calendar synchronization function integrated. Accordingly, different and varying amounts of data can be processed depending on the functions. Usually, data such as IP address, name and contact details, technical details about your device and time of a booking are processed. If you also make a payment in the system, bank data such as account number, credit card number, passwords, TANs, etc. are also stored and passed on to the respective payment provider. We recommend that you read the respective privacy policy of the tool used carefully so that you know which of your data is specifically processed.

Duration of data processing

Each booking system stores data for different lengths of time. Therefore, we cannot yet provide any concrete information about the duration of data processing here. In principle, however, personal data is only ever stored for as long as is absolutely necessary to provide the services. Booking systems generally also use cookies, which store information for different lengths of time. Some cookies are deleted immediately after leaving the site, others can be stored for several years. You can learn more about this in our "Cookies" section. Please also take a look at the respective privacy statements of the providers. These should explain how long your data will be stored in the specific case.

Right of objection

If you have consented to data processing by a booking system, you naturally also always have the option and right to revoke this consent. So please always be aware that you have rights with regard to your personal data and that you can exercise these rights at any time. If you do not want personal data to be processed, then no personal data may be processed. It's that simple. The easiest way to revoke data processing is via a cookie consent tool or via other opt-out functions offered. You can also manage data storage by cookies directly in your browser, for example. Until your revocation, the legality of the data management remains unaffected.

Legal basis

If you have consented to booking systems being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), it represents the legal basis for the processing of personal data, as may occur through booking systems.

Furthermore, we also have a legitimate interest in using booking systems because, on the one hand, this allows us to expand our customer service and, on the other hand, to optimize our internal booking organization. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the tools if you have given your consent. We definitely want to have this stated again at this point.

You will find information on special booking systems - if available - in the following sections.

All texts are protected by copyright.

Source: Created with the data protection generator from AdSimple

Updated on 14 November, 2022