FAIR & SUSTAINABLE PRODUCTION

100% ORGANIC INGREDIENTS

Instagram @trimmybell
Facebook



Legal Notice,   

GTAC   &   

Privacy Policy




LEGAL NOTICE


einfach•gesund GmbH & Co. KG

Schmidhausen 2 • 83104 Tuntenhausen • Germany


Phone: +49  8067  2649882

E-Mail: info(at)einfachpunktgesund.de


Register court: Amtsgericht Traunstein

Register number: HRA 12758


Represented by the general partner

einfach • gesund Verwaltungs GmbH

Schmidhausen 2 • 83104 Tuntenhausen


Register court: Amtsgericht Traunstein

Register number: HRB 27219


Managing director: Steffen Wacker 



Disclaimer:

The content of this site was made with the highest care. However, we cannot accept any liability for the correctness, completeness and topicality of the content. Liability claims against the authors relating to material or immaterial damage caused by the use or non-use of the information provided or by the use of incorrect or incomplete information are fundamentally excluded, unless the authors can be shown to have acted with willful intent or gross negligence . All offers are non-binding. The authors expressly reserve the right to change, add to, or delete parts of the pages or the entire offer or to temporarily or permanently cease publication without prior notice.


Liability for Links:

Our offer contains links to external third party websites, over whose content we have no influence. Therefore, we cannot accept any liability for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time they were linked. No illegal content was found at the time the link was created. A permanent control of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of legal violations, we will remove such links immediately.


Copyright:

The operator of the site endeavors to always observe the copyrights of others or to use self-created and license-free works. The content and works on these pages created by the website operator are subject to German copyright law. Third party contributions are marked as such. The duplication, processing, distribution and any kind of exploitation outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this website are only permitted for private, non-commercial use.


Legal Validity of this Disclaimer:

This disclaimer is to be regarded as part of the internet publication which you were referred from. If parts or individual formulations of this text do not, no longer or not completely correspond to the current legal situation, the remaining parts of the document remain unaffected in their content and validity.


Information According to § 36 VSBG

According to § 36 VSBG (Consumer Dispute Settlement Act - Law on Alternative Dispute Settlement in Consumer Matters), the operator of this website declares: We are neither willing nor obliged to participate in dispute settlement proceedings before a consumer arbitration board. 




General Terms and Conditions (GTAC)


§ 1 Scope, Form

(1) These General Conditions of Sale (AVB) apply to all of our business relationships with our customers (“buyers”). The General Terms and Conditions only apply if the buyer is an entrepreneur (§ 14 BGB), a legal entity under public law or a special fund under public law.

(2) The General Terms and Conditions apply in particular to contracts for the sale and / or delivery of movable objects ("goods"), regardless of whether we manufacture the goods ourselves or buy them from suppliers (§§ 433, 650 BGB). Unless otherwise agreed, the General Terms and Conditions apply in the version valid at the time of the buyer's order or at least in the version last communicated to him in text form as a framework agreement also for similar future contracts without us having to refer to them again in each individual case.

(3) Our AVB apply exclusively. Deviating, conflicting or supplementary general terms and conditions of the buyer only become part of the contract if and to the extent that we have expressly agreed to their validity. This requirement of consent applies in any case, for example even if we carry out the delivery to the buyer without reservation with knowledge of the general terms and conditions of the buyer.

(4) Individual agreements made with the buyer on a case-by-case basis (including side agreements, additions and changes) always take precedence over these GTC. A written contract or our written confirmation is decisive for the content of such agreements, subject to proof to the contrary.

(5) Legally relevant declarations and notifications by the buyer in relation to the contract (e.g. setting of a deadline, notification of defects, withdrawal or price reduction) must be submitted in writing, i.e. in writing or text form (e.g. letter, email, fax). Statutory formal requirements and other evidence, especially in the event of doubts about the legitimacy of the declaring party, remain unaffected.

(6) References to the validity of legal regulations are only used for clarification purposes. The statutory provisions therefore apply even without such a clarification, unless they are directly amended or expressly excluded in these AVB.


§ 2 Conclusion of Contract 

(1) Our offers are subject to change and non-binding. This also applies if we have provided the buyer with catalogs, technical documentation (e.g. drawings, plans, calculations, calculations, references to DIN standards), other product descriptions or documents - also in electronic form - to which we have property rights and copyrights Reserved.

(2) The order of the goods by the buyer is considered a binding contract offer. Unless otherwise stated in the order, we are entitled to accept this contract offer within 7 days of receiving it.

(3) The acceptance can either be declared in writing (e.g. by order confirmation) or by delivery of the goods to the buyer.


§ 3 Delivery Period and Delay in Delivery

(1) The delivery period is agreed individually or specified by us when we accept the order.

(2) If we cannot meet binding delivery times for reasons for which we are not responsible (unavailability of the service), we will inform the buyer of this immediately and at the same time notify the expected new delivery time. If the service is also not available within the new delivery period, we are entitled to withdraw from the contract in whole or in part; We will immediately reimburse any consideration already provided by the buyer. A case of non-availability of the service in this sense is in particular the late delivery by our supplier if we have concluded a congruent hedging transaction, neither we nor our supplier are at fault or we are not obliged to procure in individual cases.

(3) The rights of the buyer according to § 8 of these General Terms and Conditions and our statutory rights, in particular in the case of an exclusion of the obligation to perform (e.g. due to impossibility or unreasonableness of the service and / or subsequent performance), remain unaffected. 


§ 4 Delivery, Transfer of Risk, Acceptance, Default in Acceptance

(1) Delivery takes place ex warehouse, which is also the place of performance for the delivery and any subsequent performance. At the request and expense of the buyer, the goods will be sent to a different destination (sale by dispatch). Unless otherwise agreed, we are entitled to determine the type of shipment (in particular transport company, shipping route, packaging) ourselves.

(2) The risk of accidental loss and accidental deterioration of the goods is transferred to the buyer at the latest upon handover. In the case of sales by mail order, however, the risk of accidental loss and accidental deterioration of the goods as well as the risk of delay are transferred to the forwarding agent, the carrier or the person or institution otherwise assigned to carry out the shipment. If acceptance has been agreed, this is decisive for the transfer of risk. In addition, the statutory provisions of the law on contracts for work and services apply accordingly to an agreed acceptance. The handover or acceptance is the same if the buyer is in default of acceptance.

(3) If the buyer is in default of acceptance, if he fails to cooperate or if our delivery is delayed for other reasons for which the buyer is responsible, we are entitled to demand compensation for the resulting damage including additional expenses (e.g. storage costs). For this we charge a flat rate compensation in the amount of 0.50 euro cents per calendar day, beginning with the delivery deadline or - in the absence of a delivery deadline - with the notification that the goods are ready for dispatch. In the event of non-acceptance, the buyer has to pay lump-sum damages in the amount of 25% of the agreed purchase price.

The proof of a higher damage and our legal claims (in particular reimbursement of additional expenses, reasonable compensation, termination) remain unaffected; however, the flat rate is to be offset against further monetary claims. The buyer is allowed to prove that we suffered no damage at all or only significantly less damage than the above flat rate. 


§ 5 Prices and Terms of Payment

(1) Unless otherwise agreed in individual cases, our current prices at the time of the conclusion of the contract apply, ex warehouse, plus statutory sales tax.

(2) In the case of sales by mail order (§ 4 Paragraph 1), the buyer bears the transport costs ex warehouse and the costs of any transport insurance requested by the buyer. If we do not invoice the transport costs actually incurred in individual cases, a flat-rate transport cost (excluding transport insurance) of EUR 25 is agreed. Any customs duties, fees, taxes and other public charges are borne by the buyer.

(2) The purchase price is due and payable within 14 days of invoicing and delivery or acceptance of the goods. However, even in the context of an ongoing business relationship, we are entitled at any time to carry out a delivery in whole or in part only against prepayment. We declare a corresponding reservation at the latest with the order confirmation.

(3) When the above payment period has expired, the buyer is in default. Interest is charged on the purchase price during the delay at the applicable statutory default interest rate. We reserve the right to claim further damage caused by default. Our claim to commercial maturity interest (§ 353 HGB) remains unaffected with regard to business people.

(4) The buyer is only entitled to set-off or retention rights insofar as his claim has been legally established or is undisputed. In the event of defects in the delivery, the buyer's counter-rights, in particular in accordance with Section 7 (6) sentence 2 of these General Terms and Conditions, remain unaffected.

(5) If, after the conclusion of the contract, it becomes apparent (e.g. through an application to open insolvency proceedings) that our claim to the purchase price is jeopardized by the buyer's inability to perform, we are entitled to withdraw from the contract in accordance with the statutory provisions to refuse performance and - if necessary after setting a deadline entitled to the contract (§ 321 BGB). In the case of contracts for the production of non-representable items (custom-made items), we can declare our withdrawal immediately; the statutory regulations on the dispensability of setting a deadline remain unaffected. 


§ 6 Retention of Title

(1) We reserve title to the sold goods until all of our current and future claims from the purchase contract and an ongoing business relationship (secured claims) have been paid in full.

(2) The goods subject to retention of title may not be pledged to third parties or assigned as security before the secured claims have been paid in full. The buyer must notify us immediately in writing if an application is made to open insolvency proceedings or if third parties have accessed the goods belonging to us (e.g. seizures).

(3) If the buyer acts in breach of contract, in particular if the purchase price is not paid, we are entitled to withdraw from the contract in accordance with the statutory provisions and / or to demand the return of the goods on the basis of retention of title. The request for surrender does not also include the declaration of withdrawal; we are rather entitled to only demand the goods and to reserve the right to withdraw. If the buyer does not pay the due purchase price, we may only assert these rights if we have previously unsuccessfully set the buyer a reasonable deadline for payment or if such a deadline is dispensable according to the statutory provisions.

(4) The buyer is authorized to resell and / or process the goods subject to retention of title in the ordinary course of business until revoked in accordance with (c) below. In this case, the following provisions also apply.

(a) The retention of title extends to the full value of the products resulting from processing, mixing or combining our goods, whereby we are deemed to be the manufacturer. If the ownership rights of third parties remain in the event of processing, mixing or combining with goods of third parties, we shall acquire co-ownership in the ratio of the invoice values of the processed, mixed or combined goods. In addition, the same applies to the resulting product as to the goods delivered under retention of title.

(b) The purchaser hereby assigns to us as security the claims against third parties arising from the resale of the goods or the product in the amount of our possible co-ownership share in accordance with the preceding paragraph. We accept the assignment. The obligations of the buyer named in paragraph 2 also apply with regard to the assigned claims.

(c) In addition to us, the buyer remains authorized to collect the claim. We undertake not to collect the claim as long as the buyer fulfills his payment obligations towards us, there is no defect in his performance and we do not assert the retention of title by exercising a right according to paragraph 3. If this is the case, however, we can demand that the buyer notify us of the assigned claims and their debtors, provide all information required for collection, hand over the associated documents and notify the debtors (third parties) of the assignment. In this case, we are also entitled to revoke the buyer's authorization to resell and process the goods subject to retention of title.

(d) If the realizable value of the securities exceeds our claims by more than 10%, we will release securities of our choice at the request of the buyer. 


§ 7 Buyer's Claims for Defects

(1) The statutory provisions apply to the buyer's rights in the event of material defects and defects of title (including incorrect and short deliveries as well as improper assembly or inadequate assembly instructions), unless otherwise specified below. In all cases, the special statutory provisions remain unaffected for the final delivery of the unprocessed goods to a consumer, even if he has further processed them (supplier recourse according to §§ 478 BGB). Claims from supplier recourse are excluded if the defective goods have been further processed by the buyer or another entrepreneur, e.g. through installation in another product.

(2) The basis of our liability for defects is primarily the agreement made on the quality of the goods. All product descriptions and manufacturer information that are the subject of the individual contract or that were made public by us (in particular in catalogs or on our website) at the time the contract was concluded shall apply as an agreement on the quality of the goods.

(3) Insofar as the quality has not been agreed, the statutory regulation must be used to assess whether or not there is a defect (Section 434 (1) sentences 2 and 3 BGB). However, we do not accept any liability for public statements by the manufacturer or other third parties (e.g. advertising statements) that the buyer has not pointed out to us as being decisive for him.

(4) The purchaser's claims for defects require that he has complied with his statutory inspection and notification obligations (§§ 377, 381 HGB). In the case of building materials and other goods intended for installation or other processing, an examination must always be carried out immediately before processing. If a defect becomes apparent during the delivery, the inspection or at any later point in time, we must be notified of this immediately in writing. In any case, obvious defects are to be reported in writing within 3 working days from delivery and defects not recognizable during the inspection within the same period from discovery. If the buyer fails to properly examine and / or report defects, our liability for defects that are not reported or not reported in good time or not properly is excluded in accordance with the statutory provisions.

(5) If the delivered item is defective, we can first choose whether we should provide supplementary performance by eliminating the defect (subsequent improvement) or by delivering a defect-free item (replacement delivery). Our right to refuse supplementary performance under the legal requirements remains unaffected.

(6) We are entitled to make the subsequent performance owed dependent on the buyer paying the purchase price due. However, the buyer is entitled to withhold part of the purchase price that is reasonable in relation to the defect.

(7) The buyer has to give us the time and opportunity necessary for the subsequent performance owed, in particular to hand over the rejected goods for inspection purposes. In the case of a replacement delivery, the buyer must return the defective item to us in accordance with the statutory provisions. The supplementary performance includes neither the removal of the defective item nor the re-installation if we were not originally obliged to install it.

(8) We shall bear or reimburse the expenses required for the purpose of testing and subsequent performance, in particular transport, travel, labor and material costs and, if applicable, removal and installation costs in accordance with the statutory provisions if there is actually a defect. Otherwise we can demand reimbursement of the costs incurred from the unjustified request for the removal of defects (in particular testing and transport costs) from the buyer, unless the lack of defect was not recognizable to the buyer.

(9) In urgent cases, e.g. if operational safety is at risk or to prevent disproportionate damage, the buyer has the right to remedy the defect himself and to demand reimbursement of the objectively necessary expenses from us. We are to be notified immediately of any such self-improvement, if possible in advance. The right to carry out the work does not exist if we were entitled to refuse a corresponding subsequent performance in accordance with the statutory provisions.

(10) If the supplementary performance has failed or a reasonable deadline to be set by the buyer for the supplementary performance has expired without success or is dispensable according to the statutory provisions, the buyer can withdraw from the purchase contract or reduce the purchase price. In a minor defect, however, there is no right of withdrawal.

(11) Claims of the buyer for damages or reimbursement of wasted expenses only exist in the case of defects in accordance with § 8 and are otherwise excluded. 


§ 8 Other Liability

(1) Unless otherwise stated in these General Terms and Conditions including the following provisions, we are liable in the event of a breach of contractual and non-contractual obligations in accordance with the statutory provisions.

(2) We are liable for damages - irrespective of the legal reason - within the framework of fault liability in the event of willful intent and gross negligence. In the event of simple negligence, we are only liable, subject to statutory liability restrictions (e.g. due diligence in our own affairs; insignificant breach of duty)

a) for damage resulting from injury to life, limb or health,

b) for damages resulting from the breach of an essential contractual obligation (obligation, the fulfillment of which enables the proper execution of the contract in the first place and compliance with which the contractual partner regularly relies and may trust) in this case, however, our liability is limited to the replacement of the foreseeable, typically occurring damage.

(3) The limitations of liability resulting from Paragraph 2 also apply in the event of breaches of duty by or in favor of persons whose fault we are responsible for in accordance with statutory provisions. They do not apply if we have fraudulently concealed a defect or have given a guarantee for the quality of the goods and for claims of the buyer under the Product Liability Act.

(4) Due to a breach of duty that does not consist of a defect, the buyer can only withdraw or terminate if we are responsible for the breach of duty. A free right of termination of the buyer is excluded. In addition, the legal requirements and legal consequences apply. 


§ 9 Limitation

(1) Notwithstanding § 438 Paragraph 1 No. 3 BGB, the general limitation period for claims arising from material and legal defects is one year from delivery.

(2) The above limitation periods of the sales law also apply to contractual and non-contractual claims for damages by the buyer that are based on a defect in the goods, unless the application of the regular statutory limitation period (§§ 195, 199 BGB) would result in a shorter limitation period in individual cases to lead. Claims for damages by the buyer in accordance with Section 8, Paragraph 2, Clause 1 and Clause 2 (a) as well as under the Product Liability Act, however, only become statute-barred after the statutory limitation periods.


§ 10 Choice of Law and Place of Jurisdiction

(1) For these General Terms and Conditions and the contractual relationship between us and the buyer, the law of the Federal Republic of Germany applies to the exclusion of uniform international law, in particular the UN sales law.

(2) If the buyer is a merchant within the meaning of the Commercial Code, a legal person under public law or a special fund under public law, the exclusive - also international place of jurisdiction for all disputes arising directly or indirectly from the contractual relationship is our place of business in Rosenheim. The same applies if the buyer is an entrepreneur within the meaning of § 14 BGB. In all cases, however, we are also entitled to take legal action at the place of performance of the delivery obligation in accordance with these AVB or a priority individual agreement or at the general place of jurisdiction of the buyer. Overriding statutory provisions, in particular those relating to exclusive responsibilities, remain unaffected. 




Privacy Policy


Table of contents


Privacy Policy

Scope

Legal bases

Contact details of the data protection controller

Storage Period

Rights in accordance with the General Data Protection Regulation

Data transfer to third countries Security of data processing operations Communications

Cookies

Web hosting

Facebook Pixel Privacy Policy Google Analytics Privacy Policy Facebook Privacy Policy

Cookie Consent Management Platform

Audio & Video

YouTube Privacy Policy


Privacy Policy


We have written this privacy policy (version 06.03.2022-311954459) in order to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future and what legal options you have. The terms used are to be considered as gender-neutral.

In short: We provide you with comprehensive information about any personal data we process about you.


Privacy policies usually sound very technical and use legal terminology. However, this privacy policy is intended to describe the most important things to you as simply and transparently as possible.

So long as it aids transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We are thus informing in clear and simple language that we only process personal data in the context of our business activities if there is a legal basis for it. This is certainly not possible with brief, unclear and legal-technical statements, as is often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative. Maybe you will also find some information that you have not been familiar with.

If you still have questions, we would like to ask you to contact the responsible body named below or in the imprint, to follow the existing links and to look at further information on third-party sites. You can of course also find our contact details in the imprint.

 

Scope


This privacy policy applies to all personal data processed by our company and to all personal data processed by companies commissioned by us (processors). With the term personal data, we refer to information within the meaning of Article 4 No. 1 GDPR, such as the name, email address and postal address of a person. The processing of personal data ensures that we can offer and invoice our services and products, be it online or offline. The scope of this privacy policy includes:


all online presences (websites, online shops) that we operate

Social media presences and email communication 

mobile apps for smartphones and other devices


In short: This privacy policy applies to all areas in which personal data is processed in a structured manner by the company via the channels mentioned. Should we enter into legal relations with you outside of these channels, we will inform you separately if necessary.


Legal bases


In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.

Whenever EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course access the General Data Protection Regulation of the EU online at EUR-Lex, the gateway to EU law, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679.


We only process your data if at least one of the following conditions applies:


1. Consent (Article 6 Paragraph 1 lit. a GDPR): You have given us your consent to process data

for a specific purpose. An example would be the storage of data you entered into a contact form.

2. Contract (Article 6 Paragraph 1 lit. b GDPR): We process your data in order to fulfill a contract or pre-contractual obligations with you. For example, if we conclude a sales contract with you, we need personal information in advance.

3. Legal obligation (Article 6 Paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we will process your data. For example, we are legally required to keep invoices for our bookkeeping. These usually contain personal data.

4. Legitimate interests (Article 6 Paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your basic rights, we reserve the right to process personal data. For example, we have to process certain data in order to be able to operate our website securely and economically. Therefore, the processing is a legitimate interest.


Other conditions such as making recordings in the interest of the public, the exercise of official

authority as well as the protection of vital interests do not usually occur with us. Should such a legal basis be relevant, it will be disclosed in the appropriate place.

 

In addition to the EU regulation, national laws also apply:


In Austria this is the Austrian Data Protection Act (Datenschutzgesetz), in short DSG.

In Germany this is the Federal Data Protection Act (Bundesdatenschutzgesetz), in short

BDSG.


Should other regional or national laws apply, we will inform you about them in the following sections.


Contact details of the data protection controller


If you have any questions about data protection, you will find the contact details of the responsible person or controller below:

einfach•gesund GmbH & Co. KG 

Schmidhausen 2

83104 Tuntenhausen

Deutschland

Authorised to represent: Steffen Wacker 

E-Mail: info@einfachpunktgesund.de 

Phone: +49 8067 2649882

Company details: https://www.einfachpunktgesund.de/datenschutzerklarung.html


Storage Period


It is a general criterion for us to store personal data only for as long as is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as any reason for the data processing no longer exists. In some cases, we are legally obliged to keep certain data stored even after the original purpose no longer exists, such as for accounting purposes.


If you want your data to be deleted or if you want to revoke your consent to data processing, the data will be deleted as soon as possible, provided there is no obligation to continue its storage.


We will inform you below about the specific duration of the respective data processing, provided we have further information.


Rights in accordance with the General Data Protection

Regulation


You are granted the following rights in accordance with the provisions of the GDPR (General Data

Protection Regulation) and the Austrian Data Protection Act (DSG):


right to rectification (article 16 GDPR)

right to erasure (“right to be forgotten“) (article 17 GDPR)

right to restrict processing (article 18 GDPR)

 righ to notification – notification obligation regarding rectification or erasure of personal data or restriction of processing (article 19 GDPR) 

right to data portability (article 20 GDPR) Right to object (article 21 GDPR)

right not to be subject to a decision based solely on automated processing – including profiling – (article 22 GDPR)


If you think that the processing of your data violates the data protection law, or that your data protection rights have been infringed in any other way, you can lodge a complaint with your respective regulatory authority. For Austria this is the data protection authority, whose website you can access at https://www.data-protection-authority.gv.at/.


Bayern Data protection authority


State Commissioner for Data Protection: Prof. Dr. Thomas Petri

Address: Wagmüllerstr. 18, 80538 München

Phone number: 089/21 26 72-0

E-mail address: poststelle@datenschutz-bayern.de

Website: https://www.datenschutz-bayern.de/


Data transfer to third countries


We only transfer or process data to countries outside the EU (third countries) if you consent to this processing, if this is required by law or if it is contractually necessary. In any case, we generally only do so to the permitted extent. In most cases, your consent is the most important reason for data being processed in third countries. When personal data is being processed in third countries such

as the USA, where many software manufacturers offer their services and have their servers located, your personal data may be processed and stored in unexpected ways.


We want to expressly point out, that according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. Data processing by US services (such as Google Analytics) may result in data processing and retention without the data having undergone anonymisation processes. Furthermore, US government authorities may be able to access individual data. The collected data may also get linked to data from other services of the same provider, should you have a user account with the respective provider. We try to use server locations within the EU, whenever this is offered and possible.


We will provide you with more details about data transfer to third countries in the appropriate sections of this privacy policy, whenever applicable.


Security of data processing operations


In order to protect personal data, we have implemented both technical and organisational measures. We encrypt or pseudonymise personal data wherever this is possible. Thus, we make it as difficult as we can for third parties to extract personal information from our data.

 

Article 25 of the GDPR refers to “data protection by technical design and by data protection-friendly default” which means that both software (e.g. forms) and hardware (e.g. access to server rooms) appropriate safeguards and security measures shall always be placed. If applicable, we will outline the specific measures below.


TLS encryption with https


The terms TLS, encryption and https sound very technical, which they are indeed. We use HTTPS (Hypertext Transfer Protocol Secure) to securely transfer data on the Internet.

This means that the entire transmission of all data from your browser to our web server is secured – nobody can “listen in”.


We have thus introduced an additional layer of security and meet privacy requirements through technology design Article 25 Section 1 GDPR). With the use of TLS (Transport Layer Security), which is an encryption protocol for safe data transfer on the internet, we can ensure the protection of confidential information.

You can recognise the use of this safeguarding tool by the little lock-symbol  , which is situated in your browser’s top left corner in the left of the internet address (e.g. examplepage.uk), as well as by the display of the letters https (instead of http) as a part of our web address.

If you want to know more about encryption, we recommend you to do a Google search for

“Hypertext Transfer Protocol Secure wiki” to find good links to further information.


Communications


Communications Overview

Affected parties: Anyone who communicates with us via phone, email or online form

Processed data: e. g. telephone number, name, email address or data entered in forms.

You can find more details on this under the respective form of contact

Purpose: handling communication with customers, business partners, etc.

Storage duration: for the duration of the business case and the legal requirements

Legal basis: Article 6 (1) (a) GDPR (consent), Article 6 (1) (b) GDPR (contract), Article 6 (1) (f) GDPR (legitimate interests)


If you contact us and communicate with us via phone, email or online form, your personal data may be processed.


The data will be processed for handling and processing your request and for the related business transaction. T

he data is stored for this period of time or for as long as is legally required.


Affected persons


The above-mentioned processes affect all those who seek contact with us via the communication channels we provide.

 

Telephone


When you call us, the call data is stored in a pseudonymised form on the respective terminal device, as well as by the telecommunications provider that is being used. In addition, data such as your name and telephone number may be sent via email and stored for answering your inquiries. The data will be erased as soon as the business case has ended and the legal requirements allow for its erasure.


Email


If you communicate with us via email, your data is stored on the respective terminal device (computer, laptop, smartphone, …) as well as on the email server. The data will be deleted as soon as the business case has ended and the legal requirements allow for its erasure.


Online forms


If you communicate with us using an online form, your data is stored on our web server and, if necessary, forwarded to our email address. The data will be erased as soon as the business case has ended and the legal requirements allow for its erasure.


Legal bases


Data processing is based on the following legal bases:


Art. 6 para. 1 lit. a GDPR (consent): You give us your consent to store your data and to continue to use it for the purposes of the business case;

Art. 6 para. 1 lit. b GDPR (contract): For the performance of a contract with you or a processor such as a telephone provider, or if we have to process the data for pre-contractual activities, such as preparing an offer;

Art. 6 para. 1 lit. f GDPR (legitimate interests): We want to conduct our customer inquiries and business communication in a professional manner. Thus, certain technical facilities such

email programs, Exchange servers and mobile network operators are necessary to efficiently operate our communications.


Cookies


Cookies Overview

Affected parties: visitors to the website

Purpose: depending on the respective cookie. You can find out more details below or from the software manufacturer that sets the cookie.

Processed data: Depending on the cookie used. More details can be found below or from the manufacturer of the software that sets the cookie.

Storage duration: can vary from hours to years, depending on the respective cookie

Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

 

What are cookies?


Our website uses HTTP-cookies to store user-specific data.

In the following we explain what cookies are and why they are used, so that you can better understand the following privacy policy.


Whenever you surf the Internet, you are using a browser. Common browsers are for example, Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text-files in your browser. These files are called cookies.


It is important to note that cookies are very useful little helpers. Almost every website uses cookies. More precisely, these are HTTP cookies, as there are also other cookies for other uses. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically placed into the cookie-folder, which is the “brain” of your browser. A cookie consists of a name and a value. Moreover, to define a cookie, one or multiple attributes must be specified.


Cookies store certain user data about you, such as language or personal page settings. When you re-open our website to visit again, your browser submits these “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are familiar to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in one single file.


The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie back from the server. The browser then uses this again as soon as another page is requested.


There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner-websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do

not contain viruses, trojans or other malware. Cookies also cannot access your PC’s information.

 

This is an example of how cookie-files can look:


Name: _ga

Value: GA1.2.1326744211.152311954459-9

Purpose: Differentiation between website visitors

Expiry date: after 2 years

A browser should support these minimum sizes: At least 4096 bytes per cookie

At least 50 cookies per domain

At least 3000 cookies in total


Which types of cookies are there?


The exact cookies that we use, depend on the used services, which will be outlined in the following sections of this privacy policy. Firstly, we will briefly focus on the different types of HTTP-cookies.


There are 4 different types of cookies:


Essential cookies

These cookies are necessary to ensure the basic functions of a website. They are needed when a user for example puts a product into their shopping cart, then continues surfing on different websites and comes back later in order to proceed to the checkout. These cookies ensure the shopping cart does not get deleted, even if the user closes their browser window.


Purposive cookies

These cookies collect information about user behaviour and whether the user receives any error messages. Furthermore, these cookies record the website’s loading time as well as its behaviour in different browsers.


Target-orientated cookies

These cookies ensure better user-friendliness. Thus, information such as previously entered locations, fonts sizes or data in forms stay stored.


Advertising cookies

These cookies are also known as targeting cookies. They serve the purpose of delivering customised advertisements to the user. This can be very practical, but also rather annoying.


Upon your first visit to a website you are usually asked which of these cookie-types you want to accept. Furthermore, this decision will of course also be stored in a cookie.


If you want to learn more about cookies and do not mind technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

 

Purpose of processing via cookies


The purpose ultimately depends on the respective cookie. You can find out more details below or from the software manufacturer that sets the cookie.


Which data are processed?


Cookies are little helpers for a wide variety of tasks. Unfortunately, it is not possible to tell which data is generally stored in cookies, but in the privacy policy below we will inform you on what data is processed or stored.


Storage period of cookies


The storage period depends on the respective cookie and is further specified below. Some cookies are erased after less than an hour, while others can remain on a computer for several years.


You can also influence the storage duration yourself. You can manually erase all cookies at any time in your browser (also see “Right of objection” below). Furthermore, the latest instance cookies

based on consent will be erased is after you withdraw your consent. The legality of storage will remain unaffected until then.


Right of objection – how can I erase cookies?


You can decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option of erasing, deactivating or only partially accepting cookies. You can for example block third-party cookies but allow all other cookies.


If you want to find out which cookies have been stored in your browser, or if you want to change or erase cookie settings, you can find this option in your browser settings:


Chrome: Clear, enable and manage cookies in Chrome


Safari: Manage cookies and website data in Safari


Firefox: Clear cookies and site data in Firefox


Internet Explorer: Delete and manage cookies


Microsoft Edge: Delete cookies in Microsoft Edge


If you generally do not want cookies, you can set up your browser in a way to notify you whenever a

cookie is about to be set. This gives you the opportunity to manually decide to either permit or deny the placement of every single cookie. This procedure varies depending on the browser. Therefore, it might be best for you to search for the instructions in Google. If you are using Chrome, you could for example put the search term “delete cookies Chrome” or “deactivate cookies Chrome” into Google.

 

Legal basis


The so-called “cookie directive” has existed since 2009. It states that the storage of cookies requires

your consent (Article 6 Paragraph 1 lit. a GDPR). Within countries of the EU, however, the reactions to these guidelines still vary greatly. In Austria, however, this directive was implemented in Section

96 (3) of the Telecommunications Act (TKG). In Germany, the cookie guidelines have not been

implemented as national law. Instead, this guideline was largely implemented in Section 15 (3) of the Telemedia Act (TMG).


For absolutely necessary cookies, even if no consent has been given, there are legitimate interests (Article 6 (1) (f) GDPR), which in most cases are of an economic nature. We want to offer our visitors a pleasant user experience on our website. For this, certain cookies often are absolutely necessary.


This is exclusively done with your consent, unless absolutely necessary cookies are used. The legal basis for this is Article 6 (1) (a) of the GDPR.


In the following sections you will find more detail on the use of cookies, provided the used software does use cookies.


Web hosting


Web hosting Overview

Affected parties: visitors to the website

Purpose: professional hosting of the website and security of operations

Processed data: IP address, time of website visit, browser used and other data. You can find more details on this below or at the respective web hosting provider.

Storage period: dependent on the respective provider, but usually 2 weeks

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)


What is web hosting?


Every time you visit a website nowadays, certain information – including personal data – is automatically created and stored, including on this website. This data should be processed as sparingly as possible, and only with good reason. By website, we mean the entirety of all websites on your domain, i.e. everything from the homepage to the very last subpage (like this one here). By domain we mean example.uk or examplepage.com.


When you want to view a website on a screen, you use a program called a web browser. You probably know the names of some web browsers: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari.


The web browser has to connect to another computer which stores the website’s code: the web server. Operating a web server is complicated and time-consuming, which is why this is usually done by professional providers. They offer web hosting and thus ensure the reliable and flawless storage of website data.


Whenever the browser on your computer establishes a connection (desktop, laptop, smartphone) and whenever data is being transferred to and from the web server, personal data may be processed. After all, your computer stores data, and the web server also has to retain the data for a period of time in order to ensure it can operate properly.


Why do we process personal data?


The purposes of data processing are:


1. Professional hosting of the website and operational security

2. To maintain the operational as well as IT security

3. Anonymous evaluation of access patterns to improve our offer, and if necessary, for prosecution or the pursuit of claims.li>


Which data are processed?


Even while you are visiting our website, our web server, that is the computer on which this website is saved, usually automatically saves data such as


the full address (URL) of the accessed website (e. g. https://www.examplepage.uk/examplesubpage.html?tid=311954459) browser and browser version (e.g. Chrome 87)

the operating system used (e.g. Windows 10)

the address (URL) of the previously visited page (referrer URL) (e. g. https://www.examplepage.uk/icamefromhere.html/)

the host name and the IP address of the device from the website is being accessed from (e.g. COMPUTERNAME and 194.23.43.121)

date and time

in so-called web server log files


How long is the data stored?


Generally, the data mentioned above are stored for two weeks and are then automatically deleted. We do not pass these data on to others, but we cannot rule out the possibility that this data may be viewed by the authorities in the event of illegal conduct.


In short: Your visit is logged by our provider (company that runs our website on special computers

(servers)), but we do not pass on your data without your consent!

 

Legal basis


The lawfulness of processing personal data in the context of web hosting is justified in Art. 6 para. 1

lit. f GDPR (safeguarding of legitimate interests), as the use of professional hosting with a provider is necessary to present the company in a safe and user-friendly manner on the internet, as well as to have the ability to track any attacks and claims, if necessary.


WordPress.com Privacy Policy


We use WordPress.com for our website, which is a modular website system. The provider of this service is the American company Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.


WordPress.com also processes data in the USA, among other countries. We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks to the legality and security of data processing.


WordPress.com uses standard contractual clauses approved by the EU Commission as the basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway and especially in the USA) or data transfer there (= Art. 46, paragraphs 2 and 3 of the GDPR). These clauses oblige WordPress.com to comply with the EU‘s level of data protection when processing relevant data outside the EU. These clauses are based on an implementing order by the EU Commission. You can find the order and the clauses here: https://ec.europa.eu/commission/presscorner/detail/en/ip_21_2847.


You can find out more about the data that is processed by using WordPress.com in their Privacy

Policy at https://automattic.com/privacy/.


Facebook Pixel Privacy Policy


We use Facebook’s Facebook pixel on our website. For that, we have implemented a code on our website. The Facebook pixel is a segment of a JavaScript code, which, in case you came to our website via Facebook ads, loads an array or functions that enable Facebook to track your user actions. For example, if you buy a product on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies enable Facebook to match your user data (customer data such as IP address, user ID) with the data of your Facebook account. After that, Facebook deletes your data again. The collected data is anonymous as well as inaccessible and can only be used for ad placement purposes. If you are a Facebook user and you are logged in, your visit to our website is automatically assigned to your Facebook user account.


We exclusively want to show our products or services to persons, who are interested in them. With the aid of the Facebook pixel, our advertising measures can get better adjusted to your wishes and interests. Therefore, Facebook users get to see suitable advertisement (if they allowed personalised advertisement). Moreover, Facebook uses the collected data for analytical purposes and for its own advertisements.


In the following we will show you the cookies, which were set on a test page with the Facebook pixel integrated to it. Please consider that these cookies are only examples. Depending on the interaction that is made on our website, different cookies are set.


Name: _fbp

Value: fb.1.1568287647279.257405483-6311954459-7

Purpose: Facebook uses this cookie to display advertising products.

Expiration date: after 3 months


Name: fr

Value: 0aPf312HOS5Pboo2r..Bdeiuf…1.0.Bdeiuf.

Purpose: This cookie is used for Facebook pixels to function properly.

Expiration date: after 3 months


Name: comment_author_50ae8267e2bdf1253ec1a5769f48e062311954459-3

Value: Name of the author

Purpose: This cookie saves the text and name of a user who e.g. leaves a comment.

Expiration date: after 12 months


Name: comment_author_url_50ae8267e2bdf1253ec1a5769f48e062

Value: https%3A%2F%2Fwww.testseite…%2F (URL of the author)

Purpose: This cookie saved the URL of the website that the user types into a text box on our website.

Expiration date: after 12 months


Name: comment_author_email_50ae8267e2bdf1253ec1a5769f48e062

Value: email address of the author

Purpose: This cookie saves the email address of the user, if they provided it on the website.

Expiration date: after 12 months


Note: The above-mentioned cookies relate to an individual user behaviour. Moreover, especially concerning the usage of cookies, changes at Facebook can never be ruled out.


If you are registered on Facebook, you can change the settings for advertisements yourself at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. If you are not a Facebook user, you can manage your user based online advertising at https://www.youronlinechoices.com/uk/your-ad-choices. You have the option to activate or deactivate any providers there.


We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. Data processing is done mainly through Facebook Pixel. This may lead to data not being anonymously processed and stored. Furthermore, US government authorities may get access to individual data. The data may also get linked to data from other Facebook services you have a user account with.

 

If you want to learn more about Facebook’s data protection, we recommend you the view the company’s in-house data policies at https://www.facebook.com/policy.php.


Privacy Policy for Facebook‘s Automatic Advanced Matching


Along with Facebook’s pixel function, we have also activated Automatic Advanced Matching. This function allows us to send hashed emails, names, genders, cities, states, postcodes and dates of birth or telephone numbers as additional information to Facebook, provided you have made them available to us. This activation gives us the opportunity to customise advertising campaigns even better to persons who are interested in our services or products.


Google Analytics Privacy Policy


Google Analytics Privacy Policy Overview

Affected parties: website visitors

Purpose: Evaluation of visitor information to optimise the website.

Processed data: Access statistics that contain data such as the location of access, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. You can find more details on this in the privacy policy below.

Storage period: depending on the properties used

Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)


What is Google Analytics?


We use the tracking and analysis tool Google Analytics (GA) of the US-American company Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics collects data on your actions on our website. Whenever you click a link for example, this action is saved in a cookie and transferred to Google Analytics. With the help of reports which we receive from Google Analytics, we can adapt our website and our services better to your wishes. In the following, we will explain the tracking tool in more detail, and most of all, we will inform you what data is saved and how you can prevent this.


Google Analytics is a tracking tool with the purpose of conducting data traffic analysis of our website. For Google Analytics to work, there is a tracking code integrated to our website. Upon your visit to our website, this code records various actions you perform on your website. As soon as you leave our website, this data is sent to the Google Analytics server, where it is stored.


Google processes this data and we then receive reports on your user behaviour. These reports can be one of the following:


Target audience reports: With the help of target audience reports we can get to know our users better and can therefore better understand who is interested in our service.

Advertising reports: Through advertising reports we can analyse our online advertising better and hence improve it.

Acquisition reports: Acquisition reports provide us helpful information on how we can get more people enthusiastic about our service.

 

Behaviour reports: With these reports, we can find out how you interact with our website. By the means of behaviour reports, we can understand what path you go on our website and what links you click.

Conversion reports: A conversion is the process of leading you to carry out a desired action due to a marketing message. An example of this would be transforming you from a mere website visitor into a buyer or a newsletter subscriber. Hence, with the help of these reports we can see in more detail, if our marketing measures are successful with you. Our aim is to increase our conversion rate.

Real time reports: With the help of these reports we can see in real time, what happens on our website. It makes us for example see, we can see how many users are reading this text right now.


Why do we use Google Analytics on our website?


The objective of our website is clear: We want to offer you the best possible service. Google

Analytics’ statistics and data help us with reaching this goal.


Statistically evaluated data give us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimise our page in a way, that makes it easier to be found by interested people on Google. On the other hand, the data helps us to get a better understanding of you as our visitor. Therefore, we can very accurately find out what we must improve on our website, in order to offer you the best possible service. The analysis of that data also enables us to carry out our advertising and marketing measures in a more individual and more cost-effective way. After all, it only makes sense to show our products and services exclusively to people who are interested in them.


What data is stored by Google Analytics?


With the aid of a tracking code, Google Analytics creates a random, unique ID which is connected to your browser cookie. That way, Google Analytics recognises you as a new user. The next time you visit our site, you will be recognised as a “recurring” user. All data that is collected gets saved together with this very user ID. Only this is how it is made possible for us to evaluate and analyse pseudonymous user profiles.


To analyse our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. Google Analytics 4-property is standard for every newly created property. An alternative however, is the Universal Analytics Property. Depending on the property that is being used, data are stored for different periods of time.


Your interactions on our website are measured by tags such as cookies and app instance IDs. Interactions are all kinds of actions that you perform on our website. If you are also using other Google systems (such as a Google Account), data generated by Google Analytics can be linked with third-party cookies. Google does not pass on any Google Analytics data, unless we as the website owners authorise it. In case it is required by law, exceptions can occur.


The following cookies are used by Google Analytics:

 

Name: _ga

Value:2.1326744211.152311954459-5

Purpose: By deafault, analytics.js uses the cookie _ga, to save the user ID. It generally serves the purpose of differentiating between website visitors.

Expiration date: After 2 years


Name: _gid

Value:2.1687193234.152311954459-1

Purpose: This cookie also serves the purpose of differentiating between website users

Expiration date: After 24 hours


Name: _gat_gtag_UA_<property-id>

Value: 1

Verwendungszweck: It is used for decreasing the demand rate. If Google Analytics is provided via

Google Tag Manager, this cookie gets the name _dc_gtm_ <property-id>.

Expiration date: After 1 minute


Name: AMP_TOKEN

Value: No information

Purpose: This cookie has a token which is used to retrieve the user ID by the AMP Client ID Service. Other possible values suggest a logoff, a request or an error.

Expiration date: After 30 seconds up to one year


Name:     utma

Value:1564498958.1564498958.1564498958.1

Purpose: With this cookie your behaviour on the website can be tracked and the site performance can be measured. The cookie is updated every time the information is sent to Google Analytics. Expiration date: After 2 years


Name:     utmt

Value: 1

Purpose: Just like _gat_gtag_UA_<property-id> this cookie is used for keeping the requirement rate in check.

Expiration date: Afer 10 minutes


Name:     utmb

Value:3.10.1564498958

Purpose: This cookie is used to determine new sessions. It is updated every time new data or information gets sent to Google Analytics.

Expiration date: After 30 minutes


Name:     utmc

Value: 167421564

Purpose: This cookie is used to determine new sessions for recurring visitors. It is therefore a session cookie, and only stays stored until you close the browser again.

Expiration date: After closing the browser

 

Name:     utmz

Value: m|utmccn=(referral)|utmcmd=referral|utmcct=/

Purpose: This cookie is used to identify the source of the number of visitors to our website. This means, that the cookie stored information on where you came to our website from. This could be another site or an advertisement.

Expiration date: After 6 months


Name:     utmv

Value: No information

Purpose: The cookie is used to store custom user data. It gets updated whenever information is sent to Google Analytics.

Expiration date: After 2 years


Note: This list is by no means exhaustive, since Google are repeatedly changing the use of their cookies.


Below we will give you an overview of the most important data that can be evaluated by Google Analytics:


Heatmaps: Google creates so-called Heatmaps an. These Heatmaps make it possible to see the exact areas you click on, so we can get information on what routes you make on our website.


Session duration: Google calls the time you spend on our website without leaving it session duration. Whenever you are inactive for 20 minutes, the session ends automatically.


Bounce rate If you only look at one page of our website and then leave our website again, it is called a bounce.


Account creation: If you create an account or make an order on our website, Google Analytics collects this data.


IP-Address: The IP address is only shown in a shortened form, to make it impossible to clearly allocate it.


Location: Your approximate location and the country you are in can be defined by the IP address. This process is called IP location determination.


Technical information: Information about your browser type, your internet provider and your screen resolution are called technical information.


Source: Both, Google Analytics as well as ourselves, are interested what website or what advertisement led you to our site.


Further possibly stored data include contact data, potential reviews, playing media (e.g. when you play a video on our site), sharing of contents via social media or adding our site to your favourites. This list is not exhaustive and only serves as general guidance on Google Analytics’ data retention.

 

How long and where is the data stored?


Google has servers across the globe. Most of them are in America and therefore your data is mainly saved on American servers. Here you can read detailed information on where Google’s data centres are located: https://www.google.com/about/datacenters/inside/locations/?hl=en


Your data is allocated to various physical data mediums. This has the advantage of allowing to

retrieve the data faster, and of protecting it better from manipulation. Every Google data centre has respective emergency programs for your data. Hence, in case of a hardware failure at Google or a server error due to natural disasters, the risk for a service interruption stays relatively low.


The data retention period depends on the properties used. When using the newer Google Analytics 4-properties, the retention period of your user data is set to 14 months. For so-called event data, we have the option of choosing a retention period of either 2 months or 14 months.


Google Analytics has a 26 months standardised period of retaining your user data. After this time, your user data is deleted. However, we have the possibility to choose the retention period of user data ourselves. There are the following five options:


Deletion after 14 months 

Deletion after 26 months 

Deletion after 38 months 

Deletion after 50 months 

No automatical deletion


Additionally, there is the option for data to be deleted only if you no longer visit our website within a period determined by us. In this case, the retention period will be reset every time you revisit our website within the specified period.


As soon as the chosen period is expired, the data is deleted once a month. This retention period applies to any of your data which is linked to cookies, user identification and advertisement IDs (e.g. cookies of the DoubleClick domain). Any report results are based on aggregated information and are stored independently of any user data. Aggregated information is a merge of individual data into a single and bigger unit.


How can I delete my data or prevent data retention?


Under the provisions of the European Union’s data protection law, you have the right to obtain information on your data and to update, delete or restrict it. With the help of a browser add on that can deactivate Google Analytics’ JavaScript (ga.js, analytics.js, dc.js), you can prevent Google Analytics from using your data. You can download this add on at https://tools.google.com/dlpage/gaoptout?hl=en-GB. Please consider that this add on can only deactivate any data collection by Google Analytics.


If you generally want to deactivate, delete or manage all cookies (independently of Google Analytics), you can use one of the guides that are available for any browser:

 

Chrome: Clear, enable and manage cookies in Chrome


Safari: Manage cookies and website data in Safari


Firefox: Clear cookies and site data in Firefox


Internet Explorer: Delete and manage cookies


Microsoft Edge: Delete cookies in Microsoft Edge


Legal basis


The use of Google Analytics requires your consent, which we obtained via our cookie popup. According to Art. 6 para. 1 lit. a of the GDPR (consent) , this is the legal basis for the processing of personal data when collected via web analytics tools.


In addition to consent, we have legitimate interest in analysing the behaviour of website visitors, in order to technically and economically improve our offer. With Google Analytics, we can recognise website errors, identify attacks and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f of the GDPR (legitimate interests) . Nevertheless, we only use Google Analytics if you have given your consent.


Google also processes data in the USA, among other countries. We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks to the legality and security of data processing.


Google uses standard contractual clauses approved by the EU Commission as basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway and especially in the USA) or data transfer there (= Art. 46, paragraphs 2 and 3 of the GDPR). These clauses oblige Google to comply with the EU‘s level of data protection when processing relevant data outside the EU. These clauses are based on an implementing order by the EU Commission. You can find the order and the clauses here:

https://ec.europa.eu/commission/presscorner/detail/en/ip_21_2847


We hope we could provide you with the most important information about data processing by Google Analytics. If you want to find out more on the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/gb/ and https://support.google.com/analytics/answer/6004245?hl=en.


Google Analytics Reports on demographic characteristics and interests


We have turned on Google Analytics’ functions for advertising reports. These reports on demographic characteristics and interests contain details about age, gender and interests. Through them we can get a better picture of our users – without being able to allocate any data to individual persons. You can learn more about advertising functions at 

https://support.google.com/analytics/answer/3450482?hl=en&amp%3Butm_id=ad.


You can terminate the use of your Google Account’s activities and information in “Ads Settings” at https://adssettings.google.com/authenticated via a checkbox.


Google Analytics Deactivation Link


By clicking on the following deactivation link you can prevent Google from tracking your further visits. Caution: The deletion of cookies, the use of your browser’s incognito/private mode or the use of a different browser may lead to your data being collected again.


Deactivate Google Analytics


Google Analytics Google Signals Privacy Policy


We have activated Google signals in Google Analytics. Through this, any existing Google Analytics functions (advertising reports, remarketing, cross-device reports and reports on interests and demographic characteristics) are updated, to result in the summary and anonymisation of your data, should you have permitted personalised ads in your Google Account.


The special aspect of this is that it involves cross-device tracking. That means your data can be analysed across multiple devices. Through the activation of Google signals, data is collected and linked to the Google account. For example, it enables Google to recognise when you look at a product on a smartphone and later buy the product on a laptop. Due to activating Google signals, we can start cross-device remarketing campaigns, which would otherwise not be possible to this extent. Remarketing means, that we can show you our products and services across other websites as well.


Moreover, further visitor data such as location, search history, YouTube history and data about your actions on our website are collected in Google Analytics. As a result, we receive improved advertising reports and more useful information on your interests and demographic characteristics. These include your age, the language you speak, where you live or what your gender is. Certain social criteria such as your job, your marital status or your income are also included. All these characteristics help Google Analytics to define groups of persons or target audiences.


Those reports also help us to better assess your behaviour, as well as your wishes and interests. As a result, we can optimise and customise our products and services for you. By default, this data expires after 26 months. Please consider, that this data is only collected if you have agreed to personalised advertisement in your Google Account. The retained information is always exclusively summarised and anonymous data, and never any data on individual persons. You can manage or delete this data in your Google Account.

 

Google Analytics IP Anonymisation


We implemented Google Analytics’ IP address anonymisation to this website. Google developed this function, so this website can comply with the applicable privacy laws and the local data protection authorities’ recommendations, should they prohibit the retention of any full IP addresses.

The anonymisation or masking of IP addresses takes place, as soon as they reach Google Analytics’ data collection network, but before the data would be saved or processed.


You can find more information on IP anonymisation at https://support.google.com/analytics/answer/2763052?hl=en.


Google Analytics‘ Data Processing Amendment


By accepting the amendment on data processing in Google Analytics, we entered a contract with

Google concerning the use of Google Analytics.


You can find out more about the amendment on data processing for Google Analytics here:

https://support.google.com/analytics/answer/3379636?hl=en&utm_id=ad


Facebook Privacy Policy


Facebook Privacy Policy Overview 

Affected parties: website visitors 

Purpose: service optimisation

Processed data: data such as customer data, data on user behaviour, device information and IP address.

You can find more details in the Privacy Policy below.

Storage period: until the data no longer serves Facebook’s purposes

Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)


What are Facebook tools?


We use selected Facebook tools on our website. Facebook is a social media network of the company 

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. 

With the aid of this tool we can provide the best possible offers to you and anyone interested in our products and services.


If your data is collected and forwarded via our embedded Facebook elements or via our Facebook page (fanpage), both we and Facebook Ireland Ltd. are responsible for this. However, should any further processing occur, then Facebook is solely responsible for this data. Our joint commitments were also set out in a publicly available agreement at https://www.facebook. com / legal / controller_addendum . It e.g. states that we must clearly inform you about the use of Facebook tools on our website. We are also responsible for ensuring that the tools are securely integrated into our website and are in accordance with the applicable privacy laws. Facebook, on the other hand, is e.g. responsible for the data security of Facebook’s products. If you have any questions

 

about Facebook’s data collection and processing, you can contact the company directly. Should you direct the question to us, we are obliged to forward it to Facebook.


In the following we will give you an overview on the different Facebook tools, as well as on what data is sent to Facebook and how you can erase this data.


Along with many other products, Facebook also offers so called “Facebook Business Tools”. This is Facebook’s official name for its tools, but it is not very common. Therefore, we decided to merely call them “Facebook tools”. They include the following:


Facebook-Pixel

Social Plugins (e.g. the “Like” or “Share“ button) 

Facebook Login

Account Kit

APIs (application programming interface) 

SDKs (Softwart developmept kits) Plattform-integrations

Plugins Codes Specifications Documentations

Technologies and Services


With these tools Facebook can extend its services and is able to receive information on user activities outside of Facebook.


Why do we use Facebook tools on our website?


We only want to show our services and products to people who are genuinely interested in them. With the help of advertisements (Facebook Ads) we can reach exactly these people. However, to be able to show suitable adverts to users, Facebook requires additional information on people’s needs and wishes. Therefore, information on the user behaviour (and contact details) on our website, are provided to Facebook. Consequently, Facebook can collect better user data and is able to display suitable adverts for our products or services. Thanks to the tools it is possible to create targeted, customised ad campaigns of Facebook.


Facebook calls data about your behaviour on our website “event data” and uses them for analytics services. That way, Facebook can create “campaign reports” about our ad campaigns’ effectiveness on our behalf. Moreover, by analyses we can get a better insight in how you use our services, our website or our products. Therefore, some of these tools help us optimise your user experience on our website. With the social plugins for instance, you can share our site’s contents directly on Facebook.


What data is stored by Facebook tools?


With the use of Facebook tools, personal data (customer data) may be sent to Facebook. Depending on the tools used, customer data such as name, address, telephone number and IP address may be transmitted.


Facebook uses this information to match the data with the data it has on you (if you are a Facebook member). However, before the customer data is transferred to Facebook, a so called “Hashing” takes place. This means, that a data record of any size is transformed into a string of characters, which also has the purpose of encrypting data.


Moreover, not only contact data, but also “event data“ is transferred. These data are the information we receive about you on our website. To give an example, it allows us to see what subpages you visit or what products you buy from us. Facebook does not disclose the obtained information to third parties (such as advertisers), unless the company has an explicit permission or is legally obliged to do so. Also, “event data“ can be linked to contact information, which helps Facebook to offer improved, customised adverts. Finally, after the previously mentioned matching process, Facebook deletes the contact data.


To deliver optimised advertisements, Facebook only uses event data, if they have been combined with other data (that have been collected by Facebook in other ways). Facebook also uses event data for the purposes of security, protection, development and research. Many of these data are transmitted to Facebook via cookies. Cookies are little text files, that are used for storing data or information in browsers. Depending on the tools used, and on whether you are a Facebook member, a different number of cookies are placed in your browser. In the descriptions of the individual Facebook tools we will go into more detail on Facebook cookies. You can also find general information about the use of Facebook cookies at https://www.facebook.com/policies/cookies.


How long and where are the data stored?


Facebook fundamentally stores data, until they are no longer of use for their own services and products. Facebook has servers for storing their data all around the world. However, customer data is cleared within 48 hours after they have been matched with their own user data.


How can I erase my data or prevent data retention?


In accordance with the General Data Protection Regulation (GDPR) you have the right of information, rectification, transfer and deletion of your data.


The collected data is only fully deleted, when you delete your entire Facebook account. Deleting your Facebook account works as follows:


1) Click on settings in the top right side in Facebook.


2) Then, click “Your Facebook information“ in the left column.


3) Now click on “Deactivation and deletion”.


4) Choose “Permanently delete account“ and then click on “Continue to account deletion“.


5) Enter your password, click on “continue“ and then on “Delete account“.

 

The retention of data Facebook receives via our site is done via cookies (e.g. with social plugins), among others. You can deactivate, clear or manage both all and individual cookies in your browser. How this can be done differs depending on the browser you use. The following instructions show, how to manage cookies in your browser:


Chrome: Clear, enable and manage cookies in Chrome


Safari: Manage cookies and website data in Safari


Firefox: Clear cookies and site data in Firefox


Internet Explorer: Delete and manage cookies


Microsoft Edge: Delete cookies in Microsoft Edge


If you generally do not want to allow any cookies at all, you can set up your browser to notify you whenever a cookie is about to be set. This gives you the opportunity to decide upon the permission or deletion of every single cookie.


Legal basis


If you have consented to your data being processed and stored by integrated Facebook tools, this consent is the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Generally, your data is also stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) to maintain fast and good communication with you or other customers and business partners. Nevertheless, we only use these tools if you have given your consent. Most social media platforms also set cookies on your browser to store data. We therefore recommend you to read our privacy policy about cookies carefully and to take a look at the privacy policy or Facebook’s cookie policy.


Facebook also processes data in the USA, among other countries. We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks to the legality and security of data processing.


Facebook uses standard contractual clauses approved by the EU Commission as basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway and especially in the USA) or data transfer there (= Art. 46, paragraphs 2 and 3 of the GDPR). These clauses oblige Facebook to comply with the EU‘s level of data protection when processing relevant data outside the EU. These clauses are based on an implementing order by the EU Commission. You can find the order and the clauses here:

https://ec.europa.eu/commission/presscorner/detail/en/ip_21_2847


We hope we could give you an understanding of the most important information about the use of

Facebook tools and data processing. If you want to find out more on how Facebook use your data, we recommend reading the data policies at https://www.facebook.com/about/privacy/update.

 

Facebook Login Privacy Policy


We integrated the convenient Facebook Login to our website. With it, you can easily log into our site with your Facebook account, without having to create a new user account. If you decide to register via the Facebook Login, you will be redirected to the social media network Facebook. There, you can log in with your Facebook user data. By using this method to log in, data on you and your user behaviour is stored and transmitted to Facebook.


To save the data, Facebook uses various cookies. In the following we will show you the most significant cookies that are placed in your browser or that already exist when you log into our site via the Facebook Login:


Name: fr

Value: 0jieyh4c2GnlufEJ9..Bde09j…1.0.Bde09j

Purpose: This cookie is used to make the social plugin function optimally on our website.

Expiry date: after 3 months


Name: datr

Value: 4Jh7XUA2311954459SEmPsSfzCOO4JFFl

Purpose: Facebook sets the “datr” cookie, when a web browser accesses facebook.com. The cookie helps to identify login activities and protect users.

Expiry date: after 2 years


Name: _js_datr

Value: deleted

Purpose: Facebook sets this session cookie for tracking purposes, even if you do not have a

Facebook account or are logged out.

Expiry date: after the end of the session


Note: The cookies we stated are only a small range of the cookies which are available to Facebook. Other cookies include for example _ fbp, sb or wd. It is not possible to disclose an exhaustive list, since Facebook have a multitude of cookies at their disposal which they use in variation.


On the one hand, Facebook Login enables a fast and easy registration process. On the other hand, it gives us the opportunity to share data with Facebook. In turn, we can customise our offer and advertising campaigns better to your needs and interests. The data we receive from Facebook by this means, is public data such as


your Facebook name your profile picture

your stored email address friends lists

button clicks (e.g. “Like“ button)

date of birth language

place of residence

 

In return, we provide Facebook with information about your activities on our website. These include information on the terminal device you used, which of our subpages you visit, or what products you have bought from us.


By using Facebook Login, you agree to the data processing. You can terminate this agreement anytime. If you want to learn more about Facebook’s data processing, we recommend you to read Facebook’s Data Policy at https://www.facebook.com/policy.php.


If you are registered with Facebook, you can change your advertisement settings anytime at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.


Facebook Social Plugins Privacy Policy


We installed so-called social plugins from Facebook Inc. to our website. You can recognise these buttons by the classic Facebook logo, the “Like” button (hand with raised thumb) or by a “Facebook plugin” label. A social plugin is a small part of Facebook that is integrated into our page. Each plugin has its own function. The most used functions are the well-known “Like” and “Share” buttons.

Facebook offers the following social plugins: 

“Save” button

“Like” button, Share, Send and Quote

Page plugin Comments Messenger plugin

Embedded posts and video player

Group Plugin


At https://developers.facebook.com/docs/plugins you will find more information on how the

individual plugins are used. On the one hand, we use the social plug-ins to offer you a better user experience on our site, and on the other hand because Facebook can optimise our advertisements with it.


If you have a Facebook account or have already visited facebook.com, Facebook has already placed at least one cookie in your browser. In this case, your browser sends information to Facebook via this cookie as soon as you visit our website or interact with social plugins (e.g. the “Like” button).


The received information will be deleted or anonymised within 90 days. According to Facebook, this data includes your IP address, the websites you have visited, the date, time and other information relating to your browser.


In order to prevent Facebook from collecting much data and matching it with your Facebook data during your visit to our website, you must log out of Facebook while you visit our website.


If you are not logged in to Facebook or do not have a Facebook account, your browser sends less information to Facebook because you have fewer Facebook cookies. Nevertheless, data such as your IP address or which website you are visiting can be transmitted to Facebook. We would like to explicitly point out that we do not know what exact data is collected. However, based on our current knowledge, we want to try informing you as best we can about data processing. You can also read about how Facebook uses the data in the company’s data policy at https://www.facebook.com/about/privacy/update.


At least the following cookies are set in your browser when you visit a website with social plugins from Facebook:


Name: dpr

Value: no information

Purpose:This cookie is used to make the social plugins work on our website.

Expiry date: after end of session


Name: fr

Value: 0jieyh4311954459c2GnlufEJ9..Bde09j…1.0.Bde09j

Purpose:The cookie is also necessary for the plugins to function properly

Expiry date: after 3 months


Note: These cookies were set after our test and may be placed even if you are not a Facebook member.


If you are registered with Facebook, you can change your settings for advertisements yourself at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. If you are not a Facebook user, you can go to https://www.youronlinechoices.com/uk/your-ad-choices/ and manage your usage-based online advertising. There you have the option to deactivate or activate providers.


If you want to learn more about Facebook’s data protection, we recommend the company’s own data policies at https://www.facebook.com/policy.php.


Cookie Consent Management Platform


Cookie Consent Management Platform Overview

Affected parties: Website visitors

Purpose: Obtaining and managing consent to certain cookies and thus the use of certain tools

Processed data: data for managing cookie settings such as IP address, time of consent, type

of consent and individual consent. You can find more details on this directly with the tool that is being used.

Storage period: depends on the tool used, periods of several years can be assumed

Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)


What is a cookie consent management platform?


We use a Consent Management Platform (CMP) software on our website that makes it easier for us and you to handle the scripts and cookies used correctly and securely. The software automatically creates a cookie pop-up, scans and controls all scripts and cookies, provides you with the cookie consent required under data protection law and helps you and us to keep track of all cookies. Most cookie consent management tools identify and categorize all existing cookies. As a website visitor, you then decide for yourself whether and which scripts and cookies you allow or not. The following graphic shows the relationship between browser, web server and CMP.


Why do we use a cookie management tool?


Our goal is to offer you the best possible transparency in the area of data protection. We are also legally obliged to do so. We want to inform you as well as possible about all tools and all cookies that can save and process your data. It is also your right to decide for yourself which cookies you accept and which you do not. In order to grant you this right, we first need to know exactly which cookies actually landed on our website. Thanks to a cookie management tool, which regularly scans the website for all cookies present, we know about all cookies and can provide you with GDPR- compliant information. You can then use the consent system to accept or reject cookies.


Which data are processed?


As part of our cookie management tool, you can manage each individual cookie yourself and have complete control over the storage and processing of your data. The declaration of your consent is stored so that we do not have to ask you every time you visit our website and we can also prove your consent if required by law. This is saved either in an opt-in cookie or on a server. The storage time of your cookie consent varies depending on the provider of the cookie management tool. Usually this data (e.g. pseudonymous user ID, time of consent, detailed information on the cookie categories or tools, browser, device information) is stored for up to two years.


Duration of data processing


We will inform you below about the duration of the data processing if we have further information. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. Data stored in cookies are stored for different lengths of time. Some cookies are deleted after you leave the website, others may be stored in your browser for a few years. The exact duration of the data processing depends on the tool used, in most cases you should be prepared for a storage period of several years. In the respective data protection declarations of the individual providers, you will usually receive precise information about the duration of the data processing.


Right of objection


You also have the right and the option to revoke your consent to the use of cookies at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, deactivating or deleting cookies in your browser.


Information on special cookie management tools can be found – if available – in the following sections.


Legal basis


If you agree to cookies, your personal data will be processed and stored via these cookies. If we are allowed to use cookies with your consent (Article 6 paragraph 1 lit. a GDPR), this consent is also the legal basis for the use of cookies and the processing of your data. In order to be able to manage the consent to cookies and to enable you to give your consent, a cookie consent management platform software is used. The use of this software enables us to operate the website in an efficient and legally compliant manner, which is a legitimate interest (Article 6 paragraph 1 lit. f GDPR).


AdSimple Cookie Manager Privacy Policy


AdSimple Cookie Manager Privacy Policy Overview

Affected parties: Website visitors

Purpose: Obtaining consent to certain cookies and thus the use of certain tools

Processed data: data for managing cookie settings such as IP address, time of consent, type of consent and individual consent. You can find more details on this under in the privacy policy below.

Storage period: the used cookie expires after one year

Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)


What is the AdSimple Cookie Manager?


On our website we use the AdSimple Cookie Manager of the software development and online marketing company AdSimple GmbH, Fabriksgasse 20, 2230 Gänserndorf, Austria. The AdSimple Cookie Manager offers us, among other things, the opportunity to provide you with a cookie notice that is comprehensive and compliant with data protection laws. This gives you the opportunity to decide which cookies you want to allow or deny. By using this software, data is sent from you to AdSimple, where it is stored. In this privacy policy we inform you on why we use the AdSimple Cookie Manager, which data is transferred and stored and how you can prevent this data transfer.


The AdSimple Cookie Manager is a software that scans our website to identify and categorise all existing cookies. Additionally, you as the website visitor will be informed on the use of cookies via a cookie notice script. Then you can decide yourself which cookies you want to allow or deny.


Why do we use the AdSimple Cookie Manager on your website?


We want to offer you maximum transparency when it comes to data protection. Before we can do so, we need to exactly determine which cookies have ended up on our website over time. Since the AdSimple cookie manager regularly scans our website and locates all cookies, we have full control over these cookies and can therefore act in compliance with the GDPR. This enables us to inform you precisely on the use of cookies on our website.

Moreover, you will always receive an up-to-date cookie notice that is data-protection compliant. This enables you to decide yourself which cookies you want to allow or deny via the checkbox system.


Which data are stored by the AdSimple Cookie Manager?


If you agree to cookies on our website, AdSimple Cookie Manager will set the following cookie:


Name: acm_status

Value: “:true,”statistics”:true,”marketing”:true,”socialmedia”:true,”settings”:true}

Porpose: This cookie saves the status of your consent. This enables our website to read and adhere to the latest status, even during future visits.

Expiry date: after one year


How long and where are the data stored?


All data collected by the AdSimple Cookie Manager is transferred and stored exclusively within the European Union. The collected data is stored on the AdSimple servers at Hetzner GmbH in Germany. Therefore, only AdSimple GmbH and Hetzner GmbH have access to the data.


How can I erase my data or prevent data retention?


You have the right to access and delete your personal data at any time. You can prevent data collection and storage by for example rejecting the use of cookies via the cookie notification script. Another option to prevent data processing or to manage it according to your wishes is your browser. Depending on the browser you use, managing cookies differs slightly. Below you will find links to the instructions for the most common browsers:


Chrome: Clear, enable and manage cookies in Chrome


Safari: Manage cookies and website data in Safari


Firefox: Clear cookies and site data in Firefox


Internet Explorer: Delete and manage cookies


Microsoft Edge: Delete cookies in Microsoft Edge

 

Legal basis


If you agree to cookies, your personal data will be processed and stored via these cookies. If we are allowed to use cookies with your consent (Article 6 (1) (a) GDPR), this consent is also the legal basis for the use of cookies and the processing of your data. The AdSimple Cookie Manager is used to manage your consent to cookies and to enable you to give your consent. The use of this software enables us to operate the website in an efficient and legally compliant manner, which is a legitimate interest (Article 6 (1) lit.f GDPR).


We hope we were able to provide you with a good overview of data traffic and data processing by AdSimple Cookie Manager. If you want to learn more about this tool, we recommend the description page at https://www.adsimple.at/adsimple-cookie-manager/.


Audio & Video


Audio & Video Privacy Policy Overview Affected parties: website visitors Purpose: service optimisation

Processed data: Data such as contact details, user behaviour, device information and IP addresses can be stored.

You can find more details in the Privacy Policy below.

Storage period: data are retained for as long as necessary for the provision of the service

Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)


What are audio and video elements?


We have integrated audio and video elements to our website. Therefore, you can watch videos or listen to music/podcasts directly via our website. This content is delivered by service providers and is obtained from the respective providers’ servers.


Audio and video elements are integrated functional elements of platforms such as YouTube, Vimeo or Spotify. It is usually free of charge to use these portals, but they can also contain paid content. With the integrated elements, you can listen to or view any of their content on our website.


If you use audio or video elements on our website, your personal data may get transmitted to as well as processed and retained by service providers.


Why do we use audio & video elements on our website?


We of course want to provide you with the best offer on our website. And we are aware that content is no longer just conveyed in text and static images. Instead of just giving you a link to a video, we offer you audio and video formats directly on our website. These are entertaining or informative, but ideally they are both. Our service therefore gets expanded and it gets easier for you to access interesting content. In addition to our texts and images, we thus also offer video and/or audio content.

 

Which data are retained by audio & video elements?


When you visit a page on our website with e.g. an embedded video, your server connects to the service provider’s server. Thus, your data will also be transferred to the third-party provider, where it will be stored. Certain data is collected and stored regardless of whether you have an account with the third party provider or not. This usually includes your IP address, browser type, operating system and other general information about your device. Most providers also collect information on your web activity. This e.g. includes the session duration, bounce rate, the buttons you clicked or information about the website you are using the service on. This data is mostly stored via cookies or pixel tags (also known as web beacons). Any data that is pseudonymised usually gets stored in your browser via cookies. In the respective provider’s Privacy Policy, you can always find more information on the data that is stored and processed.


Duration of data processing


You can find out exactly how long the data is stored on the third-party provider’s servers either in a lower point of the respective tool’s Privacy Policy or in the provider’s Privacy Policy. Generally, personal data is only processed for as long as is absolutely necessary for the provision of our services or products. This usually also applies to third-party providers. In most cases, you can assume that certain data will be stored on third-party providers’ servers for several years. Data can be retained for different amounts of time, especially when stored in cookies. Some cookies are deleted after you leave a website, while others may be stored in your browser for a few years.


Right to object


You also retain the right and the option to revoke your consent to the use of cookies or third-party providers at any time. This can be done either via our cookie management tool or via other opt-out functions. You can e.g. also prevent data retention via cookies by managing, deactivating or erasing cookies in your browser. The legality of the processing up to the point of revocation remains unaffected.


Since the integrated audio and video functions on our site usually also use cookies, we recommend you to also read our general Privacy Policy on cookies. You can find out more about the handling and storage of your data in the Privacy Policies of the respective third party providers.


Legal basis


If you have consented to the processing and storage of your data by integrated audio and video elements, your consent is considered the legal basis for data processing (Art. 6 Para. 1 lit. a GDPR). Generally, your data is also stored and processed on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in maintaining fast and good communication with you or other

customers and business partners. We only use the integrated audio and video elements if you have consented to it.

 

YouTube Privacy Policy


YouTube Privacy Policy Overview Affected parties: website visitors Purpose: optimising our service

Processed data: Data such as contact details, data on user behaviour, information about your device and IP address may be stored.

You can find more details on this in the privacy policy below.

Storage period: data are generally stored for as long as is necessary for the purpose of the service 

Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)


What is YouTube?


We have integrated YouTube videos to our website. Therefore, we can show you interesting videos directly on our site. YouTube is a video portal, which has been a subsidiary company of Google LLC since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that contains an embedded YouTube video, your browser automatically connects to the servers of YouTube or Google. Thereby, certain data are transferred (depending on the settings). Google is responsible for YouTube’s data processing and therefore Google’s data protection applies.


In the following we will explain in more detail which data is processed, why we have integrated YouTube videos and how you can manage or clear your data.


On YouTube, users can watch, rate, comment or upload videos for free. Over the past few years, YouTube has become one of the most important social media channels worldwide. For us to be able to display videos on our website, YouTube provides a code snippet that we have integrated to our website.


Why do we use YouTube videos on our website?


YouTube is the video platform with the most visitors and best content. We strive to offer you the best possible user experience on our website, which of course includes interesting videos. With the help of our embedded videos, we can provide you other helpful content in addition to our texts and images. Additionally, embedded videos make it easier for our website to be found on the Google search engine. Moreover, if we place ads via Google Ads, Google only shows these ads to people who are interested in our offers, thanks to the collected data.


What data is stored by YouTube?


As soon as you visit one of our pages with an integrated YouTube, YouTube places at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, by using cookies YouTube can usually associate your interactions on our website with your profile. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your Internet provider. Additional data can include contact details, potential ratings, shared content via social media or YouTube videos you added to your favourites.


If you are not logged in to a Google or YouTube account, Google stores data with a unique identifier linked to your device, browser or app. Thereby, e.g. your preferred language setting is maintained. However, many interaction data cannot be saved since less cookies are set.


In the following list we show you cookies that were placed in the browser during a test. On the one hand, we show cookies that were set without being logged into a YouTube account. On the other hand, we show you what cookies were placed while being logged in. We do not claim for this list to be exhaustive, as user data always depend on how you interact with YouTube.


Name: YSC

Value: b9-CV6ojI5Y311954459-1

Purpose: This cookie registers a unique ID to store statistics of the video that was viewed.

Expiry date: after end of session


Name: PREF

Value: f1=50000000

Purpose: This cookie also registers your unique ID. Google receives statistics via PREF on how you use YouTube videos on our website.

Expiry date: after 8 months


Name: GPS

Value: 1

Purpose: This cookie registers your unique ID on mobile devices to track GPS locations.

Expiry date: after 30 minutes


Name: VISITOR_INFO1_LIVE

Value: 95Chz8bagyU

Purpose: This cookie tries to estimate the user’s internet bandwith on our sites (that have built-in

YouTube videos).

Expiry date: after 8 months


Further cookies that are placed when you are logged into your YouTube account:


Name: APISID

Value: zILlvClZSkqGsSwI/AU1aZI6HY7311954459-

Purpose: This cookie is used to create a profile on your interests. This data is then used for personalised advertisements.

Expiry date: after 2 years


Name: CONSENT

Value: YES+AT.de+20150628-20-0

Purpose: The cookie stores the status of a user’s consent to the use of various Google services.

 

CONSENT also provides safety measures to protect users from unauthorised attacks.

Expiry date: after 19 years


Name: HSID

Value: AcRwpgUik9Dveht0I

Purpose: This cookie is used to create a profile on your interests. This data helps to display customised ads.

Expiry date: after 2 years


Name: LOGIN_INFO

Value: AFmmF2swRQIhALl6aL…

Purpose: This cookie stores information on your login data.

Expiry date: after 2 years


Name: SAPISID

Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM

Purpose: This cookie identifies your browser and device. It is used to create a profile on your interests.

Expiry date: after 2 years


Name: SID

Value: oQfNKjAsI311954459-

Purpose: This cookie stores your Google Account ID and your last login time, in a digitally signed and encrypted form.

Expiry date: after 2 years


Name: SIDCC

Value: AN0-TYuqub2JOcDTyL

Purpose: This cookie stores information on how you use the website and on what advertisements you may have seen before visiting our website.

Expiry date: after 3 months


How long and where is the data stored?


The data YouTube receive and process on you are stored on Google’s servers. Most of these servers are in America. At https://www.google.com/about/datacenters/inside/locations/?hl=en you can see where Google’s data centres are located. Your data is distributed across the servers. Therefore, the data can be retrieved quicker and is better protected against manipulation.


Google stores collected data for different periods of time. You can delete some data anytime, while other data are automatically deleted after a certain time, and still other data are stored by Google for a long time. Some data (such as elements on “My activity”, photos, documents or products) that are saved in your Google account are stored until you delete them. Moreover, you can delete some data associated with your device, browser, or app, even if you are not signed into a Google Account.

 

How can I erase my data or prevent data retention?


Generally, you can delete data manually in your Google account. Furthermore, in 2019 an automatic deletion of location and activity data was introduced. Depending on what you decide on, it deletes stored information either after 3 or 18 months.


Regardless of whether you have a Google account or not, you can set your browser to delete or deactivate cookies placed by Google. These settings vary depending on the browser you use. The following instructions will show how to manage cookies in your browser:


Chrome: Clear, enable and manage cookies in Chrome


Safari: Manage cookies and website data in Safari


Firefox: Clear cookies and site data in Firefox


Internet Explorer: Delete and manage cookies


Microsoft Edge: Delete cookies in Microsoft Edge


If you generally do not want to allow any cookies, you can set your browser to always notify you

when a cookie is about to be set. This will enable you to decide to either allow or permit each individual cookie.


Legal basis


If you have consented processing and storage of your data by integrated YouTube elements, this consent is the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Generally, your data is also stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) to maintain fast and good communication with you or other customers and business partners. Nevertheless, we only use integrated YouTube elements if you have given your consent. YouTube also sets cookies in your browser to store data. We therefore recommend you to read our privacy policy on cookies carefully and to take a look at the privacy policy or the cookie policy of the respective service provider.


YouTube also processes data in the USA, among other countries. We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks to the legality and security of the data processing.


YouTube uses standard contractual clauses approved by the EU Commission (= Art. 46, paragraphs 2 and 3 of the GDPR) as basis for data processing by recipients based in third countries (which are outside the European Union, Iceland, Liechtenstein and Norway) or for data transfer there. These clauses oblige YouTube to comply with the EU‘s level of data protection when processing relevant data outside the EU. These clauses are based on an implementing order by the EU Commission. You can find the order and the clauses here: https://ec.europa.eu/commission/presscorner/detail/en/ip_21_2847

 

Since YouTube is a subsidiary company of Google, Google’s privacy statement applies to both. If you want to learn more about how your data is handled, we recommend the privacy policy at https://policies.google.com/privacy?hl=en.


YouTube Subscribe Button Privacy Policy


We have integrated the YouTube subscribe button to our website, which you can recognise by the classic YouTube logo. The logo shows the words “Subscribe” or “YouTube” in white letters against a red background, with a white “Play” symbol on the left. The button may also be displayed in a different design.


Our YouTube channel consistently offers you funny, interesting or exciting videos. With the built-in “Subscribe” button you can subscribe to our channel directly via our website and do not need to go to YouTube’s website for it. With this feature, we want to make it as easy as possible for you to access our comprehensive content. Please note that YouTube may save and process your data.


If you see a built-in subscription button on our page, YouTube sets at least one cookie, according to Google. This cookie stores your IP address and our URL. It also allows YouTube to receive information about your browser, your approximate location and your default language. In our test the following four cookies were placed, without us being logged into YouTube:


Name: YSC

Value: b9-CV6ojI5311954459Y

Purpose: This cookie registers a unique ID, which stores statistics of the viewed video.

Expiry date: after end of session


Name: PREF

Value: f1=50000000

Purpose:This cookie also registers your unique ID. Google uses PREF to get statistics on how you interact with YouTube videos on our website.

Expiry date: after 8 months


Name: GPS

Value: 1

Purpose:This cookie registers your unique ID on mobile devices to track your GPS location.

Expiry date: after 30 minutes


Name: VISITOR_INFO1_LIVE

Value: 31195445995Chz8bagyU

Purpose: This cookie tries to estimate the user’s internet bandwith on our website (that contain built-in YouTube video).

Expiry date: after 8 months


Note: These cookies were set after a test, thus we do not claim for the list to be exhaustive. If you are logged into your YouTube account, YouTube may store many of the actions and

 

interactions you make on our website via cookies, to then assign them to your YouTube account. This gives YouTube information on e.g. how long you have been browsing our website, which browser type you use, which screen resolution you prefer or what actions you take.


On the one hand, YouTube uses this data to improve its own services and offers, and on the other hand to provide analyses and statistics for advertisers (who use Google Ads).


Google Fonts Privacy Policy


Google Fonts Privacy Policy Overview Affected parties: website visitors 

Purpose: service optimisation

Processed data: data such as IP address, CSS and font requests

You can find more details on this in the Privacy Policy below.

Storage period: Google stores font files for one year

Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)


What are Google Fonts?


On our website we use Google Fonts, by the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).


To use Google Fonts, you must log in and set up a password. Furthermore, no cookies will be saved in your browser. The data (CSS, Fonts) will be requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, all requests for CSS and fonts are fully separated from any other Google services. If you have a Google account, you do not need to worry that your Google account details are transmitted to Google while you use Google Fonts. Google records the use of CSS (Cascading Style Sheets) as well as the utilised fonts and stores these data securely. We will have a detailed look at how exactly the data storage works.


Google Fonts (previously Google Web Fonts) is a directory with over 800 fonts that Google provides its users free of charge.


Many of these fonts have been published under the SIL Open Font License license, while others have been published under the Apache license. Both are free software licenses.


Why do we use Google Fonts on our website?


With Google Fonts we can use different fonts on our website and do not have to upload them to our own server. Google Fonts is an important element which helps to keep the quality of our website high. All Google fonts are automatically optimised for the web, which saves data volume and is an advantage especially for the use of mobile terminal devices. When you use our website, the low data size provides fast loading times. Moreover, Google Fonts are secure Web Fonts. Various image synthesis systems (rendering) can lead to errors in different browsers, operating systems and mobile terminal devices. These errors could optically distort parts of texts or entire websites. Due to the fast Content Delivery Network (CDN) there are no cross-platform issues with Google Fonts. All common browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) are supported by Google Fonts, and it reliably operates on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We also use Google Fonts for presenting our entire online service as pleasantly and as uniformly as possible.


Which data is stored by Google?


Whenever you visit our website, the fonts are reloaded by a Google server. Through this external cue, data gets transferred to Google’s servers. Therefore, this makes Google recognise that you (or your IP-address) is visiting our website. The Google Fonts API was developed to reduce the usage, storage and gathering of end user data to the minimum needed for the proper depiction of fonts. What is more, API stands for „Application Programming Interface“ and works as a software data intermediary.


Google Fonts stores CSS and font requests safely with Google, and therefore it is protected. Using its collected usage figures, Google can determine how popular the individual fonts are. Google publishes the results on internal analysis pages, such as Google Analytics. Moreover, Google also utilises data of ist own web crawler, in order to determine which websites are using Google fonts. This data is published in Google Fonts’ BigQuery database. Enterpreneurs and developers use Google’s webservice BigQuery to be able to inspect and move big volumes of data.


One more thing that should be considered, is that every request for Google Fonts automatically transmits information such as language preferences, IP address, browser version, as well as the browser’s screen resolution and name to Google’s servers. It cannot be clearly identified if this data is saved, as Google has not directly declared it.


How long and where is the data stored?


Google saves requests for CSS assets for one day in a tag on their servers, which are primarily located outside of the EU. This makes it possible for us to use the fonts by means of a Google stylesheet. With the help of a stylesheet, e.g. designs or fonts of a website can get changed swiftly and easily.


Any font related data is stored with Google for one year. This is because Google’s aim is to fundamentally boost websites’ loading times. With millions of websites referring to the same fonts, they are buffered after the first visit and instantly reappear on any other websites that are visited thereafter. Sometimes Google updates font files to either reduce the data sizes, increase the language coverage or to improve the design.


How can I erase my data or prevent it being stored?


The data Google stores for either a day or a year cannot be deleted easily. Upon opening the page this data is automatically transmitted to Google. In order to clear the data ahead of time, you have to contact Google’s support at https://support.google.com/?hl=en-GB&tid=311954459. The only way for you to prevent the retention of your data is by not visiting our website.

 

Unlike other web fonts, Google offers us unrestricted access to all its fonts. Thus, we have a vast sea of font types at our disposal, which helps us to get the most out of our website. You can find out more answers and information on Google Fonts at https://developers.google.com/fonts/faq?tid=311954459. While Google does address relevant elements on data protection at this link, it does not contain any detailed information on data retention.

It proofs rather difficult to receive any precise information on stored data by Google.


Legal basis


If you have consented to the use of Google Fonts, your consent is the legal basis for the corresponding data processing. According to Art. 6 Paragraph 1 lit. a GDPR (Consent) your consent is the legal basis for the processing of personal data, as can occur when it is processed by Google Fonts.


We also have a legitimate interest in using Google Font to optimise our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use Google Font if you have given your consent to it.


Google also processes data in the USA, among other countries. We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks to the legality and security of data processing.


Google uses standard contractual clauses approved by the EU Commission as basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway and especially in the USA) or data transfer there (= Art. 46, paragraphs 2 and 3 of the GDPR). These clauses oblige Google to comply with the EU‘s level of data protection when processing relevant data outside the EU. These clauses are based on an implementing order by the EU Commission. You can find the order and the clauses here:

https://ec.europa.eu/commission/presscorner/detail/en/ip_21_2847


You can find more information on which data is generally retained by Google and what this data is

used at https://policies.google.com/privacy?hl=en-GB.


Google Fonts Local Privacy Policy


On our website we use Google Fonts, by the company Google Inc. The responsible entity for the European area is Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland). We have integrated Google fonts locally, i.e. on our web server and not on Google’s servers. This means that no connection to Google’s servers and therefore no data transfer or retention take place.


What are Google Fonts?


Google Fonts was previously called Google Web Fonts. It is an interactive list with over 800 fonts which Google offer for free use. With the use of Google Fonts, it is possible to utilise fonts without uploading them to your own server. In order to prevent any transfer of information to Google’s servers, we downloaded the fonts to our own server. This way we can comply with data privacy and do not transmit any data to Google Fonts.


All texts are copyrighted.

Sets a technical cookie that records that you refuse consent.  

It will not be asked again.

Removes the consent cookie from your browser.

OK

By using this site you agree to our Terms Of Use.

At the bottom of these you can find a possibility to
remove the consent cookie from your browser.