1. Data Protection Overview

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can personally identify you. For detailed information on data protection, please refer to our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the website’s legal notice (Imprint).

How do we collect your data?

On one hand, your data is collected when you provide it to us. This can include data you enter into a contact form, for example.

Other data is automatically collected by our IT systems when you visit the website. This includes technical data (e.g., the browser you are using, the operating system, or the time of access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior.

What are your rights regarding your data?

You have the right to obtain information about the origin, recipient, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time with future effect. You also have the right, under certain circumstances, to request the restriction of processing your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For this and any further questions regarding data protection, you can contact us at any time using the address provided in the legal notice.

Analysis-Tools And Third-Party Tools

When you visit this website, your surfing behavior can be statistically evaluated. This happens primarily with so-called analysis programs.

Detailed information about these analysis programs can be found in the following data privacy policy.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (Host). Personal data collected on this website is stored on the servers of the host. This can include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated through a website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 (1) lit. f GDPR).

Our host will only process your data as far as it is necessary to fulfill its performance obligations and follow our instructions regarding this data.

Contract for Data Processing

To ensure data protection-compliant processing, we have concluded a data processing agreement with our host.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

Notice Regarding the Data Controller

The data controller responsible for processing data on this website is:

ELORIA GmbH
Michael Bierhahn
Chausseestraße 52
10115 Berlin
Phone: 020415670666
Email: mail@eloria.de

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right, at any time, to object to the processing of your personal data for reasons related to your particular situation; this also applies to profiling based on these provisions. The legal basis for processing can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims (objection under Art. 21 para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21 para. 2 GDPR).

Right to file a complaint with the competent supervisory authority

In the event of violations of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, either in a commonly used, machine-readable format or to request the transfer of this data to another controller, where technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Encrypted payments on this website

If, after the conclusion of a contract that requires payment, there is an obligation to send us your payment information (e.g., account number for direct debit), this data will be required for payment processing.

Payment transactions using common means of payment (Visa/MasterCard, direct debit) are only processed via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.

With encrypted communication, your payment details cannot be read by third parties.

Information, deletion, and correction

Within the scope of applicable legal provisions, you have the right to obtain information at any time about your stored personal data, its origin, recipients, and the purpose of data processing, and, if applicable, a right to have this data corrected or deleted. For this purpose, as well as for further questions regarding personal data, you can contact us at any time via the address provided in the imprint.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. You can contact us for this at any time via the address provided in the imprint. The right to restrict processing applies in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of erasure.
• If we no longer need your personal data, but you need it to exercise, defend, or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection under Art. 21 para. 1 GDPR, a balancing of your and our interests must be carried out. As long as it is not yet determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Objection to advertising emails

We hereby object to the use of contact data published in the context of the imprint obligation for sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as through spam emails.

4. Data Collection on This Website

Cookies

Our websites use “cookies.” Cookies are small text files that do not harm your device. They are either temporarily stored on your device for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Some cookies may also be stored on your device by third-party companies when you visit our site (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary since certain website functions would not work without them (e.g., the shopping cart function or displaying videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies necessary for the electronic communication process (necessary cookies), for providing certain functions you wish to use (functional cookies, e.g., for the shopping cart function), or for optimizing the website (e.g., cookies to measure web traffic) are stored based on Art. 6 para. 1 lit. f GDPR, unless a different legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized delivery of its services. If consent for storing cookies is requested, the relevant cookies will be stored exclusively based on this consent (Art. 6 para. 1 lit. a GDPR); this consent can be withdrawn at any time.

You can configure your browser to inform you about the setting of cookies and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies in certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

If third-party cookies or cookies for analytical purposes are used, we will inform you about this separately within this privacy policy and, if necessary, request your consent.

Cookies & Cookie Group Overview

Cookie Consent with Borlabs Cookie

Cookie Consent with Borlabs Cookie
Our website uses the Borlabs Cookie Consent technology to obtain your consent for storing certain cookies in your browser and to document this consent in a data protection-compliant manner. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as “Borlabs”).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. These data are not passed on to the provider of Borlabs Cookie.

The data collected will be stored until you request us to delete them, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. For more details on Borlabs Cookie data processing, please refer to https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

The use of Borlabs Cookie Consent technology is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Edit Privacy Settings

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

These data are not merged with other data sources.

The collection of these data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website—this requires the collection of server log files.

Contact Form

When you submit inquiries to us via the contact form, the information you provide in the inquiry form, including your contact details, will be stored by us for the purpose of processing the inquiry and for any follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is required for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries directed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this was requested.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions, especially retention periods, remain unaffected.

Zapier

We have integrated Zapier on this website. The provider is Zapier Inc., Market St. #62411, San Francisco, CA 94104-5401, USA (hereinafter referred to as “Zapier”).

Zapier allows us to link various functionalities, databases, and tools with our website and synchronize them with each other. This way, it is possible, for example, to automatically publish content on our social media channels or export data from marketing and analytics tools. Depending on the functionality, Zapier may also collect various personal data, such as the information from your inquiry submitted via one of our contact forms. This personal data is processed solely for transmission to other tools and is deleted after this purpose has been fulfilled. The data is additionally encrypted (SSL) when transmitted to Zapier.

The use of Zapier is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effectively integrating the tools used. If consent is requested, the processing will take place exclusively based on Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://zapier.com/tos.

Inquiries via Email, Telephone, or Fax

If you contact us via email, phone, or fax, your inquiry, including any personal data provided (name, inquiry), will be stored and processed by us for the purpose of addressing your request. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or required for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries submitted to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this was requested.

The data sent to us via contact inquiries will remain with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions – particularly statutory retention periods – remain unaffected.

5. Analysis Tools and Advertising

ClickCease

We use the service “ClickCease” provided by Karniboo Technologies Limited, Elifelet St. 26, 66080 Tel Aviv, Israel, on our website. The service is used to analyze and prevent click fraud concerning our Google ads. Click fraud occurs when clicks on ads are generated by automated tools or when multiple clicks on ads are likely not due to genuine user interest. ClickCease scans this data for suspicious behavior and may transmit any suspicious data to Google to protect us from click fraud. When analyzing with ClickCease, cookies are stored on your device, and the following personal data is collected and stored when clicking on ads:

• Browser type/browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

During this process, the collected data may be processed and stored outside the European Union. If the service detects suspicious behavior and suspects click fraud, this data may be transmitted to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data transfer to the USA may occur. The legal basis for using ClickCease is Art. 6(1)(f) GDPR. There is a legitimate interest in protecting against click fraud and avoiding financial damage caused by it. If the relevant consent is obtained, the data processing is based exclusively on the consent (Art. 6(1)(a) GDPR); this consent can be revoked at any time with future effect. You can configure your browser to notify you about the placement of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases, or generally exclude them, as well as activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited. Further information on ClickCease’s privacy policy can be found at: ClickCease Privacy Policy and Terms of Service.

Google Analytics

This website uses the functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In this process, the website operator receives various usage data, such as page views, duration of stay, operating systems used, and the user’s origin. This data may be compiled by Google into a profile, which is assigned to the respective user or their device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising. If the relevant consent is obtained (e.g., consent to the storage of cookies), processing is based exclusively on Art. 6(1)(a) GDPR; this consent can be revoked at any time.

IP Anonymization

We have enabled the IP anonymization feature on this website. This means that your IP address will be shortened by Google within member states of the European Union or other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: Google Opt-Out Plugin: https://tools.google.com/dlpage/gaoptout?hl=de.

More information on how Google handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement

We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic Data in Google Analytics

This website uses the demographic data function of Google Analytics to display relevant ads within the Google advertising network. Reports can be generated that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising by Google and visitor data from third parties. This data cannot be assigned to a specific individual. You can disable this feature at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as outlined in the section “Objection to Data Collection.”

Retention Period

User and event data stored by Google that is linked to cookies, user IDs (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. You can find more details at the following link: Data Retention – Google Analytics Help.

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can identify whether a user has completed certain actions. For instance, we can analyze which buttons on our website were clicked and which products were viewed or purchased most frequently. This information is used to generate conversion statistics. We receive the total number of users who clicked on our ads and the actions they performed. We do not receive any information that personally identifies the user. Google uses cookies or similar tracking technologies for identification purposes.

The use of Google Conversion Tracking is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both their web offering and advertising. If consent has been requested (e.g., consent to store cookies), the processing will take place exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

For more information about Google Conversion Tracking, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Wistia

Our website uses plugins from the online video provider Wistia. Wistia is a service provided by Wistia, Inc., 17 Tudor Street, Cambridge, MA 02139, USA. When you access our website, a connection is established to the Wistia servers, and the plugin is displayed. This process transmits information to the Wistia server about which internet pages the user has visited and how long they watched a video. The integration of this service requires that Wistia can access the user’s IP address. The IP address is necessary to send the content to the user’s browser.

For more information about data privacy and the cookies used, please visit Wistia Privacy Policy. Wistia processes your personal data in the USA and is certified under the EU-US Privacy Shield: EU-US Privacy Shield.

Vidalytics

We have integrated Vidalytics videos into our online offerings, which are stored at Vidalytics and can be played directly from our website.

By using our services, Vidalytics receives information that you have accessed the corresponding subpage of our website. Furthermore, the data listed under Section 4 – Cookie & Cookie Groups Overview – of this privacy policy is transmitted. The legal basis for processing your data is Art. 6(1)(f) GDPR. Vidalytics stores this data for a period of 30 days, regardless of whether a user account is provided by Vidalytics that you are logged into or if no user account exists. If you are logged into Vidalytics, your data will be directly linked to your account. If you do not want this link to your profile on Vidalytics, you must log out before activating the button. Vidalytics may store your data as user profiles and use it for advertising, market research, and/or the demand-oriented design of its website. Such evaluations are carried out in particular (even for non-logged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, which you must address directly to Vidalytics.

For more information about the purpose and scope of data collection and processing by Vidalytics, as well as your rights and settings options for protecting your privacy, please refer to the Vidalytics Privacy Policy.

Vimeo

Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plugin, a connection is established to the Vimeo servers. This informs the Vimeo server which of our pages you have visited. Additionally, Vimeo obtains your IP address. This applies even if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, Vimeo allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.

For more information on how Vimeo handles user data, please refer to Vimeo’s privacy policy at: Vimeo Privacy Policy.

6. Newsletter

Newsletter Data

If you wish to subscribe to the newsletter offered on our website, we require an email address from you as well as information that allows us to verify that you are the owner of the provided email address and consent to receiving the newsletter. Any further data is collected only on a voluntary basis. This data will be used exclusively for sending the requested information and will not be shared with third parties.

The processing of data entered into the newsletter registration form is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the email address, and its use for sending the newsletter at any time, for instance, via the “unsubscribe” link in the newsletter. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data that has been stored for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest as per Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You can object to the storage if your interests outweigh our legitimate interest.

Brevo

This website uses Brevo for newsletter distribution. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Brevo is a service that helps organize and analyze newsletter distribution. The data you enter for the purpose of subscribing to the newsletter (e.g., email address) will be stored on Brevo’s servers.

Newsletters sent via Brevo enable us to analyze the behavior of newsletter recipients. For instance, it allows us to see how many recipients have opened the newsletter and how often particular links in the newsletter were clicked. All links in the email are so-called tracking links, which can track your clicks.

If you do not wish to be tracked by Brevo, you will need to unsubscribe from the newsletter. For this purpose, we provide a link in every newsletter. You can also revoke your consent at any time by sending an email to the address provided in our legal notice.

The data you provide for newsletter subscriptions will be stored until you unsubscribe and will be deleted from both our servers and the servers of Brevo after you unsubscribe. Data that has been stored for other purposes remains unaffected.

The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and not combined with other data. This serves both your interest and our interest in complying with legal requirements (legitimate interest according to Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to this storage if your interests outweigh our legitimate interest.

For more details, please refer to the privacy policy of Brevo: https://de.Brevo.com/legal/privacypolicy/.

Conclusion of a Data Processing Agreement

We have entered into a data processing agreement with Brevo, in which we require Brevo to protect our customers’ data and not to disclose it to third parties.

7. Plugins and Tools

YouTube with Enhanced Privacy

This website incorporates YouTube videos. The operator of these pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store information about visitors to this website before they watch the video. However, data transfer to YouTube partners is not necessarily excluded by the enhanced privacy mode. Thus, YouTube establishes a connection to the Google DoubleClick network regardless of whether you are watching a video.

Once you start a YouTube video on this website, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

In addition, after starting a YouTube video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g., device fingerprinting). This allows YouTube to gather information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts.

Additional data processing operations may be triggered after starting a YouTube video, over which we have no control.

The use of YouTube is in the interest of providing an appealing presentation of our online offerings. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively based on Art. 6(1)(a) GDPR; the consent can be revoked at any time.

Further information on YouTube’s data protection can be found in their privacy policy at: https://policies.google.com/privacy?hl=en.

Google Web Fonts

For a uniform representation of fonts, this page uses web fonts provided by Google. The Google Fonts are installed locally. No connection to Google servers takes place.

Further information about Google Web Fonts can be found at Google Web Fonts FAQ and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google Maps

This website uses the Google Maps service via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence over this data transmission.

The use of Google Maps is in the interest of providing an attractive presentation of our online offers and making it easier to find the places we indicate on the website. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively based on Art. 6(1)(a) GDPR; the consent can be revoked at any time.

For more information on how user data is handled, refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.

8. eCommerce and Payment Providers

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only to the extent necessary for the establishment, content-related structuring, or modification of the legal relationship (inventory data). This is done based on Art. 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. Personal data regarding the use of this website (usage data) is collected, processed, and used only to the extent necessary to enable the user to utilize the service or to bill the user.

Customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transmission Upon Conclusion of Contracts for Services and Digital Content

We transmit personal data to third parties only when this is necessary within the scope of contract execution, such as to the credit institution responsible for payment processing.

No further transmission of data will take place unless you have expressly consented to the transmission. Your data will not be transferred to third parties without your explicit consent, particularly for advertising purposes.

The legal basis for the processing of data is Art. 6(1)(b) GDPR, which permits the processing of data to fulfill a contract or for pre-contractual measures.

PayPal

On this website, we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).

If you choose payment via PayPal, the payment data you provide will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the fulfillment of a contract). You have the option to revoke your consent to the processing of data at any time. A revocation does not affect the validity of data processing operations carried out in the past.

9. Own Services

Handling of Applicant Data

We offer you the opportunity to apply with us (e.g., via email, by post, or through an online applicant form). Below, we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data will be in compliance with applicable data protection laws and all other legal provisions, and that your data will be treated with strict confidentiality.

Scope and Purpose of Data Collection

When you submit an application to us, we process your associated personal data (e.g., contact and communication details, application documents, notes taken during interviews, etc.) insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is Section 26 of the new German Federal Data Protection Act (BDSG-neu) (initiation of an employment relationship), Art. 6(1)(b) GDPR (general contract initiation), and – if consent has been given – Art. 6(1)(a) GDPR. Consent can be revoked at any time. Your personal data will only be shared within our company with individuals involved in processing your application.

If the application is successful, the data you submitted will be stored in our data processing systems for the purpose of carrying out the employment relationship, based on Section 26 BDSG-neu and Art. 6(1)(b) GDPR.

Data Retention Period

Data Retention Period
If we are unable to offer you a position, you decline an offer, or you withdraw your application, we reserve the right to retain the data you have provided based on our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the conclusion of the application process (rejection or withdrawal of the application). The data will then be deleted, and physical application documents will be destroyed. This retention serves as evidence in the event of a legal dispute. If it becomes apparent that the data will be needed beyond the 6-month period (e.g., due to a pending or anticipated legal dispute), the deletion will occur only once the purpose for further retention no longer applies.

A longer retention period may also occur if you have given your explicit consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.