Privacy Policy

Privacy Policy of NemoVote

The privacy policy of our NemoVote application can be found here.

Privacy Policy of this webpage

We, as the operator of the website at https://nemovote.com (also the "website"), are the controller within the meaning of applicable data protection law, in particular the General Data Protection Regulation ("GDPR"), for the personal data of the user ("you") of this website.

In the following, we inform you clearly within the scope of our information obligations (Art. 13 seqq. GDPR) about which data is processed when you visit our website and on which legal basis such processing is carried out. You will also receive information about the rights you have vis-à-vis us and the competent supervisory authority.

1. Information on the controller

NemoContra GmbH
Mörikestr. 25
71083 Herrenberg
Germany
info@nemovote.com

2. Informational use of our website

When you call up our website merely to visit it, so-called log files are automatically recorded by our system.

The following log files are processed automatically:

  • IP address of the requesting computer
  • Date and time of the request
  • Name and URL of the retrieved file
  • Referrer URL
  • Access Status/HTTP Status Code
  • Type of Internet browser used
  • Language of the Internet browser used
  • Version of the Internet browser used
  • Operating system

The log files contain your IP address and possibly other personal data. Therefore, an assignment to you is possible in principle. However, we only store your data temporarily and in particular not together with other personal data. The data is deleted as soon as you leave the website. The temporary processing and storage of the above-mentioned data is necessary to provide our website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in processing the data on the legal basis of Art. 6 (1) sentence 1 lit. f GDPR.

Website-Hosting:

Our website is operated on the servers of the provider netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, with server location in Germany. This means that the data we collect when you visit this website is stored by our hoster.

The legal basis for the processing of your personal data is Art. 6 (1) sentence 1 lit. f GDPR, as it is in our legitimate interest to use the services of a professional provider for the secure and efficient provision of our website. We have entered into a data processing agreement pursuant to Art. 28 GDPR with netcup.

3. Contact form / Feedback

3.1 Simple contact (on our homepage)

You can contact us electronically via the contact form on our homepage, e.g. to provide us with feedback, to send enquiries about the services we offer or to ask us general questions. If you use this option, you transmit the following data to us:

  • Your name or the name of your organisation (to address you and for abuse prevention purposes)
  • E-mail address (to contact you)
  • Your message to us
  • Information on how you became aware of us (optional)

The legal basis for the processing of your data for the purpose of processing your contact request is Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and the purpose of your contact request has been fully clarified.

If your contact request is aimed at concluding a contract with us, the additional legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. This data is stored for as long as it is required to fulfil the contract or pre-contractual measures. Beyond this, we only store your data in order to fulfil legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

In addition to the data you provide to us, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data is in our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in order to ensure the security of our systems and to prevent misuse. This data, which we also collect when you contact us, will be deleted as soon as it is no longer required, at the latest when your contact request has been fully clarified.

You can inform us at any time (see section 1 above) that we should delete the data provided during the conversation. In this case, all personal data from the conversation will be deleted, where permitted, and it will not be possible to continue the conversation.

3.2. Detailed contact form (on our contact page)

Alternatively, you can contact us electronically using the detailed contact form provided on our contact page, e.g. to provide us with feedback, send enquiries about the services we offer or ask us general questions. If you use this option, you transmit the following data to us:

  • Your name (to address you and for the purposes of abuse prevention)
  • the name of your company or organisation (to contact you and for abuse prevention purposes)
  • E-mail address (to contact you)
  • Data of your voting event (optional)
  • Number of voters (optional)
  • Type of event (one-off, regular, other)
  • Time/duration of the vote (real time, over a period of time, other)
  • Type of organisation (for-profit, non-profit, non-profit youth organisation)
  • Your message to us

The legal basis for the processing of your data for the purpose of processing your contact request is Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and the purpose of your contact request has been fully clarified.

If your contact request is aimed at concluding a contract with us, the additional legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. This data is stored for as long as it is required to fulfil the contract or pre-contractual measures. Beyond this, we only store your data in order to fulfil legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

In addition to the data you provide to us, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data is in our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in order to ensure the security of our systems and to prevent misuse. This data, which we also collect when you contact us, will be deleted as soon as it is no longer required, at the latest when your contact request has been fully clarified.

You can inform us at any time (see section 1 above) that we should delete the data provided during the conversation. In this case, all personal data from the conversation will be deleted, where permitted, and it will not be possible to continue the conversation.

4. Contact by e-mail

You have the option of contacting us by e-mail. Your personal data transmitted in this way will be stored by us. The data will be processed exclusively in order to properly handle your contact, whereby this corresponds to our legitimate interest. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the matter of your contact has been comprehensively clarified.

If your contact is aimed at concluding a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) sentence 1 lit. b GDPR. This data is stored for as long as it is required for the execution of the contract or the pre-contractual measures. Beyond that, we only store your data in order to comply with legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

You can inform us at any time (see point 1 above) that you would like us to delete the data provided during the conversation. In this case, all personal data of the conversation will be deleted, as far as permissible, and a continuation of the conversation is not possible.

5. Orders/registration

If you wish to place an order or register via our website, you will be redirected to our website https://book.nemovote.com. Information on how we process your personal data in connection with an order or registration can be found in the corresponding privacy policy.

6. Job applications

If you wish, you can send us your job application by e-mail. We process your data for the purpose of handling your application procedure, which means that your application will be viewed by the employees responsible for pre-selection. Your data will not be passed on to third parties and we will not use your data for other purposes.

Your application data will be stored by us. If we reject your application, we will only store the data for as long as necessary, for a maximum period of six months, unless you give us your consent to store the applicant data for longer in order to contact you after this period has expired. If you give us your consent for longer storage, we will delete your data at the latest as soon as one year has passed since the last application-related contact between you and us.

The legal basis for the processing of your data is Art. 88 para. 1 GDPR in conjunction with § 26 BDSG.

We use small icons and other links on our website that refer to our web presence on third-party platforms (Facebook, X (formerly Twitter), Instagram, LinkedIn and YouTube). These are hyperlinks, so no data is automatically transferred from you, but only when you click on the icons or the corresponding link and a new window opens in your browser with the website of the third-party provider. You can access the YouTube platform and our company presence there specifically by clicking on the corresponding hyperlinks that are displayed for the YouTube videos embedded on our website (see also the information on video integration in section 8.1).

7.1. Facebook-Page (formerly known as „Facebook Fanpage“)

We operate a so-called Facebook page on the social media platform Facebook (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (hereinafter: "Facebook")), which we link to on our website via the Facebook icon. As long as you do not click on the link, Meta will not receive any data from you. If you click on the link, for example to view our company presence on Facebook or to "like" our page, Meta will receive data from you (which data Meta receives also depends on whether you are logged in to Meta with your user profile while clicking on the page or not). Meta also uses so-called cookies, which are stored on your device when you visit our Facebook page even if you do not have your own Facebook profile or are not logged into it during your visit to our fan page. These cookies allow Meta to create user profiles based on your preferences and interests and to show you customised advertising (inside and outside Facebook). Cookies remain on your device until you delete them. You can find more information about the cookies used by Meta at https://www.facebook.com/policies/cookies

According to its own information, Meta uses this data for a wide variety of purposes and transmits it worldwide, both internally to other Meta companies and to various external partners. Meta bases this data processing on various legal bases, details of which can be found in Meta's privacy policy. The privacy policy can be found at the following link: https://www.facebook.com/policy.php

While Meta uses this data under its own responsibility for various purposes, we can only see aggregated data on our company website, i.e. statistics (e.g. user growth, user demographics, use of individual functionalities), which no longer have any personal reference. This data, which is called "page insights", is created on the basis of so-called "events" logged by Meta. An "event" can be, for example, the fact that someone has “liked” a certain post. As the website operator, we do not have access to the personal data that is processed as part of events, but only to the summarised page insights. Events that are used to create Page Insights do not store any IP addresses, cookie IDs or any other identifiers that are assigned to people or their devices, apart from a Facebook user ID for people logged into Facebook. You can find more information about Page Insights at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

In accordance with the provisions of the GDPR, we are jointly responsible with Meta for data processing on our Facebook page (Art. 26 GDPR). Accordingly, we have concluded an agreement with Meta provided by Meta in which this joint control is regulated. You can find the agreement at the following link https://www.facebook.com/legal/terms/page_controller_addendum

This means that Meta is primarily responsible for the aggregated Insight data. In addition, Meta will fulfil all obligations under the GDPR with regard to the processing of Insight data (including Art. 12, 13 GDPR, Art. 15-22 GDPR and Art. 32-34 GDPR). If you send us an enquiry regarding our Facebook page, we will inform Meta promptly. Meta will respond to the enquiry in accordance with our agreement.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and analysing and evaluating the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of § 25 (1) TTDSG or Art. 6 (1) sentence 1 lit. a GDPR.

If you use our Facebook fan page to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we process the data you provide exclusively to process your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and your contact request has been fully clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, as far as permitted, and it will not be possible to continue the conversation.

7.2. X (formerly known as Twitter)

We have a company presence on the social media portal X (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter referred to as "Twitter")), which we link to on our website via the Twitter icon. As long as you do not click on the link, Twitter will not receive any data from you. If you click on the link, for example to view our company presence on Twitter, Twitter will receive data from you (which data Twitter receives also depends on whether you are logged in to Twitter with your user profile while you click on the page or not). Twitter also uses so-called cookies, which are stored on your end device when you visit our company website, even if you do not have your own Twitter profile or are not logged into it during your visit to our company website. Among other things, these cookies allow Twitter to use tracking tools and display personalised advertising (inside and outside Twitter). Cookies remain on your end device until you delete them. You can find more information about the cookies used by Twitter at https://help.twitter.com/de/rules-and-policies/twitter-cookies

According to its own information, Twitter uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including recipients that are not located within the EU. Twitter relies on various legal bases for this data processing. You can find an overview of this in Twitter's privacy policy, which you can access at the following link: https://twitter.com/de/privacy

While Twitter uses this data under its own responsibility for various purposes, we can only see aggregated data on our company website, i.e. statistics (e.g. number of retweets and playback times for videos), which no longer have any personal reference. This data is analysed using the "Twitter Analytics" tool. You can find more information about the data on the corresponding Twitter information page under the following link: https://help.twitter.com/de/managing-your-account/using-the-tweet-activity-dashboard

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and analysing and evaluating the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of § 25 (1) TTDSG or Art. 6 (1) sentence 1 lit. a GDPR.

If you use our Twitter presence to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we process the data you provide exclusively to process your contact. The legal basis for the processing of your personal data in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and your contact request has been fully clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, as far as permissible, and it will not be possible to continue the conversation.

7.3. Instagram

We operate a company presence on the social media portal Instagram. The operator of Instagram is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, whereby the platforms Facebook and Instagram share the technical infrastructure according to their own information. In the following, the term "Instagram" is used for the social media portal and the term "Meta" for the operator of this portal.

On our website, we link to our company presence on Instagram using the Instagram icon. As long as you do not click on the link, Meta will not receive any data from you. If you click on the link, for example to view or subscribe to our company presence on Instagram, Meta will receive data from you (which data Meta receives also depends on whether you are logged in to Instagram with your user profile while clicking on the page or not). In addition, Meta uses so-called cookies, which are stored on your device when you visit our corporate website even if you do not have your own Instagram profile or are not logged into it during your visit to our corporate website. These cookies allow Meta to create user profiles based on your preferences and interests and to show you customised advertising (inside and outside Instagram). Cookies remain on your device until you delete them. You can find more information about the cookies used by Meta at https://help.instagram.com/1896641480634370?ref=ig

According to its own information, Meta uses this data for a wide variety of purposes and transmits it worldwide, both internally to other Meta companies and to various external partners. Meta bases this data processing on various legal bases, which you can find in detail in Instagram's privacy policy and Meta's data policy. You can find Instagram's privacy policy at the following link https://www.instagram.com/legal/privacy/ Meta's privacy policy, which also applies to Instagram, can be found at https://www.facebook.com/policy

While Meta uses this data under its own responsibility for various purposes, we can only see aggregated data on our company website, i.e. statistics (e.g. user growth, user demographics, use of individual functionalities) that no longer have any personal reference. These are called "Page Insights". You can find more information about Page Insights on the corresponding Meta information page, which relates to all Meta products (and therefore also to Instagram). You can access this information page at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

In accordance with the provisions of the GDPR, we are jointly responsible with Meta for data processing on our Instagram company website (Art. 26 GDPR). Accordingly, we have concluded an agreement with Meta provided by Meta in which this joint control is regulated. You can find the agreement at the following link https://www.facebook.com/legal/terms/page_controller_addendum

This means that Meta is primarily responsible for the aggregated Insight data. In addition, Meta will fulfil all obligations under the GDPR with regard to the processing of Insight Data (including Art. 12, 13 GDPR, Art. 15-22 GDPR and Art. 32-34 GDPR). If you send us an enquiry regarding our Instagram company presence, we will inform Meta promptly. Meta will respond to the enquiry in accordance with our agreement.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and analysing and evaluating the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular the setting of cookies), the processing is also carried out on the basis of § 25 (1) TTDSG or Art. 6 (1) sentence 1 lit. a GDPR.

If you use our Instagram page to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we will only process the data you provide in order to process your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and your contact request has been fully clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, as far as permitted, and it will not be possible to continue the conversation.

7.4. LinkedIn

We operate a website on the social media portal LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn")), which we link to on our website via the LinkedIn icon. As long as you do not click on the link, LinkedIn will not receive any data from you. If you click on the link, for example to view our website on LinkedIn, LinkedIn will receive data from you (which data LinkedIn receives also depends on whether you are logged in to LinkedIn with your user profile while you click on the page or not). LinkedIn also uses so-called cookies, which are stored on your end device when you visit our company website, even if you do not have your own LinkedIn profile or are not logged into it during your visit to our company website. These cookies allow LinkedIn to provide its own services, determine the performance of the services and display relevant adverts (including job advertisements) within and outside LinkedIn. Cookies remain on your device until you delete them. You can find more information about the cookies used by LinkedIn at https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy

According to its own information, LinkedIn uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including recipients who are not based in the EU. LinkedIn bases this data processing on various legal bases, which you can find in LinkedIn's privacy policy. The privacy policy can be found at the following link https://de.linkedin.com/legal/privacy-policy

While LinkedIn uses this data for various purposes under its own responsibility, we can only see aggregated data on our LinkedIn website, i.e. statistics that no longer have any personal reference. These are called "Page Insights". You can find more information on "Page Insights" on the corresponding LinkedIn information page at https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview?lang=en

In addition, if you decide to become a follower when you visit our LinkedIn website, we will also receive your name and your position in the company according to the information in your LinkedIn user profile, as well as the time at which you became our follower. https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview?lang=en

In accordance with the provisions of the GDPR, we are jointly responsible with LinkedIn for data processing on our LinkedIn website (Art. 26 GDPR). Accordingly, we have concluded an agreement with LinkedIn provided by LinkedIn in which this joint control is regulated. You can find the agreement at the following link https://legal.linkedin.com/pages-joint-controller-addendum

This means that LinkedIn is primarily responsible for the aggregated Insight data. In addition, LinkedIn will fulfil all obligations under the GDPR with regard to the processing of Insight data (including Art. 12 -22 GDPR and Art. 32-34 GDPR). If you send us an enquiry regarding our LinkedIn website, we will inform LinkedIn promptly. LinkedIn will respond to the enquiry in accordance with our agreement.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and analysing and evaluating the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular the setting of cookies), the processing is also carried out on the basis of § 25 (1) TTDSG or Art. 6 (1) sentence 1 lit. a GDPR

If you use our LinkedIn presence to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we will only process the data you provide in order to process your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and your contact request has been fully clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, as far as permissible, and it will not be possible to continue the conversation.

7.5. YouTube Channel

We operate a channel on the video sharing platform YouTube. The operator of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In the following, the term "YouTube" is used for the video sharing platform and the term "Google" for the operator of the platform.

You can access the YouTube platform and our company presence there by clicking on the corresponding hyperlinks that are displayed with the YouTube videos embedded on our website. If you click on the hyperlink, for example to view or subscribe to our company presence on YouTube, Google will receive data from you (which data Google receives also depends on whether you are logged in to YouTube with your user profile while clicking on the page or not). Google also uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own YouTube profile or are not logged into it during your visit to our company website. Among other things, these cookies allow Google to collect and analyse data on target group interactions and website statistics (within and outside YouTube). Cookies remain on your end device until you delete them. You can find more information about the cookies used by Google at https://policies.google.com/technologies/cookies?hl=de&utm_source=ucb

According to its own information, Google uses this data for a wide variety of purposes and transmits it worldwide, both internally to affiliated companies and to companies, organisations or persons outside Google. Google bases this data processing on various legal bases, details of which can be found in Google's privacy policy. You can find Google's privacy policy at the following link: https://policies.google.com/privacy?hl=en.

While Google uses this data under its own responsibility for various purposes, we can only see aggregated data on our company website, i.e. statistics (e.g. playbacks, playback times and types of access sources), which no longer have any personal reference. This performance data is analysed using the "YouTube Analytics" tool. You can find more information about the performance data on the corresponding Google information page at the following link https://support.google.com/youtube/answer/9002587?hl=en

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and analysing and evaluating the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR.

If you use our YouTube presence to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we will only process the data you provide in order to process your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to fulfil the purpose of the conversation with you and your contact request has been fully clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, all personal data of the conversation will be deleted, as far as permissible, and it will not be possible to continue the conversation.

8. Other third-party content and services that are integrated on our website

8.1. YouTube

We integrate videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for the purpose of making our website more appealing to our users and presenting our products. In the following, the term "YouTube" is used for the video portal, the term "Google" for the operator of this portal.

When integrating YouTube videos, we use the extended data protection mode, in which, according to the provider, information about you is only shared with Google if you activate the video by clicking on the play button of the video.

If you activate the video, Google may use cookies to collect information for analysis purposes and to improve user-friendliness. According to Google, the data is processed pseudonymised. However, especially if you are logged into your Google or YouTube account, the data may be linked directly to these accounts.

According to its own information, Google uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including recipients who are not based in the EU. Google bases this data processing on various legal bases. You can find an overview of this in Google's privacy policy, which you can access at the following link: https://policies.google.com/privacy?hl=en

In addition, so-called Google Fonts (fonts provided by Google) may be loaded when the video is played.

We have embedded YouTube videos on our website in such a way that they are only loaded once you have given your consent. The legal basis for the integration of the YouTube service on our website and the associated processing of your data is therefore your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

If YouTube sets cookies when you actively click on and play a YouTube video on our website, we process your data on the basis of your consent (§ 25 (1) TTDSG or Art. 6 (1) sentence 1 lit. a GDPR).

You can withdraw your consent in accordance with the aforementioned legal bases at any time by changing the data protection settings on our website.

Note on data transfers to the USA:

Google Ireland Ltd. is a subsidiary of the US group Google, which means that your personal data may also be transferred to US Google group companies (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which the EU Commission has issued an adequacy decision (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a US company under the EU-US DPF, see https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

9. Google Marketing Platform (DoubleClick)

On our website, we integrate the online marketing solution Google Marketing Platform (formerly "DoubleClick"), which is offered for users from the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter "Google Marketing Platform"). This tool enables us to place personalised digital advertisements on our website and to analyse their success later. At the same time, this allows us to avoid showing you advertisements again that you have already been able to view on another page. Within the scope of the functions provided by the Google Marketing Platform, we use the functions "Google Analytics", and "Google Ads" (for more information, see sections 9 and 10).

For this purpose, Google Marketing Platform sets cookies through which the respective page views can be recorded. Google Marketing Platform sets cookies that store the following information:

  • Referrer (previously visited website)
  • Your IP address
  • How you use our website
  • the number of page views
  • Keywords you used for the searchers

You can find more information about cookies in our cookie policy. Before we set the cookies, we request your consent (§ 25 para. 1 TTDSG). The legal basis for subsequent further processing of your data is your consent (Art. 6 para. 1 sentence 1 lit. a DSGVO).

You can revoke your consent under the aforementioned legal bases at any time by changing the data protection settings on our website.

You can prevent the collection of the data generated by the cookie and related to your use of the website (including your (anonymised) IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://support.google.com/ads/answer/7395996.

In addition, you can stop the processing of your data by clicking on the following link: https://adssettings.google.com/authenticated?hl=de

You can find Google's privacy policy at the following link: https://policies.google.com/privacy?hl=de.

Note on data transfers to the USA:

Please note the following: Google Marketing Platform is used on the basis of a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US company Google, so that it is possible that your personal data will be transferred to US companies of Google (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision has been issued by the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a US company under the EU-US DPF, cf. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

10. Google Analytics 4

Our website implements the Google Analytics 4 analysis service, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area, Switzerland and Liechtenstein and by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: "Google Analytics") for all other users.

We have concluded a data processing agreement with Google Ireland Limited in accordance with Art. 28 GDPR.

Google Analytics 4 can record the following information, among others:

  • Type of Internet browser used
  • Internet browser version
  • the operating system you are using,
  • selected language,
  • Data on the requesting terminal,
  • Referrer (previously visited website)
  • Your IP address (according to Google, the IP address is only used temporarily to determine a rough location of the requesting end device (city level) and is then deleted).
  • (rough) location data, i.e. city (including its longitude and latitude), continent, country, region and subcontinent of the requesting terminal,
  • Date and time of the server request,
  • The session duration,
  • Clicking and scrolling behaviour including playing media, internal searches, sharing content,
  • Web shop interactions, such as product views and orders

Google Analytics 4 only uses the IP address to derive location data. IP addresses are not otherwise logged or stored, according to Google.

We are only shown statistics via Google Analytics 4, which we use to optimise our website and offers. We have also configured Google Analytics 4 so that Google may not use the data for its own analysis of online trends or to improve its own products and services.

Before we use Google Analytics 4 to analyse your website visit, we request your consent to the processing of your personal data (Art. 6 para. 1 sentence 1 lit. a GDPR) and the setting of the necessary cookies (§ 25 para. 1 TTDSG) that may be associated with Google Analytics 4.

For more information about the cookies we use, please see our cookie information.

The legal basis for the processing of your personal data and the setting of cookies within the scope of Google Analytics 4 is therefore your consent pursuant to § 25 (1) TTDSG and Article 6 (1) sentence 1 lit. a GDPR.

You can revoke your consent under the aforementioned legal bases at any time by changing the data protection settings on our website.

Note on data transfers to the USA:

Google Analytics is used on the basis of a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US company Google, so that it is possible that your personal data will be transferred to US companies of Google (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision of the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF") exists. Google LLC is certified as a US company under the EU-US DPF, cf. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

You can also prevent the collection of your personal data by Google Analytics 4 and the processing of this data by Google by downloading and installing the browser add-on available under the following link (https://tools.google.com/dlpage/gaoptout?hl=de) to deactivate Google Analytics.

You can also prevent the processing of your data within the scope of Google Analytics 4 by clicking on the following link and bringing about an "opt-out": : Set “opt-out cookie”. In doing so, an "opt-out cookie" will be set, which will prevent the collection of your user data on this website in the future, unless the opt-out cookie is deleted.

Finally, you can also prevent Google cookies from being stored directly by making the appropriate settings in your browser settings.

11. Google Ads (Google AdWords)

We use the online advertising programme Google Ads (formerly Google AdWords) on our website, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA for all other users.

With the help of Google Ads, we can create advertisements and use them to advertise on the internet (e.g. within the scope of Google Search). This allows us to reach potential customers who are searching the internet for products and services that are comparable to the services offered on our website.

We use Google's "Conversion Tracking" as part of Google AdWords. By using the conversion tracking analysis service as part of our advertising measures, we receive information about the effectiveness of our advertising campaigns. This is done by evaluating visit actions. When you click on a Google Ad, a cookie is stored on your terminal device with your consent. This cookie is generated by Google specifically for our website. Each Google Ad customer receives a different cookie, so the cookies cannot be tracked across Google Ad customers' websites. During the storage period of the cookie on your terminal device, both Google and we can assess whether you have interacted with an advertisement and thus reached our website when you visit our site. The information collected in this way is used to create conversion statistics for Google Ad customers who have opted in to Google conversion tracking. You can object to the use of conversion tracking by deactivating the conversion tracking cookie in your browser under the user settings. The cookie serves the purpose of measuring the interaction of visitors with advertisements and avoiding frequent repetition of the same advertisement. We only receive statistical evaluations from Google regarding the effectiveness of our advertising measures.

The Google Ads cookies are stored with your consent and thus on the basis of § 25 (1) TTDSG. The legal basis for the subsequent further processing is also your consent, Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent under the aforementioned legal bases at any time by changing the data protection settings on our website.

You can prevent the storage of cookies directly in your browser settings. However, we would like to point out that you may not be able to use the full functionality of our website. You can also prevent conversion tracking through browser settings that prevent the setting of cookies from the https://www.googleadservices.com domain.

In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://support.google.com/ads/answer/7395996. The use of cookies or device identifiers by Google can also be deactivated here: https://adssettings.google.com/anonymous?hl=de

Detailed information on Google Ads, remarketing and conversion tracking can also be found in Google's privacy policy at: https://www.google.de/policies/privacy

Note on data transfers to the USA:

Please note the following: Google Ads is used on the basis of a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US company Google, so that it is possible that your personal data will be transferred to US companies of Google (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision has been issued by the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a US company under the EU-US DPF, cf. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

12. Google Tag Manager

We use the Google Tag Manager tag management system on our website (hereinafter: "Google Tag Manager"), which is offered for users from the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Tag Manager is a tag management platform that enables us to load additional tools using a so-called "tag". Google Tag Manager receives your IP address for this purpose. If the reloaded tools themselves collect data, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

The legal basis for the processing of this data is your consent in accordance with Art. 6 para. 1 sentence lit. a GDPR.

You can find Google's privacy policy at the following link https://policies.google.com/privacy?hl=en.

We have concluded an order processing contract with Google, available at https://business.safety.google/adsprocessorterms and https://privacy.google.com/businesses/processorterms/mccs/. The terms of use for the Google Tag Manager can be found at https://support.google.com/tagmanager/answer/7157428?hl=en

Note on data transfers to the USA:

Please note the following: Google Tag Manager is used on the basis of a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US company Google, so that it is possible that your personal data will be transferred to US companies of Google (in particular Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision has been issued by the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a US company under the EU-US DPF, cf. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

13. Use of service providers

We would like to point out that when processing your personal data, we may use service providers with whom we have concluded data processing contracts pursuant to Art. 28 GDPR (e.g. for website hosting). If processors in a third country (not within the EU) carry out the data processing, we ensure that the level of protection of your data guaranteed by the GDPR is not undermined (Art. 44 et seq. GDPR). The legal basis for the use of service providers is Art. 6 para. 1 sentence 1 lit. f GDPR. The commissioning of service providers (specialists or other service providers in areas that we cannot serve ourselves) is in our legitimate interest. If you would like to receive a copy of the suitable or appropriate guarantees, please let us know (see point 1 above).

14. Your rights

If we process your data, you are a "data subject" within the meaning of the GDPR. You have the following rights: right of access, right to rectification, right to restriction of processing, right to erasure, right to information and right to data portability. In addition, you have a right to object, a right to withdraw your consent and the right to lodge a complaint with a supervisory authority.

Below you will find some details on the individual rights:

14.1. Right of access

You have the right to request confirmation from us as to whether we are processing your personal data. If we process your personal data, you have the right to obtain information in particular about the processing purposes, categories of personal data, recipients or categories of recipients and, if applicable, the storage period.

14.2. Right of rectification

You have the right to correct and/or complete the data we have stored about you if this data is incorrect or incomplete. We will carry out the correction or completion without delay.

14.3. Right to restrict processing

Under certain circumstances, you have the right to request that we restrict the processing of your personal data. An example of this is if you dispute the accuracy of your personal data and we need to verify the accuracy for a certain period of time. For the duration of the verification, your data will only be processed in a restricted manner. Another example of restriction is if we no longer need your data, but you need it for a legal dispute.

14.4. Right to erasure

You have the right in certain situations to request that we delete your personal data immediately. This is the case, for example, if we no longer need your personal data for the purposes for which we collected the data or if we have processed your data unlawfully. Another example would be if we process your data on the basis of your consent, you withdraw your consent and we do not process the data on any other legal basis. However, your right to erasure does not always exist. For example, we may process your personal data to comply with a legal obligation or because we need it for litigation.

14.5. Right to information

If you have exercised your right to rectify, erase or restrict the processing of your data, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of the processing of your data, unless this proves impossible or involves a disproportionate effort.

14.6. Right to data portability

You have the right, under certain conditions, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to have this data transferred to another controller. This is the case if we process the data either on the basis of your consent or on the basis of a contract with you and that we process the data using automated procedures.

You have the right to request that we transfer your personal data directly to another controller, insofar as this is technically feasible and does not affect the freedoms and rights of other persons.

14.7. Right to object

You have the right to object at any time to the processing of your personal data based on Art. 6 (1) sentence 1 lit. e or lit. f GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions.

We will no longer process your personal data after an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling insofar as it is related to direct advertising. If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.

You have the right to withdraw your consent at any time in accordance with Art. 7 (3) GDPR. The withdrawal of consent does not retroactively invalidate the lawfulness of the processing.

14.9. Right of lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right to lodge a complaint in the Member State of your residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

An overview of the respective data protection commissioners of the German Bundesländer as well as their contact details can be found under the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

15. Last update of this privacy policy

November 2023

We use cookies on our website. Cookies are text files that are sent to your browser by our web server when you visit our website and are stored on your computer for later retrieval. Cookies are then sent to the server of our website with every server enquiry or page request. A cookie can therefore be used to identify your internet browser when you visit the website again. Some of the functions that we have integrated into our website also use web storage objects. These work in a similar way to cookies, but are temporarily stored in your browser and are generally not transmitted to the server.

There are session cookies, which are deleted when you close your browser, and there are persistent cookies, which are stored on your hard drive until their preset expiry date is reached or until you actively remove them. With web storage objects, a distinction is made between local storage objects, which never expire, and session storage objects, which are deleted when the browser is closed.

With cookies, a distinction is made between first party cookies (only visible from the domain you are currently visiting) and third party cookies (visible across domains and regularly set by third parties).

Cookies and web storage objects are divided into the following categories:

  • Technically necessary: These are absolutely necessary in order to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes or store which web pages you have visited. The legal basis for the setting of technically necessary cookies and web storage objects is § 25 para. 2 TTDSG.

  • Optional: These are used, for example, for analysis and marketing purposes and to display external content such as videos. Analysis cookies and web storage objects collect information about how you use a website, which pages you visit and, for example, whether errors occur when using the website. Marketing cookies and web storage objects are used to show you customised advertising on the website or offers from third parties and to measure the effectiveness of these offers. These are technologies that are not technically necessary. The legal basis for the use of these cookies and web storage objects is therefore your consent in accordance with Section 25 (1) TTDSG.

Please note the following: You can ensure yourself that no cookies and similar technologies are stored on your computer at all, or that the storage of only certain cookies is permitted. You can select this in your Internet browser settings. You can also view and delete the stored cookies there. If you block all cookies, you may not be able to use all the functions of our website.

Withdrawal and removal options

As stated above, you can enable or restrict the transmission of cookies and similar technologies by changing the settings in your internet browser. You can delete cookies and web storage objects that have already been saved by your internet browser at any time. If cookies and web storage objects are restricted or deactivated for our website, it is possible that not all functionalities can be used.

Information on the cookies and web storage objects set:

Information on the cookies and web storage objects set can be found in the individual cookie settings. There you can manage and revoke the consent you have given at any time.

November 2023