Privacy Policy

This privacy policy clarifies the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our performance of services and within our online offer and its associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer"). With regard to the terms used, such as "processing" or "controller," we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Controller

NXTOU Booking & Events Managing Director: Stefan Manhart Gerhart-Hauptmann-Straße 10 84076 Pfeffenhausen info@nxtou.de https://nxtou.de/impressum/

Types of Data Processed

Categories of Data Subjects

Visitors and users of the online offer (hereinafter, we also collectively refer to the data subjects as "users").

Purpose of Processing

Terminology Used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. "Processing" means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means. The term is broad and covers virtually any handling of data. "Pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person. "Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. "Controller" means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. "Processor" means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

Relevant Legal Bases

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing operations. For users within the scope of the General Data Protection Regulation (GDPR), i.e., the EU and the EEA, unless the legal basis is specifically named in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR; The legal basis for processing to fulfill our services, execute contractual measures, and respond to inquiries is Art. 6(1)(b) GDPR; The legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR; In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis. The legal basis for processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Art. 6(1)(e) GDPR. The legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) GDPR. The processing of data for purposes other than those for which they were collected is governed by the requirements of Art. 6(4) GDPR. The processing of special categories of data (in accordance with Art. 9(1) GDPR) is governed by the provisions of Art. 9(2) GDPR.

Security Measures

In accordance with statutory requirements, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical access to the data as well as system access, input, disclosure, availability, and separation. Furthermore, we have established procedures to ensure the exercise of data subject rights, data deletion, and responses to data security threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default.

Cooperation with Processors, Joint Controllers, and Third Parties

If, in the course of our processing, we disclose data to other persons and companies (processors, joint controllers, or third parties), transmit data to them, or otherwise grant them access to the data, this is done only on the basis of a statutory permission (e.g., if a transmission of the data to third parties, such as payment service providers, is necessary for contract performance), if users have consented, if a legal obligation provides for it, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.). If we disclose, transmit, or otherwise grant access to data to other companies within our group of companies, this is done in particular for administrative purposes as a legitimate interest and beyond that on a basis corresponding to legal requirements.

Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA), or the Swiss Confederation) or if this occurs in the context of using third-party services or disclosing/transmitting data to other persons or companies, this will only take place to fulfill our (pre-)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to express consent or contractually required transfer, we process or have data processed only in third countries with a recognized level of data protection, which includes US processors certified under the "Privacy Shield," or on the basis of special guarantees, such as contractual obligations through so-called standard contractual clauses of the EU Commission, the existence of certifications, or binding corporate rules (Art. 44 to 49 GDPR, EU Commission Information Page).

Rights of Data Subjects

Right of access: You have the right to request confirmation as to whether or not data concerned is being processed, and to information about this data as well as further information and a copy of the data in accordance with statutory requirements. Right to rectification: In accordance with statutory requirements, you have the right to demand the completion of data concerning you or the rectification of incorrect data concerning you. Right to erasure and restriction of processing: In accordance with statutory requirements, you have the right to demand that relevant data be erased immediately, or alternatively, to demand a restriction of data processing in accordance with statutory requirements. Right to data portability: You have the right to receive the data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller in accordance with statutory requirements. Complaint to a supervisory authority: Furthermore, in accordance with statutory requirements, you have the right to lodge a complaint with the competent supervisory authority.

Right of Withdrawal

You have the right to withdraw any consents granted with effect for the future.

Right to Object

Right to Object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

Cookies and Right to Object to Direct Marketing

"Cookies" are small files that are stored on users' computers. Various types of information can be stored within cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies," are cookies that are deleted after a user leaves an online offer and closes their browser. For example, the contents of a shopping cart in an online shop or a login status can be stored in such a cookie. Cookies are described as "permanent" or "persistent" if they remain stored even after the browser is closed. For example, the login status can be saved if users visit the site again after several days. Similarly, user interests can be stored in such a cookie, which are used for reach measurement or marketing purposes. "Third-party cookies" are cookies offered by providers other than the controller operating the online offer (otherwise, if they are only the controller's cookies, they are called "first-party cookies"). We may use temporary and permanent cookies and clarify this within the framework of our privacy policy. If we ask users for consent to use cookies (e.g., as part of a cookie consent), the legal basis for this processing is Art. 6(1)(a) GDPR. Otherwise, users' personal cookies are processed in accordance with the following explanations within this privacy policy on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offer within the meaning of Art. 6(1)(f) GDPR) or, if the use of cookies is necessary to perform our contract-related services, pursuant to Art. 6(1)(b) GDPR, or if the use of cookies is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, pursuant to Art. 6(1)(e) GDPR. If users do not want cookies stored on their computer, they are asked to disable the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. The exclusion of cookies can lead to functional restrictions of this online offer. A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by turning them off in the browser settings. Please note that in this case, not all functions of this online offer may be usable.

Deletion of Data

The data processed by us will be deleted or restricted in its processing in accordance with statutory requirements. Unless explicitly stated within this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory storage obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

Changes and Updates to the Privacy Policy

We ask you to inform yourself regularly about the content of our privacy policy. We adapt the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

Order Processing in the Online Shop and Customer Account

We process the data of our customers as part of the ordering processes in our online shop to enable them to select and order the chosen products and services, as well as their payment and delivery or execution. The processed data includes inventory data, communication data, contract data, and payment data; the persons affected by the processing include our customers, interested parties, and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online shop, billing, delivery, and customer services. In doing so, we use session cookies to store shopping cart contents and permanent cookies to store login status. The processing is carried out to fulfill our services and execute contractual measures (e.g., conducting order processes) and insofar as it is required by law (e.g., legally required archiving of business transactions for commercial and tax purposes). In this context, information marked as required is necessary to establish and fulfill the contract. We disclose data to third parties only in the context of delivery, payment, or within the framework of legal permissions and obligations, as well as when this is done on the basis of our legitimate interests, about which we inform you within this privacy policy (e.g., to legal and tax advisors, financial institutions, freight companies, and authorities). Users can optionally create a user account, in which they can, in particular, view their orders. During registration, the required mandatory information is communicated to the users. User accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data regarding the user account will be deleted, subject to its retention being necessary for commercial or tax reasons. Information in the customer account remains until its deletion with subsequent archiving in the event of a legal obligation or our legitimate interests (e.g., in the case of legal disputes). It is the responsibility of the users to back up their data before the end of the contract upon termination. As part of registration and re-logins, as well as the use of our online services, we store the IP address and the timestamp of the respective user action. The storage is based on our legitimate interests as well as the protection of users against misuse and other unauthorized use. Data is generally not passed on to third parties unless it is necessary to pursue our legal claims as a legitimate interest or there is a legal obligation to do so. Deletion takes place after the expiration of statutory warranty and other contractual rights or obligations (e.g., payment claims or performance obligations from contracts with customers), whereby the necessity of data retention is reviewed every three years; in the case of retention due to statutory archiving obligations, deletion takes place after their expiration.

Agency Services

We process our customers' data within the scope of our contractual services, which include conceptual and strategic consulting, campaign planning, software and design development/consulting or maintenance, implementation of campaigns and processes/handling, server administration, data analysis/consulting services, and training services. In this context, we process inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., email, phone numbers), content data (e.g., text inputs, photographs, videos), contract data (e.g., subject matter of the contract, term), payment data (e.g., bank details, payment history), usage and meta data (e.g., in the context of evaluating and measuring the success of marketing measures). We generally do not process special categories of personal data unless these are components of a commissioned processing. The data subjects include our customers, interested parties, as well as their customers, users, website visitors, or employees, as well as third parties. The purpose of processing is the provision of contractual services, billing, and our customer service. The legal bases for processing result from Art. 6(1)(b) GDPR (contractual services), Art. 6(1)(f) GDPR (analysis, statistics, optimization, security measures). We process data required to establish and fulfill contractual services and point out the necessity of providing them. Disclosure to external parties takes place only if required in the context of an order. When processing data provided to us as part of an order, we act in accordance with the instructions of the client as well as the legal requirements of data processing on behalf of a controller pursuant to Art. 28 GDPR and process the data for no other purposes than those specified in the order. We delete the data after the expiration of statutory warranty and comparable obligations. The necessity of data retention is reviewed every three years; in the case of statutory archiving obligations, deletion takes place after their expiration (6 years pursuant to § 257(1) HGB [German Commercial Code], 10 years pursuant to § 147(1) AO [German Tax Code]). In the case of data disclosed to us within the scope of an order by the client, we delete the data according to the specifications of the order, generally after the end of the order.

Contractual Services

We process the data of our contractual partners and interested parties as well as other clients, customers, mandators, clients, or contractual partners (collectively referred to as "contractual partners") in accordance with Art. 6(1)(b) GDPR in order to provide them with our contractual or pre-contractual services. The data processed in this context, the nature, scope, purpose, and necessity of its processing are determined by the underlying contractual relationship. The processed data includes the master data of our contractual partners (e.g., names and addresses), contact data (e.g., email addresses and phone numbers), as well as contract data (e.g., services used, contract contents, contractual communication, names of contact persons) and payment data (e.g., bank details, payment history). We generally do not process special categories of personal data unless these are components of a commissioned or contractual processing. We process data required to establish and fulfill contractual services and point out the necessity of providing them, unless this is evident to the contractual partners. Disclosure to external persons or companies takes place only if required in the context of a contract. When processing data provided to us within the scope of an order, we act in accordance with the instructions of the client as well as legal requirements. As part of the use of our online services, we may store the IP address and the timestamp of the respective user action. The storage is based on our legitimate interests as well as the interests of users in protection against misuse and other unauthorized use. This data is fundamentally not passed on to third parties unless it is necessary to pursue our claims pursuant to Art. 6(1)(f) GDPR or there is a legal obligation to do so pursuant to Art. 6(1)(c) GDPR. Data is deleted when the data is no longer required for the fulfillment of contractual or statutory duty-of-care obligations and for dealing with any warranty and comparable obligations, whereby the necessity of storing the data is reviewed every three years; otherwise, statutory storage obligations apply.

Administration, Financial Accounting, Office Organization, Contact Management

We process data in the context of administrative tasks as well as organization of our operations, financial accounting, and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The processing bases are Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR. Customers, interested parties, business partners, and website visitors are affected by the processing. The purpose and our interest in processing lie in administration, financial accounting, office organization, and archiving of data—tasks that serve to maintain our business activities, perform our duties, and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the specifications mentioned in these processing activities. In this context, we disclose or transmit data to the tax administration, consultants (such as tax advisors or auditors), as well as other fee offices and payment service providers. Furthermore, based on our commercial interests, we store information on suppliers, event organizers, and other business partners, e.g., for the purpose of contacting them at a later date. This data, which is mostly company-related, is generally stored permanently by us.

Registration Function

Users can create a user account. During registration, the required mandatory information is communicated to the users and processed on the basis of Art. 6(1)(b) GDPR for the purpose of providing the user account. The processed data includes, in particular, login information (name, password, and an email address). The data entered during registration is used for the purposes of using the user account and its purpose. Users may be informed by email about information relevant to their user account, such as technical changes. If users have terminated their user account, their data with regard to the user account will be deleted, subject to a statutory storage obligation. It is the responsibility of the users to back up their data before the end of the contract upon termination. We are entitled to irretrievably delete all data of the user stored during the term of the contract. As part of the use of our registration and login functions and the use of the user account, we store the IP address and the timestamp of the respective user action. Storage is based on our legitimate interests, as well as those of the users, in protection against misuse and other unauthorized use. Data is generally not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6(1)(c) GDPR. IP addresses are anonymized or deleted after 7 days at the latest.

Comments and Posts

If users leave comments or other posts, their IP addresses may be stored for 7 days on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR. This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we could be prosecuted ourselves for the comment or post and are therefore interested in the identity of the author. Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, to process user details for the purpose of spam detection. On the same legal basis, in the case of surveys, we reserve the right to store the IP addresses of users for their duration and to use cookies to avoid multiple votes. The personal information provided in the context of comments and posts, any contact and website information, as well as the content information, will be stored permanently by us until the user objects.

Soundcloud

Our podcasts are stored on the platform "Soundcloud", offered by SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany, and are played back from this platform. For this purpose, we embed so-called Soundcloud widgets into our website. This is playback software with which users can play podcasts. Here, Soundcloud can measure which podcasts are listened to and to what extent, and process this information pseudonymously for statistical and business purposes. For this purpose, cookies may be stored in users' browsers and processed for the purpose of creating user profiles, e.g., for displaying advertisements that correspond to the potential interests of users. In the case of users who are registered with Soundcloud, Soundcloud can assign the listening information to their profiles. The use takes place on the basis of our legitimate interests, i.e., interest in a safe and efficient provision, analysis, and optimization of our audio offer pursuant to Art. 6(1)(f) GDPR. Further information and options to object can be found in Soundcloud's privacy policy: https://soundcloud.com/pages/privacy.

Contacting Us

When contacting us (e.g., via contact form, email, telephone, or via social media), the user's details are processed to handle the contact request and its processing pursuant to Art. 6(1)(b) (within contractual/pre-contractual relationships), Art. 6(1)(f) (other requests) GDPR. The user's details may be stored in a Customer Relationship Management System ("CRM System") or comparable request organization. We delete the requests if they are no longer required. We review the necessity every two years; furthermore, statutory archiving obligations apply.

Newsletter

With the following information, we inform you about the content of our newsletter as well as the registration, dispatch, and statistical evaluation procedures and your rights to object. By subscribing to our newsletter, you agree to receive it and to the procedures described. Content of the newsletter: We send newsletters, emails, and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. If, in the context of registering for the newsletter, its contents are specifically described, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and us. Double Opt-In and logging: Registration for our newsletter takes place in a so-called Double Opt-In process. This means that after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with foreign email addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the registration and confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged. Registration data: To sign up for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name for the purpose of addressing you personally in the newsletter. The dispatch of the newsletter and the associated measurement of success are carried out on the basis of consent from the recipients pursuant to Art. 6(1)(a), Art. 7 GDPR in conjunction with § 7(2) No. 3 UWG [German Unfair Competition Act] or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG. The logging of the registration process is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. Our interest is directed at the use of a user-friendly and secure newsletter system that serves our business interests, meets the expectations of users, and allows us to prove consents. Cancellation/Withdrawal: You can cancel the receipt of our newsletter at any time, i.e., withdraw your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, in order to be able to prove previously given consent. The processing of this data is restricted to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.

Newsletter - Mailchimp

The newsletter is sent via the dispatch service provider "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the dispatch service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement, thereby offering a guarantee of compliance with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The dispatch service provider is used on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR and a data processing agreement pursuant to Art. 28(3) sentence 1 GDPR. The dispatch service provider may use the recipient's data in pseudonymous form, i.e., without assignment to a user, to optimize or improve its own services, e.g., for technical optimization of the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Newsletter - Performance Measurement

The newsletters contain a so-called "web-beacon", i.e., a pixel-sized file retrieved from our server when the newsletter is opened, or if we use a dispatch service provider, from its server. In the context of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, are initially collected. This information is used for technical improvement of the services based on technical data or target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. Statistical collections also include determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our endeavor nor, if used, that of the dispatch service provider to monitor individual users. The evaluations serve much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. A separate withdrawal of performance measurement is unfortunately not possible; in this case, the entire newsletter subscription must be canceled.

Hosting and Email Dispatch

The hosting services used by us serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email dispatch, security services, and technical maintenance services, which we use for the purpose of operating this online offer. Here, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta, and communication data of customers, interested parties, and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

Collection of Access Data and Log Files

We, or our hosting provider, collect data on every access to the server on which this service is located (so-called server log files) based on our legitimate interests within the meaning of Art. 6(1)(f) GDPR. Access data includes the name of the website accessed, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider. Log file information is stored for security reasons (e.g., to investigate misuse or fraud acts) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes is excluded from deletion until final clarification of the respective incident.

Google Tag Manager

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface (and thus integrate, for example, Google Analytics and other Google marketing services into our online offer). The Tag Manager itself (which implements the tags) does not process any personal data of the users. With regard to the processing of users' personal data, reference is made to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

Google Analytics

We use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by users is usually transferred to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on activities within this online offer, and to provide us with other services related to the use of this online offer and internet usage. Pseudonymous user profiles can be created from the processed data. We use Google Analytics only with activated IP anonymization. This means that the IP address of users is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. If we ask users for consent (e.g., in the context of a cookie consent), the legal basis for this processing is Art. 6(1)(a) GDPR. Otherwise, personal data of users is processed on the basis of our legitimate interests (i.e., interest in analysis, optimization, and economic operation of our online offer within the meaning of Art. 6(1)(f) GDPR). Insofar as data is processed in the USA, we point out that Google is certified under the Privacy Shield Agreement, thereby assuring compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Further information on data usage by Google, setting, and objection options can be found in Google's privacy policy (https://policies.google.com/privacy) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated). Users' personal data will be deleted or anonymized after 14 months.

Google Universal Analytics

We use Google Analytics in the form of "Universal Analytics". "Universal Analytics" refers to a process by Google Analytics in which user analysis takes place on the basis of a pseudonymous user ID, creating a pseudonymous user profile with information from the use of different devices (so-called "cross-device tracking").

Social Media Online Presences

We maintain online presences within social networks and platforms in order to communicate with active customers, prospects, and users there, and to inform them about our services. We point out that user data may be processed outside the European Union. This may result in risks for users because, for example, enforcing user rights could be made more difficult. With regard to US providers certified under the Privacy Shield, we point out that they commit to complying with EU data protection standards. Furthermore, user data is usually processed for market research and advertising purposes. For example, user profiles can be created based on user behavior and resulting interests. The user profiles can in turn be used to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on users' computers, in which user behavior and interests are saved. Furthermore, data independent of the devices used by users may also be stored in the user profiles (especially if users are members of the respective platforms and are logged into them). The processing of users' personal data is based on our legitimate interests in effective user information and communication with users pursuant to Art. 6(1)(f) GDPR. If users are asked for consent to the aforementioned data processing by the respective platform providers, the legal basis for processing is Art. 6(1)(a), Art. 7 GDPR. For a detailed description of the respective processing operations and objection options (opt-out), we refer to the linked information of the providers below. Also in the case of requests for information and assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to user data and can directly take appropriate measures and provide information. Should you still need assistance, you can contact us.

Integration of Third-Party Services and Content

Within our online offer, based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offer within the meaning of Art. 6(1)(f) GDPR), we use content or service offerings from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter collectively referred to as "content"). This always assumes that the third-party providers of this content perceive the user's IP address, as they could not send the content to their browser without the IP address. The IP address is therefore required for displaying this content. We endeavor to use only content whose respective providers use the IP address solely for delivering content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring web pages, visit time, and other details on the use of our online offer, as well as being connected with such information from other sources.

YouTube

We embed videos from the platform "YouTube" provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Fonts

We embed fonts ("Google Fonts") provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. According to Google, user data is used solely for the purpose of displaying fonts in the user's browser. Integration takes place on the basis of our legitimate interests in a technically secure, maintenance-free, and efficient use of fonts, their uniform display, and consideration of possible licensing restrictions for their integration. Privacy Policy: https://www.google.com/policies/privacy/.

Google ReCaptcha

We embed the function to detect bots, e.g., for inputs in online forms ("ReCaptcha") provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.