ViMuseo privacy statement

This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as „data„) in the context of the provision of our services and within our online offering and the websites, functions and content associated with it as well as external online presences, such as our Social Media Profile (hereinafter jointly referred to as „online offering„). With regard to the terms used, such as „processing„ or „person responsible„, we refer you to the definitions in Art. 4 of the Data Protection Basic Regulation (DSGVO).

Person in charge

Muceums GmbH
Oberbrühlstraße 19
D 87700 Memmingen

info@vimuseo.com
+49-8331 690 99 41

Michael Sametinger
https://vimuseo.com/impressum

Content

Basic details

Types of data processed

- Inventory data (e.g., personal master data, names or addresses).
- Contact data (e.g., e-mail, telephone numbers).
- Content data (e.g., text entries, photographs, videos).
- Usage data (e.g., websites visited, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).

Categories of data subjects

Visitors and users of the online offer (In the following we will refer to the persons concerned in summary as “users“).

Purpose of processing

- Provision of the online offer, its functions and contents.
- Reply to contact requests and communication with users.
- Security measures.
- Range measurement/marketing

Terms used

„personal data“ is any information relating to an identified or identifiable natural person (hereinafter “person concerned“); an identifiable natural person is considered to be one who directly or indirectly, in particular by means of association with an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more specific characteristics which are the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person, is any operation or set of operations carried out with or without the aid of automated processes relating to personal data. The term is broad and covers practically every handling of data.

“pseudonymisation“ the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the involvement of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data is not attributed to an identified or identifiable natural person.

”profiling” any automated processing of personal data consisting in the use of such personal data for the purpose of processing certain personal aspects relating to a natural or identifiable person;In particular, the personal data may be used to analyse or predict aspects relating to the natural person's work performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or movement.

The person “responsible“ is the natural or legal person, agency, body or entity that alone or jointly with others ’decides“ on the purposes and means of the processing of personal data.

”processor” a natural or legal person, agency, body or entity that processes personal data on behalf of the data controller.

Legal basis

In accordance with Art. 13 DSGVO we inform you about the legal basis of our data processing. For users from the area of application of the data protection basic regulation (DSGVO), i.e. the EU and the EEC, the following applies, if the legal basis is not mentioned in the data protection explanation:
The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 DSGVO;
The legal basis for processing to fulfil our services and carry out contractual measures as well as answer inquiries is Art. 6 Para. 1 lit. a and Art. 7 DSGVO;
The legal basis for processing to fulfil our services and carry out contractual measures as well as answer inquiries is Art. 6 Para. 1 lit. a and Art. 7 DSGVO;
The legal basis for processing to carry out contractual measures as well as for answering inquiries is Art. 6 Para. 1 lit. a and Art. 7 DSGVO;
The legal basis for processing to carry out contractual measures as well as for answering inquiries is Art. 6 Para. 1 lit. b DSGVO;
The legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c DSGVO;
For the case that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.
The legal basis for the processing necessary for the performance of a task in the public interest or in the exercise of public authority vested in the data controller is Art. 6 para. 1 lit. e DSGVO.
The legal basis for the processing to safeguard our legitimate interests is Art. 6 para. 1 lit. d DSGVO. 6 para. 1 lit. f DSGVO.
The processing of data for purposes other than those for which they were collected is governed by the provisions of Art. 6 para. 4 DSGVO.
The processing of special categories of data (in accordance with Art. 9 para. 1 DSGVO) is governed by the provisions of Art. 9 para. 2 DSGVO.

Security measures

We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, extent, circumstances and purposes of the processing as well as the different probability and severity of the risk for the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures shall include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data as well as access to, input, transmission, safeguarding and separation of the data concerning them. We have also established procedures to ensure the exercise of data subjects' rights, the destruction of data and the response to threats. Furthermore, we take into account the protection of personal data as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings.

Changes and updates to the Privacy Statement

We kindly ask you to inform yourself regularly about the content of our data protection declaration. We will adapt this privacy policy as soon as the changes in the data processing we carry out make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

Administration, financial accounting, office organization, contact management

We process data within the scope of administrative tasks as well as organization of our business, financial accounting and compliance with legal obligations, such as archiving. Here we process the same data that we process within the framework of the provision of our contractual services. The processing bases are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organisation, archiving of data, i.e. tasks which serve the maintenance of our business activities, the performance of our tasks and the provision of our services. The cancellation of the data with regard to contractual services and contractual communication corresponds to the data stated in these processing activities.

We disclose or transmit data to the financial administration, consultants, such as e.g, Tax consultants or accountants as well as other donors and payment service providers.

Ferner we store information on suppliers, event organisers and other business partners on the basis of our business interests, e.g. for the purpose of contacting them later. This data, which is mainly company-related, is generally stored permanently.

Data handling

Cooperation with contractors, joint managers and third parties

If we disclose data to other persons or companies (contract processors, jointly responsible persons or third parties) within the scope of our processing, if we forward them to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g.For example, if a transfer of data to third parties, such as payment service providers, is necessary for the performance of the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

Insofar as we disclose, transmit or otherwise grant access to data to other companies of our group of companies, this is done in particular for administrative purposes as a legitimate interest and beyond that on a basis corresponding to the legal requirements.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if this occurs in the context of the use of services provided by third parties or the disclosure or transfer of data to other persons or companies, this will only occur if it occurs in order to fulfil our (pre)contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests, or on the basis of your consent. Subject to legal or contractual permissions, we process or leave the data in a third country only if the legal requirements are met. I.e. the processing takes place e.g. on the basis of special guarantees, like the officially recognized statement of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield“) or observance of officially recognized special contractual obligations.

Rights of data subjects

You have the right to ask for confirmation as to whether the data in question will be processed and for information about this data and for further information and copying of the data in accordance with the provisions of the law.

You have the right, in accordance with the provisions of the law, to ask for the completion of the data concerning you or the correction of the incorrect data concerning you.

You have the right, in accordance with the provisions of the law, to demand that the data in question be deleted without delay or, alternatively, to demand that the processing of the data be restricted in accordance with the provisions of the law.

You have the right to demand that the data concerning you that you have provided to us be received in accordance with the provisions of the law and that it be passed on to other responsible parties.

You also have the right, in accordance with the statutory provisions, to file a complaint with the competent supervisory authority.

Right of revocation

You have the right to revoke consent with effect for the future.

Right of objection

You may at any time object to the future processing of the data concerning you in accordance with the statutory provisions. The objection may in particular be made against the processing for the purposes of direct marketing.

Registration function

users can create a user account. Within the scope of registration, the required mandatory data will be communicated to the users and processed on the basis of Art. 6 Para. 1 lit. b DSGVO for the purpose of providing the user account. The processed data includes in particular the login information (name, password and an e-mail address). The data entered during registration will be used for the purposes of using the user account and its purpose.

Users may be informed by e-mail of information relevant to their user account, such as technical changes. If users have terminated their user account, their data will be deleted with regard to the user account, subject to a statutory retention obligation. It is the responsibility of the users to secure their data before the end of the contract in the event of termination. We are entitled to irretrievably delete any user data stored during the term of the contract. Within the framework of using our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. A passing on of these data to third parties does not take place in principle, except it is necessary for the pursuit of our requirements or it exists for this a legal obligation in accordance with art. 6 exp. 1 lit. c. DSGVO. The IP addresses will be anonymised or deleted after 7 days at the latest.

Comments and contributions

If users leave comments or other contributions, their IP addresses may be changed on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO for 7 days. This is done for our security if someone leaves illegal contents (insults, forbidden political propaganda, etc.) in comments and contributions. In this case, we may ourselves be prosecuted for the comment or contribution and are therefore interested in the identity of the author.

Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO, to process user data for the purpose of spam detection.

On the same legal basis, we reserve the right to store user IP addresses for the duration of surveys and to use cookies in order to avoid multiple votes.

The personal information provided in the course of comments and contributions, any contact and website information as well as the content information will be stored permanently by us until the user objects.

Comment subscriptions

The follow-up comments can be subscribed to by users with their consent pursuant to Art. 6 Para. 1 lit. a DSGVO. Users receive a confirmation email to check whether they are the owner of the email address entered. Users can unsubscribe from current commentary subscriptions at any time. The confirmation email will contain information on the cancellation possibilities. For the purposes of proving users' consent, we store the time of registration in addition to the users' IP address and delete this information when users unsubscribe from the subscription.

You can cancel the receipt of our subscription at any time, i.e. revoke your consent. We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for cancellation is possible at any time, provided that the former existence of a consent is confirmed at the same time.

Contact us

When contacting us (e.g. by contact form, e-mail, telephone or via social media), the user's details are used to process the contact request and its processing pursuant to Art. 6 Para. 1 lit. b. (within the framework of contractual/pre-contractual relationships), Art. 6 Para. 1 lit. f. (other inquiries) DSGVO processed... User data may be stored in a Customer Relationship Management System (CRM System) or similar inquiry organisation. We will delete inquiries if they are no longer necessary. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

Hosting and e-mailing

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services as well as technical maintenance services which we use for the purpose of operating this online service. our hosting provider inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service pursuant to Art. 6 Para. 1 lit. f DSGVO in connection with Art. 28 DSGVO (conclusion of an order processing contract).

Collection of access data and log files

We, resp. our hosting provider, raise on the basis of our legitimate interests in the sense of Art. 6 para. 1 lit. f. DSGVO data about each access to the server on which this service is located (so-called server log files). Access data includes the name of the website accessed, the file, the date and time of access, the volume of data transferred, the message indicating successful access, browser type and version, the user's operating system, referrer URL (the page previously visited), IP address and the requesting provider.

Log file information is stored for a maximum period of 7 days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data, the further storage of which is necessary for evidence purposes, is excluded from the solution until the respective incident has been finally cleared.

Content-Delivery-Netzwerk von Cloudflare

We use a so-called "Content Delivery Network" (CDN), offered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active).
A CDN is a service with whose help contents of our on-line offer, in particular large Mediendateien, like diagrams or scripts with the help of regionally distributed and over the Internet connected servers, are faster delivered. The processing of user data is carried out solely for the aforementioned purposes and to maintain the security and functionality of the CDN.

The use is based on our legitimate interests, i.e. interest in the secure and efficient provision, analysis and optimisation of our online services pursuant to Art. 6 Para. 1 lit. f). DSGVO.

Further information can be found in the data protection declaration of Cloudflare: https://www.cloudflare.com/security-policy.

Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via a user interface (and thus integrate Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users' personal data, reference is made to the following information on Google services. Terms of use: https://www.google.com/intl/de/tagmanager/use-policy.html.

Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 para. 1 lit. f. DSGVO) Google Analytics, a web analysis service of Google LLC (“Google“). Google uses cookies. The information generated by the cookie about users' use of the website is generally transmitted to and stored by Google on servers in the United States.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online services by users, to compile reports on the activities within this online service and to provide us with other services associated with the use of this online service and the Internet. In doing so, pseudonymous user profiles of the users can be created from the processed data.

We only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is checked by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and deleted from a Google server in the United States. The IP address transmitted by the user's browser will not be aggregated with any other data held by Google. Users may refuse the use of cookies by selecting the appropriate settings on their browser, they may also refuse the use of cookies by selecting the appropriate settings on their browser, they may refuse the processing of information about themselves and about the use of cookies by selecting the appropriate settings on their browser, and they may refuse the processing of such information by Google, by selecting the appropriate settings on Google's website, and by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information on Google's use of data, preferences and objections, see Google's privacy policy (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Users' personal data will be deleted or anonymised after 14 months.

Matomo

The information generated by the cookie about your use of this website will only be stored on our server and will not be disclosed to third parties; service provider: Web analysis/range measurement in self-hosting; website: https://matomo.org/; deletion of data: The cookies have a maximum storage period of 13 months.

Onlineshop

Order processing in the online shop and customer account

We process the data of our customers within the framework of the order process in our online shop to enable them to select and order the selected products and services, as well as their payment and delivery, or execution.

The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing our customers, prospective customers and other business partners. Processing is carried out for the purpose of providing contractual services within the scope of operating an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping basket and permanent cookies to store the login status.

The processing is carried out for the fulfilment of our services and the execution of contractual measures (e.g. the execution of order transactions) and insofar as it is prescribed by law (e.g. legally required archiving of business transactions for trade and tax purposes). The information marked as necessary is required to substantiate and fulfil the contract. We will only disclose the data to third parties within the framework of delivery, payment or within the framework of the statutory permits and obligations, and also if this is done on the basis of our legitimate interests, about which we will inform you within the framework of this data protection declaration (e.g. to legal and tax advisors, financial institutions, freight companies and authorities).

Users can optionally create a user account by viewing their orders in particular. During the registration process, the necessary mandatory information will be provided to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to its retention is necessary for commercial or tax reasons. Data remain in the customer account until its deletion with subsequent archiving in the case of a legal obligation or our legitimate interests (e.g., in the case of legal disputes). It is the responsibility of the users to secure their data in the event of termination before the end of the contract.

Within the scope of registration and renewed registrations as well as use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. A passing on of these data to third parties does not take place in principle, except it is necessary for the pursuit of our legal requirements as justified interest or it exists for this a legal obligation.

The cancellation takes place after expiry of statutory warranty and other contractual rights or obligations (e.g., payment claims or performance obligations from contracts with customers), whereby the necessity of storing the data is reviewed every three years; in the case of storage due to statutory archiving obligations, the cancellation in this respect takes place after their expiry.

External payment service providers

We use external payment service providers whose platforms users and we can use to carry out payment transactions. These payment service providers may include, in each case with a link to the privacy statement: Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), , Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/).

Within the framework of the fulfilment of contracts, we set the payment service providers on the basis of Art. 6 para. 1 lit. b. DSGVO. In addition, we use external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO in order to offer our users effective and secure payment options.

The data processed by the payment service providers includes inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, total and receiver-related data. The information is required to complete the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account- or credit card-related information, but only information with confirmation or negative information about the payment. Under certain circumstances, the data may be transmitted by the payment service provider to credit agencies. The purpose of this transfer is to verify identity and creditworthiness. Please refer to the general terms and conditions and data protection information of the payment service providers. The payment transactions are subject to the terms and conditions and data protection notices of the respective payment service providers, which can be accessed within the respective websites or transaction applications. We also refer to these for the purpose of further information and assertion of revocation, information and other rights affected.

Administration, financial accounting, office organization, contact management

We process data within the framework of administrative tasks as well as the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. Here we process the same data that we process within the framework of the provision of our contractual services. The processing bases are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, Büroorganisation, archiving of data, i.e. tasks which serve the maintenance of our business activities, performance of our tasks and provision of our services. The cancellation of the data with regard to contractual services and contractual communication corresponds to the data specified in these processing activities.

We disclose or transmit data to the tax authorities, consultants, such as tax consultants or accountants, as well as other tax offices and payment service providers.

Furthermore, on the basis of our business interests, we store information on suppliers, organisers and other business partners, e.g. for the purpose of contacting them later. This data, which is mainly company-related, is generally stored permanently.

Cookies

Cookie

„Cookies„ are small files that are stored on the user's computer. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit to an online offer.

„Temporary cookies„, or „session cookies„ or „transient cookies„, are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping basket in an online shop or a login status can be stored. Cookies are referred to as „permanent“ or „persistent“ which remain stored even after the browser is closed. For example, the login status can be saved if users visit the site after several days. Likewise, the interests of the users can be stored in such a cookie, which are used for range measurement or marketing purposes. As „Third-Party-Cookie“ are called Cookies, which are offered by other providers than the responsible person, who operates the online offer (otherwise, if it is only his Cookies one speaks of „First-Party Cookies“).

We may use temporary and permanent cookies and clarify this in our privacy policy.

Processing of cookie data based on consent:

Before we process or have processed data in the context of the use of cookies, we ask the users for their consent, which can be revoked at any time. Before this consent has not been given, cookies will be used if necessary, which are absolutely necessary for the operation of our online offer.

You can set your browser so that you can

• be informed about the setting of cookies, 
• only allow cookies in individual cases, 
• exclude the acceptance of cookies for specific cases or in general, 
• activate the automatic deletion of cookies when the browser is closed.

The cookie settings can be managed for the respective browsers using the following links:

• Google Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
• Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
• Opera: https://help.opera.com/en/latest/

Cookie settings/confirmation option:

General objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU-Site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that not all functions of this online offer can be used.

Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via a user interface (and thus integrate e.g. Google Analytics and other Google marketing services into our online offer). The Tag Manager itself (which implements the tags) does not process any personal data of the users.

With regard to the processing of users' personal data, reference is made to the following information on Google services. Guidelines for use: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we use Google Analytics, a web analysis service of Google LLC („Google“). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transferred to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.

We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser is not combined with other data from Google. Users may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website and by downloading and installing the browser plugin available at http://tools.google.com/dlpage/gaoptout?hl=de">http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on the use of data by Google, setting and objection possibilities, can be found in Google's data protection declaration (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

The personal data of users will be deleted or anonymised after 14 months.

Matomo

The information generated by the cookie about your use of this website is only stored on our server and is not passed on to third parties; service provider: Web analysis/range measurement in self-hosting; website: https://matomo.org/; deletion of data: The cookies have a maximum storage period of 13 months.

Google Ads and Conversion-Tracking

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, („Google“).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)

We use the online marketing process Google "AdWords" to place ads on the Google advertising network (e.g., in search results, in videos, on web pages, etc.) so that they are displayed to users who have a presumed interest in the ads. This allows us to display ads for and within our online services in a more targeted manner, so that we only show users ads that potentially match their interests. For example, if a user is shown ads for products that he or she has been interested in on other websites, this is called the "remarketing ratio". For these purposes, when our and other websites on which the Google advertising network is active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "Web Beacons quota") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (instead of cookies, comparable technologies can also be used). This file records which websites the user has visited, what content he is interested in and which offers the user has clicked on, as well as technical information on the browser and operating system, referring websites, visiting time and other information on the use of the online offer.

Furthermore we receive an individual „Conversion-Cookie“. The information obtained with the help of the cookie is used by Google to compile conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users.

User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process e.g. the name or e-mail address of the user, but processes the relevant data cookie-related within pseudonymous user profiles. I.e. from the point of view of Google, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymisation. The information collected about the user is transmitted to Google and stored on Google's servers in the USA.

Further information on the use of data by Google, setting and objection possibilities, can be found in Google's data protection declaration (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Double Click

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, („Google“).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)

We use the online marketing process Google "Doubleclick" to place ads in the Google advertising network (e.g., in search results, in videos, on web pages, etc.). Double Click is characterised by the fact that ads are displayed in real time based on the presumed interests of users. This allows us to display ads for and within our online offering in a more targeted manner, so that users are only presented with ads that potentially match their interests. For example, if a user is shown ads for products that he or she has been interested in on other websites, this is called the "remarketing ratio". For these purposes, when our and other websites on which the Google advertising network is active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "Web Beacons quota") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (instead of cookies, comparable technologies can also be used). This file records which websites the user has visited, what content he is interested in and which offers the user has clicked on, as well as technical information on the browser and operating system, referring websites, visiting time and other information on the use of the online offer.

The IP address of the user is also recorded, whereby this is shortened within member states of the European Union or in other states which are parties to the Agreement on the European Economic Area and only in exceptional cases is it transmitted in its entirety to a Google server in the USA and shortened there. Google may also combine the above information with information from other sources. If the user subsequently visits other websites, advertisements tailored to his or her interests can be displayed on the basis of his or her user profile.

User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process e.g. the name or e-mail address of the user, but processes the relevant data cookie-related within pseudonymous user profiles. I.e. from the point of view of Google, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymisation. The information collected by Google Marketing Services about the users is transmitted to Google and stored on Google's servers in the USA.

Further information on the use of data by Google, setting and objection possibilities, can be found in Google's data protection declaration (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Google Fonts

Wir binden die Schriftarten ("Google Fonts") des Anbieters Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ein. Datenschutzerklärung: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Maps

We integrate the maps of the service “Google Maps” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually within the framework of the settings of their mobile devices). The data may be processed in the USA. Privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Optimize

In addition, the web analysis and optimisation service "Google Optimize" is used on our website. We use the Google Optimize service to increase the attractiveness, content and functionality of our website by making new functions and content available to a percentage of our users and statistically evaluating changes in use. Google Optimize uses cookies to help us optimize and analyze how you use our website. Google will use this information for the purpose of evaluating your use of our website, compiling reports on optimisation tests and related website activity and providing other services relating to website activity and internet usage.

The processing of Google Analytics and Optimize is carried out in accordance with Art. 6 para. 1 lit. a DSGVO on the basis of the consent you have given. We have concluded an order processing contract with the service provider in which we oblige him to protect the data of our customers and not to pass them on to third parties.

As a transfer of personal data to the US takes place, further safeguards are needed to ensure the level of data protection under the DSGVO. In order to guarantee this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c DSGVO. These clauses oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we will endeavour to obtain additional regulations and commitments from the recipient in the USA.

The terms of use of Google Analytics and information on data protection can be accessed via the following links: marketingplatform.google.com/about/analytics/terms/en/ as well as under www.google.de/intl/de/policies/.

>The data will be deleted as soon as they are no longer required for the purpose of their collection. User and event-level data linked to cookies, user IDs (e.g. User ID) and advertising IDs (e.g. DoubleClick cookies, Android Advertising ID, IDFA [Apple Advertiser ID]) will be deleted no later than 14 months after their collection.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the URL tools.google.com/dlpage/gaoptout.

Information on the handling of user data at Google Analytics can be found in the Google privacy policy: support.google.com/analytics/answer/6004245

Tradedoubler

The data controller has integrated Tradedoubler components into this website. Tradedoubler is a German affiliate network that offers affiliate marketing. Affiliate marketing is an Internet-based form of distribution that enables commercial operators of Internet sites, so-called merchants or advertisers, to display advertising, which is usually paid for by click or sale commissions, on the Internet sites of third parties, i.e. distribution partners also known as affiliates or publishers. The Merchant provides an advertising medium via the Affiliate Network, i.e. an advertising banner or other suitable means of Internet advertising, which is subsequently integrated by an Affiliate on its own Internet pages or advertised via other channels, such as keyword advertising or e-mail marketing.

The operating company of Tradedoubler is Tradedoubler GmbH, Herzog-Wilhelm-Strasse 26, 80331 Munich, Germany.

Tradedoubler places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. The Tradedoubler tracking cookie does not store any personal data. Only the identification number of the Affiliate, i.e. the partner referring the potential customer, as well as the order number of the visitor to a website and the advertising material clicked on are stored. The purpose of storing this data is to process commission payments between a merchant and the Affiliate, which are processed via the Affiliate network, i.e. Tradedoubler.

The person concerned can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Tradedoubler from setting a cookie on the information technology system of the person concerned. In addition, cookies that have already been set by Tradedoubler can be deleted at any time via an Internet browser or other software programs.

Tradedoubler's current data protection regulations can be accessed at http://www.tradedoubler.com/de/datenschutzrichtlinie/.

External content

Online presence in social media

We maintain online presentations within social networks and platforms in order to communicate with customers, interested parties and users active there and to inform them about our services. We would like to point out that user data can be processed outside the European Union. This could result in risks for users, e.g. because it could make it more difficult to enforce users' rights. With regard to US providers that are certified under the Privacy Shield, we would like to point out that they are thereby obligated to comply with the data protection standards of the EU.

Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer in which the user's usage behaviour and interests are stored. Furthermore, data may also be stored in the user profiles independently of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to these platforms).

The processing of the users' personal data is based on our legitimate interests in the effective information of the users and communication with the users pursuant to Art. 6 Para. 1 lit. f). DSGVO. If the users are asked by the respective providers for their consent to data processing (i.e. their consent e.g. to tick off a checkbox or to confirm a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.

Füfor a detailed description of the respective processing operations and the objection possibilities (opt-out), we refer to the following linked information of the providers.

Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless need help, please contact us.

- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Statement: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – privacy statement:  https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, data protection sign: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Aktiv.

- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – privacy statement/ Opt-Out: http://instagram.com/about/legal/privacy/.

- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - privacy statement: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – privacy statement/ Opt-Out: https://about.pinterest.com/de/privacy-policy.

- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) - privacy statement https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) - privacy statement/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

- Wakalet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) - privacy statement/ Opt-Out: https://wakelet.com/privacy.html.

- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Deutschland) - privacy statement/ Opt-Out: https://soundcloud.com/pages/privacy.

Integration of third-party services and content

Within our online offer, we place great value on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. of the German Civil Code). DSGVO) content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).

This always presupposes that the third party providers of this content perceive the IP address of the user, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We make every effort to use only those contents whose respective providers only use the IP address to deliver the contents. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" allow information on how visitor traffic on the pages of this website is evaluated. The pseudonymous information may also be stored in cookies on the user's computer and may contain, among other things, technical information about the browser and operating system, referring web pages, visiting times and other information about the use of our online service, as well as may be linked to such information from other sources.

Google Fonts

We integrate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Maps

We integrate the maps of the service “Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, IP addresses and location data of users, which will not be collected without their consent (usually as part of the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Using Facebook Social Plugins

We use the information provided on this website on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering in the sense of Art. 6 Para. 1 lit. f. DSGVO) Social Plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online service within Facebook. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user calls up a function of this online service that contains such a plugin, his device establishes a direct connection with Facebook's servers. Facebook transmits the content of the plugin directly to the user's device and integrates it into the online offering. User profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore inform the user according to our state of knowledge.

Through the integration of the plugins Facebook receives the information that a user has called up the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plug-ins, for example by pressing the Like button or commenting, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, Facebook still has the option of finding out his IP address and storing it. According to Facebook, only an anonymous IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and settings for the protection of users' privacy, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect information about him or her via this online service and link it to his or her member data stored on Facebook, he or she must log out of Facebook and delete his or her cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads  or üabout the US site http://www.aboutads.info/choices/  or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are accepted for all devices such as desktop computers or mobile devices.

Instagram

Within our online offer functions and contents of the service Instagram, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated. This may include, for example, content such as images, videos or text and buttons with which users can share content from this online offering within Instagram. If the users are members of the Instagram platform, Instagram can assign the call of the above content and functions to the profiles of the users there. Instagram Privacy Policy: http://instagram.com/about/legal/privacy/.

Xing

Within our online offer, functions and contents of the service Xing, offered by XING AG, Dammtorstraß e 29-32, 20354 Hamburg, Germany, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online service within Xing. If the users are members of the Xing platform, Xing can assign the call of the above-mentioned contents and functions to the profiles of the users there. Privacy policy of Xing: https://privacy.xing.com/de/datenschutzerklaerung.