In this privacy policy, we inform you about the processing of personal data when using our website and our social media presences. The term “personal data” has the meaning of the definition in Art. 4 No. 1 DSGVO.
I. Person responsible/contact person The contact person and responsible person within the meaning of the DSGVO for the processing of personal data when calling up this website is Marie-Sophie Kiepe.
II. Data processing on our website
1. General information Every time you call up and use our website, we collect personal data, so-called “necessary access data”. This data is automatically provided to us by your access device via the browser. The necessary access data includes in particular:
Your IP address
Date and time of use
Address of the website accessed and the website currently open
Information about the browser used and your operating system
Any session IDs, device identifiers or other unique identifiers.
The processing of the necessary access data is required to enable the establishment of the connection, the retrieval and display of the website and thus the visit to the website. The permanent functional and security guarantee of our website is also dependent on the processing of the necessary access data. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b) DSGVO, as the data is necessary for the implementation of the website usage contract.
2. Use of social plugins Our website uses so-called social plugins from Facebook, Instagram and Vimeo. The plugin is marked with the corresponding logos. By integrating the plug-in, the respective network receives the information that you have accessed the corresponding page of our website. If you are logged in to one of the networks, this network can assign this information to your profile. If you do not want the network to collect information about your visit to our website, you must therefore log out beforehand. However, there is always the possibility that the network will find out your IP address and store it, even though you have not registered there or are not logged in. We also have no information on the deletion of the collected data by the plug-in provider. The plug-in provider stores the data collected about you as a usage profile and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles with the service providers. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. a) DSGVO. For the purpose, duration and scope of the data collection and the further processing and use of your data, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection notices of the respective social networks:
3. Reservation The legal basis for the processing of your personal data in that case is Art. 6 para. 1 lit b. DSGVO.
4. Subscription to the newsletter We use the so-called double-opt-in procedure to subscribe to our newsletters. This means that after you have provided your e-mail address, we will send you a confirmation e-mail to the e-mail address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter. The storage serves the purpose of being able to send you the newsletter. Furthermore, we store your IP addresses and the times of your registration when you register and confirm in order to prevent misuse of your personal data and to be able to provide proof of correct sending. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. a) MailChimp. In addition, a dispatch history of the newsletters sent to you is created in order to be able to provide information about this; your usage behaviour is not usually stored here. The legal basis for this is Art. 6 para. 1 lit. f) DSGVO.
The only mandatory information for sending the newsletter is the e-mail address. You have the right to revoke your consent to the sending of the newsletter at any time. Your revocation does not affect the lawfulness of the processing of your personal data until the revocation. You can declare the revocation by clicking on the link provided in every newsletter email or by sending a message to the sender’s address, in an emergency also to the contact details provided in the imprint or the privacy policy.
We use the service provider MailChimp for sending the newsletters as a processor according to Art. 28 DSGVO.
5. Use of cookies
5.1 General information Our website uses so-called cookies. Cookies are small text files that are stored on your terminal device and saved by your browser. They serve to make our offers more user-friendly, effective and secure. We use both so-called temporary cookies, which are automatically deleted when you close your browser (“session cookies”), and persistent (permanent) cookies.
You have the choice of whether to allow cookies to be set. You can make changes in your browser settings. In principle, you have the choice of accepting all cookies, being informed when cookies are set or rejecting all cookies. If you choose the latter option, it is possible that you will not be able to make full use of our services.
When cookies are used, a distinction must be made between cookies that are absolutely necessary and those for more extensive purposes (measuring access figures, advertising purposes).
5.2 Mandatory cookies when using the website We use session cookies on our websites that are mandatory for the use of our websites. These include cookies that enable us to recognise you while you are visiting the site as part of a single session. These session cookies also guarantee the functions of the quizzes and knowledge tests and the security of online forms through the specially programmed captcha.
5.3 Use of cookies in our legitimate interest Below you will find an overview of the cookies that we use on the basis of our legitimate interest in order to improve our website. You will also find an opt-out option with each explanation of the use.
5.4 Google Analytics with anonymisation function We use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”, on our website. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.
The information generated by these cookies, such as the time, place and frequency of your website visit, including your IP address, is transmitted to Google in the USA and stored there.
We use Google Analytics with the addition “_gat._anonymizeIp” on our website. In this case, your IP address will already be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymised.
Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
Google will not, according to its own information, associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, Google offers a deactivation add-on for the most common browsers, which gives you more control over what data Google collects about the websites you visit. The add-on tells the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the Google Analytics browser deactivation add-on does not prevent information from being transmitted to us or to other web analytics services we may use. For more information on installing the browser add-on, please click on the following link: https://tools.google.com/dlpage/gaoptout?hl=de
If you visit our site via a mobile device (smartphone or tablet), you must click this link instead to prevent tracking by Google Analytics within this website in the future. This is also possible as an alternative to the above browser add-on. By clicking the link, an opt-out cookie will be set in your browser that is only valid for this browser and domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted, so you will have to click the link again. If you have consented to your web and app browsing history being linked to your Google Account by Google and to information from your Google Account being used to personalise ads, Google will use your data together with Google Analytics data to create audience lists for cross-device remarketing. To do this, Google Analytics first collects your Google-authenticated ID on our website, which is linked to your Google account (i.e. personal data). Google Analytics then temporarily links your ID with your Google Analytics data in order to optimise our target groups.
If you do not agree to this, you can turn this off by making the appropriate settings in the “My Account” section of your Google account.
5.5 Doubleclick Ad Exchange If Doubleclick Ad Exchange, a web advertising service of Google Inc., USA (“Google”), places advertisements (text ads, banners, etc.) on this website, your browser may store a cookie sent by Google Inc. or third parties. The information stored in the cookie may be recorded, collected and evaluated by Google Inc. or third parties. In addition, the Doubleclick Ad Exchange also uses so-called “web bacons” (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or Web Bacon about your use of this website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the Doubleclick Ad Exchange ads. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Insofar as IP addresses are transmitted and stored in this context, this will only be done to combat and filter spam/fraud (ad impression spam and click spam). This data is strictly accessible only to the anti-abuse teams. The IP address is not associated with any other data stored by Google. You can prevent cookies from being stored on your hard drive and web bacons from being displayed. To do this, you must select “do not accept cookies” in your browser settings. You can find more information here: http://www.google.com/policies/technologies/ads/
III. Offers in social media
1. General information In order to offer you the greatest possible convenience, we can also be reached via various social media.
These are pages on Facebook and Instagram.
If you do not have your own account with the provider or are not logged in there, no personal data will be transferred when you visit the provider’s page via our link. For details on the collection and storage of your personal data as well as the type, scope and purpose of their use by the operator of the respective social network, please refer to the data protection declarations of the respective operator:
Instagram is a service of the company Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, privacy policy available at https://help.instagram.com/519522125107875
2. Facebook fan page We operate a fan page on the social network of Ireland Limited, 4 Grand Canal Squ-are, Dublin 2, Ireland (“Facebook”) in joint responsibility with Facebook in order to inform our interested parties about the latest developments concerning our projects and also to communicate with them occasionally.
In doing so, we may receive statistics from Facebook about the use of our fan page (e.g. information about numbers, names, interactions such as likes and comments, and aggregate demographic and other information or statistics). For more information about the nature and extent of these statistics, please see the Facebook Page Statistics Notice(https://www.facebook.com/business/pages/manage#page_insights).
For more information on the respective responsibilities, please see Facebook’s shared responsibility supplement (https://www.facebook.com/legal/terms/page_controller_addendum). The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO based on our aforementioned legitimate interest.
We have no influence on data that is processed by Facebook under its own responsibility in accordance with Facebook’s terms of use. However, we would like to point out that when you visit the Fanpage, data about your usage behaviour is transferred from Facebook and the Fanpage to Facebook. Facebook itself processes the aforementioned information to create more detailed statistics and for its own market research and advertising purposes, over which we have no influence. You can find more information on this in Facebook’s data policy (https://www.facebook.com/about/privacy/). In the event that personal data is transferred to the USA, Facebook has submitted to the EU-US Privacy Shield.
Insofar as we receive your personal data when operating the Fanpage, you are entitled to the rights stated in this data protection declaration (VI.). If you also wish to assert your rights against Facebook, the easiest way to do this is to contact Facebook directly. Facebook knows the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing and can implement appropriate measures upon request if you exercise your rights. We will be happy to support you in asserting your rights as far as we are able and will forward your requests to Facebook.
IV. Passing on data We handle the passing on of your data by us very strictly. We only pass on your data if you have given us your consent to do so (Art. 6 para. 1 sentence 1 lit. a) DSGVO), if it is necessary for the assertion, exercise or defence of legal claims and if there is no reason to assume that you have an overriding interest worthy of protection in not having your data passed on (Art. 6 para. 1 sentence 1 lit. f) DSGVO), if it is necessary for the performance of the contractual relationship with you, or if it is necessary for the fulfilment of the contractual relationship with you. 6 para. 1 sentence 1 lit. f) DSGVO), this is necessary for the performance of the contractual relationship with you or the initiation of the contract (Art. 6 para. 1 sentence 1 lit. b) DSGVO) or we are legally obliged to do so (Art. 6 para. 1 sentence 1 lit. c) DSGVO).
We sometimes use service providers to offer our website and process your personal data. In addition to the service providers explicitly mentioned in this privacy policy, this may include, in particular, data centres for the storage of our website, IT service providers for the maintenance of our services and consulting companies for the compliance with our legal obligations. The service providers we use may only use your data in accordance with our instructions and only to fulfil the purposes intended by us. We take the greatest possible care in selecting and commissioning our service providers and monitor them regularly. In addition, they themselves have suitable technical and organisational measures in place to take account of the protection of the rights of the respective data subjects.
In addition to the legal obligations under Art. 6 para. 1 sentence 1 lit. c), your data may also be disclosed as a result of official enquiries, court orders/decisions and other legal proceedings.
V. Storage period We store your personal data only as long as this is necessary for the fulfilment of contractual or legal obligations. After that, the data will be deleted immediately by us, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for civil law claims or on the basis of statutory obligations to preserve records.
For evidentiary purposes, we must retain contractual data for three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred at this point at the earliest in accordance with the statutory limitation period.
Even after this, we still have to store some of your data for accounting reasons. We are obliged to do so because of legal documentation obligations that may arise from the German Commercial Code, the German Fiscal Code, the German Banking Act, the German Money Laundering Act and the German Securities Trading Act. The periods specified there for the retention of documents are two to ten years.
VI. Data subject rights You have the right to obtain information from us about the processing of your personal data. In this context, we will provide you with more detailed information about our data processing and an overview of the data stored about you. If any of the data we hold about you is incorrect or out of date, you have the right to have it corrected. You may also request the deletion of your data. Please note that your data can only be deleted if certain conditions are met or if we no longer need your data, the processing is unlawful or there are other reasons in accordance with Art. 17 DSGVO. If a deletion requested by you is exceptionally not possible due to other legal provisions, the data will be blocked if the conditions for this exist. Blocking means that this data is only available for the legal purpose. You can also have the processing of your personal data restricted if, for example, the accuracy of the data is doubted on your part. Under certain conditions, you also have the right to data portability, i.e. that we make a copy of your personal data available to us digitally at your request.
To exercise your rights, please contact us at any time using the contact details above. This also applies if you would like to receive copies of guarantees to prove an adequate level of data protection.
If we receive your personal data when operating the Facebook fan page, you are entitled to the rights set out in this data protection declaration. If you also wish to assert your rights against Facebook, the easiest way to do this is to contact Facebook directly. . Facebook knows the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing and can implement appropriate measures upon request if you exercise your rights. However, we will be happy to assist you in asserting your rights to the extent possible and will forward your requests to Facebook.
Your enquiries regarding the assertion of data protection rights and our responses to them will be stored for documentation purposes for a period of two years and, in individual cases, for the assertion, exercise or defence of legal claims even longer. The legal basis for this is Art. 6 para. 1 lit. f) DSGVO in conjunction with our interests in a legal defence against possible claims according to Art. 82 DSGVO, the avoidance of fines according to Art. 83 DSGVO as well as the fulfilment of our accountability obligations from Art. 5 DSGVO.
You have the right to revoke your consent at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected by this.
Furthermore, if we have protected processing on the basis of Art. 6 (1) sentence 1 lit. f) DSGVO, you may object to the processing of your data at any time on grounds arising from your particular situation. If you object to the processing of your data for direct marketing purposes, you have a general right of objection, which will be implemented by us even without giving reasons.
For revocation or objection, it is sufficient to send an informal message to the contact details mentioned above.
You also have the right to complain to the data protection supervisory authority responsible for us: The Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin. You may assert this right before a supervisory authority in the Member State of your residence, workplace or the place of the alleged infringement.
VII. Amendments to the data protection declaration
We occasionally update this privacy policy, for example when we adapt our website or when the legal requirements change.
