Data protection declaration

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the “Note on the responsible body” section. can be found in this data protection declaration.

How do we collect your data?

Your data is collected on the one hand when you provide it to us. This can be, for example: This is data that you enter into a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided correctly ;perform. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time, free of charge, to receive information about its origin, receptivity ;nger and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given your consent to data processing, you can revoke this consent at any time in the future. You also have the right to request that the processing of your personal data be restricted in certain circumstances. You also have the right to lodge a complaint with the responsible supervisory authority.

You can contact us at any time about this or if you have any further questions about data protection.

Analysis tools and tools from third-party providers

When you visit this website, your surfing behavior can be statistically evaluated. This mainly happens with so-called analysis programs.

Detailed information about these analysis programs can be found in the following data protection declaration.

2. Hosting

We host the content of our website with the following provider:

External hosting

This website is hosted externally. The personal data collected on this website is stored on the server(s) of the host(s). This can be: These include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The external hosting is carried out for the purpose of fulfilling the contract. towards our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 Para. 1 lit. f GDPR ). If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfill its service obligations and follow our instructions with regard to this data.

We use the following host(s):

netcup GmbH
Daimlerstrasse 25DE
76185 Karlsruhe

Order processing

We have concluded an order processing contract (AVV) for the use of the above-mentioned service. This is a contract required by data protection law that ensures that we only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We would like to point out that data transmission over the Internet (e.g. when communicating via email) is subject to security issues. cks may have. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on this website is:

GbR Mirjana Filipovic and Ivan Filipovic
Sigmund Schott Str. 5
68259 Mannheim

Telephone: [Telephone number of the responsible body]
Email: info@falle-sports.com

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.). .) decides.

Storage period

Unless a more specific storage period has been specified within this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate deletion request or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); In the latter case, deletion will take place once these reasons no longer exist.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Paragraph 2 Letter a GDPR, provided that special categories of data are processed in accordance with Article 9 Paragraph 1 GDPR. In the event of express consent to the transfer of personal data to third countries, data processing will also be carried out on the basis of Article 49 (1) (a) GDPR. If you have consented to the storage of cookies or to the access to information on your device (e.g. via device fingerprinting), the data processing will also be carried out on the basis of § 25 Paragraph 1 TTDSG. Consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we process your data on the basis of Article 6 Paragraph 1 Letter b GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. Data processing can also be carried out on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR. Information about the relevant legal basis in each individual case is provided in the following paragraphs of this data protection declaration.

Recipients of personal data

As part of our business activities, we work with various external bodies. In some cases, it is also necessary to transfer personal data to these external bodies. We only pass on personal data to external bodies if this is necessary to fulfill a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest Art. 6 Para. 1 lit. f GDPR has an interest in the transfer or if another legal basis permits the data transfer. When using order processors, we only pass on our customers' personal data on the basis of a valid contract for order processing. In the case of joint processing, a joint processing contract is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LITER. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE TERMS. THE APPLICABLE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN PROOF COMPLEX REASONS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED IN ORDER TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ARTICLE 21 (2) GDPR).

Right to complain to the responsible supervisory authority

In the event of violations of the GDPR, those affected have the right to complain to a supervisory authority, particularly in their member state habitual residence, place of work or the place of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to transfer data that we process automatically based on your consent or in fulfillment of a contract to yourself or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done to the extent that it is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions, you have the right to free information at any time about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, a right to correct or delete this data. You can contact us at any time about this or if you have any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to do so ;check. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
  • If the processing of your personal data was/is happening unlawfully, you may You can request that data processing be restricted instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims; You have the right to request that the processing of your personal data be restricted instead of deletion.
  • If you have lodged an objection in accordance with Article 21 Paragraph 1 of the GDPR, a change must be made. between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data , this data may – apart from their storage - processed only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State will be.

SSL or TLS encryption

This site uses for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator , an SSL or TLS encryption. You can recognize an encrypted connection because the address bar of the browser is "http://" on “https://” changes and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties will be.

4. Data collection on this website

Cookies

Our websites use so-called “cookies”. Cookies are small data packages and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies can be set by us (first-party cookies) or by Third-party companies come from them (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are used to carry out the electronic communication process, to provide certain functions you have requested (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless otherwise Legal basis is provided. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG); Consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases to accept cookies for certain purposes. All or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

You can find out which cookies and services are used on this website in this data protection declaration.

5. Use of cookies

Cookies are small text files or other storage notes that store information on end devices and read it from them. For example, to save the log-in status in a user account, the contents of a shopping cart in an e-shop, the content accessed or the functions used in an online offer. Cookies can also be used for various purposes, such as the functionality, security and convenience of online offerings as well as the creation of analyzes of visitor flows.

Notes on consent: We use cookies in accordance with legal regulations. We therefore obtain prior consent from users unless it is not required by law. In particular, permission is not necessary if the storage and reading of the information, including cookies, is absolutely necessary in order to provide users with a telemedia service they have expressly requested (i.e. our online offering). The revocable consent will be clearly communicated to you and contains information on the respective cookie use.

Notes on data protection legal bases: On which data protection basis we process users' personal data using cookies depends on whether we ask them for consent. If users accept, the legal basis for the use of their data is their declared consent. Otherwise, the data used using cookies will be processed on the basis of our legitimate interests (e.g. in the commercial operation of our online offering and improving its usability) or, if this is within the scope of fulfilling our contractual obligations, if the use of cookies is necessary is to fulfill our contractual obligations. We will explain the purposes for which we use cookies in the course of this data protection declaration or as part of our consent and processing processes.

Storage period: With regard to the storage period, the following types of cookies are distinguished:

  • Temporary cookies (also: session or session cookies):< /strong> Temporary cookies are deleted at the latest after a user has left an online offer and closed their device (e.g. browser or mobile application).
  • Permanent cookies: Permanent cookies remain saved even after the device is closed. For example, the log-in status can be saved and preferred content can be displayed directly when the user visits a website again. The user data collected using cookies can also be used to measure reach. Unless we provide users with explicit information about the type and storage period of cookies (e.g. when obtaining consent), they should assume that they are permanent and that the storage period can be up to two years.
  • < /ul>

    General information on revocation and objection (opt-out): Users can revoke the consent they have given at any time and can also object to the processing in accordance with the legal requirements, including through privacy - Explain your browser settings.

    • Types of data processed: Meta, communication and procedural data (e.g. IP addresses, time information, identification numbers, people involved).
    • Affected persons: Users (e.g. website visitors, users of online services).
    • Legal basis: Legitimate interests ( Art. 6 Paragraph 1 Sentence 1 Letter f) GDPR).

    Further information on processing processes, procedures and services:

    • Compliance: Consent management: Procedure for obtaining, logging, managing and revoking consent, in particular for the use of cookies and similar technologies for storing, reading and processing Information on users’ devices and their processing; Service provider: Execution on servers and/or computers under their own data protection responsibility; Website: https://complianz.io/; Data protection declaration: https://complianz.io/legal/. Further information: An individual user ID, language as well as types of consent and the time of their submission are stored on the server side and in the cookie on the user's device.

    6. Payment procedures

    As part of contractual and other legal relationships, due to legal obligations or otherwise based on our legitimate interests, we offer the data subjects efficient and secure payment options and, in addition to banks and credit institutions, use other service providers (in summary " Payment service provider").

    The data processed by the payment service providers includes inventory data, such as: B. the name and address, bank details, such as. B. Account numbers or credit card numbers, passwords, TANs and checksums as well as contract, total and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. Under certain circumstances, the data may be transmitted by the payment service provider to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness. For this purpose, we refer to the general terms and conditions and data protection information of the payment service providers.

    The terms and conditions and data protection information of the respective payment service providers apply to payment transactions, which can be accessed on the respective websites or transaction applications. We also refer to these for further information and to assert cancellation, information and other rights of those affected.

    • Types of data processed: Inventory data (e.g. full name, home address, contact information, customer number, etc.); Payment data (e.g. bank details, invoices, payment history); Contract data (e.g. subject matter of the contract, term, customer category); Usage data (e.g. page views and length of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions); Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, people involved). Contact details (e.g. postal and email addresses or telephone numbers).
    • Affected persons: Service recipients and clients; Business and contractual partners. Interested parties.
    • Purposes of processing: Provision of contractual services and fulfillment of contractual obligations. Business processes and business procedures.
    • Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR). Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).

    Further information on processing processes, procedures and services:

    • Apple Pay: Payment services (technical connection of online payment methods); Service provider: Apple Inc., Infinite Loop, Cupertino, CA 95014, USA; Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Website: https://www.apple.com /en/apple-pay/. Data protection declaration: https://www.apple.com/legal /privacy/de-ww/.
    • Giropay: Payment services (technical connection of online payment methods); Service provider: giropay GmbH, An der Welle 4, 60322 Frankfurt, Germany; Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Website: https://www.giropay.de. Data protection declaration: https://www.giropay.de/legal/data protection declaration/.
    • Klarna: Payment services (technical connection of online payment methods); Service provider: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden; Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Website: https://www.klarna.com/de. Data protection declaration: https://www.klarna.com/de/datenschutz.
    • Mastercard: Payment services (technical connection of online payment methods); Service provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Website: https://www.mastercard.de/ de-de.html. Data protection declaration: https://www.mastercard.de/de- de/datenschutz.html.
    • PayPal: Payment services (technical connection of online payment methods) (e.g. PayPal, PayPal Plus, Braintree); Service provider: PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg; Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Website: https://www.paypal.com/de. Data protection declaration: https://www.paypal. com/de/webapps/mpp/ua/privacy-full.
    • Stripe: Payment services (technical connection of online payment methods); Service provider: Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA; Legal basis: Fulfillment of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Website: https://stripe.com; Privacy policy: https://stripe.com/de/privacy. Basic for third country transfers: Data Privacy Framework (DPF).
    • Visa: Payment services (technical connection of online payment methods); Service provider: Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, GB; Legal basis : Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Website: https://www.visa.de; Privacy policy: https://www.visa.de/USE_TERMS/visa-privacy-center.html. Base on third country transfers: Appropriateness decision ( GB).

    7. Contact and inquiry management

    When you contact us (e.g. by post, contact form, email, telephone or via social media) as well as within the framework of existing user and business relationships, the details of the inquiring persons are stored processed to the extent that this is necessary to answer contact requests and any requested measures.

    • Types of data processed: Inventory data (e.g. full name, home address, contact information, customer number, etc.); Contact information (e.g. postal and email addresses or telephone numbers); Content data (e.g. textual or visual messages and posts and the information relating to them, such as information on authorship or time of creation); Usage data (e.g. page views and length of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions). Meta, communication and procedural data (e.g. IP addresses, time information, identification numbers, people involved).
    • Affected persons: Communication partners.
    • Purposes of processing: Communication; organizational and administrative procedures; Feedback (e.g. collecting feedback via online form). Provision of our online offering and user-friendliness.
    • Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR). Fulfillment of the contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).

    Further information on processing processes, procedures and services:

    • Contact form: When you contact us via our contact form, by email or other communication channels, we process the personal data transmitted to us to answer and process the request respective concern. This usually includes information such as name, contact information and, if necessary, other information that is provided to us and is necessary for appropriate processing. We use this data exclusively for the stated purpose of contacting and communicating; Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit . f) GDPR).

    8. Web analysis, monitoring and optimization

    Web analysis (also referred to as "reach measurement") is used to evaluate the flow of visitors to our online offering and can contain behavior, interests or demographic information about visitors, such as age or gender, as pseudonymous values With the help of reach analysis, we can, for example, identify at what time our online offering or its functions or content are used most frequently, or invite reuse

    In addition to web analysis, we can also use testing procedures to test and optimize different versions of our online offering or its components.

    Unless otherwise stated below, profiles, i.e. data summarized into a usage process, can be created for these purposes and information can be stored in a browser or in a device and then read out. The information collected includes, in particular, websites visited and elements used there, as well as technical information, such as the browser used, the computer system used and information about times of use. If users have agreed to the collection of their location data to us or to the providers of the services we use, the processing of location data is also possible.

    In addition, the users' IP addresses are stored. However, we use an IP masking process (ie pseudonymization by shortening the IP address) to protect users. In general, as part of web analysis, A/B testing and optimization, no clear user data (such as email addresses or names) is stored, but rather pseudonyms. This means that we and the providers of the software used do not know the actual identity of the users, but only the information stored in their profiles for the purpose of the respective procedures.

    Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, the user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). processed. In this context, we would also like to draw your attention to the information on the use of cookies in this data protection declaration.

    • Types of data processed: Usage data (e.g. page views and length of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions ). Meta, communication and procedural data (e.g. IP addresses, time information, identification numbers, people involved).
    • Affected persons: Users (e.g. website visitors, users of online services).
    • Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors); Profiles with user-related information (creating user profiles). Provision of our online offering and user-friendliness.
    • Security measures: IP masking (pseudonymization of the IP address).
    • Legal basis:< /strong> Consent (Art. 6 Para. 1 Sentence 1 Letter a) GDPR). Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).

    Further information on processing processes, procedures and services:

    • Google Analytics: We use Google Analytics to measure and analyze the use of our online offering based on a pseudonymous user identification number. This identification number does not contain any unique data such as names or email addresses. It is used to assign analysis information to a device in order to identify which content users have accessed within one or different usage processes, which search terms they have used, which they have accessed again or which have interacted with our online offering. The time of use and its duration are also stored, as well as the sources of the users who refer to our online offering and technical aspects of their devices and browsers.
      Pseudonymous profiles of users are created with information from the use of various devices, with cookies can be used. Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides coarse geographic location data by deriving the following metadata from IP addresses: city (and the city's derived latitude and longitude), continent, country, region, subcontinent (and ID-based counterparts). For EU data traffic, IP address data is used exclusively for this derivation of geolocation data before being immediately deleted. They are not logged, are not accessible and are not used for any other purposes. When Google Analytics collects metrics, all IP queries are performed on EU-based servers,before traffic is forwarded to Analytics servers for processing; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR); Website: https://marketingplatform.google .com/intl/de/about/analytics/; Security measures: IP masking (pseudonymization of the IP address); Privacy policy: https://policies.google.com/privacy; Order processing agreement: https://business.safety.google/adsprocessorterms/; Basic basis for third country transfers: Data Privacy Framework (DPF); Opt-out option: Opt-out plugin: https ://tools.google.com/dlpage/gaoptout?hl=de, settings for displaying advertisements: https://myadcenter.google.com/personalizationoff. More information: https://business.safety.google/adsservices/ (Types of processing and the data processed).
    • Google Tag Manager: We use Google Tag Manager, a software from Google that allows us to centralize so-called website tags managed via a user interface. Tags are small pieces of code on our website that are used to record and analyze visitor activity. This technology helps us to improve our website and the content offered on it. The Google Tag Manager itself does not create user profiles, does not store cookies with user profiles and does not carry out any independent analyses. Its function is limited to simplifying and making more efficient the integration and management of tools and services that we use on our website. Nevertheless, when using the Google Tag Manager, the user's IP address is transmitted to Google, which is necessary for technical reasons in order to implement the services we use. Cookies can also be set. However, this data processing only takes place if services are integrated via the Tag Manager.For more detailed information about these services and their data processing, we refer to the further sections of this data protection declaration; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR); Website: https://marketingplatform.google.com; Privacy policy: https://policies.google.com/privacy; Order processing agreement:
      https://business.safety.google/adsprocessorterms . Basic basis for third country transfers: Data Privacy Framework (DPF).

    9. Online marketing

    We process personal data for the purpose of online marketing, which includes in particular the marketing of advertising space or the presentation of advertising and other content (collectively referred to as "content") based on the potential interests of users and the measurement of their effectiveness can.

    For these purposes, so-called user profiles are created and stored in a file (the so-called “cookie”) or similar processes are used, by means of which the user information relevant to the display of the aforementioned content is stored. For example, content viewed, visited Websites, online networks used, but also communication partners and technical information, such as the browser used, the computer system used and information about times of use and functions used, can also be processed if users have consented to the collection of their location data.

    The users' IP addresses are also stored. However, we use available IP masking procedures (ie pseudonymization by shortening the IP address) to protect users. In general, as part of the online marketing process, no clear user data (such as email addresses or names) is stored, but rather pseudonyms. This means that we as well as the providers of online marketing processes do not know the actual user identity, but only the information stored in their profiles.

    The statements in the profiles are usually stored in cookies or using similar methods. These cookies can later generally be read on other websites that use the same online marketing process and analyzed for the purpose of displaying content, as well as supplemented with further data and stored on the server of the online marketing process provider.

    In exceptional cases it is possible to assign clear data to the profiles, especially if the users are members of a social network whose online marketing processes we use and the network connects the user profiles with the aforementioned information. We ask you to note that users can make additional agreements with the providers, for example by giving consent during registration.

    We generally only receive access to summarized information about the success of our advertisements. However, as part of so-called conversion measurements, we can check which of our online marketing processes have led to a so-called conversion, i.e., for example, to the conclusion of a contract with us. Conversion measurement is used solely to analyze the success of our marketing measures.

    Unless otherwise stated, we ask you to assume that cookies used will be stored for a period of two years.

    Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is permission. Otherwise, the users' data will be processed on the basis of our legitimate interests (i.e Interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this data protection declaration.

    Notes on revocation and objection:

    We refer to the data protection information of the respective providers and the objection options specified for the providers (so-called “opt-out”). If no explicit opt-out option has been provided, you have the option of switching off cookies in your browser settings. However, this may limit the functions of our online offering. We therefore also recommend the following opt-out options, which are offered in summary for the respective areas:

    a) Europe: https://www.youronlinechoices.eu.

    b) Canada: https://www.youradchoices.ca/choices.

    c) USA: https://www.aboutads.info/choices.

    d) Cross-territorial: https://optout.aboutads.info.

    • Types of data processed: Usage data (e.g. page views and length of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions ). Meta, communication and procedural data (e.g. IP addresses, time information, identification numbers, people involved).
    • Affected persons: Users (e.g. website visitors, users of online services).
    • Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors); Tracking (e.g. interest/behavioral profiling, use of cookies); target group formation; Marketing; Profiles with user-related information (creating user profiles). Conversion measurement (measuring the effectiveness of marketing measures).
    • Security measures: IP masking (pseudonymization of the IP address).
    • Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR). Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).

    Further information on processing processes, procedures and services:

    • Google Ads and conversion measurement: Online marketing process for the purpose of placing content and advertisements within the service provider's advertising network (e.g. in search results , in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the advertisements. In addition, we measure the conversion of the ads, i.e. whether users took them as an opportunity to interact with the ads and use the advertised offers (so-called conversions). However, we only receive anonymous information and no personal information about individual users; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Website: https://marketingplatform.google.com; Privacy policy: https://policies.google.com/privacy; Basic basis for third country transfers: Data Privacy Framework (DPF); Further information: Types of processing and data processed: https://business.safety.google/adsservices/. Data processing conditions between controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms.

    10. Social media

    Instagram

    Functions of the Instagram service are integrated into this website. These functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

    If the social media element is active, a direct connection is established between your device and the Instagram server created. Instagram thereby receives information about your visit to this website.

    If you are logged into your Instagram account, you can share the contents of this website with your Instagram by clicking on the Instagram button -Link profile. This allows Instagram to assign your visit to this website to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

    The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and § 25 Paragraph 1 TTDSG. Consent can be revoked at any time.

    If personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is jointly responsible for this data processing (Article 26 GDPR). The joint responsibility is limited exclusively to collecting the data and passing it on to Facebook or Instagram. The processing carried out by Facebook or Instagram after forwarding is not part of the shared responsibility. The obligations we share have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal /controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for the data protection-safe implementation of the tool on our website. Facebook is responsible for the data security of Facebook and Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly on Facebook. If you assert your data subject rights with us, we are obliged to forward these to Facebook.

    The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

    You can find further information about this in the Instagram privacy policy: https://privacycenter.instagram.com/policy/.

    The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

    11. Plugins and tools

    Google Fonts (local hosting)

    This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.

    Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

  • Google Maps: We bind the service's maps

    ”Google Maps” from the provider Google. The data processed may include, in particular, IP addresses and location data of users, which, however, are not collected without their consent (usually carried out as part of the settings of their mobile devices); Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Website: https://cloud.google.com/maps-platform; Data protection declaration: https://policies.google.com/privacy; Possibility of objection (opt-out): Opt-out plugin: https ://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of advertising: https://adssettings.google.com/authenticated.

  • Instagram plugins and content: Instagram plugins and content - This can include, for example, content such as images, videos or texts and buttons with which users can access the content of this online offer within can share from Instagram. Service provider: https://www.instagram.com, Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Data protection declaration: https://instagram.com/about/legal/privacy.

  • Google reCAPTCHA: We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

    The purpose of reCAPTCHA is to check whether data entry on this website (e.g. in a contact form) is done by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

    The reCAPTCHA analyzes run completely in the background. Website visitors are not informed that an analysis is taking place.

    The storage and analysis of the data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time.

    Further information about Google reCAPTCHA can be found in the Google data protection regulations and the Google terms of use under the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Deletion of data

The data processed by us will be deleted in accordance with the legal requirements as soon as the consent permitted for processing is revoked or other permissions no longer apply (e.g. if the purpose for processing this data no longer applies or it is used for purpose are not necessary).

Unless the data is deleted because it is necessary for other and legally permissible purposes, its processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons or that must be stored to assert, exercise or defend legal claims or to protect the rights of another natural or legal person is required.

Further information on the deletion of personal data can also be found in the individual data protection information in this data protection declaration.

Source: https://www.