DATA PROTECTION

Supervisory Data Protection Authority

If you believe that the processing of your personal data violates the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a competent supervisory data protection authority.

​

This right exists independently of any other administrative or judicial remedies and may, in particular, be exercised with the supervisory authority of the Member State in which you have your habitual residence, your place of work, or the place of the alleged violation.

​

The competent authority will inform you about the status and the outcome of your complaint, as well as about the possibility of seeking judicial remedies pursuant to Article 78 GDPR.

​

Hosting

Our website is operated by the following external hosting provider:

Wix.com LTD, UNICEMAN 5, Tel Aviv‑Jaffa, 6936025, Israel (hereinafter referred to as “WIX”).

All personal data collected in connection with the use of our website is stored on WIX servers. This data includes, in particular, IP addresses, metadata and communication data, contract information, contact inquiries, contact details, names, access times, as well as other usage-related information.

​

The data collected by WIX may be stored on servers located in various countries, including the United States.

​​

Further details can be found in WIX’s privacy policy: https://wix.com/about/privacy.

​

According to WIX, the transfer of personal data to the United States and other third countries is carried out on the basis of the EU Commission’s Standard Contractual Clauses or comparable safeguards pursuant to Art. 46 GDPR. WIX provides detailed information on this here: https://wix.com/about/privacy-dpa-users.

 

The use of external hosting is carried out to fulfill contractual obligations towards our prospective and existing customers (Art. 6(1)(b) GDPR), as well as based on our legitimate interest in ensuring the reliable, secure, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Where explicit consent has been obtained, data processing is additionally based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of information on the user’s device or access to such information (e.g., through cookies or device fingerprinting). Any consent given may be withdrawn at any time with effect for the future.

​

WIX processes your data exclusively in accordance with our instructions and only to the extent necessary for the fulfillment of its contractual obligations.

​

Data Processing

For the use of the service mentioned above, we have concluded a data processing agreement with WIX in accordance with Article 28 of the GDPR. This agreement ensures that personal data is processed exclusively in accordance with our instructions and in compliance with the applicable data protection regulations. Within this framework, the service provider undertakes to implement appropriate technical and organizational measures to protect the data and not to use it for its own purposes.

​

SSL or TLS Encryption

To protect your data and ensure the secure transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of your browser begins with “https://” and a lock symbol is displayed. When encryption is active, data transmitted cannot be read by third parties.

​

Emails

As part of its services, WIX also provides functions for sending, receiving, and storing emails. In this context, personal data such as the email addresses of senders and recipients, technical information related to the sending process (e.g. involved mail servers and providers), as well as the content of emails are processed. This data processing may also serve to detect and prevent spam.

​​

Please note that emails sent over the internet are generally not fully encrypted. While transport encryption is usually applied, end-to-end encryption is not used unless it has been explicitly set up. Therefore, we cannot assume responsibility for the security of data during transmission between the sender and our hosting server.

 

Processing is carried out on the basis of our legitimate interest pursuant to Article 6(1), sentence 1, point (f) GDPR, in particular to ensure communication capability and system security.

​

Data Retention Period for Personal Data

Unless specific retention periods are specified in this privacy policy, your personal data will be stored only for as long as is necessary to fulfill the respective purpose of processing. Once the purpose no longer applies or you withdraw your consent, the data will be deleted, provided that there are no statutory retention obligations (e.g. under commercial or tax law) to the contrary. In such cases, the data will be deleted after the respective retention period has expired.

​

Legal Bases for Data Processing

The processing of your personal data is carried out on the basis of the following legal provisions:

• Article 6(1)(a) GDPR: where consent has been given

• Article 6(1)(b) GDPR: for the performance of a contract or to take steps prior to entering into a contract

• Article 6(1)(c) GDPR: to comply with a legal obligation

• Article 6(1)(f) GDPR: where processing is based on legitimate interests

• Article 9(2)(a) GDPR: where special categories of personal data are processed with consent

• Article 49(1)(a) GDPR: where explicit consent has been given for the transfer of data to third countries

• Section 25(1) TDDDG: where consent has been given for the storage of information on end devices (e.g. cookies, device fingerprinting)

​​

Any consent given may be withdrawn at any time with effect for the future.

​

Transfer of Data to Third Countries

When using certain services, personal data may be transferred to so-called third countries outside the European Union. If there is no adequacy decision by the European Commission, the transfer is carried out on the basis of appropriate safeguards in accordance with Article 46 GDPR (e.g. Standard Contractual Clauses). In exceptional cases, a transfer may also take place on the basis of your explicit consent pursuant to Article 49(1)(a) GDPR.

​​

Recipients of Personal Data

In the course of our business activities, it may be necessary to disclose personal data to external service providers or contractual partners. Such disclosure takes place exclusively on the basis of a legal permission, a legitimate interest, for the performance of a contract, or where consent has been granted. When working with processors, we conclude corresponding agreements in accordance with Article 28 GDPR. In cases of joint controllership, a contractual arrangement is made pursuant to Article 26 GDPR.​

​

Right to Object under Article 21 GDPR

You have the right to object at any time to the processing of your personal data where such processing is carried out on the basis of Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.

​

In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

​

If your personal data are processed for direct marketing purposes, you have the right to object at any time to such processing. In this case, your personal data will no longer be used for direct marketing purposes (right to object pursuant to Article 21(2) GDPR).

​

Data Protection Rights under the GDPR

• Right to lodge a complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory data protection authority if you believe that the processing of your personal data violates applicable data protection laws.

• Data portability (Article 20 GDPR): You have the right to receive the personal data that we process automatically on the basis of your consent or a contract in a structured, commonly used and machine-readable format. Where technically feasible, you also have the right to have those data transmitted directly to another controller.

• Access, rectification and removal (Articles 15-17 GDPR): You have the right at any time to obtain information about the personal data we have stored about you and to request the rectification or removal of such data, provided that no statutory retention obligations apply.

• Restriction of processing (Article 18 GDPR): Under certain circumstances, you have the right to request the restriction of the processing of your personal data, for example, if the accuracy of the data is contested or if you have objected to the processing.

• Right to object (Article 21 GDPR): You have the right to object at any time to the processing of your personal data, particularly where such processing is based on legitimate interests or is carried out for direct marketing purposes.

 

Objection to Unsolicited Advertising

The use of contact details published as part of our legal notice obligations for the purpose of sending unsolicited advertising and informational materials is hereby expressly prohibited. The operators of this website reserve the right to take legal action in the event of the unsolicited transmission of advertising information, including, but not limited to, spam emails.

​

Provision of the Website and Server Log Files

When you visit our website, certain information is automatically collected by our IT systems and stored in so-called server log files. This information includes:

• Browser type and version

• Operating system

• Device type

• IP address

• Date and time of access

• Pages accessed and referrer URL

​

These data are used for the technical provision, security, and optimization of the website and are not combined with other personal data. Processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR.

​

Use of Cookies

To improve the functionality and user experience of our website, we use cookies. Cookies are small text files that are stored on your device. We use both session cookies that are automatically deleted at the end of your browsing session and persistent cookies that remain stored beyond your session and may, for example, save your preferences for future visits. The storage period of cookies can be found in your browser settings. Cookies may be set either by us (first-party cookies) or by third parties (third-party cookies), for example to integrate external services such as payment providers or analytics tools. Some cookies are technically necessary to provide essential website functions (e.g., shopping cart functionality or video display). Other cookies are used to analyze user behavior or to display personalized content.

​

Legal Bases for Data Processing

• Article 6(1)(f) GDPR: Storage of technically necessary cookies to ensure the stable and secure operation of the website

• Article 6(1)(b) GDPR: Cookies required for the performance of a contract or the implementation of pre-contractual measures

• Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG: Cookies that require consent (e.g., for analytics or advertising purposes)

Any consent given may be withdrawn at any time with effect for the future.

 

Browser Cookie Settings

You can configure your browser to notify you when cookies are set, allow cookies only on a case-by-case basis, reject cookies altogether, or enable the automatic deletion of cookies when the browser is closed.

​

Please note that disabling cookies may limit certain functionalities of this website.

​​

For details on the specific cookies and services used on this website, please refer to the relevant sections of this Privacy Policy below.

​

Contact

If you contact us, such as by email, telephone or through a contact form, we process the personal data you provide solely for the purpose of handling your inquiry and communicating with you. The processing is carried out only to the extent necessary to address your request.

​

Legal Bases for Processing

• Article 6(1)(b) GDPR: Where your inquiry is related to a contract or is intended to lead to the conclusion of a contract

• Article 6(1)(f) GDPR: For general communications based on our legitimate interest in the efficient handling of inquiries

• Article 6(1)(a) GDPR: Where consent has been obtained (such as for information voluntarily provided in a contact form); such consent may be withdrawn at any time

​​

The data you provide will be deleted once the purpose for which it was collected no longer applies, for example after your inquiry has been fully processed, unless statutory retention obligations require otherwise. Your personal data will not be disclosed to third parties without your express consent.

​

Newsletter

If you would like to subscribe to our newsletter, we require your email address as well as information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. For personalized communication within the newsletter, we may also request your name or other information on a voluntary basis, provided that such information is relevant to the purpose of the newsletter. The data collected will be used exclusively for sending the newsletter and will not be shared with third parties.

​

The processing of your data is based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time, for example by using the unsubscribe link included in each newsletter. The withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

​

The data stored for the purpose of sending the newsletter will be retained for as long as your subscription remains active. Once you unsubscribe, your data will be removed from the mailing list. We reserve the right to block or delete email addresses based on our legitimate interest pursuant to Article 6(1)(f) GDPR, for example to prevent misuse.

​

To prevent future mailings, your email address may be added to a so-called blacklist after you unsubscribe. This data will be stored solely for this purpose and will not be combined with other data. The storage of blacklist entries is not subject to a time limit and serves both your interests and our legitimate interest in complying with legal requirements. You may object to such storage if your interests warranting protection outweigh our legitimate interests.

​

Newsletter Performance Tracking

Our newsletters may contain so-called tracking pixels ("web beacons"), which are retrieved from our server or the server of a newsletter service provider when the newsletter is opened. In the course of this process, technical information such as the IP address, browser type, operating system, and the time the newsletter is accessed may be collected. In addition, we analyze whether and when the newsletter has been opened and which links have been clicked.

​

This information is used for statistical evaluation and to optimize our content. The analysis is carried out on a personalized basis and may be attributed to individual recipients where the corresponding consent has been provided. Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time.

​

Marketing Communications

We process personal data for the purpose of direct marketing through various communication channels, including email, telephone, and postal mail. Such processing is carried out in compliance with applicable legal requirements.

​​

Data subjects have the right at any time to withdraw any consent previously given or to object to the processing of their personal data for marketing purposes. In the event of a withdrawal of consent or an objection, we will retain the relevant data required for this purpose (such as contact information) for a limited period, but for no longer than three years following the end of the year in which the objection or withdrawal was received. This retention is based on our legitimate interest in documenting the previously granted consent and defending against potential legal claims. In addition, we retain certain data on a permanent basis to ensure that no further marketing communications are sent to the individual concerned (such as email address, telephone number, and name), also based on our legitimate interest.

​​

In particular, we process subscriber data (such as name, address, and customer number), contact data (such as email address, telephone number, and postal address), and content data (such as message content, contributions, and authorship information). Data subjects include individuals with whom we currently have or previously had marketing-related communications. The processing is carried out for the purposes of direct marketing, sales promotion, and general marketing activities. Furthermore, certain information is stored permanently to prevent future marketing communications. Data are deleted in accordance with our general data retention policies. The legal basis for processing is either your consent pursuant to Article 6(1)(a) GDPR or our legitimate interest pursuant to Article 6(1)(f) GDPR.

​

Online Marketing

As part of our online services, we process personal data for the purposes of online marketing. This includes, in particular, the provision and marketing of advertising space, as well as the display of advertising and other content that may be tailored to users' potential interests. In addition, we measure the effectiveness of such content, for example through so-called conversion tracking.

 

To implement these measures, pseudonymous user profiles are created and stored in cookies or comparable technologies. These profiles may contain information such as pages visited, content viewed, online services and networks used, technical data (e.g., browser type, operating system, usage times, and features used), and, where appropriate consent has been provided, location data. Users' IP addresses are also processed; however, IP masking procedures are applied, whereby the IP address is shortened and thus pseudonymized.

​​

The information stored may also be accessed on other websites that use the same online marketing technologies and may be supplemented with additional data. In exceptional cases, this information may be linked to personally identifiable data, for example where users are members of a social network and have provided the necessary consent.

​

Generally we receive only aggregated information about the effectiveness of our marketing activities. However, as part of conversion tracking, we may be able to determine whether specific content has resulted in a particular action, such as the conclusion of a contract.

 

Unless otherwise stated, cookies and comparable technologies used for these purposes are stored for a period of up to two years.

​

Legal Basis for Processing:
The processing is carried out either on the basis of your consent pursuant to Article 6(1)(a) GDPR, particularly when third-party tools are used, or on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR in the economically efficient and user-friendly design of our online services.

​

Withdrawal of Consent and Right to Object:
Users may object to the processing of their personal data at any time or withdraw any consent previously granted. Information about the respective third-party providers and their opt-out options can be found in the providers' privacy notices. In addition, the storage of cookies can be disabled through your browser settings. Please note that doing so may limit the functionality of our online services.

​

As part of our online marketing activities, we process personal data of users of our online services, in particular usage data (such as page views, time spent on pages, and user interactions) as well as communication and procedural data (such as IP address, device type, and timestamps). Processing is carried out for the purposes of audience measurement, tracking, audience segmentation, the creation of user-related profiles, content marketing, and conversion tracking to evaluate the effectiveness of our marketing activities. Data are processed in a pseudonymized form through IP masking and are generally stored for a period of up to two years. Data are deleted in accordance with our general data retention policies.

​

Google Ads

This website uses Google Ads to deliver content and advertisements within the Google advertising network to users who may have an interest in them. In addition, conversion tracking is used to analyze the effectiveness of advertisements. We receive only anonymized statistical reports and do not obtain any personal information about individual users.

​

Google Ads is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The processing of personal data in connection with this service is carried out on the basis of consent pursuant to Article 6(1)(a) GDPR or, where consent is not required, on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.

​

Further information about Google's data processing practices, the technologies used, and the categories of data processed can be found at: https://business.safety.google/adsservices/

Google's Privacy Policy is available at: https://policies.google.com/privacy

​

Website Analytics

To improve and analyze our online services, we use audience measurement and web analytics tools. These tools help us evaluate user behavior, interests, and technical characteristics of visitors, such as which content is accessed most frequently, at what times visits occur, and which areas may require optimization. Pseudonymized demographic information, such as age or gender, may also be taken into account. In addition, we use testing procedures, such as A/B testing, to compare different versions of our website or individual features and improve their usability.

​

For these purposes, user profiles may be created by combining information relating to individual usage events and storing and retrieving such information on the user's device. The data collected may include visited pages, features used, technical information about the browser and operating system, and usage times. Where consent has been provided for location processing, location data may also be processed. Users' IP addresses are likewise collected; however, they are pseudonymized through IP masking so that they cannot be linked to a specific individual. No directly identifiable information, such as names or email addresses, is stored. Instead, only pseudonymized information is processed, which does not enable us or the service providers we use to identify individual users.

​

In particular, we process usage data, such as page views, time spent on pages, click behavior, device types, operating systems, and interactions with content, as well as metadata, communication data, and procedural data, such as IP addresses, timestamps, and identification numbers. The data subjects concerned are users of our online services, especially website visitors. Processing is carried out for audience measurement, the creation of pseudonymous user profiles, and the improvement of the usability and functionality of our services. Data are retained in accordance with our general data retention and deletion policies. Cookies and similar technologies may remain stored on the user's device for up to two years. The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR and our legitimate interest pursuant to Article 6(1)(f) GDPR.

​

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google LLC, exclusively on the basis of users' prior consent obtained through the cookie banner. For users in the EU, EEA, and Switzerland, the responsible entity is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses IP anonymization by default. As part of this process, users' IP addresses are truncated immediately after collection. Only in exceptional cases is the full IP address transmitted to Google's servers in the United States and anonymized there. According to Google, the truncated IP address is not combined with other Google data.

​

The data processed by Google Analytics include, in particular, usage information, such as page views, interactions with the website, approximate location data, and visit duration, as well as technical information, such as truncated IP addresses, browser type, language settings, and screen resolution. These data are used to statistically evaluate website usage, generate reports on user activities, and optimize our online services.

​

Processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Recipients of the data include Google Ireland Limited, Google LLC, and Alphabet Inc. Data transfers to the United States are based on the adequacy decision of the European Commission dated 10 July 2023, which recognizes Google's certification under the EU-U.S. Data Privacy Framework.

​

Data associated with cookies are automatically deleted once the specified retention period has expired, and no later than two years after collection. Google deletes data whose retention period has expired on a monthly basis. IP addresses are pseudonymized through the "_anonymizeIp()" function, preventing them from being directly linked to individual users.

​

Users may disable data collection by Google Analytics at any time through the cookie settings available on this website. In addition, data collection can be permanently prevented by installing the following browser add-on: https://tools.google.com/dlpage/gaoptout. Alternatively, an opt-out cookie can be set to prevent future data collection when visiting this website.

​

Further information on Google's data processing practices, privacy settings, opt-out options, and privacy policy can be found at:

• https://policies.google.com/privacy

• https://support.google.com/analytics/answer/12017362

• https://adssettings.google.com/authenticated

​

Google reCAPTCHA

To protect our online forms against automated access, we use Google reCAPTCHA. The purpose of reCAPTCHA is to verify whether entries are made by a natural person rather than by automated software programs ("bots"). When reCAPTCHA is used, Google analyzes user behavior on our website as soon as a user interacts with a form. In doing so, various types of information are processed, including the IP address, time spent on the website, mouse movements, and technical characteristics of the device used.

​

The data processed include, in particular, usage data, such as pages visited, date and time of access, and mouse movements, as well as communication data, such as IP addresses, browser type, and operating system. The processing concerns visitors to our website and users of our online forms. The purpose of the processing is to detect and prevent abusive access and to ensure the functionality and security of our web forms. The legal basis for processing is our legitimate interest pursuant to Article 6(1)(f) GDPR.

​

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and, where applicable, our hosting service provider. Processing is generally carried out within the European Union. The retention period of the collected data is determined by Google.

Further information about Google reCAPTCHA and Google's data processing practices can be found in Google's Privacy Policy: https://policies.google.com/privacy

​

Website Analytics (Hosting Provider)

To analyze the use of our website, we use a web analytics tool provided by our hosting provider. This tool collects information about user behavior by combining visitors' IP addresses and user agent data, pseudonymizing this information using a hash function, and encrypting it with a randomly generated value (SALT) that changes daily. This process creates an anonymous visitor identifier that does not allow any conclusions to be drawn about the actual identity of users. The data are not combined with other information and are stored exclusively on the servers of our hosting provider within the European Union.

​

As part of the analysis, web analytics data, HTTP data, and web analytics profile data are processed. This includes, in particular, usage data, such as pages visited, visit frequency, and time spent on the website, as well as communication data, such as browser type, operating system, and IP address. The web analytics profile contains aggregated information about the use of our website and is used solely to improve its presentation, functionality, and content.

​

Processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR, particularly for the purpose of audience measurement and the optimization of our online services. The collected data are shared exclusively with our hosting provider and are processed entirely within the European Union.

​

Blogs

We operate blogs and comparable forms of digital communication on our website (hereinafter collectively referred to as “Blogs”). Within these online services, we process users' personal data only to the extent necessary for the technical provision of the services, interaction between authors and readers, and the maintenance of security.

​

As part of our Blogs, we process personal data such as names, contact information, content submitted by users, usage data, and technical metadata, such as IP addresses and timestamps. Processing is carried out for the purposes of providing and displaying content, communicating with users, ensuring security, and fulfilling organizational requirements. The processing of personal data is based on our legitimate interests pursuant to Article 6(1)(f) GDPR and is subject to the general provisions on data retention and deletion set out in this Privacy Policy under "Retention Period of Personal Data".

​

Comments

If readers leave comments on our website as part of the use of our Blogs or in other designated areas, we store not only the comment itself but also the date and time at which it was submitted, as well as the username chosen by the user. In addition, the user's IP address is recorded. This information is stored for security purposes and to protect against unlawful content, such as defamatory statements, hate speech, or propaganda.

​

Legal Basis for Processing

The processing of your data is based on your consent pursuant to Article 6(1)(a) GDPR. Consent is given by actively submitting a comment. You may withdraw your consent at any time with effect for the future. An informal notification by email is sufficient for this purpose. The lawfulness of any data processing carried out prior to the withdrawal of consent remains unaffected.

​

Data Retention and IP Address Information

Comments and the associated data remain on the website until the commented content has been permanently removed or until the comments must be deleted for legal reasons.

To protect users' privacy, measures may be implemented to prevent the storage of IP addresses, for example through technical configurations or the use of appropriate plugins. If an IP address is nevertheless stored, it will be processed solely for the purpose of preventing misuse and ensuring legal protection.

​

Google Services

Our website uses services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), as well as its subsidiary YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The transfer of personal data, in particular your IP address, takes place only after you have given your explicit consent in accordance with Art. 6(1)(a) GDPR.

​

Please note that certain functions may not be available or may only be available to a limited extent without your consent. You may withdraw your consent at any time, informally and without giving reasons. The lawfulness of any processing carried out prior to the withdrawal remains unaffected.

​

If you consent, please be aware that when using services based in the United States, a level of data protection comparable to that of the European Union cannot be guaranteed. In particular, there is a risk that U.S. authorities may access your data without effective legal remedies being available to you.

​

Google Fonts (Local Integration)

To ensure a consistent and visually appealing display of fonts, we use Google Fonts. These fonts are hosted locally on our server, meaning that no connection to Google servers is established when you visit our website.

As a result of this local integration, no personal data is transmitted to Google. Further information about Google Fonts can be found at: https://developers.google.com/fonts/faq

You can also review Google's Privacy Policy at: https://policies.google.com/privacy

​

Google Maps

Our website uses the Google Maps mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service enables the visual display of geographic information and helps users locate places referenced on our website.

​

To use Google Maps, your IP address must be processed. This data may be transmitted to and stored on Google servers in the United States. We have no control over this data transmission. In addition, Google may load fonts via Google Fonts to display map content. In this process, web fonts are transferred to your browser cache to ensure the correct display of text.

​

Google Maps is used on the basis of our legitimate interest in providing a user-friendly presentation of our online services and facilitating the easy location of places referred to on our website in accordance with Art. 6(1)(f) GDPR. If you have previously given your consent to data processing and, where applicable, to the storage of information on your device (e.g., through cookies or device fingerprinting), processing is also carried out on the basis of Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time.

​

Data transfers to the United States are based on the European Commission's Standard Contractual Clauses (SCCs). Further information is available at:

• https://privacy.google.com/businesses/gdprcontrollerterms/

• https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

 

Google is also certified under the EU-U.S. Data Privacy Framework, which aims to ensure compliance with European data protection standards when personal data is processed in the United States. Further information regarding this certification can be found at: https://www.dataprivacyframework.gov/participant/5780

​

For details on how Google handles user data, please refer to Google's Privacy Policy: https://policies.google.com/privacy

​

Social Media

We maintain publicly accessible profiles on social media platforms such as Instagram, Facebook, YouTube, TikTok, Pinterest, and X. When you visit our social media profiles, personal data may be processed both by us as the profile operator and by the respective platform providers. This processing may include your IP address, device information, interactions (such as likes, comments, messages), and, if you are logged in, a direct association with your user account. Even if you are not logged in, data may be collected through cookies or similar technologies. The platform providers use this information to create user profiles and deliver personalized advertising. This may also occur across multiple devices. Please note that we cannot fully track or control all data processing activities carried out by these platforms. For further information, please refer to the privacy policies of the respective social media providers.

​

Legal Basis and Responsibility

We process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest in effective public representation and communication). Where consent is required, processing is carried out in accordance with Art. 6(1)(a) GDPR. Analytics processes initiated by the platform providers may be based on different legal bases, which must be specified by the respective providers. For certain processing activities, particularly in connection with "Page Insights" or comparable analytics services, we and the respective platform provider may act as joint controllers pursuant to Art. 26 GDPR. You may exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection both with us and with the respective platform provider. Please note that our ability to influence data processing carried out by the platform operators is limited and depends on their respective corporate policies.

​

Data Retention

Data collected directly by us will be deleted once the purpose for which it was collected no longer applies, you withdraw your consent, or you request its deletion. Cookies stored on your device remain there until you delete them. Mandatory statutory retention periods remain unaffected. We have no influence over the retention period of data collected and stored by the platform providers. For details on how long your data is retained, please consult the privacy policies of the respective social media providers.

​

Social Media Services Used

Facebook

We maintain a publicly accessible profile on Facebook, a platform operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Meta, personal data collected in connection with the use of Facebook services may also be transferred to the United States and other third countries.

​

An overview of Facebook's social media plugins and features is available at: https://developers.facebook.com/docs/plugins/?locale=en_US

​

If you visit a website that contains an active Facebook plugin, a direct connection is established between your device and Facebook's servers. As a result, Facebook receives information including your IP address and may, if you are logged into your Facebook account, associate your visit to the website with your user profile. For example, if you use the “Like” button, the corresponding information may be linked to your Facebook profile. Please note that, as the operator of this website, we have no influence over the nature and extent of the data processed by Facebook. Further information can be found in Facebook's Privacy Policy:

https://www.facebook.com/privacy/policy/

​

The use of Facebook services on our website is based on your consent in accordance with Art. 6(1)(a) GDPR and, where applicable, Section 25 TDDDG, provided that such consent has been obtained. You may withdraw your consent at any time with future effect. Where no consent is required or has been obtained, data processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, particularly in promoting the visibility and reach of our online presence.

​

To the extent that personal data is collected through the integration of Facebook elements and transmitted to Meta, we and Meta Platforms Ireland Limited act as joint controllers within the meaning of Art. 26 GDPR. This joint responsibility is limited solely to the collection and transmission of data. Any subsequent processing carried out by Facebook is performed under Meta's sole responsibility. The Joint Controller Addendum can be viewed here: https://www.facebook.com/legal/controller_addendum

​

According to this arrangement, we are responsible for the GDPR-compliant integration of Facebook services on our website and for providing the relevant privacy information. Meta is solely responsible for the security and processing of data within Facebook products. Data subject rights (e.g., the right of access, erasure, or objection) relating to data stored by Facebook may be exercised directly with Facebook. If you exercise your rights through us, we are obliged to forward your request to Meta.

​

The transfer of personal data to the United States is based on the European Commission’s Standard Contractual Clauses (SCCs). Further information is available at:
https://www.facebook.com/legal/EU_data_transfer_addendum

https://www.facebook.com/help/566994660333381

https://www.facebook.com/policy.php

​

Instagram

We maintain a publicly accessible profile on Instagram, a platform operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When using Instagram, personal data may be processed and transferred to third countries, in particular to the United States.

​

The transfer of personal data to the United States is based on the European Commission’s Standard Contractual Clauses (SCCs). Further information can be found at:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://www.facebook.com/help/566994660333381

​

Details on how Instagram processes personal data can be found in Instagram's official Privacy Policy: https://privacycenter.instagram.com/policy/

​

Meta Platforms Ireland Limited is also certified under the EU-U.S. Data Privacy Framework (DPF). This agreement between the European Union and the United States is intended to ensure that European data protection standards are maintained when personal data is processed in the United States. Companies certified under the DPF commit to complying with these standards. Further information about Meta's certification is available at: https://www.dataprivacyframework.gov/participant/4452

 

X (formerly Twitter)

We maintain a publicly accessible profile on X (formerly Twitter), a platform operated by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For the processing of personal data relating to individuals outside the United States, the responsible entity is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

​

When you actively use an X feature (e.g., the "Repost" or "Like" function), a direct connection is established between your device and X's servers. As a result, X receives information about your visit to our website. If you are logged into your X account and use features such as "Repost," X may associate your visit to our website with your user account and make the relevant content visible to other users. Please note that, as the operator of this website, we have no influence over the nature and extent of the data processed by X.

​

Details on how X processes personal data can be found in its official Privacy Policy: https://x.com/en/privacy

​​

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect.

​

The transfer of personal data to the United States is based on the European Commission's Standard Contractual Clauses (SCCs). Further information is available at:
https://gdpr.x.com/en/controller-to-controller-transfers.html

​

You can adjust your personal privacy settings on X at any time through your user account at: https://x.com/settings/account

​

X Corp. is certified under the EU-U.S. Data Privacy Framework (DPF). This agreement between the European Union and the United States is intended to ensure that European data protection standards are maintained when personal data is processed in the United States. Further information regarding X's certification can be found at: https://www.dataprivacyframework.gov/participant/2710

​

YouTube

Our website may contain embedded content from the video platform YouTube. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using YouTube, personal data may be transferred to its parent company, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

​

As soon as you access a page containing an embedded YouTube video, a direct connection is established with YouTube's servers. In the process, data such as your IP address, device information, browser type, location data, and usage behavior (such as viewed videos and interactions) may be collected and processed. If you are logged into your Google account, YouTube may associate this data with your profile. Data may also be stored through cookies and unique identifiers even if you are not logged in.

​

The use of YouTube is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect. In certain cases, processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, for example to enhance the user experience and ensure the effective presentation of our content.

​

The transfer of personal data to the United States is based on the European Commission's Standard Contractual Clauses (SCCs) pursuant to Art. 46(2) and (3) GDPR and the EU-U.S. Data Privacy Framework (DPF). Google LLC is certified under the DPF, ensuring an adequate level of protection for the processing of personal data in the United States. Further information is available at:

​

YouTube Privacy Policy: https://policies.google.com/privacy

Google Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=en

EU-U.S. Data Privacy Framework – Google LLC: https://www.dataprivacyframework.gov/participant/5780

Opt-Out of Personalized Advertising: https://myadcenter.google.com/personalizationoff

​

If you use embedded YouTube videos on our website, we recommend that you review YouTube's privacy information in advance and check your personal privacy settings in your Google Account at: https://myaccount.google.com

​

Pinterest

Our website may contain elements of the social network Pinterest. The service is provided by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland. For users outside the European Economic Area (EEA), Switzerland, and the United Kingdom, Pinterest Inc., 651 Brannan St., San Francisco, CA 94107, USA, is additionally responsible.

​

When you access a page containing an embedded Pinterest element (such as the “Save” button), a direct connection is established with Pinterest's servers. In this process, personal data such as your IP address, browser information, device identifiers, and usage data may be collected and processed. If you are logged into your Pinterest account, Pinterest may associate this data with your profile and use it for personalized content and advertising purposes.

​

The use of Pinterest services on our website is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect. In certain cases, processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, for example to improve the user experience and ensure the effective presentation of our content. The transfer of personal data to the United States is based on the European Commission's Standard Contractual Clauses (SCCs) pursuant to Art. 46(2) and (3) GDPR. Pinterest thereby commits to complying with European data protection standards, even when personal data is processed in third countries. Further information is available in Pinterest's Privacy Policy: https://policy.pinterest.com/en/privacy-policy

​

Pinterest may also place cookies in your browser to store usage data. If you have a Pinterest account and are logged in, data collected through our website may be associated with your account and used for advertising purposes. Further information regarding data processing and your rights can be found in the privacy policy linked above.

​

TikTok

We maintain a publicly accessible profile on TikTok. For users residing in the European Economic Area (EEA) or Switzerland, the contractual partner is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. For users in the United Kingdom, the contractual partner is TikTok Information Technologies UK Limited, 4 Lindsey Street, Barbican, London, EC1A 9HP, United Kingdom. For users outside these regions, TikTok Inc., headquartered in the United States, is responsible.

​

When using TikTok, personal data may be processed, including account information (such as email address, telephone number, and date of birth), user content (such as videos, comments, and livestreams), technical data (such as IP address and device information), location data, and information about your interactions on the platform. Data obtained from third-party sources, such as advertising partners or payment service providers, may also be processed and linked to your TikTok account.

​

The use of TikTok services on our website or through embedded content is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect. In certain cases, processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, for example to increase reach and encourage user engagement. The transfer of personal data to third countries, in particular the United States, is based on the European Commission's Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR. TikTok states that it uses these clauses to ensure an adequate level of data protection.

 

Further information can be found in TikTok's official Privacy Policy:

TikTok Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en

​

TikTok is currently not certified under the EU-U.S. Data Privacy Framework (DPF). Therefore, transfers of personal data to the United States are carried out solely on the basis of the Standard Contractual Clauses. Users should be aware that TikTok has been subject to ongoing scrutiny, particularly regarding data security and the scope of its data collection practices.

​

Notice regarding transfers to third countries: According to findings by European data protection authorities, TikTok may grant employees in China access to personal data relating to EU users. Even where such data is not physically stored in China, this remote access may constitute a transfer of personal data to a third country within the meaning of the GDPR.