Privacy Policy

Server Logging

Our website is hosted by a service provider.
The following data is transmitted to the service provider:

• Domain
• Anonymized client IP
• Request line
• Timestamp
• Status code
• Size of the response body
• Referrer sent by the client
• User agent sent by the client
• Remote user

To detect attacks, the service provider stores non-anonymized IP addresses for a maximum of seven days. After that, they are irreversibly anonymized. However, we can only view IP addresses in anonymized form and only permanently in this anonymized form.

The service provider relies on Art. 6 (1) lit. f GDPR to provide law enforcement authorities with the necessary information for prosecution in the event of a cyberattack.

Further information on how the service provider handles user data can be found in the service provider’s privacy policy: Link

Contact Form

You can contact us via a form on this website or by email. We process your data in order to respond to your inquiry. Where necessary for processing your request, your contact details may be forwarded to third parties (e.g., partner companies).

The legal basis for this is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to answer your individual inquiry.

After your request has been fully processed, your contact details will be deleted. This does not apply if statutory retention obligations prevent deletion in individual cases. In such cases, the data will be deleted as part of the statutory retention requirements.

Tracking and Cookies

Our website uses cookies and similar technologies that store or access information on your device for the following purposes:

• Ensuring the functionality of the website
• Analytics and personalization – statistics

The first category consists of so-called functional cookies. These are strictly necessary to visit our website. The second category consists of consent-based cookies. Visiting our website is also possible without storing these cookies. These cookies are only stored on your device if you have given us your consent.

Functional

We use cookies and similar technologies to enable certain functions of the website. This is absolutely necessary to provide our website.

Our legitimate interest in processing the data lies in enabling the smooth usability of our website and ensuring that user actions are actually performed by an authenticated user.

The legal basis for this is our legitimate interest (Art. 6 (1) lit. f GDPR or § 25 (2) No. 2 TTDSG).

Security Plugin WP CERBER

To protect our website, we use the plugins of “Cerber Security & Anti-Spam”, provided by Cerber Tech Inc., 1732 1st Ave #20291, New York, NY 10128, USA.

According to the manufacturer, no sensitive data is collected. Further information about the collection and use of data can be found in Cerber Tech’s privacy policy: Link

Statistics

We use Matomo to collect statistical information about the use of our website. Matomo collects anonymized data such as the IP address of your device, the time of visit, the pages visited, the language, and the time spent on our website.

You must explicitly agree to the data collection. This consent is granted by clicking the tracking option when visiting our website. You may withdraw your consent at any time by adjusting your cookie settings in our cookie policy.

The collected data is used exclusively to analyze user behavior on our website and to optimize our website. The data is not used for other purposes and is not shared with third parties.

Our Social Media Presence

We maintain publicly accessible profiles on social networks. The social networks we use are listed below.

Social networks such as Facebook, Twitter, etc., can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. Specifically:

If you are logged into your social media account and visit our social media presence, the operator of the social media platform can associate this visit with your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. This data collection occurs, for example, through cookies stored on your device or by capturing your IP address.

Using the data collected in this way, the operators of social media portals can create user profiles that store your preferences and interests. This enables interest-based advertising to be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, this interest-based advertising can be displayed across all devices on which you are logged in or have been logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, additional processing may be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policies of the respective social media providers.

Legal Basis
Our social media presences aim to ensure the broadest possible visibility on the internet. This constitutes a legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The analysis processes initiated by social networks may be based on different legal grounds, which must be stated by the social network operators (e.g., consent pursuant to Art. 6 (1) lit. a GDPR).

Social Networks Used

• YouTube

This website integrates videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. According to YouTube, this mode ensures that YouTube does not store information about visitors to this website before they view a video. However, the transfer of data to YouTube partners is not necessarily excluded by extended privacy mode. Regardless of whether you view a video, YouTube establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Additionally, after starting a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g., device fingerprinting). This allows YouTube to obtain information about visitors to this website. This information is used, among other things, to gather video statistics, improve usability, and prevent fraud attempts.

Further data processing operations may be triggered after starting a YouTube video, over which we have no control.

Using YouTube is in the interest of providing an appealing presentation of our online content. This constitutes a legitimate interest pursuant to Art. 6 (1) lit. f GDPR. If consent was obtained, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.

Further information on data protection at YouTube can be found in their privacy policy: https://policies.google.com/privacy?hl=en.

General Notice on Data Transfer to the USA and Other Third Countries

If data transfers occur through tools provided by companies based in the USA or other countries considered unsafe under data protection law, the following applies: If these tools are active, your personal data may be transferred to and processed in these third countries. The data transfer takes place on the basis of an adequacy decision (e.g., the EU-U.S. Data Privacy Framework in the case of the USA), under the execution of the valid standard data protection clauses pursuant to Art. 46 (2) lit. c GDPR, or on the basis of your consent pursuant to Art. 49 (1) lit. a GDPR.

Categories of Recipients of Your Personal Data

Within our company, those departments that require your data to fulfill the purposes described in Section 3 have access to it. Service providers engaged by us (“processors”) may also have access to your data. We have concluded data processing agreements with these service providers, defining instructions, data security, and confidential handling of your data.

Withdrawal of Consent

If processing is based on your consent (Art. 6 (1) lit. a GDPR), you have the right to withdraw your consent at any time with effect for the future. To do so, you can contact us using the details provided in the section “Name and Contact Details of the Controller” or use the options described in the context of the respective processing.

Your Rights as a Data Subject

You may request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right to access this personal data and obtain further information related to the processing (Art. 15 GDPR).

If the personal data we process about you is inaccurate or incomplete, you may request rectification or completion of this data (Art. 16 GDPR).
If the legal requirements are met, you may request erasure or restriction of processing, as well as exercise your right to data portability (Art. 17, 18, 20 GDPR).

Please contact us if you wish to exercise any of your rights as a data subject. Use the contact details provided in the section “Name and Contact Details of the Controller.”

Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data pursuant to Art. 6 (1) lit. e GDPR and Art. 6 (1) lit. f GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Please contact us if you wish to exercise your right to object. Use the contact details provided in the section “Name and Contact Details of the Controller.”

Automated Decision-Making / Profiling

Automated decision-making or profiling does not take place.