Used terms

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter the "data subject"); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person. In the following, we also refer to the persons concerned as "users".

"Processing" means any process performed with or without the aid of automated procedures or any such process associated with personal data. The term goes far and includes virtually every handling of data.

"Responsible person" means the natural or legal person, public authority, body or body that decides, alone or in concert with others, on the purposes and means of processing personal data.

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Insofar as the legal basis in this data protection declaration is not mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 DSGVO, the legal basis for the processing for the performance of our services and for the execution of contractual measures as well as for answering inquiries is Art. 6 para. 1 lit. b DSGVO, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c DSGVO, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f DSGVO. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO as legal basis.

Collaboration with processors and third parties

f, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this is done only on the basis of a legal permission (eg if a transmission of the data to third parties, as required by payment service providers, pursuant to Art. 6 (1) (b) GDPR to fulfill the contract), you have consented to a legal obligation or on the basis of our legitimate interests (eg the use of agents, webhosters, etc.).

If we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 GDPR.

Disclosure of data

We only share your personal information with third parties if:

• You have given your express consent, or
• there is a legal obligation to disclose, or
• on the basis of a legal permission (for example, if the data is required to be transmitted to third parties, such as payment service providers), or
• the disclosure is required to assert, exercise or defend any legal claim and there is no reason to believe that you have an overriding legitimate interest in not disclosing your information, or
• based on our legitimate interests (such as the use of agents, web hosts, etc.).

A transfer of your personal data to third parties for purposes other than those mentioned above does not take place.

Transfers to third countries

If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure, or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. DSGVO. That the processing is e.g. on the basis of specific guarantees, such as the officially recognized level of data protection (eg for the US through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

Revocation of your consent to data processing

Some processes of data processing are only possible with your express consent. A revocation of your already given consent is possible at any time. For the revocation is sufficient an informal message by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to complain to the competent authority

As the person affected, in the event of a breach of data protection law, you have a right of appeal to the competent supervisory authority. The competent supervisory authority with regard to data protection issues is the state data protection officer of the federal state in which the headquarters of our company is located. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to submit data to us or third parties that we process on the basis of your consent or in fulfillment of a contract. The provision is made in a machine-readable format. If you require the direct transfer of the data to another person in charge, this will only be done if technically possible with reasonable effort.

Right to information, correction, blocking, deletion

Within the scope of the valid legal regulations you have the right to demand at any time free of charge information about your stored personal data, origin of the data, their recipients and the purpose of the data processing and if necessary correction, blocking or deletion of these data. For this and for further questions on the subject of personal data, you can always contact us via the contact options listed in the imprint.

After expiry of the statutory retention period, the corresponding personal data are routinely deleted, provided that they are no longer required to fulfill the contract or to initiate a contract.

Deletion of data

The data processed by us are deleted or limited in their processing in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this privacy statement, the data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any statutory storage requirements. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. That is, the data is locked and not processed for other purposes. This applies, for example for data that must be kept for commercial or tax reasons.

According to legal requirements in Germany, the storage takes place in particular for 6 years in accordance with § 257 Abs. 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years in accordance with § 147 Abs. 1 AO (books, records , Management reports, accounting documents, trade and business letters, documents relevant to taxation, etc.).

According to legal regulations in Austria the storage takes place especially for 7 years according to § 132 paragraph 1 BAO (accounting documents, receipts / invoices, accounts, receipts, business papers, statement of income and expenses, etc.), for 22 years in connection with land and for 10 years in the case of documents relating to electronically supplied services, telecommunications, broadcasting and television services provided to non-EU companies in EU Member States for which the Mini-One-Stop-Shop (MOSS) is used.

Administration, financial accounting, office organization, contact management

We process data in the context of administrative tasks and organization of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of rendering our contractual services. The processing principles are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. The processing affects customers, prospects, business partners and website visitors. The purpose and our interest in processing lies in administration, financial accounting, office organization, data archiving, ie tasks that serve to maintain our business, perform our duties and provide our services. The deletion of the data in terms of contractual performance and contractual communication corresponds to the information provided in these processing activities.

We disclose or transmit data to the financial administration, consultants such as tax accountants or auditors, and other fee agents and payment service providers.

Furthermore, based on our business interests, we store information about suppliers, promoters and other business partners, e.g. for later contact. We generally store this majority of company-related data permanently.

Business analysis and market research

In order to operate our business economically, to recognize market trends, wishes of the contractors and users, we analyze the data available to us for business transactions, contracts, inquiries, etc. We process stock data, communication data, contract data, payment data, usage data, metadata based on the nature 6 para. 1 lit. f. DSGVO, whereby the data subjects include contractual partners, interested parties, customers, visitors and users of our online offer.

The analyzes are carried out for the purpose of business analysis, marketing and market research. In doing so, we can provide the profiles of registered users with information, e.g. take into account their services. The analyzes serve us to increase the user-friendliness, the optimization of our offer and the business economics. The analyzes are for us alone and will not be disclosed externally unless they are anonymous, aggregated value analyzes.

If these analyzes or profiles are personal, they will be deleted or anonymised upon termination of the users, otherwise after two years from the conclusion of the contract. Incidentally, the overall business analyzes and general trend provisions are created anonymously if possible.

Cookies and right to object in direct mail

"Cookies" are small files that are stored on users' computers. Different information can be stored within the cookies. A cookie serves primarily to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart are stored in an online store or a login jam. The term "permanent" or "persistent" refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved if users visit it after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. A "third-party cookie" refers to cookies that are offered by providers other than the person who manages the online offer (otherwise, if it is only their cookies, this is called "first-party cookies").

We can use temporary and permanent cookies and clarify this in the context of our privacy policy.

If users do not want cookies stored on their computer, they will be asked to disable the option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

A general objection to the use of cookies used for online marketing purposes can be found in a variety of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/ be explained. Furthermore, the storage of cookies can be achieved by switching them off in the settings of the browser. Please note that not all features of this online offer may be used.

Hosting and e-mailing

The hosting services we use are designed to provide the following services: infrastructure and platform services, computing capacity, storage and database services, e-mailing, security, and technical maintenance services we use to operate this online service.

Here we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer acc. Art. 6 para. 1 lit. f DSGVO i.V.m. Art. 28 DSGVO (conclusion of contract processing contract).

data security

For security reasons and to protect the transmission of confidential content, our website uses the common SSL or. TLS encryption. Thus, data transmitted to you via this website is not readable by third parties.

Whether a single page of our website is transmitted encrypted, you can see by the closed representation of the key or lock icon in the bottom status bar of your browser.

We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our safety measures are continuously adapted to the state of the art in accordance with technological developments.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective and secure.

Some cookies are "session cookies". Such cookies will be deleted automatically after the end of your browser session. Other cookies remain stored on your device until you delete them yourself. Such cookies help us to recognize you the next time you visit our website.

With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured to automatically delete cookies when the program is closed. The deactivation of cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the performance of electronic communications or the provision of certain functions desired by you (eg shopping cart), constitutes a legitimate interest for us as the operator of this website for the technical and error-free provision of our services. If other cookies are set (eg for analysis functions), they will be treated separately in this privacy policy.

Provision of contractual services

We process inventory data (e.g., names and addresses as well as user contact information), contract data (e.g., services used, contact names, billing information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. Art. 6 para. 1 lit b. DSGVO. The entries marked as obligatory in online forms are required for the conclusion of the contract.

As part of the use of our online services, we store the IP address and the time of each user action. The storage takes place on the basis of our justified interests as well as for the protection of the users against misuse and other unauthorized use. A transfer of these data to third parties does not take place in principle, if it is not necessary for the pursuit of our claims or for this a legal obligation acc. Art. 6 para. 1 lit. c DSGVO exists.

We process usage data (e.g., the visited web pages of our online offering, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile to provide the user e.g. To display product instructions based on their previously used services.

The deletion of the data takes place after expiration of legal warranty and comparable obligations, the necessity of the storage of the data is checked every three years; in the case of legal archiving obligations, the deletion takes place after its expiration. Information in the customer's account remains until it is deleted.

Server log files

We or our hosting provider collect and store information in so-called server log files, which your browser automatically transmits to our server when visiting our website. These are: browser type and browser version, operating system used, referrer URL, IP address of the accessing computer and time of server request.

The above data is processed by us to ensure a smooth connection and a comfortable use of our website, as well as to evaluate the system security and stability and to prevent unauthorized access by third parties to our infrastructure. This data will be deleted automatically after 2 weeks.

Any further use or merging of this data with other data sources will not take place. In no case we use the collected data to draw conclusions about your person.

contact form

Data submitted via the contact form, including your contact details, will be stored to process your request or to be available for follow-up questions. A disclosure of this data will not take place without your consent.

The processing of the data entered into the contact form takes place exclusively on the basis of your consent. A revocation of your already given consent is possible at any time. For the revocation is sufficient an informal message by e-mail. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Data submitted via the contact form will remain with us until you request us to delete it, revoke your consent to storage or you no longer need to retain your data. Mandatory statutory provisions - especially retention periods - remain unaffected.

Google Analytics

Our website uses functions of the web analytics service Google Analytics. Web analytics service provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your device and allows analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually in the US.

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

The setting of Google Analytics cookies is based on our legitimate interest in the analysis of user behavior in order to optimize our website and possibly also advertising.

To fully comply with legal data protection requirements, we have entered into a contract processing agreement with Google. Google will use this information on our behalf to evaluate your use of the website, to report on website activity and to provide us with other services related to website and internet usage. In this case, pseudonymous usage profiles of the users can be created from the processed data.

We use Google Analytics in conjunction with the IP anonymization feature. It ensures that Google shortens your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. There may be exceptions where Google transmits and truncates the full IP address to a server in the United States. There is no merger of the Google Analytics transmitted IP address with other Google data.

For more information about data usage by Google, setting and contradictory options, visit the websites of Google: https://www.google.com/intl/de/policies/privacy/partners ("Google uses data when you use websites or apps from our partners"), http://www.google.com/policies/technologies/ads ("Use of data for advertising purposes"), http://www.google.de/settings/ads ("Manage information that Google uses to show you advertising").

Browser Plugin

The setting of cookies through your web browser can be prevented. However, some features of our website may be restricted. Likewise, you can prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plug-in that can be accessed via the following link:

https://tools.google.com/dlpage/gaoptout?hl=de.

For details on how to handle user data on Google Analytics, please refer to the Google Privacy Policy:

https://support.google.com/analytics/answer/6004245?hl=de.

Demographics in Google Analytics

Our website uses the demographics feature of Google Analytics. It can be used to generate reports that contain statements on the age, gender and interests of the site visitors. These data are from interest-based advertising
from Google as well as third-party visitor data. An assignment of the data to a specific person is not possible. You can disable this feature at any time. This is possible through the ad settings in your Google Account or
by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Objection to data collection".

Integration of services and contents of third parties

We use third-party content or service offerings in our online offering based on our legitimate interest in the analysis, optimization, and operation of our online offering to provide their content and services, such as content and services. Include videos or fonts (collectively referred to as "content").

This always presupposes that the third party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only those content whose respective providers use the IP address only for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, referring web sites, time of visit, and other information regarding the use of our online offer.

Youtube

We embed the videos on the YouTube platform of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection: https://www.google.com/policies/privacy/, Opt‑Out: https://adssettings.google.com/authenticated.

Google Fonts

We incorporate the fonts ("Google Fonts") provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Up-to-dateness and change of this data protection explanation

This privacy policy is currently valid and has the status of May 2018. It is adapted to the state of use and to the legal requirements and can therefore be changed at any time.

Sources: Privacy Configurator by mein-datenschutzbeauftragter.de, Datenschutz-Generator.de von RA Dr. Thomas Schwenke