Privacy Policy

Translated from the authoritative German version. Controller: Johannes Weigl, Finklham 90, 4612 Scharten.

Disclaimer

Liability for the content of this website

The contents of this website were created with the greatest possible care. However, no guarantee can be given for the accuracy, completeness and timeliness of the content.

As a service provider, I am responsible for my own content on this website under the general laws pursuant to § 16 ECG (Austrian E-Commerce Act). However, I am not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate unlawful activity.

Obligations to remove or block the use of information under the general laws remain unaffected by this. However, liability in this respect is only possible from the point in time at which a specific infringement of the law becomes known. If I become aware of any such infringements, I will remove the relevant content immediately.

Liability for external links

This website contains links to external third-party websites over whose content I have no influence. Therefore, no guarantee can be given for this external content either. The respective provider or operator of the pages is always responsible for the content of the linked pages.

At the time of linking, the pages were checked for possible legal violations; unlawful content was not recognisable at that time. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement of the law. If any infringements of the law become known, such links will be removed immediately.

Copyright

The content and works created by me on this website are subject to Austrian copyright law. The reproduction, editing, distribution and any kind of use outside the limits of copyright require my written consent.

Downloads and copies of this page are only permitted for private, non-commercial use.

Insofar as the content on this page was not created by me, the copyrights of third parties are respected and such content is marked as such. Should you nevertheless become aware of a copyright infringement, I ask that you notify me accordingly. If any infringements of the law become known, such content will be removed immediately.

Privacy Policy

Introduction and overview

We have drafted this privacy policy (version 30.07.2025-123036018) in order to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (referred to as data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.

In short: We inform you comprehensively about the data we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, by contrast, is intended to describe the most important things to you as simply and transparently as possible. Where it is conducive to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We thereby inform you in clear and simple language that, within the scope of our business activities, we only process personal data if a corresponding legal basis exists. This is certainly not possible if one gives explanations that are as terse, unclear and legally technical as possible, as is often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is one or two pieces of information among them that you did not yet know.

If questions nevertheless remain, we would like to ask you to contact the responsible body named below or in the legal notice, to follow the links provided and to view further information on third-party sites. You will of course also find our contact details in the legal notice.

Scope of application

This privacy policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us (processors). By personal data we mean information within the meaning of Art. 4(1) GDPR, such as a person's name, e-mail address and postal address. The processing of personal data ensures that we can offer and bill for our services and products, whether online or offline. The scope of application of this privacy policy includes:

all online presences (websites, online shops) that we operate

social media presences and e-mail communication
mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the channels mentioned. Should we enter into legal relationships with you outside these channels, we will inform you separately where applicable.

Legal bases

In the following privacy policy we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, that enable us to process personal data.

As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this General Data Protection Regulation of the EU online on EUR-Lex, the access point to EU law, at eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 .

We only process your data if at least one of the following conditions applies:

Consent (Art. 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you have entered in a contact form.

Contract (Art. 6(1)(b) GDPR): In order to fulfil a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.

Legal obligation (Art. 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.

Legitimate interests (Art. 6(1)(f) GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we have to process certain data in order to be able to operate our website securely and in an economically efficient manner. This processing is therefore a legitimate interest.

Further conditions such as the performance of a task carried out in the public interest and the exercise of official authority as well as the protection of vital interests do not generally arise with us. Insofar as such a legal basis should nevertheless be relevant, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Datenschutzgesetz), DSG for short.

In Germany, the Federal Data Protection Act (Bundesdatenschutzgesetz), BDSG for short, applies.

Insofar as further regional or national laws apply, we will inform you about them in the following sections.

Contact details of the controller

Should you have any questions about data protection or the processing of personal data, you will find below the contact details of the controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR):

Johannes Weigl
Finklham 90
4612 Scharten
Email: [email protected]
Phone: +43 6604684433
Legal notice: www.momentsammler.at/impressum

Storage duration

The fact that we only store personal data for as long as is absolutely necessary for the provision of our services and products applies as a general criterion for us. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to apply, for example for accounting purposes.

Should you wish your data to be deleted or should you revoke your consent to data processing, the data will be deleted as quickly as possible and insofar as there is no obligation to store it.

We will inform you further below about the specific duration of the respective data processing, insofar as we have further information on this.

Rights under the General Data Protection Regulation

Pursuant to Art. 13, 14 GDPR, we inform you about the following rights to which you are entitled so that fair and transparent processing of data takes place:

Under Art. 15 GDPR, you have a right of access as to whether we process data about you. Should this be the case, you have the right to receive a copy of the data and to learn the following information:

for what purpose we carry out the processing
the categories, i.e. the types of data, that are processed
who receives this data and, if the data is transferred to third countries, how security can be guaranteed
how long the data is stored
the existence of the right to rectification, erasure or restriction of processing and the right to object to processing
that you can complain to a supervisory authority (you will find links to these authorities further below)
the origin of the data, if we did not collect it from you

whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.

Under Art. 16 GDPR, you have a right to rectification of the data, which means that we must correct data if you find errors.

Under Art. 17 GDPR, you have the right to erasure ("right to be forgotten"), which specifically means that you may request the deletion of your data.

Under Art. 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but no longer use it.

Under Art. 20 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request.

Under Art. 21 GDPR, you have a right to object, which, once enforced, brings about a change in the processing.

If the processing of your data is based on Art. 6(1)(e) (public interest, exercise of official authority) or Art. 6(1)(f) (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection.

If data is used to conduct direct advertising, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.

If data is used to carry out profiling, you can object to this type of data processing at any time. We may then no longer use your data for profiling.

Under Art. 22 GDPR, you may, under certain circumstances, have the right not to be subject to a decision based solely on automated processing (for example profiling).

Under Art. 77 GDPR, you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you are of the opinion that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible body listed above at our company!

If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in some other way, you can complain to the supervisory authority. For Austria, this is the Data Protection Authority (Datenschutzbehörde), whose website you can find at www.dsb.gv.at . In Germany, there is a data protection commissioner for each federal state. For more detailed information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit, BfDI). The following local data protection authority is responsible for our company:

Austria Data Protection Authority (Datenschutzbehörde)

Head: Dr. Matthias Schmidl
Address: Barichgasse 40-42, 1030 Wien
Phone no.: +43 1 52 152-0
Email address: [email protected]
Website: www.dsb.gv.at

Security of data processing

In order to protect personal data, we have implemented both technical and organisational measures. Where possible, we encrypt or pseudonymise personal data. In this way, within the scope of our possibilities, we make it as difficult as possible for third parties to infer personal information from our data.

Art. 25 GDPR speaks here of "data protection by design and by default" and means that both software (e.g. forms) and hardware (e.g. access to the server room) should always be considered with security in mind and that appropriate measures should be taken. In the following, we will address specific measures if necessary.

TLS encryption with https

TLS, encryption and https sound very technical and they are. We use HTTPS (the Hypertext Transfer Protocol Secure stands for "secure hypertext transfer protocol") to transmit data securely on the internet, safe from eavesdropping.

This means that the complete transmission of all data from your browser to our web server is secured – no one can "listen in".

With this, we have introduced an additional layer of security and fulfil data protection by design (Art. 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data.

You can recognise the use of this safeguarding of data transmission by the small padlock symbol at the top left of the browser, to the left of the internet address (e.g. beispielseite.de) and the use of the https scheme (instead of http) as part of our internet address.

If you would like to know more about encryption, we recommend the Google search for "Hypertext Transfer Protocol Secure wiki" to obtain good links to further information.

Communication

Communication summary

Data subjects: All those who communicate with us by telephone, e-mail or online form
Data processed: e.g. telephone number, name, e-mail address, entered form data. You will find more details on this with the respective type of contact used
Purpose: Handling communication with customers, business partners, etc.
Storage duration: Duration of the business matter and the legal provisions
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (legitimate interests)

If you get in touch with us and communicate by telephone, e-mail or online form, personal data may be processed.

The data is processed for handling and dealing with your query and the associated business transaction. The data is stored for exactly as long as this takes, or for as long as the law prescribes.

Data subjects

All those who seek contact with us via the communication channels we provide are affected by the aforementioned processes.

Telephone

When you call us, the call data is stored in pseudonymised form on the respective terminal device and at the telecommunications provider used. In addition, data such as name and telephone number may subsequently be sent by e-mail and stored to answer the enquiry. The data is deleted as soon as the business matter has ended and legal requirements permit.

E-mail

When you communicate with us by e-mail, data may be stored on the respective terminal device (computer, laptop, smartphone, etc.) and data is stored on the e-mail server. The data is deleted as soon as the business matter has ended and legal requirements permit.

Online forms

When you communicate with us by means of an online form, data is stored on our web server and, where applicable, forwarded to one of our e-mail addresses. The data is deleted as soon as the business matter has ended and legal requirements permit.

Legal bases

The processing of the data is based on the following legal bases:

Art. 6(1)(a) GDPR (consent): You give us your consent to store your data and to use it further for purposes relating to the business matter
Art. 6(1)(b) GDPR (contract): There is a necessity for the fulfilment of a contract with you or a processor such as the telephone provider, or we have to process the data for pre-contractual activities, such as the preparation of an offer

Art. 6(1)(f) GDPR (legitimate interests): We want to conduct customer enquiries and business communication in a professional setting. For this, certain technical facilities such as e-mail programs, Exchange servers and mobile network operators are necessary in order to be able to conduct communication efficiently.

Cookies

Cookies summary

Data subjects: Visitors to the website
Purpose: depends on the respective cookie. You will find more details on this further below or from the manufacturer of the software that sets the cookie.
Data processed: Depends on the respective cookie used. You will find more details on this further below or from the manufacturer of the software that sets the cookie.
Storage duration: depends on the respective cookie, can vary from hours to years
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.

In the following, we explain what cookies are and why they are used, so that you can better understand the following privacy policy.

Whenever you surf the internet, you use a browser. Well-known browsers are, for example, Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, since there are also other cookies for other areas of application. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you call up our page again, your browser transmits the "user-related" information back to our page. Thanks to the cookies, our website knows who you are and offers you the setting you are used to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. In doing so, the web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be assessed individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Nor can cookies access information on your PC.

This is what cookie data can look like, for example:
Name: _ga
Value: GA1.2.1326744211.152123036018-9
Purpose: Distinguishing website visitors
Expiry date: after 2 years
A browser should be able to support these minimum sizes:
At least 4096 bytes per cookie
At least 50 cookies per domain
At least 3000 cookies in total
What types of cookies are there?

The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly address the different types of HTTP cookies.

One can distinguish 4 types of cookies:

Essential cookies

These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user places a product in the shopping cart, then continues surfing on other pages and only goes to the checkout later. Thanks to these cookies, the shopping cart is not deleted, even if the user closes their browser window.

Functional cookies

These cookies collect info about user behaviour and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behaviour of the website in different browsers.

Target-oriented cookies

These cookies ensure better user-friendliness. For example, entered locations, font sizes or form data are stored.

Advertising cookies

These cookies are also called targeting cookies. They serve to deliver individually tailored advertising to the user. This can be very practical, but also very annoying.

Usually, when you first visit a website, you are asked which of these types of cookies you would like to allow. And of course this decision is also stored in a cookie.

If you would like to know more about cookies and are not afraid of technical documentation, we recommend datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".

Purpose of processing via cookies

The purpose ultimately depends on the respective cookie. You will find more details on this further below or from the manufacturer of the software that sets the cookie.

What data is processed?

Cookies are small helpers for many different tasks. Unfortunately, one cannot generalise which data is stored in cookies, but we will inform you within the scope of the following privacy policy about the processed or stored data.

Storage duration of cookies

The storage duration depends on the respective cookie and is specified in more detail further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.

You also have an influence on the storage duration yourself. You can manually delete all cookies at any time via your browser (see also "Right to object" below). Furthermore, cookies based on consent are deleted at the latest after you revoke your consent, whereby the lawfulness of the storage up to that point remains unaffected.

Right to object – how can I delete cookies?

You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option to delete, deactivate or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.

If you would like to determine which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome
Safari: Manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google with the search term "delete cookies Chrome" or "deactivate cookies Chrome" in the case of a Chrome browser.

Legal basis

Since 2009, there have been the so-called "cookie guidelines". These stipulate that the storage of cookies requires consent (Art. 6(1)(a) GDPR) from you. Within the EU countries, however, there are still very different reactions to these guidelines. In Austria, however, this guideline was implemented in § 165(3) of the Telecommunications Act (Telekommunikationsgesetz, 2021). In Germany, the cookie guidelines were not implemented as national law. Instead, this guideline was largely implemented in § 15(3) of the Telemedia Act (Telemediengesetz, TMG), which has been replaced since May 2024 by the Digital Services Act (Digitale-Dienste-Gesetz, DDG).

For absolutely necessary cookies, even where no consent is present, there are legitimate interests (Art. 6(1)(f) GDPR), which in most cases are of an economic nature. We want to give visitors to the website a pleasant user experience, and for this certain cookies are often absolutely necessary.

Insofar as cookies that are not absolutely necessary are used, this only happens in the case of your consent. The legal basis in this respect is Art. 6(1)(a) GDPR.

In the following sections, you will be informed in more detail about the use of cookies, insofar as the software used uses cookies.

Google Analytics privacy notice

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operators and to provide further services connected with website use and internet use. Google will also transfer this information to third parties where applicable, insofar as this is required by law or insofar as third parties process this data on behalf of Google. Google will under no circumstances associate your IP address with other data held by Google. You can prevent the installation of the cookies by means of a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of the data collected about you by Google in the manner described above and for the purpose stated above.

Contact form

If you contact Johannes Weigl via the contact form, the details you provide in the enquiry form, including your contact data, will be stored by me for the purpose of processing the enquiry and in the event of follow-up questions. This data is not passed on without consent.

Privacy policy for the use of Facebook

Plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the "Like button" ("Gefällt mir") on our page. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/. When you visit our pages, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our page with your IP address. If you click the Facebook "Like button" while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We point out that we, as the provider of the pages, receive no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at www.facebook.com/policy.php If you do not want Facebook to be able to associate the visit to our pages with your Facebook user account, please log out of your Facebook user account.

Privacy policy for the use of Instagram

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We point out that we, as the provider of the pages, receive no knowledge of the content of the transmitted data or its use by Instagram. Further information on this can be found in Instagram's privacy policy at www.instagram.com/about/legal/privacy/.

Web hosting introduction

Web hosting summary

Data subjects: Visitors to the website
Purpose: professional hosting of the website and safeguarding of operations
Data processed: IP address, time of the website visit, browser used and other data. You will find more details on this further below or from the respective web hosting provider used.
Storage duration: depends on the respective provider, but as a rule 2 weeks
Legal bases: Art. 6(1)(f) GDPR (legitimate interests)

What is web hosting?

When you visit websites nowadays, certain information – including personal data – is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By website, incidentally, we mean the totality of all web pages on a domain, i.e. everything from the start page (homepage) to the very last subpage (like this one here). By domain we mean, for example, beispiel.de or musterbeispiel.com.

If you want to view a website on a computer, tablet or smartphone, you use a program for this that is called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We call it browser or web browser for short.

In order to display the website, the browser has to connect to another computer where the code of the website is stored: the web server. Operating a web server is a complicated and demanding task, which is why this is usually taken over by professional providers, the providers. They offer web hosting and thus ensure reliable and error-free storage of website data. Quite a lot of technical terms, but please stay with us, it gets even better!

When the browser on your computer (desktop, laptop, tablet or smartphone) establishes a connection, and during the data transmission to and from the web server, personal data may be processed. On the one hand, your computer stores data, on the other hand, the web server must also store data for a while in order to ensure proper operation.

A picture says more than a thousand words, so the following graphic illustrates the interplay between the browser, the internet and the hosting provider.

Why do we process personal data?
The purposes of the data processing are:

Professional hosting of the website and safeguarding of operations

to maintain operational and IT security

Anonymous evaluation of access behaviour to improve our offering and, where applicable, for criminal prosecution or the pursuit of claims

What data is processed?

Even while you are visiting our website right now, our web server, which is the computer on which this web page is stored, usually automatically stores data such as

the complete internet address (URL) of the web page accessed
browser and browser version (e.g. Chrome 87)
the operating system used (e.g. Windows 10)

the address (URL) of the previously visited page (referrer URL) (e.g. www.beispielquellsite.de/vondabinichgekommen)

the host name and the IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)

date and time
in files, the so-called web server log files
How long is data stored?

As a rule, the data mentioned above is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out that this data may be viewed by authorities in the event of unlawful conduct.

In short: Your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not pass on your data without consent!

Legal basis

The lawfulness of the processing of personal data in the context of web hosting results from Art. 6(1)(f) GDPR (safeguarding of legitimate interests), because the use of professional hosting with a provider is necessary in order to present the company on the internet in a secure and user-friendly manner and to be able to pursue attacks and claims arising from this where applicable.

Between us and the hosting provider there is usually a contract on order processing pursuant to Art. 28 et seq. GDPR, which ensures compliance with data protection and guarantees data security.

Website builder systems introduction
Website builder systems privacy policy summary

Data subjects: Visitors to the website
Purpose: Optimisation of our service
Data processed: Data such as technical usage information like browser activity, clickstream activities, session heatmaps as well as contact data, IP address or your geographical location. You will find more details on this further below in this privacy policy and in the provider's privacy policy.
Storage duration: depends on the provider
Legal bases: Art. 6(1)(f) GDPR (legitimate interests), Art. 6(1)(a) GDPR (consent)

What are website builder systems?

We use a website builder system for our website. Builder systems are special forms of a content management system (CMS). With a builder system, website operators can create a website very easily and without programming knowledge. In many cases, web hosts also offer builder systems. Through the use of a builder system, personal data about you can also be collected, stored and processed. In this data protection text, we provide you with general information about data processing by builder systems. You will find more detailed information in the provider's privacy policies.

Why do we use website builder systems for our website?

The biggest advantage of a builder system is its ease of use. We want to offer you a clear, simple and well-organised website that we ourselves can operate and maintain without any problems – without external support. A builder system now offers many helpful functions that we can use even without programming knowledge. This allows us to design our web presence according to our wishes and to offer you an informative and pleasant time on our website.

What data is stored by a builder system?

Which data exactly is stored naturally depends on the website builder system used. Every provider processes and collects different data of the website visitor. But as a rule, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider and the date of your website visit is collected. Furthermore, tracking data (e.g. browser activity, clickstream activities, session heatmaps, etc.) can also be processed. In addition, personal data can also be recorded and stored. This is mostly contact data such as e-mail address, telephone number (if you have provided it), IP address and geographical location data. You will find exactly which data is stored in the provider's privacy policy.

How long and where is the data stored?

We will inform you further below about the duration of the data processing in connection with the website builder system used, insofar as we have further information on this. You will find detailed information about this in the provider's privacy policy. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. It may be that the provider stores data about you according to its own criteria, over which we have no influence.

Right to object

You always have the right to information, rectification and erasure of your personal data. If you have any questions, you can also contact those responsible for the website builder system used at any time. You will find contact details either in our privacy policy or on the website of the respective provider.

Cookies that providers use for their functions can be deleted, deactivated or managed in your browser. Depending on which browser you use, this works in different ways. Please note, however, that then possibly not all functions may work as usual.

Legal basis

We have a legitimate interest in using a website builder system in order to optimise our online service and to present it to you in an efficient and user-appealing manner. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use the builder insofar as you have given consent.

Insofar as the processing of data is not absolutely necessary for the operation of the website, the data is only processed on the basis of your consent. This concerns in particular tracking activities. The legal basis in this respect is Art. 6(1)(a) GDPR.

With this privacy policy we have brought you closer to the most important general information about data processing. If you would like to inform yourself even more precisely in this regard, you will find further information – if available – in the following section or in the provider's privacy policy.

Web analytics introduction

Web analytics privacy policy summary

Data subjects: Visitors to the website
Purpose: Evaluation of visitor information to optimise the web offering.
Data processed: Access statistics containing data such as locations of access, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. You will find more details on this with the respective web analytics tool used.
Storage duration: depends on the web analytics tool used
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is web analytics?

On our website we use software to evaluate the behaviour of website visitors, called web analytics for short. In doing so, data is collected that the respective analytics tool provider (also called a tracking tool) stores, manages and processes. With the help of the data, analyses of user behaviour on our website are created and made available to us as the website operator. In addition, most tools offer various testing options. For example, we can test which offers or content appeal most to our visitors. For this, we show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or which content our website visitors find more interesting. For such test procedures, as well as for other analytics procedures, user profiles can also be created and the data stored in cookies.

Why do we conduct web analytics?

With our website, we have a clear goal in mind: we want to deliver the best web offering on the market for our industry. To achieve this goal, we want on the one hand to offer the best and most interesting offering and on the other hand to ensure that you feel completely comfortable on our website. With the help of web analysis tools, we can take a closer look at the behaviour of our website visitors and then improve our web offering accordingly for you and for us. For example, we can recognise how old our visitors are on average, where they come from, when our website is visited most or which content or products are particularly popular. All this information helps us to optimise the website and thus to adapt it perfectly to your needs, interests and wishes.

What data is processed?

Which data exactly is stored naturally depends on the analysis tools used. But as a rule, it is stored, for example, which content you view on our website, which buttons or links you click, when you call up a page, which browser you use, with which device (PC, tablet, smartphone, etc.) you visit the website or which computer system you use. If you agreed that location data may also be collected, this can also be processed by the web analysis tool provider.

In addition, your IP address is also stored. Pursuant to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually stored in pseudonymised form (i.e. in an unrecognisable and shortened form). For the purpose of the tests, web analysis and web optimisation, no direct data, such as your name, your age, your address or your e-mail address, is stored as a matter of principle. All this data, insofar as it is collected, is stored in pseudonymised form. In this way, you cannot be identified as a person.

The following example schematically shows how Google Analytics works as an example of client-based web tracking with JavaScript code.

How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, other cookies can store data for several years.

Duration of data processing

Right to object

Legal basis

The use of web analytics presupposes your consent, which we have obtained with our cookie pop-up. According to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as can occur when data is collected by web analytics tools.

In addition to consent, there is a legitimate interest on our part in analysing the behaviour of website visitors and thus improving our offering technically and economically. With the help of web analytics, we recognise errors on the website, can identify attacks and improve profitability. The legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use the tools insofar as you have given consent.

Since cookies are used in web analytics tools, we also recommend reading our general privacy policy on cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective tools.

You will find information on special web analytics tools – if available – in the following sections.

Push notifications introduction

Push notifications summary

Data subjects: Push notification subscribers
Purpose: Notification of system-relevant and interesting events
Data processed: Data entered during registration, mostly also location data. You will find more details on this with the respective push notification tool used.
Storage duration: Data is mostly stored for as long as is necessary for the provision of the services.
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract)

What are push notifications?

On our website we also use so-called push notification services, with which we can always keep our users up to date. This means that if you have consented to the use of such push notifications, we can send you short news with the help of a software tool. Push notifications are a form of text message that appear directly on your smartphone or on other devices such as tablets or PCs, if you have signed up for them. You also receive these messages if you are not on our website or are not actively using our offering. In doing so, data about your location and your usage behaviour can also be collected and stored.

Why do we use push notifications?

On the one hand, we use push notifications in order to be able to fully provide the services that we have contractually agreed with you. On the other hand, the messages also serve our online marketing. With the help of these messages, we can bring our service or our products closer to you. Especially when there is news in our company, we can inform you about it immediately. We want to get to know the preferences and habits of all our users as well as possible in order to continuously improve our offering.

What data is processed?

In order for you to be able to receive push notifications, you must also confirm that you want to receive these messages. The data that is accumulated during the process of consent is also stored, managed and processed. This is necessary so that it can be proven and recognised that a user has agreed to receive the push notifications. For this, a so-called device token or push token is stored in your browser. Usually, the data of your location or the location of the terminal device you use is also stored.

So that we always send interesting and important push notifications, the handling of the messages is also evaluated statistically. In this way, we can then see, for example, whether and when you open the message. With the help of these findings, we can adapt our communication strategy to your wishes and interests. Although this stored data can be assigned to you, we do not want to check on you as an individual. Rather, we are interested in the collected data of all our users so that we can make optimisations. You will find out exactly which data is stored in the privacy policies of the respective service providers.

Duration of data processing

How long the data is processed and stored depends primarily on the tool we use. Further below you will find out more about the data processing of the individual tools. The providers' privacy policies usually state exactly which data is stored and processed and for how long. In principle, personal data is only processed for as long as is necessary for the provision of our services. If data is stored in cookies, the storage duration varies greatly. The data can be deleted again immediately after leaving a website, but it can also remain stored for several years. Therefore, you should look at each individual cookie in detail if you want to know more precisely about the data storage. Mostly you will also find informative information about the individual cookies in the privacy policies of the individual providers.

Legal basis

It may also be that the push notifications are necessary so that certain obligations that are stated in a contract can be fulfilled. For example, so that we can inform you of technical or organisational news. Then the legal basis is Art. 6(1)(b) GDPR.

If this is not the case, the push notifications are only sent on the basis of your consent. Our push notifications can in particular have advertising content. The push notifications can also be sent depending on your location that your terminal device displays. The analytical evaluations mentioned above are also based on your consent to want to receive such messages. The legal basis in this respect is Art. 6(1)(a) GDPR. You can of course revoke your consent or change various settings at any time in the settings.

Social media introduction

Social media privacy policy summary

Data subjects: Visitors to the website
Purpose: Presentation and optimisation of our service, contact with visitors, prospective customers, etc., advertising
Data processed: Data such as telephone numbers, e-mail addresses, contact data, data on user behaviour, information about your device and your IP address.

You will find more details on this with the respective social media tool used.

Storage duration: depends on the social media platforms used
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is social media?

In addition to our website, we are also active on various social media platforms. In doing so, data of users can be processed so that we can specifically address users who are interested in us via the social networks. Furthermore, elements of a social media platform can also be embedded directly in our website. This is the case, for example, when you click a so-called social button on our website and are forwarded directly to our social media presence. So-called social media are websites and apps via which registered members can produce content, exchange content openly or in certain groups and network with other members.

Why do we use social media?

For years, social media platforms have been the place where people communicate and get in contact online. With our social media presences, we can bring our products and services closer to prospective customers. The social media elements integrated on our website help you to switch quickly and without complications to our social media content.

The data that is stored and processed through your use of a social media channel primarily has the purpose of being able to carry out web analyses. The aim of these analyses is to be able to develop more precise and personalised marketing and advertising strategies. Depending on your behaviour on a social media platform, appropriate conclusions can be drawn about your interests with the help of the evaluated data, and so-called user profiles can be created. In this way, it is also possible for the platforms to present you with tailor-made advertisements. Usually, cookies are set in your browser for this purpose, which store data on your usage behaviour.

We generally assume that we remain responsible under data protection law even if we use services of a social media platform. However, the European Court of Justice has ruled that in certain cases the operator of the social media platform can be jointly responsible together with us within the meaning of Art. 26 GDPR. Insofar as this is the case, we point this out separately and work on the basis of an agreement in this regard. The essence of the agreement is then reproduced further below at the platform concerned.

Please note that when using the social media platforms or our built-in elements, data of yours can also be processed outside the European Union, since many social media channels, for example Facebook or Twitter, are American companies. As a result, you may possibly no longer be able to claim or enforce your rights with regard to your personal data so easily.

What data is processed?

Which data exactly is stored and processed depends on the respective provider of the social media platform. But usually it is data such as telephone numbers, e-mail addresses, data that you enter in a contact form, user data such as which buttons you click, whom you like or whom you follow, when you visited which pages, information about your device and your IP address. Most of this data is stored in cookies. Especially if you yourself have a profile on the visited social media channel and are logged in, data can be linked to your profile.

All data collected via a social media platform is also stored on the providers' servers. Thus, only the providers have access to the data and can give you the appropriate information or make changes.

If you want to know exactly which data is stored and processed by the social media providers and how you can object to the data processing, you should carefully read the respective privacy policy of the company. Also, if you have questions about data storage and data processing or want to assert corresponding rights, we recommend that you contact the provider directly.

Duration of data processing

We will inform you further below about the duration of the data processing, insofar as we have further information on this. For example, the social media platform Facebook stores data until it is no longer needed for its own purpose. Customer data that is matched with its own user data, however, is deleted within two days. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. If, as for example in the case of accounting, it is legally prescribed, this storage duration can also be exceeded.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers such as embedded social media elements at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent the collection of data by cookies by managing, deactivating or deleting the cookies in your browser.

Since cookies can be used in social media tools, we also recommend our general privacy policy on cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

If you have consented that data of yours can be processed and stored by integrated social media elements, this consent counts as the legal basis of the data processing (Art. 6(1)(a) GDPR). In principle, in the presence of consent, your data is also stored and processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the tools insofar as you have given consent. Most social media platforms also set cookies in your browser to store data. That is why we recommend that you read our data protection text on cookies carefully and look at the privacy policy or the cookie guidelines of the respective service provider.

You will find information on special social media platforms – if available – in the following sections.

Online marketing introduction

Online marketing privacy policy summary

Data subjects: Visitors to the website
Purpose: Evaluation of visitor information to optimise the web offering.
Data processed: Access statistics containing data such as locations of access, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. Personal data such as name or e-mail address can also be processed. You will find more details on this with the respective online marketing tool used.
Storage duration: depends on the online marketing tools used
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is online marketing?

Online marketing refers to all measures that are carried out online in order to achieve marketing goals such as increasing brand awareness or a business transaction. Furthermore, our online marketing measures aim to make people aware of our website. In order to be able to show our offering to many interested people, we therefore conduct online marketing. Mostly this involves online advertising, content marketing or search engine optimisation. So that we can use online marketing efficiently and in a targeted manner, personal data is also stored and processed. On the one hand, the data helps us to show our content only to those people who are also really interested in it, and on the other hand, we can measure the advertising success of our online marketing measures.

Why do we use online marketing tools?

We want to show our website to everyone who is interested in our offering. We are aware that this is not possible without deliberately taken measures. That is why we do online marketing. There are various tools that make our work on our online marketing measures easier and additionally always provide suggestions for improvement via data. In this way, we can direct our campaigns more precisely at our target group. The purpose of these online marketing tools used is therefore ultimately the optimisation of our offering.

What data is processed?

So that our online marketing works and the success of the measures can be measured, user profiles are created and data is stored, for example, in cookies (these are small text files). With the help of this data, we can not only place advertising in the classic sense, but also present our content directly on our website in the way you like best. There are various third-party tools for this that offer these functions and correspondingly also collect and store data about you. In the aforementioned cookies, it is stored, for example, which web pages you have visited on our website, how long you have viewed these pages, which links or buttons you click or from which website you came to us. In addition, technical information can also be stored. For example, your IP address, which browser you use, from which terminal device you visit our website or the time at which you called up our website and when you left it again. If you have consented that we may also determine your location, we can also store and process this.

Your IP address is stored in pseudonymised form (i.e. shortened). Unique data that directly identifies you as a person, such as name, address or e-mail address, is also only stored in pseudonymised form within the scope of the advertising and online marketing procedures. We can therefore not identify you as a person, but we only have the pseudonymised, stored information stored in the user profiles.

The cookies can under certain circumstances also be used, analysed and used for advertising purposes on other websites that work with the same advertising tools. The data can then also be stored on the servers of the advertising tool providers.

In exceptional cases, unique data (names, e-mail address, etc.) can also be stored in the user profiles. This storage occurs, for example, if you are a member of a social media channel that we use for our online marketing measures and the network links data submitted earlier with the user profile.

With all the advertising tools we use that store data about you on their servers, we only ever receive summarised information and never data that makes you identifiable as an individual. The data merely shows how well advertising measures taken worked. For example, we see which measures moved you or other users to come to our website and to acquire a service or a product there. On the basis of the analyses, we can improve our advertising offering in the future and adapt it even more precisely to the needs and wishes of interested persons.

Duration of data processing

We will inform you further below about the duration of the data processing, insofar as we have further information on this. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. Data stored in cookies is stored for different lengths of time. Some cookies are already deleted again after leaving the website, others can be stored in your browser for several years. In the respective privacy policies of the individual providers, you will as a rule receive precise information about the individual cookies that the provider uses.

Right to object

Since cookies can as a rule be used in online marketing tools, we also recommend our general privacy policy on cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

If you have consented that third-party providers may be used, the legal basis of the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as can occur when data is collected by online marketing tools.

On our part, there is also a legitimate interest in measuring online marketing measures in anonymised form in order to optimise our offering and our measures with the help of the data obtained. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use the tools insofar as you have given consent.

You will find information on special online marketing tools – if available – in the following sections.

Cookie Consent Management Platform introduction

Cookie Consent Management Platform summary

Data subjects: Website visitors
Purpose: Obtaining and managing consent to certain cookies and thus the use of certain tools
Data processed: Data for managing the set cookie settings such as IP address, time of consent, type of consent, individual consents. You will find more details on this with the respective tool used.
Storage duration: Depends on the tool used, one must be prepared for periods of several years
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is a Cookie Consent Management Platform?

On our website we use Consent Management Platform (CMP) software, which makes the correct and secure handling of scripts and cookies used easier for us and for you. The software automatically creates a cookie pop-up, scans and controls all scripts and cookies, offers a cookie consent required under data protection law for you and helps us and you to keep track of all cookies. With most cookie consent management tools, all existing cookies are identified and categorised. You as the website visitor then decide for yourself whether and which scripts and cookies you allow or do not allow. The following graphic represents the relationship between browser, web server and CMP.

Why do we use a cookie management tool?

Our goal is to offer you the best possible transparency in the area of data protection. In addition, we are also legally obliged to do so. We want to inform you as well as possible about all tools and all cookies that can store and process data about you. It is also your right to decide for yourself which cookies you accept and which not. In order to grant you this right, we first have to know exactly which cookies have landed on our website at all. Thanks to a cookie management tool, which regularly scans the website for all existing cookies, we know about all cookies and can provide you with information about them in compliance with the GDPR. Via the consent system, you can then accept or reject cookies.

What data is processed?

Within the scope of our cookie management tool, you can manage each individual cookie yourself and have full control over the storage and processing of your data. The declaration of your consent is stored so that we do not have to ask you every time you visit our website anew and so that we can also prove your consent, if legally necessary. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the storage duration of your cookie consent varies. Mostly this data (e.g. pseudonymous user ID, time of consent, details on the cookie categories or tools, browser, device information) is stored for up to two years.

Duration of data processing

We will inform you further below about the duration of the data processing, insofar as we have further information on this. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products. Data stored in cookies is stored for different lengths of time. Some cookies are already deleted again after leaving the website, others can be stored in your browser for several years. The exact duration of the data processing depends on the tool used; mostly you should be prepared for a storage duration of several years. In the respective privacy policies of the individual providers, you will as a rule receive precise information about the duration of the data processing.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent the collection of data by cookies by managing, deactivating or deleting the cookies in your browser.

You will find information on special cookie management tools – if available – in the following sections.

Legal basis

If you consent to cookies, personal data about you is processed and stored via these cookies. If we may use cookies through your consent (Art. 6(1)(a) GDPR), this consent is at the same time the legal basis for the use of cookies or the processing of your data. In order to be able to manage the consent to cookies and to be able to enable you to give consent, a cookie consent management platform software is used. The use of this software enables us to operate the website in a legally compliant manner in an efficient way, which constitutes a legitimate interest (Art. 6(1)(f) GDPR).

Security & Anti-Spam

Security & Anti-Spam privacy policy summary

Data subjects: Visitors to the website
Purpose: Cyber security
Data processed: Data such as your IP address, name or technical data such as browser version

You will find more details on this further below and in the individual data protection texts.

Storage duration: mostly the data is stored until it is no longer needed for the fulfilment of the service
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is Security & Anti-Spam software?

With so-called Security & Anti-Spam software, you can protect yourself and we can protect ourselves from various spam or phishing e-mails and possible other cyber attacks. Spam refers to advertising e-mails from a mass mailing that one did not request oneself. Such e-mails are also called junk data and can also cause costs. Phishing e-mails, in turn, are messages that aim to build trust via fake messages or websites in order to obtain personal data. Anti-spam software usually protects against unwanted spam messages or malicious e-mails that could, for example, introduce viruses into our system. We also use general firewall and security systems that protect our computers from unwanted network attacks.

Why do we use Security & Anti-Spam software?

On our website we place particularly great value on security. After all, it is not only about our security, but above all also about your security. Unfortunately, in the world of IT and the internet, cyber threats are now part of everyday life. Hackers often try to steal personal data from an IT system with the help of a cyber attack. And therefore a good defence system is absolutely necessary. A security system monitors all incoming and outgoing connections to our network or computer. So that we achieve even greater security against cyber attacks, in addition to the standardised security systems on our computer, we also use further external security services. Unauthorised traffic of data is thereby better prevented, and in this way we protect ourselves from cybercrime.

What data is processed by Security & Anti-Spam software?

Which data exactly is collected and stored naturally depends on the respective service. However, we always endeavour to use only programs that collect data very sparingly or only store data that is necessary for the fulfilment of the service offered. In principle, the service can store data such as name, address, IP address, e-mail address and technical data such as browser type or browser version. Any performance and log data can also be collected in order to recognise possible incoming threats in good time. This data is processed within the scope of the services and in compliance with the applicable laws. In the case of US-American providers, this also includes the GDPR (via the standard contractual clauses). These security services in some cases also cooperate with third-party providers who can store and/or process data under instruction and in accordance with the data protection guidelines and further security measures. The data is mostly stored via cookies.

Duration of data processing

We will inform you further below about the duration of the data processing, insofar as we have further information on this. For example, security programs store data until you or we revoke the data storage. In general, personal data is only stored for as long as is absolutely necessary for the provision of the services. In many cases, unfortunately, we lack precise information from the providers about the length of the storage.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers of security software at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent the collection of data by cookies by managing, deactivating or deleting the cookies in your browser.

Since cookies can also be used with such security services, we recommend our general privacy policy on cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

We use the security services mainly on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in a good security system against various cyber attacks.

Certain processing, in particular the use of cookies as well as the use of security functions, requires your consent. If you have consented that data of yours can be processed and stored by integrated security services, this consent counts as the legal basis of the data processing (Art. 6(1)(a) GDPR). Most of the services we use set cookies in your browser to store data. That is why we recommend that you read our data protection text on cookies carefully and look at the privacy policy or the cookie guidelines of the respective service provider.

You will find information on special tools – if available – in the following sections.

Cloud services

Cloud services privacy policy summary

Data subjects: We as the website operator and you as the website visitor
Purpose: Security and data storage
Data processed: Data such as your IP address, name or technical data such as browser version

You will find more details on this further below and in the individual data protection texts or in the providers' privacy policies

Storage duration: mostly the data is stored until it is no longer needed for the fulfilment of the service
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are cloud services?

Cloud services provide us as the website operator with storage space and computing power via the internet. Via the internet, data can be transmitted to, processed and stored on an external system. The management of this data is taken over by the respective cloud provider. Depending on the requirement, an individual person or also a company can choose the storage space size or computing power. Cloud storage is accessed via an API or via storage protocols. API stands for Application Programming Interface, and this refers to a programming interface that connects software components with hardware components.

Why do we use cloud services?

We use cloud services for several reasons. A cloud service offers us the possibility to store our data securely. In addition, we have access to the data from various locations and devices and thus have more flexibility and make our work processes easier. Cloud storage also saves us costs, because we do not have to set up and manage our own infrastructure for data storage and data security. Through the central storage of our data in the cloud, we can also expand our fields of application and manage our information significantly better.

We as the website operator or as a company therefore use cloud services primarily for our own purposes. For example, we use the services to manage our calendar, to store documents or other important information in the cloud. In doing so, however, personal data about you can also be stored. This is the case, for example, if you provide us with your contact data (such as name and e-mail address) and we store our customer data with a cloud provider. Consequently, data that we process about you can also be stored and processed on external servers. If we offer certain forms or content from cloud services on our website, cookies can also be set for web analyses and advertising purposes. Furthermore, such cookies remember your settings (such as the language used), so that on your next visit to our website you find your accustomed web environment.

What data is processed by cloud services?

Much of the data we store in the cloud has no personal reference, but some data counts, by the definition of the GDPR, as personal data. Often it is customer data such as name, address, IP address or telephone number or technical device information. In the cloud, videos, images and audio files can also be stored. How the data is collected and stored exactly depends on the respective service. We try to use only services that handle the data in a very trustworthy and professional manner. In principle, the services, such as Amazon Drive, have access to the stored files in order to be able to offer their own service accordingly. For this, however, the services need permissions such as the right to copy files for security reasons. This data is processed and managed within the scope of the services and in compliance with the applicable laws. In the case of US-American providers, this also includes the GDPR (via the standard contractual clauses). These cloud services in some cases also cooperate with third-party providers who can process data under instruction and in accordance with the data protection guidelines and further security measures. We would like to emphasise again at this point that all well-known cloud services (such as Amazon Drive, Google Drive or Microsoft OneDrive) obtain the right to have access to stored content in order to be able to offer and optimise their own service accordingly.

Duration of data processing

We will inform you further below about the duration of the data processing, insofar as we have further information on this. In general, cloud services store data until you or we revoke the data storage or delete the data again. In general, personal data is only stored for as long as is absolutely necessary for the provision of the services. A final deletion of data from the cloud can, however, take a few months. This is the case because the data is mostly not stored on just one server, but is distributed across various servers.

Right to object

You also have the right and the possibility to revoke your consent to the data storage in a cloud at any time. If cookies are used, you also have a right of revocation here. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent the collection of data by cookies by managing, deactivating or deleting the cookies in your browser. We also recommend our general privacy policy on cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective cloud providers.

Legal basis

We use cloud services mainly on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in a good security and storage system.

Certain processing, in particular the use of cookies as well as the use of storage functions, requires your consent. If you have consented that data of yours can be processed and stored with cloud services, this consent counts as the legal basis of the data processing (Art. 6(1)(a) GDPR). Most of the services we use set cookies in your browser to store data. That is why we recommend that you read our data protection text on cookies carefully and look at the privacy policy or the cookie guidelines of the respective service provider.

You will find information on special tools – if available – in the following sections.

External online platforms introduction

External online platforms privacy policy summary

Data subjects: Visitors to the website or visitors to the external online platforms
Purpose: Presentation and optimisation of our service, contact with visitors, prospective customers
Data processed: Data such as telephone numbers, e-mail addresses, contact data, data on user behaviour, information about your device and your IP address.

You will find more details on this with the respective platform used.

Storage duration: depends on the platforms used
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are external online platforms?

In order to be able to offer our services or products outside our website as well, we also use external platforms. These are mostly online marketplaces such as Amazon or eBay. In addition to our responsibility for data protection, the data protection provisions of the external platforms we use also apply. This is especially the case when our products are purchased via the platform. So when there is a payment process. Furthermore, most platforms also use your data to optimise their own marketing measures. For example, the platform can, with the help of collected data, tailor advertisements precisely to the interests of customers and website visitors.

Why do we use external online platforms?

In addition to our website, we also want to offer our offering on other platforms in order to bring our offering closer to more customers. External online marketplaces such as Amazon, eBay or also Digistore24 offer large sales websites that offer our products to people who may not know our website. It can also happen that built-in elements on our page lead to an external online platform. Data that is processed and stored by the online platform used serves the company on the one hand to log the payment process, but on the other hand also in order to be able to carry out web analyses.

The aim of these analyses is to be able to develop more precise and personalised marketing and advertising strategies. Depending on your behaviour on a platform, appropriate conclusions can be drawn about your interests with the help of the evaluated data, and so-called user profiles can be created. In this way, it is also possible for the platforms to present you with tailor-made advertisements or products. Usually, cookies are set in your browser for this purpose, which store data on your usage behaviour.

Please note that when using the platforms or our built-in elements, data of yours can also be processed outside the European Union, since online platforms, for example Amazon or eBay, are American companies. As a result, you may possibly no longer be able to claim or enforce your rights with regard to your personal data so easily.

What data is processed?

Which data exactly is stored and processed depends on the respective external platform. But usually it is data such as telephone numbers, e-mail addresses, data that you enter in a contact form, user data such as which buttons you click, when you visited which pages, information about your device and your IP address. Very often, most of this data is stored in cookies. If you have your own profile on an external platform and are also logged in there, data can be linked to the profile. The collected data is stored on the servers of the platforms used and processed there. How an external platform stores, manages and processes data exactly, you will find out in the respective privacy policy. If you have questions about data storage and data processing or want to assert corresponding rights, we recommend that you contact the platform directly.

Duration of data processing

We will inform you further below about the duration of the data processing, insofar as we have further information on this. For example, Amazon stores data until it is no longer needed for its own purpose. In general, we only process personal data for as long as is absolutely necessary for the provision of our services and products.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies at any time. This works either via our cookie management tool or via opt-out functions at the respective external platform. Furthermore, you can also prevent the collection of data by cookies by managing, deactivating or deleting the cookies in your browser.

Since cookies can be used, we also recommend our general privacy policy on cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective external platforms.

Legal basis

If you have consented that data of yours can be processed and stored by external platforms, this consent counts as the legal basis of the data processing (Art. 6(1)(a) GDPR). In principle, in the presence of consent, your data is also stored and processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers and business partners. If we have integrated elements of external platforms on our website, we nevertheless only use these insofar as you have given consent.

You will find information on special external platforms – if available – in the following sections.

Audio & Video introduction

Audio & Video privacy policy summary

Data subjects: Visitors to the website
Purpose: Optimisation of our service
Data processed: Data such as contact data, data on user behaviour, information about your device and your IP address can be stored.

You will find more details on this further below in the corresponding data protection texts.

Storage duration: data generally remains stored as long as it is necessary for the service purpose
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are audio and video elements?

We have integrated audio and video elements on our website so that you can, for example, watch videos or listen to music/podcasts directly via our website. The content is made available by service providers. All content is therefore also obtained from the corresponding servers of the providers.

These are integrated functional elements of platforms such as YouTube, Vimeo or Spotify. The use of these portals is usually free of charge, but paid content can also be published. With the help of these integrated elements, you can listen to or watch the respective content via our website.

If you use audio or video elements on our website, personal data about you can also be transmitted to, processed and stored by the service providers.

Why do we use audio & video elements on our website?

Of course, we want to deliver the best offering to you on our website. And we are aware that content is no longer conveyed merely in text and static images. Instead of simply giving you a link to a video, we offer you audio and video formats directly on our website that are entertaining or informative and, ideally, even both. This expands our service and makes access to interesting content easier for you. Thus, in addition to our texts and images, we also offer video and/or audio content.

What data is stored by audio & video elements?

When you call up a page on our website that has, for example, an embedded video, your server connects to the server of the service provider. In doing so, data about you is also transmitted to the third-party provider and stored there. Some data is collected and stored quite independently of whether you have an account with the third-party provider or not. This mostly includes your IP address, browser type, operating system, and other general information about your terminal device. Furthermore, most providers also obtain information about your web activity. This includes, for example, session duration, bounce rate, which button you clicked or via which website you use the service. All this information is mostly stored via cookies or pixel tags (also called web beacons). Pseudonymised data is mostly stored in cookies in your browser. You will always find out exactly which data is stored and processed in the privacy policy of the respective provider.

Duration of data processing

How long the data is stored exactly on the servers of the third-party providers, you will find out either further below in the data protection text of the respective tool or in the provider's privacy policy. In principle, personal data is only ever processed for as long as is absolutely necessary for the provision of our services or products. As a rule, this also applies to third-party providers. Mostly you can assume that certain data is stored for several years on the servers of the third-party providers. Data can, especially in cookies, be stored for different lengths of time. Some cookies are already deleted again after leaving the website, others can be stored in your browser for several years.

Right to object

Since cookies are mostly also used through the integrated audio and video functions on our page, you should also read our general privacy policy on cookies. In the privacy policies of the respective third-party providers, you will find out more precisely about the handling and storage of your data.

Legal basis

If you have consented that data of yours can be processed and stored by integrated audio and video elements, this consent counts as the legal basis of the data processing (Art. 6(1)(a) GDPR). In principle, your data is also stored and processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the integrated audio and video elements insofar as you have given consent.

Vimeo privacy policy

Vimeo privacy policy summary

Data subjects: Visitors to the website
Purpose: Optimisation of our service
Data processed: Data such as contact data, data on user behaviour, information about your device and your IP address can be stored.

You will find more details on this further below in this privacy policy.

Storage duration: data generally remains stored as long as it is necessary for the service purpose
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is Vimeo?

On our website we also use videos from the company Vimeo. The video portal is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. With the help of a plug-in, we can thus display interesting video material to you directly on our website. In doing so, certain data about you can be transmitted to Vimeo. In this privacy policy, we show you what data this is, why we use Vimeo and how you can manage or prevent your data or the data transmission.

Vimeo is a video platform that was founded in 2004 and has enabled the streaming of videos in HD quality since 2007. Since 2015, streaming in 4k Ultra HD is also possible. The use of the portal is free of charge, but paid content can also be published. Compared to the market leader YouTube, Vimeo primarily places value on high-quality content of good quality. Thus, the portal offers on the one hand many artistic contents such as music videos and short films, and on the other hand also informative documentaries on the most diverse topics.

Why do we use Vimeo on our website?

The aim of our web presence is to deliver the best possible content to you. And as easily accessible as possible. Only when we have achieved that are we satisfied with our service. The video service Vimeo supports us in achieving this goal. Vimeo offers us the possibility to present high-quality content to you directly on our website. Instead of giving you only a link to an interesting video, you can watch the video right here with us. This expands our service and makes access to interesting content easier for you. Thus, in addition to our texts and images, we also offer video content.

What data is stored on Vimeo?

When you call up a page on our website that has a Vimeo video embedded, your browser connects to the servers of Vimeo. In doing so, a data transmission takes place. This data is collected, stored and processed on the Vimeo servers. Regardless of whether you have a Vimeo account or not, Vimeo collects data about you. This includes your IP address, technical info about your browser type, your operating system or quite basic device information. Furthermore, Vimeo stores information about via which web page you use the Vimeo service and which actions (web activities) you carry out on our web page. These web activities include, for example, session duration, bounce rate or which button you clicked on our web page with the built-in Vimeo function. Vimeo can track and store these actions with the help of cookies and similar technologies.

If you are logged in as a registered member of Vimeo, more data can mostly be collected, since possibly more cookies have already been set in your browser. In addition, your actions on our web page are linked directly to your Vimeo account. To prevent this, you must log out of Vimeo while "surfing" on our web page.

Below we show you cookies that are set by Vimeo when you are on a web page with an integrated Vimeo function. This list makes no claim to completeness and assumes that you do not have a Vimeo account.

Name: player
Value: ""

Purpose: This cookie stores your settings before you play an embedded Vimeo video. As a result, the next time you watch a Vimeo video, you get your preferred settings again.

Expiry date: after one year
Name: vuid
Value: pl1046149876.614422590123036018-4

Purpose: This cookie collects information about your actions on web pages that have a Vimeo video embedded.

Expiry date: after 2 years

Note: These two cookies are always set as soon as you are on a web page with an embedded Vimeo video. If you watch the video and click the button, for example, to "share" or "like" the video, further cookies are set. These are also third-party cookies such as _ga or _gat_UA-76641-8 from Google Analytics or _fbp from Facebook. Which cookies are set here exactly depends on your interaction with the video.

The following list shows an excerpt of possible cookies that are set when you interact with the Vimeo video:

Name: _abexps
Value: %5B%5D

Purpose: This Vimeo cookie helps Vimeo to remember the settings you have made. This can be, for example, a preset language, a region or a user name. In general, the cookie stores data about how you use Vimeo.

Expiry date: after one year
Name: continuous_play_v3
Value: 1

Purpose: This cookie is a first-party cookie from Vimeo. The cookie collects information about how you use the Vimeo service. For example, the cookie stores when you pause or play a video again.

Expiry date: after one year
Name: _ga
Value: GA1.2.1522249635.1578401280123036018-7

Purpose: This cookie is a third-party cookie from Google. By default, analytics.js uses the cookie _ga to store the user ID. In principle, it serves to distinguish website visitors.

Expiry date: after 2 years
Name: _gcl_au
Value: 1.1.770887836.1578401279123036018-3

Purpose: This third-party cookie from Google AdSense is used to improve the efficiency of advertisements on websites.

Expiry date: after 3 months
Name: _fbp
Value: fb.1.1578401280585.310434968

Purpose: This is a Facebook cookie. This cookie is used to display advertisements or advertising products from Facebook or other advertisers.

Expiry date: after 3 months

Vimeo uses this data, among other things, to improve its own service, to enter into communication with you and to set its own targeted advertising measures. Vimeo emphasises on its website that with embedded videos only first-party cookies (i.e. cookies from Vimeo itself) are used, as long as one does not interact with the video.

How long and where is the data stored?

Vimeo has its headquarters in White Plains in the state of New York (USA). However, the services are offered worldwide. In doing so, the company uses computer systems, databases and servers in the USA and also in other countries. Your data can thus also be stored and processed on servers in America. The data remains stored at Vimeo until the company no longer has an economic reason for the storage. Then the data is deleted or anonymised.

How can I delete my data or prevent the data storage?

You always have the possibility to manage cookies in your browser according to your wishes. If, for example, you do not want Vimeo to set cookies and thus collect information about you, you can delete or deactivate cookies at any time in your browser settings. Depending on the browser, this works a bit differently. Please note that after deactivating/deleting cookies, various functions may no longer be available to the full extent. Under the section "Cookies" you will find the corresponding links to the respective instructions of the best-known browsers.

If you are a registered Vimeo member, you can also manage the cookies used in the settings at Vimeo.

Legal basis

If you have consented that data of yours can be processed and stored by integrated Vimeo elements, this consent counts as the legal basis of the data processing (Art. 6(1)(a) GDPR). In principle, your data is also stored and processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the integrated Vimeo elements insofar as you have given consent. Vimeo also sets cookies in your browser to store data. That is why we recommend that you read our data protection text on cookies carefully and look at the privacy policy or the cookie guidelines of the respective service provider.

Vimeo processes data about you, among other places, also in the USA. We point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for the data transfer to the USA. This can be accompanied by various risks for the lawfulness and security of the data processing.

As the basis for the data processing at recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, Vimeo uses so-called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data corresponds to European data protection standards even if it is transferred to and stored in third countries (such as, for example, the USA). Through these clauses, Vimeo undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You will find more information on the standard contractual clauses at Vimeo at vimeo.com/privacy#international_data_transfers_and_certain_user_rights.

You can find out more about the use of cookies at Vimeo at vimeo.com/cookie_policy, information on data protection at Vimeo you can read at vimeo.com/privacy .

YouTube privacy policy

YouTube privacy policy summary

Data subjects: Visitors to the website
Purpose: Optimisation of our service
Data processed: Data such as contact data, data on user behaviour, information about your device and your IP address can be stored.

You will find more details on this further below in this privacy policy.

Storage duration: data generally remains stored as long as it is necessary for the service purpose
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is YouTube?

We have built YouTube videos into our website. In this way, we can present interesting videos to you directly on our page. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you call up a page on our website that has a YouTube video embedded, your browser automatically connects to the servers of YouTube or Google. In doing so, various data is transmitted (depending on the settings). Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing in the European area.

In the following, we want to explain to you in more detail which data is processed, why we have integrated YouTube videos and how you can manage or delete your data.

On YouTube, users can watch, rate, comment on and upload videos themselves free of charge. Over the last few years, YouTube has become one of the most important social media channels worldwide. So that we can display videos on our web page, YouTube provides a code snippet that we have built into our page.

Why do we use YouTube videos on our website?

YouTube is the video platform with the most visitors and the best content. We endeavour to offer you the best possible user experience on our web page. And of course interesting videos must not be missing. With the help of our embedded videos, we make further helpful content available to you in addition to our texts and images. In addition, our web page is found more easily on the Google search engine through the embedded videos. Also, when we place advertisements via Google Ads, Google can – thanks to the collected data – really only show these ads to people who are interested in our offers.

What data is stored by YouTube?

As soon as you visit one of our pages that has a YouTube video built in, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can mostly assign your interactions on our web page to your profile with the help of cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet provider. Further data can be contact data, any ratings, the sharing of content via social media or the adding to your favourites on YouTube.

If you are not logged into a Google account or a YouTube account, Google stores data with a unique identifier that is linked to your device, browser or app. In this way, for example, your preferred language setting is retained. But many interaction data cannot be stored, since fewer cookies are set.

In the following list we show cookies that were set in a test in the browser. On the one hand, we show cookies that are set without a logged-in YouTube account. On the other hand, we show cookies that are set with a logged-in account. The list can make no claim to completeness, because the user data always depends on the interactions on YouTube.

Name: YSC
Value: b9-CV6ojI5Y123036018-1

Purpose: This cookie registers a unique ID in order to store statistics of the video watched.

Expiry date: after end of session
Name: PREF
Value: f1=50000000

Purpose: This cookie likewise registers your unique ID. Google receives statistics via PREF on how you use YouTube videos on our web page.

Expiry date: after 8 months
Name: GPS
Value: 1

Purpose: This cookie registers your unique ID on mobile devices in order to track the GPS location.

Expiry date: after 30 minutes
Name: VISITOR_INFO1_LIVE
Value: 95Chz8bagyU

Purpose: This cookie tries to estimate the bandwidth of the user on our web pages (with built-in YouTube video).

Expiry date: after 8 months

Further cookies that are set when you are logged in with your YouTube account:

Name: APISID
Value: zILlvClZSkqGsSwI/AU1aZI6HY7123036018-

Purpose: This cookie is used to create a profile about your interests. The data is used for personalised advertisements.

Expiry date: after 2 years
Name: CONSENT
Value: YES+AT.de+20150628-20-0

Purpose: The cookie stores the status of a user's consent to the use of different services of Google. CONSENT also serves security, in order to check users and to protect user data from unauthorised attacks.

Expiry date: after 19 years
Name: HSID
Value: AcRwpgUik9Dveht0I

Purpose: This cookie is used to create a profile about your interests. This data helps to be able to display personalised advertising.

Expiry date: after 2 years
Name: LOGIN_INFO
Value: AFmmF2swRQIhALl6aL…

Purpose: In this cookie, information about your login data is stored.

Expiry date: after 2 years
Name: SAPISID
Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM

Purpose: This cookie works by uniquely identifying your browser and your device. It is used to create a profile about your interests.

Expiry date: after 2 years
Name: SID
Value: oQfNKjAsI123036018-

Purpose: This cookie stores your Google account ID and your last login time in digitally signed and encrypted form.

Expiry date: after 2 years
Name: SIDCC
Value: AN0-TYuqub2JOcDTyL

Purpose: This cookie stores information about how you use the web page and which advertising you may have seen before the visit to our page.

Expiry date: after 3 months
How long and where is the data stored?

The data that YouTube receives and processes about you is stored on the Google servers. Most of these servers are located in America. At datacenters.google you can see exactly where the Google data centres are located. Your data is distributed across the servers. In this way, the data is more quickly retrievable and better protected from manipulation.

Google stores the collected data for different lengths of time. Some data you can delete at any time, others are automatically deleted after a limited time and yet others are stored by Google for a longer time. Some data (such as elements from "My Activity", photos or documents, products) that are stored in your Google account remain stored until you delete them. Even if you are not logged into a Google account, you can delete some data that is linked to your device, browser or app.

How can I delete my data or prevent the data storage?

In principle, you can delete data manually in the Google account. With the automatic deletion function of location and activity data introduced in 2019, information is stored – depending on your decision – for either 3 or 18 months and then deleted.

Regardless of whether you have a Google account or not, you can configure your browser so that cookies from Google are deleted or deactivated. Depending on which browser you use, this works in different ways. Under the section "Cookies" you will find the corresponding links to the respective instructions of the best-known browsers.

Legal basis

If you have consented that data of yours can be processed and stored by integrated YouTube elements, this consent counts as the legal basis of the data processing (Art. 6(1)(a) GDPR). In principle, your data is also stored and processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers and business partners. Nevertheless, we only use the integrated YouTube elements insofar as you have given consent. YouTube also sets cookies in your browser to store data. That is why we recommend that you read our data protection text on cookies carefully and look at the privacy policy or the cookie guidelines of the respective service provider.

YouTube processes data about you, among other places, also in the USA. YouTube or Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure data transfer of personal data of EU citizens to the USA. You will find more information on this at commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data corresponds to European data protection standards even if it is transferred to and stored in third countries (such as, for example, the USA). Through the EU-US Data Privacy Framework and through the standard contractual clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, you will find at business.safety.google/intl/de/adsprocessorterms/.

Since YouTube is a subsidiary of Google, there is a joint privacy policy. If you would like to find out more about the handling of your data, we recommend the privacy policy at policies.google.com/privacy?hl=de.

YouTube Subscribe Button privacy policy

We have built the YouTube Subscribe button ("Subscribe button") into our web page. You usually recognise the button by the classic YouTube logo. The logo shows, against a red background in white lettering, the words "Subscribe" or "YouTube" and to the left of it the white "Play symbol". However, the button can also be presented in a different design.

Our YouTube channel offers you funny, interesting or exciting videos again and again. With the built-in "Subscribe button", you can subscribe to our channel directly from our web page and do not have to call up the YouTube web page specifically. We thus want to make access to our comprehensive content as easy as possible for you. Please note that YouTube can thereby store and process data about you.

If you see a built-in subscribe button on our page, YouTube – according to Google – sets at least one cookie. This cookie stores your IP address and our URL. YouTube can thus also learn information about your browser, your approximate location and your preset language. In our test, the following four cookies were set without being logged into YouTube:

Name: YSC
Value: b9-CV6ojI5123036018Y

Purpose: This cookie registers a unique ID in order to store statistics of the video watched.

Expiry date: after end of session
Name: PREF
Value: f1=50000000

Purpose: This cookie likewise registers your unique ID. Google receives statistics via PREF on how you use YouTube videos on our web page.

Expiry date: after 8 months
Name: GPS
Value: 1

Purpose: This cookie registers your unique ID on mobile devices in order to track the GPS location.

Expiry date: after 30 minutes
Name: VISITOR_INFO1_LIVE
Value: 12303601895Chz8bagyU

Purpose: This cookie tries to estimate the bandwidth of the user on our web pages (with built-in YouTube video).

Expiry date: after 8 months

Note: These cookies were set after a test and can make no claim to completeness.

If you are logged into your YouTube account, YouTube can store many of your actions/interactions on our web page with the help of cookies and assign them to your YouTube account. YouTube thereby receives, for example, information such as how long you surf on our page, which browser type you use, which screen resolution you prefer or which actions you carry out.

YouTube uses this data on the one hand to improve its own services and offers, and on the other hand to provide analyses and statistics for advertisers (who use Google Ads).

YouTube Similar Audiences privacy policy

We also use the advertising tool YouTube Similar Audiences. The service provider is the American company Google LLC. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible.

YouTube processes data about you, among other places, also in the USA. YouTube is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure data transfer of personal data of EU citizens to the USA. You will find more information on this at:

commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

In addition, YouTube – like Google – uses standard contractual clauses (= Art. 46(2) and (3) GDPR). These model templates provided by the EU Commission ensure that your data corresponds to European data protection standards even if it is transmitted to and stored in third countries (e.g. in the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, YouTube undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. You will find the corresponding implementing decision and the standard contractual clauses, among other places, here:

eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You will find out more about the data that is processed through the use of YouTube Similar Audiences in the privacy policy at policies.google.com/privacy.

Web design introduction

Web design privacy policy summary

Data subjects: Visitors to the website
Purpose: Improvement of the user experience
Data processed: Which data is processed depends strongly on the services used. Mostly it is, for example, IP address, technical data, language settings, browser version, screen resolution and name of the browser. You will find more details on this with the respective web design tools used.
Storage duration: depends on the tools used
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is web design?

On our website we use various tools that serve our web design. Web design is not, as is often assumed, only about our website looking pretty, but also about functionality and performance. But of course the appropriate look of a website is also one of the great goals of professional web design. Web design is a sub-area of media design and deals with the visual as well as the structural and functional design of a website. The aim is to improve your experience on our website with the help of web design. In web design jargon, one speaks in this connection of user experience (UX) and usability. User experience refers to all the impressions and experiences that the website visitor has on a website. A sub-point of the user experience is usability. This is about the user-friendliness of a website. Value is placed here above all on content, subpages or products being clearly structured and you finding easily and quickly what you are looking for. In order to offer you the best possible experience on our website, we also use so-called web design tools from third-party providers. Under the category "web design", in this privacy policy, therefore fall all services that improve our website in terms of design. These can be, for example, fonts, various plugins or other integrated web design functions.

Why do we use web design tools?

How you take in information on a website depends very strongly on the structure, the functionality and the visual perception of the website. Therefore, good and professional web design also became ever more important for us. We work constantly on the improvement of our website and also see this as an extended service for you as the website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, you will only visit us and make use of our offers if you feel completely comfortable.

What data is stored by web design tools?

When you visit our website, web design elements can be integrated in our pages that can also process data. Which data exactly this involves naturally depends strongly on the tools used. Further below you can see exactly which tools we use for our website. For more detailed information about the data processing, we also recommend that you read the respective privacy policy of the tools used. There you will mostly find out which data is processed, whether cookies are used and how long the data is kept. Through fonts such as Google Fonts, for example, information such as language settings, IP address, version of the browser, screen resolution of the browser and name of the browser is also automatically transmitted to the Google servers.

Duration of data processing

How long data is processed is very individual and depends on the web design elements used. If cookies, for example, are used, the retention period can last only a minute, but also a few years. Please inform yourself in this regard. For this, we recommend on the one hand our general text section on cookies as well as the privacy policies of the tools used. There you will as a rule find out which cookies are used exactly, and which information is stored in them. Google font files, for example, are stored for one year. This is intended to improve the loading time of a website. In principle, data is always only kept for as long as is necessary for the provision of the service. In the case of legal requirements, data can also be stored for longer.

Right to object

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. You can also prevent the collection of data by cookies by managing, deactivating or deleting the cookies in your browser. Under web design elements (mostly with fonts), however, there is also data that cannot be deleted quite so easily. This is the case when data is automatically collected directly upon a page call and transmitted to a third-party provider (such as, for example, Google). In that case, please contact the support of the corresponding provider. In the case of Google, you can reach the support at support.google.com/?hl=de.

Legal basis

If you have consented that web design tools may be used, the legal basis of the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as can occur when data is collected by web design tools. On our part, there is also a legitimate interest in improving the web design on our website. After all, only then can we deliver a beautiful and professional web offering to you. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use web design tools insofar as you have given consent. We definitely want to emphasise this again here.

You will find information on special web design tools – if available – in the following sections.

Adobe Fonts privacy policy

On our website we use Adobe Fonts, a web font hosting service. The service provider is the American company Adobe Inc. For the European area, the Irish company Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible.

Adobe processes data about you, among other places, also in the USA. Adobe is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure data transfer of personal data of EU citizens to the USA. You will find more information on this at commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Adobe uses so-called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data corresponds to European data protection standards even if it is transferred to and stored in third countries (such as, for example, the USA). Through the EU-US Data Privacy Framework and through the standard contractual clauses, Adobe undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You will find more information on the standard contractual clauses at Adobe at www.adobe.com/at/privacy/eudatatransfers.html.

You will find out more about the data that is processed through the use of Adobe Fonts in the Privacy Policy at www.adobe.com/at/privacy.html .

Google Fonts privacy policy

Google Fonts privacy policy summary

Data subjects: Visitors to the website
Purpose: Optimisation of our service
Data processed: Data such as IP address and CSS and font requests

You will find more details on this further below in this privacy policy.

Storage duration: font files are stored at Google for one year
Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are Google Fonts?

On our website we use Google Fonts. These are the "Google fonts" of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

For the use of Google fonts, you do not have to register or deposit a password. Furthermore, no cookies are stored in your browser either. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you need not worry that your Google account data is transmitted to Google during the use of Google Fonts. Google records the use of CSS (Cascading Style Sheets) and of the fonts used and stores this data securely. How the data storage looks exactly, we will look at in detail.

Google Fonts (formerly Google Web Fonts) is a directory with over 800 fonts that Google makes available to its users free of charge.

Many of these fonts are published under the SIL Open Font License, while others were published under the Apache License. Both are free software licences.

Why do we use Google Fonts on our website?

With Google Fonts we can use fonts on our own web page, and do not have to upload them to our own server. Google Fonts is an important building block for keeping the quality of our web page high. All Google fonts are automatically optimised for the web and this saves data volume and is a great advantage especially for use on mobile terminal devices. When you visit our page, the low file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile terminal devices can lead to errors. Such errors can in part visually distort texts or entire web pages. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all common browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We therefore use Google Fonts so that we can present our entire online service as beautifully and uniformly as possible.

What data is stored by Google?

When you visit our web page, the fonts are reloaded via a Google server. Through this external call, data is transmitted to the Google servers. In this way, Google also recognises that you or your IP address visited our web page. The Google Fonts API was developed in order to reduce the use, storage and collection of end-user data to what is necessary for a proper provision of fonts. API, incidentally, stands for "Application Programming Interface" and serves, among other things, as a data transmitter in the software area.

Google Fonts stores CSS and font requests securely at Google and is thus protected. Through the collected usage figures, Google can determine how well the individual fonts are received. Google publishes the results on internal analysis pages, such as, for example, Google Analytics. In addition, Google also uses data from its own web crawler in order to determine which web pages use Google fonts. This data is published in the BigQuery database of Google Fonts. Entrepreneurs and developers use the Google web service BigQuery in order to be able to examine and move large amounts of data.

It should still be borne in mind, however, that through every Google Font request, information such as language settings, IP address, version of the browser, screen resolution of the browser and name of the browser is also automatically transmitted to the Google servers. Whether this data is also stored is not clearly ascertainable or is not communicated unambiguously by Google.

How long and where is the data stored?

Requests for CSS assets Google stores for one day on its servers, which are mainly located outside the EU. This enables us to use the fonts with the help of a Google stylesheet. A stylesheet is a formatting template via which one can easily and quickly change, for example, the design or the font of a web page.

The font files are stored at Google for one year. Google thereby pursues the goal of improving the loading time of web pages in principle. If millions of web pages refer to the same fonts, they are cached after the first visit and reappear immediately on all other web pages visited later. Sometimes Google updates font files in order to reduce the file size, to increase the coverage of language and to improve the design.

How can I delete my data or prevent the data storage?

Those data that Google stores for one day or one year cannot simply be deleted. The data is automatically transmitted to Google upon the page call. In order to be able to delete this data prematurely, you must contact the Google support at support.google.com/?hl=de&tid=123036018 . You prevent data storage in this case only if you do not visit our page.

Unlike other web fonts, Google allows us unrestricted access to all fonts. We can therefore access an ocean of fonts without limit and thus get the optimum for our web page. More about Google Fonts and further questions you will find at developers.google.com/fonts/faq?tid=123036018. There, Google does address data-protection-relevant matters, but really detailed information about data storage is not contained. It is relatively difficult to get really precise information about stored data from Google.

Legal basis

If you have consented that Google Fonts may be used, the legal basis of the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as can occur when data is collected by Google Fonts.

On our part, there is also a legitimate interest in using Google Font in order to optimise our online service. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use Google Font insofar as you have given consent.

Google processes data about you, among other places, also in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure data transfer of personal data of EU citizens to the USA. You will find more information on this at commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, you will find at business.safety.google/intl/de/adsprocessorterms/.

Which data is collected by Google in principle and for what this data is used, you can also read at www.google.com/intl/de/policies/privacy .

Google Fonts Local privacy policy

On our website we use Google Fonts of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible. We have integrated the Google fonts locally, i.e. on our web server – not on the servers of Google. As a result, there is no connection to Google servers and thus also no data transmission or storage.

What are Google Fonts?

Formerly, Google Fonts was also called Google Web Fonts. This is an interactive directory with over 800 fonts that Google makes available free of charge. With Google Fonts, one could use fonts without uploading them to one's own server. But in order to prevent any information transmission to Google servers in this regard, we have downloaded the fonts to our server. In this way, we act in compliance with data protection and do not forward any data to Google Fonts.

Explanation of terms used

We are always endeavouring to draft our privacy policy as clearly and comprehensibly as possible. Especially with technical and legal topics, however, this is not always entirely easy. It often makes sense to use legal terms (such as, for example, personal data) or certain technical expressions (such as, for example, cookies, IP address). But we would not like to use these without explanation. Below you will now find an alphabetical list of important terms used that we may not yet have addressed sufficiently in the privacy policy so far. If these terms were taken from the GDPR and are definitions, we will also cite the GDPR texts here and, where applicable, add our own explanations.

Processor
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller

Explanation: We, as a company and website owner, are responsible for all data that we process about you. In addition to the controllers, there can also be so-called processors. This includes every company or every person that processes personal data on our behalf. Processors can consequently be, in addition to service providers such as tax advisors, for example also hosting or cloud providers, payment or newsletter providers or large companies such as, for example, Google or Microsoft.

Third party
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data

Explanation: The GDPR basically only explains here what a "third party" is not. In practice, a "third party" is everyone who also has an interest in the personal data but does not belong to the aforementioned persons, authorities or bodies. For example, a parent company can act as a "third party". In this case, the subsidiary is the controller and the parent company is the "third party". But this does not mean that the parent company may automatically view, collect or store the personal data of the subsidiary.

Restriction of processing
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"restriction of processing" means the marking of stored personal data with the aim of limiting their processing in the future

Explanation: It is one of your rights that you can at any time demand of processors that they restrict your personal data for further processing operations. For this, special personal data such as, for example, your name, your date of birth or your address is marked in such a way that a complete further processing is no longer possible. For example, you could restrict the processing to the effect that your data may no longer be used for personalised advertising.

Consent
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her

Explanation: As a rule, with websites such a consent takes place via a cookie consent tool. You surely know this. Whenever you visit a website for the first time, you are mostly asked via a banner whether you agree to or consent to the data processing. Mostly you can also make individual settings and thus decide for yourself which data processing you allow and which not. If you do not consent, no personal data about you may be processed. In principle, a consent can of course also take place in writing, i.e. not via a tool.

Personal data
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

Explanation: Personal data is therefore all that data that can identify you as a person. This is as a rule data such as, for example:

Name
Address
E-mail address

Postal address

Telephone number

Date of birth

Identification numbers such as social security number, tax identification number, identity card number or matriculation number

Bank data such as account number, credit information, account balances and much more

According to the European Court of Justice (ECJ), your IP address also counts as personal data. IT experts can, on the basis of your IP address, determine at least the approximate location of your device and, subsequently, you as the connection holder. Therefore, the storage of an IP address also requires a legal basis within the meaning of the GDPR. There are also so-called "special categories" of personal data, which are also especially worthy of protection. These include:

racial and ethnic origin
political opinions
religious or philosophical beliefs
trade union membership

genetic data such as, for example, data that is taken from blood or saliva samples

biometric data (these are information on mental, physical or behavioural characteristics that can identify a person).

Health data

Data concerning sexual orientation or sex life

Profiling
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements

Explanation: With profiling, various information about a person is gathered together in order to learn more about this person from it. In the web area, profiling is frequently applied for advertising purposes or also for credit checks. Web or advertising analysis programs collect, for example, data about your behaviour and your interests on a website. From this results a special user profile, with the help of which advertising can be played out in a targeted manner to a target group.

Controller
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law

Explanation: In our case, we are responsible for the processing of your personal data and consequently the "controller". If we pass on collected data for processing to other service providers, these are "processors". For this, a "data processing agreement (DPA)" must be signed.

Processing
Definition according to Article 4 of the GDPR
For the purposes of this Regulation, the term means:

"processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

Note: When we speak of processing in our privacy policy, we mean by it any kind of data processing. This includes, as mentioned above in the original GDPR explanation, not only the collection but also the storage and processing of data.

Closing words

Congratulations! If you are reading these lines, you have really "fought" your way through our entire privacy policy or at least scrolled this far. As you can see from the scope of our privacy policy, we take the protection of your personal data anything but lightly.

It is important to us to inform you, to the best of our knowledge and belief, about the processing of personal data. In doing so, however, we do not want to only tell you which data is processed, but also to bring you closer to the motives for the use of various software programs. As a rule, privacy policies sound very technical and legal. But since most of you are not web developers or lawyers, we also wanted to take a different path linguistically and explain the matter in simple and clear language. This is of course not always possible due to the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy.

If you have questions about the topic of data protection on our website, please do not hesitate to contact us or the responsible body. We wish you a pleasant time still and hope to be able to welcome you again soon on our website.