Effective Date: 01.01.2026

Data Protection and Privacy

General

As the operator of this website and as a company, we come into contact with your personal data. Personal data means any information relating to an identified or identifiable natural person. In this Privacy Policy, we would like to explain to you how, for what purposes, and on what legal basis we process your personal data.

The controller responsible for data processing on this website and within our company is:

CCL Label Trittenheim GmbH

Europa-Allee 21

54343 Föhren

Germany

Telefon: 06502984940

E-Mail: datenschutz@etikett.de

General Information

SSL- bzw. TLS-Verschlüsselung

Whenever you enter data on websites, place online orders, or send emails via the Internet, you must always assume that unauthorized third parties may gain access to your data. Complete protection against such access cannot be guaranteed. However, we make every effort to protect your data to the greatest extent possible and to eliminate security vulnerabilities wherever feasible.

An important protective mechanism is the SSL or TLS encryption used on our website. This encryption ensures that data you transmit to us cannot be read by third parties. You can recognize the encrypted connection by the padlock icon displayed before the website address in your browser and by the fact that our website address begins with https:// rather than http://.

Encrypted Payment Transactions

Payment data, such as bank account details or credit card numbers, require special protection. For this reason, all payment transactions conducted using the payment methods we offer are processed exclusively through an encrypted SSL or TLS connection.

How Long Do We Store Your Data?

In certain sections of this Privacy Policy, we inform you of the period for which we, or the companies processing your data on our behalf, retain your data. Where no such information is provided, we will retain your data until the purpose of the data processing no longer applies, you object to the processing of your data, or you withdraw your consent to the processing of your data.

However, in the event of an objection or withdrawal of consent, we may continue to process your data if at least one of the following conditions applies:

We have compelling legitimate grounds for continuing the data processing which override your interests, rights and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot invoke any legitimate grounds).
The data processing is necessary for the establishment, exercise or defence of legal claims (this does not apply if your objection is directed against direct marketing).
We are legally obliged to retain your data.

In such cases, we will delete your data as soon as the relevant condition or conditions no longer apply.

Transfer of Data to the United States

We also use tools on our website provided by companies that transfer your data to the United States, where it is stored and, where applicable, further processed. The European Commission has adopted an adequacy decision for the EU–U.S. Data Privacy Framework. This decision establishes that the United States ensures an adequate level of protection for personal data transferred from the European Union to U.S. companies. The decision is based on new safeguards and measures introduced by the United States to meet data protection requirements. Among other things, the adequacy decision includes limitations and safeguards regarding access to data by U.S. intelligence agencies. Binding safeguards have been introduced to restrict access by U.S. intelligence agencies to what is necessary and proportionate for the protection of national security. In addition, enhanced oversight of the activities of U.S. intelligence agencies has been established to ensure compliance with the limitations applicable to surveillance activities. Furthermore, an independent redress mechanism has been established to handle and resolve complaints from European citizens concerning access to their data. The EU–U.S. Data Privacy Framework therefore enables European companies to transfer data to certified U.S. companies without the need to implement additional data protection safeguards. A list of all certified companies is available at the following link: https://www.dataprivacyframework.gov/s/participant-search

A modification or revocation of the European Commission’s adequacy decision cannot be ruled out.

Data Protection Officer

We have appointed a Data Protection Officer for our company.

DataGAP GmbH

Markus Altenburg

Bessemerstr. 82

12103 Berlin

E-Mail-Adresse: team@datagap.de

Telefonnummer: 030 / 577 10 513

Your rights

Right to Object to Data Processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE RELY ON ARTICLE 6(1), FIRST PARAGRAPH, POINT (F) GDPR AS THE LEGAL BASIS, YOU HAVE THE RIGHT, PURSUANT TO ARTICLE 21 GDPR, TO OBJECT TO SUCH PROCESSING. THIS ALSO APPLIES TO ANY PROFILING BASED ON THE AFOREMENTIONED PROVISION. THE REQUIREMENT IS THAT YOU PROVIDE GROUNDS FOR YOUR OBJECTION ARISING FROM YOUR PARTICULAR SITUATION. NO JUSTIFICATION IS REQUIRED IF YOUR OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING PURPOSES.

THE CONSEQUENCE OF YOUR OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS SHALL NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS.
THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

THESE EXCEPTIONS SHALL NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING RELATED TO SUCH DIRECT MARKETING.

Additional Rights

Withdrawal of Your Consent to Data Processing

Many data processing activities are carried out on the basis of your consent. For example, you provide your consent by selecting the relevant checkbox in online forms before submitting them or by allowing certain cookies when visiting our website. You may withdraw your consent at any time without providing any reasons (Article 7(3) GDPR). From the time of withdrawal onwards, we may no longer process your data. The only exception applies where we are legally required to retain the data for a certain period of time. Such retention periods exist in particular under tax and commercial law.

Right to Lodge a Complaint with the Competent Supervisory Authority

If you believe that we have violated the General Data Protection Regulation (GDPR), you have the right, pursuant to Article 77 GDPR, to lodge a complaint with a supervisory authority. You may contact a supervisory authority in the Member State of your habitual residence, place of work, or the place where the alleged infringement occurred. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

Where we process data by automated means on the basis of your consent or for the performance of a contract, we are required to provide such data to you or to a third party in a commonly used, machine-readable format upon request. We will transfer the data directly to another controller only where this is technically feasible.

Right of Access, Erasure and Rectification

Pursuant to Article 15 GDPR, you have the right to obtain, free of charge, information about the personal data we have stored concerning you, the source of such data, the recipients to whom the data is disclosed, and the purposes for which it is stored. If the data is inaccurate, you have the right to have it rectified (Article 16 GDPR). Subject to the conditions set out in Article 17 GDPR, you may also request that we erase the data.

Right to Restriction of Processing

In certain circumstances, pursuant to Article 18 GDPR, you may request that we restrict the processing of your data. In such cases, apart from storage, the data may only be processed as follows:

with your consent
for the establishment, exercise or defence of legal claims
for the protection of the rights of another natural or legal person
for reasons of important public interest of the European Union or of a Member State

The right to restriction of processing applies in the following circumstances:

You have contested the accuracy of the personal data we hold about you, and we require time to verify its accuracy. In this case, the right applies for the duration of the verification process.
The processing of your personal data is unlawful or has been unlawful in the past. In this case, the right applies as an alternative to the erasure of the data.
We no longer require your personal data, but you require it for the establishment, exercise or defence of legal claims. In this case, the right applies as an alternative to the erasure of the data.
You have objected pursuant to Article 21(1) GDPR, and a balancing of your interests and ours must now be carried out. In this case, the right applies until the outcome of that balancing exercise has been determined.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server operated by the following internet service providers (hosting providers):

Aut O’Mattic A8C Ireland Ltd.
Business Centre
No.1 Lower Mayor Street
International Financial Services Centre
Dublin 1, Irland

Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy
1855 Luxembourg

How Do We Process Your Data?

The hosting provider stores all data relating to our website. This includes all personal data that is collected automatically or provided by you. In particular, this may include: your IP address, pages accessed, names, contact details and inquiries, as well as metadata and communication data. When processing data, our hosting provider acts in accordance with our instructions and processes the data only to the extent necessary to fulfil its contractual obligations towards us.

On What Legal Basis Do We Process Your Data?

As we use our website to approach potential customers and maintain contact with existing customers, the processing of data by our hosting provider serves the purposes of pre-contractual measures and contract performance and is therefore based on Article 6(1)(b) GDPR. In addition, it is our legitimate interest as a company to provide a professional online presence that meets the necessary requirements for security, speed and efficiency. To that extent, we also process your data on the basis of Article 6(1)(f) GDPR.

Amazon Cloudfront CDN

What is* Amazon CloudFront CDN?

Amazon Web Services EMEA SARL Content Delivery Network (CDN)

Who Processes Your Data?

Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg

Where Can You Find More Information About Data Protection at Amazon?

https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Do We Process Your Data?

We use Amazon’s global Content Delivery Network (CDN). It ensures that all content we make available online is delivered to you quickly, even where large volumes of data must be transmitted over long distances. This is achieved by placing the network, with its technical infrastructure and servers located around the world, between our website and your browser. The network analyzes data traffic and filters out malicious data before it reaches our servers. In the course of providing these services, Amazon may also process personal data collected via our website. In addition, the company may use cookies or similar technologies to recognize internet users.

On What Legal Basis Do We Process Your Data?

We have a legitimate interest in providing visitors to our website with the fastest and most efficient online service possible. Accordingly, the data processing is based on Article 6(1)(f) GDPR.

Data Collection on This Website

Use of Cookies

Our website places cookies on your device. These are small text files that serve various purposes. Some cookies are technically necessary for the website to function properly (necessary cookies). Others are required to enable certain actions or functions on the website (functional cookies). For example, without cookies it would not be possible to use the features of a shopping cart in an online store. Other cookies are used to analyse user behaviour or to optimise advertising measures. If we use third-party services on our website, for example to process payments, these companies may also place cookies on your device when you access the website (so-called third-party cookies).

How Do We Process Your Data?

Session cookies are stored on your device only for the duration of a session. They are automatically deleted when you close your browser. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This may, for example, result in your user behaviour being analysed on a long-term basis. You can influence how your browser handles cookies through its settings:

Do you wish to be informed when cookies are placed?
Do you wish to block cookies generally or only in specific cases?
Do you wish cookies to be automatically deleted when the browser is closed?

If you disable or do not allow cookies, the functionality of the website may be restricted.

Where we use cookies from other companies or cookies for analytical purposes, we will inform you accordingly within this Privacy Policy. We will also request your consent for such cookies when you visit our website.

On What Legal Basis Do We Process Your Data?

We have a legitimate interest in ensuring that visitors can use our online services without technical issues and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Article 6(1)(f) GDPR. All other cookies are used on the basis of Article 6(1)(a) GDPR, provided that you have given us your consent. You may withdraw your consent at any time with effect for the future. If you have consented to the placement of necessary and functional cookies when requested to do so, these cookies will also be stored exclusively on the basis of your consent.

Cookie Consent with Complianz

What is Complianz?

Consent Management Provider (CMP) for obtaining, processing and transmitting GDPR-compliant consents.

Who Processes Your Data?

Complianz is a locally integrated tool, and the processing is carried out directly by the controller. The provider of Complianz is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.

How Do We Process Your Data?

We use Complianz to obtain your consent to the storage of cookies on your device and to document such consent in a data protection-compliant manner. When you visit our website and close the Complianz cookie banner requesting your consent, the following data is stored:

Your IP address (which is also used to determine your country)
The browser used
The language used
The website accessed

In addition, Complianz stores various cookies in your browser in order to associate the consents granted, or the withdrawal of such consents, with your browser. All collected data is stored until the cookies are no longer required, you delete the Complianz cookies, or you request that we delete the data. This does not apply where we are legally required to retain the data. No connection to third-party servers is established.

On What Legal Basis Do We Process Your Data?

We are legally required to obtain the consent of our website visitors for the use of certain cookies. To fulfil this obligation, we use Complianz. The legal basis for the processing of data is therefore Article 6(1)(c) GDPR.

Server Log Files

Server log files record all requests and access to our website and document error messages. They also contain personal data, in particular your IP address. However, the IP address is anonymised by the provider after a short period of time, so that we are unable to associate the data with you personally. The data is automatically transmitted by your browser to our provider.

How Do We Process Your Data?

Our provider stores the server log files in order to track activities on our website and identify errors. The files contain the following data:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing device
Time of the server request
IP address (where applicable, anonymised)

We do not combine this data with other data sources. We use it solely for statistical evaluation purposes and to improve our website.

On What Legal Basis Do We Process Your Data?

We have a legitimate interest in ensuring that our website operates without errors. We also have a legitimate interest in obtaining an anonymised overview of access to our website. Accordingly, the data processing is lawful pursuant to Article 6(1)(f) GDPR.

Contact Form

You may send us a message via the contact form on this website.

How Do We Process Your Data?

We store your message and the information provided in the form in order to process your enquiry, including any follow-up questions. This also includes the contact details you provide. We will not disclose this data to other persons without your consent.

How Long Do We Store Your Data?

We will delete your data as soon as one of the following conditions is met:

Your enquiry has been fully processed.
You request that we delete the data.
You withdraw your consent to the storage of the data.

This does not apply where we are legally required to retain the data.

On What Legal Basis Do We Process Your Data?

If your enquiry is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, we have a legitimate interest in efficiently processing enquiries addressed to us. The legal basis for the processing of data is therefore Article 6(1)(f) GDPR. If you have consented to the storage of your data, the legal basis is Article 6(1)(a) GDPR. In this case, you may withdraw your consent at any time with effect for the future.

Enquiries by Email, Telephone or Fax

You may contact us by email or fax, or call us by telephone.

How Do We Process Your Data?

We store your message as well as the contact details you provide or the telephone number transmitted in order to process your enquiry, including any follow-up questions. We will not disclose this data to other persons without your consent.

How Long Do We Store Your Data?

We will delete your data as soon as one of the following conditions is met:

Your enquiry has been fully processed.
You request that we delete the data.
You withdraw your consent to the storage of the data.

This does not apply where we are legally required to retain the data.

On What Legal Basis Do We Process Your Data?

Slack

What is Slack?

Instant messaging service

Who Processes Your Data?

Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland

Where Can You Find More Information About Data Protection at Slack?

https://slack.com/intl/de-de/trust/privacy/privacy-policy

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Do We Process Your Data?

We use the Slack instant messaging service to communicate with our customers and other persons outside our company.

How Long Do We Store Your Data?

We will delete your data as soon as one of the following conditions is met:

• The purpose of the data processing no longer applies.

• You request that we delete the data.

• You withdraw your consent to the storage of the data.

This does not apply where we are legally required to retain the data.

On What Legal Basis Do We Process Your Data?

If our communication via Slack is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, we have a legitimate interest in efficiently processing enquiries addressed to us and in maintaining business contacts with other persons. The legal basis for the processing of data is therefore Article 6(1)(f) GDPR. If you have consented to the storage of your data, the legal basis is Article 6(1)(a) GDPR. In this case, you may withdraw your consent at any time with effect for the future.

Salesforce Sales Cloud

What is Salesforce Sales Cloud?

Customer Relationship Management (CRM) platform for managing customer relationships in the areas of marketing, sales and service.

Who Processes Your Data?

salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München

Where Can You Find More Information About Data Protection at Salesforce?

https://www.salesforce.com/de/company/privacy/

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Do We Process Your Data?

We use the Salesforce Sales Cloud CRM system to record, organise and analyse customer interactions across various channels, including email, social media and telephone communications. We analyse the personal data collected, use it to communicate with (potential) customers, and for marketing activities such as newsletter mailings. Salesforce also enables us to record and analyse the behaviour of visitors to our website.

On What Legal Basis Do We Process Your Data?

We have a legitimate interest in ensuring the most efficient possible customer management and customer communication. The data processing is therefore based on Article 6(1)(f) GDPR. If you have consented to the storage of your data, the legal basis is exclusively Article 6(1)(a) GDPR. In this case, you may withdraw your consent at any time with effect for the future.

Registration Function

In order to use certain functions or services on our website, you must register. This requires you to provide your email address and, where applicable, additional personal data.

How Do We Process Your Data?

We store the data you provide during registration and use it to make available the function or service for which you have registered. Should there be any changes relating to the service or function, we will use your email address to inform you accordingly. We may also use your email address to send you additional contractual offers where applicable.

How Long Do We Store Your Data?

We will delete your data as soon as one of the following conditions is met:

The purpose of the data processing no longer applies.
You request that we delete the data.
You withdraw your consent to the storage of the data.

This does not apply where we are legally required to retain the data.

On What Legal Basis Do We Process Your Data?

We store and use your data in order to fulfil the user relationship established through registration and, where applicable, to initiate further contractual relationships. The legal basis is therefore Article 6(1)(b) GDPR.

Trusted Shops

What is Trusted Shops?

Review and rating platform

Who Processes Your Data?

Trusted Shops AG, Colonius Carré, Subbelrather Straße 15c, 50823 Cologne

Where Can You Find More Information About Data Protection at Trusted Shops?

https://www.trustedshops.com/de/legal/datenschutz[RRA[R1]

How Do We Process Your Data?

We use the services of Trusted Shops AG on this website.

For the display of the services provided (e.g. trustmarks, collected reviews) and for offering Trusted Shops products to buyers after an order has been placed, Trusted Shops widgets are integrated into this website. This serves to safeguard our overriding legitimate interests in the optimal marketing of our services by enabling secure shopping, pursuant to Article 6(1)(f) GDPR.

The Trustbadge is provided by a U.S.-based CDN provider. When the Trustbadge is accessed, access data such as the IP address, date, time, volume of data transferred and requesting provider are stored in a server log file. The IP address is anonymised, and the data is used for statistical purposes and error analysis.

After you have completed your order, order information (order value, order number and, where applicable, the purchased product) as well as your email address, which has been hashed using a cryptographic one-way function, are transmitted to Trusted Shops. The legal basis for this data transfer is Article 6(1)(f) GDPR. This measure serves to verify whether you are already registered for Trusted Shops services. It is therefore necessary for the fulfilment of our overriding legitimate interests and those of Trusted Shops in providing buyer protection and transactional review services pursuant to Article 6(1)(f) GDPR. If you are already registered for Trusted Shops services, further processing will be carried out in accordance with the contractual agreements concluded between you and Trusted Shops.

On What Legal Basis Do We Process Your Data?

The use of the services of Trusted Shops AG serves to safeguard our overriding legitimate interests, identified in the context of a balancing of interests, in the optimal marketing of our services through the provision of a secure shopping experience, pursuant to Article 6(1)(f) GDPR.

SurveyMonkey

What is SurveyMonkey?

Form tool for collecting customer enquiries and other data

Who Processes Your Data?

Momentive Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland

Where Can You Find More Information About Data Protection at SurveyMonkey?

https://www.surveymonkey.com/mp/privacy/

How Do We Process Your Data?

SurveyMonkey enables us to create online forms and integrate them into our website. The data you enter is stored on SurveyMonkey’s servers until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions remain unaffected.

On What Legal Basis Do We Process Your Data?

We have a legitimate interest in maintaining functional customer enquiry forms. The legal basis for the processing of data is therefore Article 6(1)(f) GDPR. If you have consented to the processing of your data, we process your data exclusively on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Analytics Tools and Advertising

We use the following tools to analyse the behaviour of visitors to our website and to display advertising to you.

Google Analytics

What is Google Analytics?

A tool provided by Google Ireland Ltd. for analysing user behaviour.

Who Processes Your Data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Data Protection at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Can You Prevent Data Collection?

Among other methods, by using a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de

How Do We Process Your Data?

We are continuously interested in optimising our online offering for visitors to our website and in placing advertising as effectively as possible. Google Analytics assists us in this regard by analysing user behaviour and providing us with the data necessary for making improvements. Through the tool, we receive information about the origin of our visitors, their page views, the time they spend on individual pages, and the operating systems they use.

Standard Processing

To collect data, Google Analytics uses cookies, device fingerprinting, or other technologies for recognising users. The data is transmitted to Google servers in the United States and combined, together with the IP address that is also collected, into a profile that may be associated with you or your device.

You can prevent Google from processing your data by installing a browser plug-in provided by Google: https://tools.google.com/dlpage/gaoptout?hl=de.

IP Anonymisation

We have activated the “IP Anonymisation” feature within Google Analytics. This means that Google truncates your IP address (within the EU or EEA) before transmitting it to the United States. Only in exceptional cases will Google transfer the full IP address to servers in the United States and shorten it there.

Demographic Characteristics

We use the “Demographic Characteristics” feature of Google Analytics in order to display appropriate advertisements to visitors to our website within the Google advertising network. As a result, reports can be generated containing information about the age, gender and interests of our website visitors. This data is derived from Google’s interest-based advertising and from visitor data provided by third parties. It is not possible to attribute the collected data to specific individuals.

You can disable this feature in your Google Account settings.

E-Commerce Tracking

We use the “E-Commerce Tracking” feature of Google Analytics. This enables us to analyse the purchasing behaviour of visitors to our website and improve our online marketing campaigns. E-Commerce Tracking records, for example, your orders, average order values, shipping costs and the time between viewing and purchasing a product. Google may combine this data under a transaction ID and associate it with you or your device.

How Long Do We Store Your Data?

According to Google, data stored at the user and event level that is linked to cookies, user identifiers (e.g. user IDs) or advertising IDs is deleted or anonymised after 14 months. (vgl. https://support.google.com/analytics/answer/7667196?hl=de).

On What Legal Basis Do We Process Your Data?

As the operator of this website, we have a legitimate interest in analysing user behaviour for the purpose of optimising our website and the advertising displayed on it. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR. If, for example, you have consented to the storage of cookies or otherwise consented to the processing of your data by Google Analytics, the legal basis is exclusively Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Google Ads

What is Google Ads?

Online advertising programme provided by Google Ireland Ltd.

Who Processes Your Data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Data Protection at Google Ads?

https://policies.google.com/privacy?hl=de&gl=de

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Do We Process Your Data?

We use Google Ads. Google’s advertising programme enables us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter specific search terms in Google (keyword targeting). Furthermore, we can place targeted advertisements based on user data available to Google (e.g. location data and interests) (audience targeting). We evaluate the collected data quantitatively by analysing, for example, which search terms resulted in our advertisements being displayed and how many advertisements generated corresponding clicks.

On What Legal Basis Do We Process Your Data?

As the operator of this website, we have a legitimate interest in the placement and evaluation of advertisements. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR. If, for example, you have consented to the storage of cookies or otherwise consented to the processing of your data by Google, the legal basis is exclusively Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Google Analytics Remarketing

What is Google Analytics Remarketing?

A tool for personalised advertising provided by Google Ireland Ltd.

Who Processes Your Data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Data Protection at Google Analytics Remarketing?

https://www.google.de/intl/de/policies/privacy/ und https://policies.google.com/technologies/ads

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Can You Prevent the Processing of Your Data?

By opting out of personalised advertising in your Google Account or on the following page: https://www.google.com/settings/ads/onweb/

How Do We Process Your Data?

We are continuously interested in placing our advertising as effectively as possible. The Google Analytics Remarketing feature assists us in this regard.

Standard Processing

Remarketing means that we analyse your behaviour on our website in order to assign you to a specific advertising target group and subsequently display relevant advertising messages to you when you visit other websites. In addition, we link advertising target groups with Google’s cross-device functions. This enables us to display interest-based, personalised advertising messages that have been adapted to your usage and browsing behaviour on one device (e.g. your mobile phone) on another device as well (e.g. a tablet or PC).

Opting Out of Personalised Advertising

You can adjust the advertising settings in your Google Account. To do so, click on the following link and sign in: https://adssettings.google.com/authenticated. Outside your Google Account, you can opt out of personalised advertising at the following link: https://www.google.com/settings/ads/onweb/ (The setting applies only to the device and browser currently being usedc).

On What Legal Basis Do We Process Your Data?

As the operator of this website, we have a legitimate interest in the effective marketing of our services and products. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR. If, for example, you have consented to the storage of cookies or otherwise consented to the processing of your data by Google Analytics Remarketing, the legal basis is exclusively Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Google Conversion Tracking

What is Google Conversion Tracking?

A tool provided by Google Ireland Ltd. for analysing user behaviour.

Who Processes Your Data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Data Protection at Google Conversion Tracking?

https://www.google.de/intl/de/policies/privacy/

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Do We Process Your Data?

We are continuously interested in optimising our online offering for users and in placing advertising as effectively as possible. For this purpose, we also use Google Conversion Tracking. With its help, we can determine whether and how often visitors to our website have clicked on specific buttons and which products are viewed and purchased most frequently (conversion statistics). During the collection and storage of data, we do not receive any information that would enable us to personally identify individual visitors. Google itself uses cookies or comparable recognition technologies for identification purposes.

On What Legal Basis Do We Process Your Data?

As the operator of this website, we have a legitimate interest in analysing user behaviour for the purpose of optimising our website and the advertising displayed on it. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR. If, for example, you have consented to the storage of cookies or otherwise consented to the processing of your data by Google Conversion Tracking, the legal basis is exclusively Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

META Pixel

What is META Pixel?

A tool for analysing user behaviour that measures the effectiveness of advertising on Facebook.

Who Processes Your Data?

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Where Can You Find More Information About Data Protection at META Pixel?

https://de-de.facebook.com/about/privacy/

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Can You Prevent the Processing of Your Data?

If you have a Facebook account: Disable the “Custom Audiences” remarketing function in your advertising settings: (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).

If you do not have a Facebook account: Disable usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

How Do We Process Your Data?

We use the META Pixel on our website. This analytics tool helps us learn more about the behaviour of visitors to our website after they have clicked on one of our advertisements on Facebook. This enables us to measure the effectiveness of our Facebook advertising and align future advertising measures with the insights gained. The data collected by Facebook through the Pixel is anonymous to us as the operator of this website. We are therefore unable to identify you as a visitor. However, Facebook stores and processes the data. Through the Pixel, Facebook can link the data to your Facebook account and also use the data for its own advertising purposes within and outside its network (see Facebook’s Data Policy). As part of the storage and processing activities, Facebook may also transfer the data to the United States and other third countries.

If you have a Facebook account, you can disable the “Custom Audiences” remarketing function in your advertising settings at: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deaktivieren.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

On What Legal Basis Do We Process Your Data?

As the operator of this website, we have a legitimate interest in effective advertising measures on social networks. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR. If, for example, you have consented to the storage of cookies or otherwise consented to the processing of your data by Facebook, the legal basis is exclusively Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Google Ads Remarketing

What is Google Ads Remarketing?

Online advertising programme provided by Google Ireland Ltd.

Who Processes Your Data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where Can You Find More Information About Data Protection at Google Ads Remarketing?

https://policies.google.com/privacy?hl=de&gl=de

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Do We Process Your Data?

We use Google Ads Remarketing. Remarketing is an online marketing function that displays advertisements to users who have previously interacted with a website or online shop. Google Remarketing uses data from the Google advertising platform and Google Ads tracking to target advertising campaigns specifically at users who have already shown an interest in a particular product or service. Google’s advertising programme enables us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter specific search terms in Google (keyword targeting). Furthermore, we can place targeted advertisements based on user data available to Google (e.g. location data and interests) (audience targeting). We evaluate the collected data quantitatively by analysing, for example, which search terms resulted in our advertisements being displayed and how many advertisements generated corresponding clicks.

You can adjust the advertising settings in your Google Account. To do so, click on the following link and sign in: https://www.google.com/settings/ads/onweb/

On What Legal Basis Do We Process Your Data?

Facebook Custom Audiences

What is Facebook Custom Audiences?

A tool for analysing user behaviour that measures the effectiveness of advertising on Facebook.

Who Processes Your Data?

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Where Can You Find More Information About Data Protection at Facebook Custom Audiences?

https://de-de.facebook.com/about/privacy/

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Can You Prevent the Processing of Your Data?

If you have a Facebook account: Disable “Custom Audiences” in your advertising settings: (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).

How Do We Process Your Data?

We use Facebook Custom Audiences on our website. Facebook Custom Audiences is an audience-targeting tool within Facebook Ads Manager. It enables companies to define their own audience based on information they possess about customers or potential customers, such as email addresses, telephone numbers, Facebook IDs or device IDs. The use of Facebook Custom Audiences enables us to create more targeted and relevant advertising campaigns by addressing an audience that we already know. The use of this data allows us to better understand our target audience and create targeted advertising campaigns. However, the data is also stored and processed by Facebook. Facebook links the data to your Facebook account and also uses the data to display advertising within and outside its network (see Facebook’s Data Policy). As part of the storage and processing activities, Facebook may also transfer the data to the United States and other third countries.

If you have a Facebook account, you can disable “Custom Audiences” in your advertising settings: (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).

On What Legal Basis Do We Process Your Data?

As the operator of this website, we have a legitimate interest in effective advertising measures. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR. If, for example, you have consented to the storage of cookies or otherwise consented to the processing of your data by Facebook, the legal basis is exclusively Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Plugins and Tools

YouTube (Enhanced Privacy Mode)

What Is YouTube?

Video platform

Who Processes Your Data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Data Protection at YouTube?

https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/?gclid=EAIaIQobChMIztKuysSW-gIVjgwGAB0euwPlEAAYASAAEgLBXfD_BwE

How Do We Process Your Data?

You can watch YouTube videos on our website. In doing so, Google, as the provider of YouTube, collects and stores certain information about you. Because we use YouTube in Enhanced Privacy Mode, this only occurs once you start a video. Specifically, the following takes place:

Google’s servers are informed which of our pages have been visited from your device. If you are logged into your YouTube account while browsing, Google can directly associate your browsing behaviour with your personal profile. If you do not wish this to happen, you must log out of your YouTube account before continuing to browse the internet.
Google receives information about visitors to our website through cookies, device fingerprinting or similar recognition technologies. Based on this information, Google compiles video statistics, makes its application more attractive to users and prevents fraudulent activities.
Further processing of your data may also occur. However, we have no knowledge of the details and cannot influence such processing.

Even if you do not start a YouTube video on our website, Google establishes a connection to its DoubleClick network and possibly to other partners. Enhanced Privacy Mode therefore does not mean that Google processes no data about you when you visit our website.

On What Legal Basis Do We Process Your Data?

By integrating YouTube videos, we aim to make our website, services and offers more attractive. This constitutes our legitimate interest as a company and is therefore lawful pursuant to Article 6(1)(f) GDPR.

If you have consented to the processing of your data, we process your data exclusively on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time. From the time of withdrawal onwards, we may no longer process your data.

Vimeo (without Tracking)

What Is Vimeo?

Video platform

Who Processes Your Data?

Vimeo Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA

Where Can You Find More Information About Data Protection at Vimeo?

https://vimeo.com/privacy

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s Standard Contractual Clauses and legitimate business interests (see: https://vimeo.com/privacy#international_data_transfers_and_certain_user_rights)

How Do We Process Your Data?

You can watch Vimeo videos on our website. As soon as you access a page on which we have embedded a Vimeo video, Vimeo’s servers are informed of this. In doing so, Vimeo also receives your IP address. However, because we have configured the Vimeo plugin accordingly, Vimeo will neither place cookies on your device nor track your browsing behaviour.

On What Legal Basis Do We Process Your Data?

By embedding Vimeo videos, we aim to make our website more attractive. This constitutes our legitimate interest as a company and is therefore lawful pursuant to Article 6(1)(f) GDPR.

jQuery

What is jQuery?

Service that provides access to a JavaScript library for use on this website.

Who Processes Your Data?

The OpenJS Foundation, 548 Market St, PMB 57274, San Francisco, California, USA

Where Can You Find More Information About Data Protection at jQuery?

https://openjsf.org/privacy

On What Basis Do We Transfer Your Data to the United States?

jQuery adheres to the European Commission’s Standard Contractual Clauses (see https://openjsf.org/privacy)

How Do We Process Your Data?

We use the services of jQuery on our website. jQuery is a JavaScript library that simplifies JavaScript programming by providing an easy-to-use interface for many common tasks. With jQuery, users can make their websites faster and more interactive. When you visit our website, a direct connection is established between your browser and jQuery’s servers. As a result, jQuery becomes aware that our website has been accessed via your IP address.

On What Legal Basis Do We Process Your Data?

The resources provided by jQuery ensure a consistent appearance across our website. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR.

Google reCAPTCHA

What is Google reCAPTCHA?

A testing tool provided by Google Ireland Ltd. for distinguishing between human users and computers.

Who Processes Your Data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Data Protection at Google?

https://policies.google.com/privacy?hl=de

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How Do We Process Your Data?

With Google reCAPTCHA, we verify whether data entered into forms on our website originates from a human user or from a computer. This means that the testing tool analyses your behaviour as a visitor to our website based on various characteristics. The analysis begins not only when you use the testing tool, but already when you access our website. Various types of data are collected, such as your IP address, the length of time you spend on our website and any mouse movements you make. This data is transmitted to Google.

On What Legal Basis Do We Process Your Data?>

As a company, we have a legitimate interest in protecting our online services from spam and abusive data collection attempts. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR.

WeTransfer

What is WeTransfer?

File-sharing service

Who Processes Your Data?

WeTransfer BV Willem Fenengastraat 19 1096BI Amsterdam The Netherlands

Where Can You Find More Information About Data Protection at WeTransfer?

https://wetransfer.com/legal/privacy

On What Basis Do We Transfer Your Data to the United States and Other Third Countries?

WeTransfer adheres to the European Commission’s Standard Contractual Clauses (https://wetransfer.com/legal/privacy)

How Do We Process Your Data?

We use WeTransfer, a free file-sharing service that allows users to send large files quickly and easily. Users can upload files to the WeTransfer website without creating an account. In this process, both the sender’s and the recipient’s email addresses must be provided. The recipient receives an email containing a download link and, where applicable, a personal message.

According to WeTransfer, personal data is stored only for as long as necessary to complete the service. Once a file has been downloaded or the download link has expired, the data is deleted. As WeTransfer operates internationally, the transfer of data to the United States or other third countries cannot be ruled out.

On What Legal Basis Do We Process Your Data?

We have a legitimate interest in providing a straightforward method of data exchange. The processing of your data is therefore based on Article 6(1)(f) GDPR. If you have consented to the processing of your data, we process your data exclusively on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

LottieFiles

What is LottieFiles?

Platform for creating and using animations

Who Processes Your Data?

Design Barn Inc, 7302 Royal Oaks, Pleasanton, CA 94566, USA

Where Can You Find More Information About Data Protection at LottieFiles?

https://lottiefiles.com/page/privacy-policy

On What Basis Do We Transfer Your Data to the United States?

On the basis of the European Commission’s Standard Contractual Clauses and legitimate business interests (see https://lottiefiles.com/page/privacy-policy)

How Do We Process Your Data?

We use LottieFiles scripts on our website to display animations. A connection is established to LottieFiles servers on which the animated icons are hosted. To download the animated icons, your IP address may be transmitted to LottieFiles servers.

On What Legal Basis Do We Process Your Data?

By integrating LottieFiles, we aim to make our website more attractive. This constitutes our legitimate interest as a company and is therefore lawful pursuant to Article 6(1)(f) GDPR.

eCommerce and Payment Service Providers

Customer and Contract Data

How Do We Process Your Data?

If we enter into a contract with you, we require certain personal data from you. We collect, process and use this data only to the extent necessary to establish, structure, or modify our legal relationship with you. If our services can only be used via our website, or if such services are billed through the website, we also collect usage data where necessary to enable you to use our services or to bill the services used.

How Long Do We Store Your Data?

We store your data until our legal relationship ends, unless we are legally required to retain the data for a longer period.

On What Legal Basis Do We Process Your Data?

We store your data in order to fulfil our contract with you or to carry out pre-contractual measures. The legal basis for data processing is therefore Article 6(1)(b) GDPR.

Credit Checks

In the case of purchases on account or other payment methods where we make advance performance, we may carry out credit checks or scoring. In this case, we transmit the data entered that is necessary for this purpose to credit agencies. On the basis of this data, the probability of payment defaults is determined. In the event of an increased risk of payment default, we may refuse certain payment methods.

This process is carried out on the basis of Article 6(1)(b) GDPR and, for the purpose of preventing payment defaults, on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Where consent has been obtained, the credit check is carried out on the basis of such consent pursuant to Article 6(1)(a) GDPR; consent may be withdrawn at any time.

How Long Do We Store Your Data?

We store your data until our legal relationship ends, unless we are legally required to retain the data for a longer period.

On What Legal Basis Do We Process Your Data?

We store your data in order to fulfil the contract with you or to carry out pre-contractual measures. The legal basis for data processing is Article 6(1)(b) GDPR.

Data Transfer for the Shipment of Goods

How Do We Process Your Data?

If you order goods from us, we transmit your data to companies commissioned by us to carry out delivery and/or through which we process payment. Only data that is required for the commissioned company to perform the specific task is transmitted. If we wish to disclose additional data, we will obtain your consent. We do not disclose your data for advertising purposes.

On What Legal Basis Do We Process Your Data?

We disclose your data in order to fulfil the contract we have concluded with you. The legal basis for data processing is therefore Article 6(1)(b) GDPR.

Data Transfer When Using Services and Digital Content

How Do We Process Your Data?

For payment processing, we transmit your data to a payment service provider or to the credit institution commissioned with payment processing. We disclose only data that is strictly necessary for the payment process. If we wish to disclose additional data, we will obtain your consent.

On What Legal Basis Do We Process Your Data?

We disclose your data in order to fulfil the contract we have concluded with you. The legal basis for data processing is therefore Article 6(1)(b) GDPR. If you have consented to the disclosure of your data, the data processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Payment Services

To enable you to pay for your purchases on our website conveniently, we use the services of payment service providers, i.e. external companies that process payments on our behalf. The specific providers we use are listed at the end of this section.

How Do We Process Your Data?

For the payment process, you must provide certain personal data, such as your name, bank account details or credit card number. We transmit this data to the relevant payment service provider. The contractual and data protection provisions of the respective services apply to the transaction itself.

On What Legal Basis Do We Process Your Data?

We disclose your data in order to fulfil the contract we have concluded with you. The legal basis for data processing is therefore Article 6(1)(b) GDPR. In addition, we have a legitimate interest in processing purchases as quickly, conveniently and securely as possible. In this respect, the legal basis is also Article 6(1)(f) GDPR. If you have consented to the disclosure of your data, the data processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Which Payment Services Do We Use?

PayPal

What is PayPal?

Online payment service

Who Processes Your Data?

PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg

Where Can You Find More Information About Data Protection at PayPal?

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

On What Basis Do We Transfer Your Data to the United States?

PayPal adheres to the European Commission’s Standard Contractual Clauses (see https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full)

Audio and Video Conferences

As a company, we are in contact with many people: customers, business partners, service providers, etc. In addition to other means of communication, we also use so-called online conference tools for this exchange. Data protection-related information about the provider or providers of the tools we use can be found at the end of this section. If you communicate with us using such a tool, not only we, but in particular the provider of the respective tool, process your personal data.

How Do We Process Your Data?

Online conference tools collect and store various personal data in order to enable participation in an online conference and ensure that it runs smoothly. In addition to registration, conference and technical data, this also includes certain communication content.

Registration data: your email address and/or telephone number and, where applicable, any other data you provide when registering for the conference.
Conference data: start, end and duration of your participation in the conference, the number of participants and other metadata relating to the conference.
Technical data: IP address, MAC address, device ID, device type, operating system and version, client version, camera type, microphone or speaker and the type of connection.
Communication content: cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared during use of the service.

For details on data processing, please refer to the privacy policies of the respective conference tool provider.

How Long Do We Store Your Data?

As your communication partner, we delete your data from our systems as soon as one of the following conditions is met:

The purpose of the data processing no longer applies.
You request that we delete the data.
You withdraw your consent to the storage of the data.

This does not apply where we are legally required to retain the data.

Cookies remain on your device until you delete them.

The providers of conference tools also store your data for their own purposes. Please contact the providers directly to find out what this means for the storage period of your data.

On What Legal Basis Do We Process Your Data?

If we are already contractually connected or if you wish to conclude a contract with us, we use conference tools to fulfil the contract or to inform you about our services or products. In this respect, data processing is carried out on the basis of Article 6(1)(b) GDPR. Otherwise, the use of conference tools serves simple and fast communication, without which we would not be able to run our company efficiently. We therefore also have a legitimate interest in data processing pursuant to Article 6(1)(f) GDPR. A further legal basis may be your consent. In this case, Article 6(1)(a) GDPR applies. This legal basis ceases to apply for the future if you withdraw your consent.

Which Online Conference Tools Do We Use?

Microsoft Teams

What is Microsoft Teams?

Communication platform for collaboration in teams

Who Processes Your Data?

Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA

Where Can You Find More Information About Data Protection at Microsoft Teams?

https://privacy.microsoft.com/de-de/privacystatement

On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

Own Services / Miscellaneous

Handling of Applicant Data

If you wish to work for us, we will be pleased to receive your application. We treat all personal data transmitted to us as strictly confidential. This also applies to data that we collect later in the course of the application process.

How Do We Process Your Data?

We store all data collected as part of the application process and use it to the extent necessary to decide whether to establish an employment relationship. In addition to contact and communication data as well as application documents, this may also include, for example, notes that we prepare during job interviews. Within our company, we disclose your data only to persons involved in processing your application./p>

If your application is successful, we store the data required for carrying out the employment relationship in our data processing systems.

How Long Do We Store Your Data?

If we are unable to offer you a position, if you reject a job offer, or if you withdraw your application, we reserve the right to retain your documents and other application data for up to six months after the end of the application process. The reason for this is that we may need the data as evidence in the event of a legal dispute. After this period has expired, we delete the data and destroy the documents. If a legal dispute is actually imminent or already pending, we delete the data and documents once they are no longer required for evidentiary purposes.

Deletion of your data is always subject to there being no legal obligation for us to retain it for a longer period.

On What Legal Basis Do We Process Your Data?

We process your applicant data on the basis of Section 26 BDSG-neu [new German Federal Data Protection Act] (initiation of an employment relationship) and Article 6(1)(b) GDPR (general pre-contractual measures).

The same applies if your application is successful.

If we are unable to offer you a position, if you reject a job offer, or if you withdraw your application, we have a legitimate interest in using your data as evidence in a potential legal dispute. The data processing is therefore based on Article 6(1)(f) GDPR.

If you have expressly consented to the storage of your data, we process your data on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Additional Services and Data Processing

Personio

Data Processing on Social Media

What is Social Media?

By social media, we mean the social networks on which we have created publicly accessible profiles. The specific social networks concerned are listed below.

Who Processes Your Data?

The respective operating companies of the social networks. The individual operators are listed below under the respective networks.

How Is Your Data Processed?

The operators of social networks are generally able to collect and analyse extensive data about the behaviour of visitors and users of the network. We are unable to track all processing operations carried out by the social networks we use, which means that additional processing operations not listed here may be carried out by the operators of the social networks. Further information can be found in the terms of use and privacy policies of the respective social networks.

The processing of your data may be triggered when you visit the website of the social network or our profile page there. Even if you access a website that uses certain content from the network, such as Like or Share buttons, data may already be transmitted to the operators of the social network. If you are a user of the social network and are logged into your user account, your visit to our profile page may be associated with your account by the operator of the social network. Even if you do not have a registered user account or are not logged in, the operator of the network may still collect your personal data, for example by recording your IP address or placing cookies. Using this data, the operators may create user profiles tailored to your behaviour and interests and display interest-based advertising to you within and outside the network. If you are a registered user of the network, interest-based advertising may also be displayed on all devices on which you are or have been logged in.

On What Legal Basis Is Your Data Processed?

Our profiles on social networks are intended to ensure the broadest possible online presence for our company. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Article 6(1)(f) GDPR.

The data processing operations and analyses carried out by the operators of the social networks themselves may be based on other legal bases. These must be specified by the operators of the social networks.

Who Is Responsible for the Processing of Your Data and How Can You Exercise Your Rights?

If you visit one of our profiles on social networks, we are jointly responsible with the operator of the respective network for the data processing operations triggered by that visit. In principle, you may exercise your rights both against us and against the operator of the respective network.

However, despite our joint responsibility with the operators of the social networks, our influence over the data processing operations of the respective operator is limited and is primarily determined by the operator’s requirements.

How Long Is Your Data Stored?

If we collect data via our profiles on social networks, such data will be deleted from our systems as soon as the purpose for storing it no longer applies, you request that we delete it, or you withdraw your consent to its storage. Stored cookies remain on your device until you delete them. Mandatory statutory provisions, in particular retention periods, remain unaffected.

We have no influence over how long the operators of the social networks store your data that they collect for their own purposes. Information on this can be obtained directly from the operator of the respective social network, for example in the relevant privacy policy.

Which Social Media Do We Use?

Facebook

What is Facebook?
A social network

Who Processes Your Data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Is Your Data Transferred to Third Countries?
Yes, to the United States and also to other third countries

Where Can You Find More Information About Data Protection at Facebook?
https://www.facebook.com/about/privacy/

Where Can You, as a Facebook User, Adjust Your Advertising Settings?
As a registered Facebook user, you can adjust your advertising settings in your user account. To do so, click on the following link and sign in:
https://www.facebook.com/settings?tab=ads.

Instagram

What is Instagram?
A social network specialising in photos and videos

Who Processes Your Data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Is Your Data Transferred to Third Countries?
Yes

Where Can You Find More Information About Data Protection at Instagram?
https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20Meldungen

Where Can You, as a User, Adjust Your Privacy Settings?
As a registered Instagram user, you can adjust your privacy settings in your user account. To do so, click on the following link and sign in:
https://www.instagram.com/accounts/privacy_and_security/

What is LinkedIn?

A social network for business contacts

Who Processes Your Data?

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Is Your Data Transferred to Third Countries?

Yes

Where Can You Find More Information About Data Protection at LinkedIn?

https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Where Can You, as a User, Adjust Your Privacy Settings?

As a registered LinkedIn user, you can adjust your privacy settings in your user account. To do so, click on the following link and sign in:
https://www.linkedin.com/psettings/

What is Pinterest?

Visual search engine and online pinboard

Who Processes Your Data?

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

Is Your Data Transferred to Third Countries?

Yes

Where Can You Find More Information About Data Protection at Pinterest?

https://policy.pinterest.com/de/privacy-policy

Where Can You, as a User, Adjust Your Privacy Settings?

https://help.pinterest.com/de/article/edit-account-privacy

Xing

What is Xing?

A social network for professional contacts

Who Processes Your Data?

New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany

Is Your Data Transferred to Third Countries?

Yes, for the performance of the contract with Xing, if you have given consent, if it is necessary for the establishment, exercise or defence of legal claims, or if an adequacy decision pursuant to Article 45 EU GDPR or appropriate safeguards pursuant to Article 46 EU GDPR are in place.

Where Can You Find More Information About Data Protection at Xing?

https://privacy.xing.com/de/datenschutzerklaerung/druckversion

Where Can You, as a User, Adjust Your Privacy Settings?

As a registered Xing user, you can adjust your privacy settings in your user account. To do so, click on the following link and sign in:
https://www.xing.com/settings/privacy

YouTube

What is YouTube?
Ein soziales Netzwerk in Form eines Online-Video-Portals

Who Processes Your Data?
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Is Your Data Transferred to Third Countries?
Yes

Where Can You Find More Information About Data Protection at YouTube?
https://policies.google.com/privacy?hl=de

Where Can You, as a User, Adjust Your Privacy Settings?
https://policies.google.com/privacy?hl=de#infochoices

TikTok

What is TikTok?
A social network specialising in photos and videos

Who Processes Your Data?
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

Is Your Data Transferred to Third Countries?
Yes

Where Can You Find More Information About Data Protection at TikTok?
https://www.tiktok.com/legal/privacy-policy-eea?lang=de

Where Can You, as a User, Adjust Your Privacy Settings?
https://www.tiktok.com/legal/tiktok-website-cookies-policy?lang=de