Privacy Policy

General information

You can use our website without providing any personal data; you do not have to register for the service. This privacy policy explains the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online service and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter jointly referred to as "online service"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Personal data

We generally only collect and use our users' personal data to the extent that this is necessary to provide a functional website and our content and services. The collection and use of our users' personal data generally only occurs with the user's consent. An exception applies in cases where prior consent cannot be obtained for actual reasons and the processing of the data is permitted by law.

types of data processed

– Content data (e.g. text entries, photographs, videos). – Usage data (e.g. websites visited, interest in content, access times). – Meta/communication data (e.g. device information, IP addresses).

processing of special categories of data (Article 9 (1) GDPR)

No special categories of data are processed.

categories of persons affected by the processing

– Customers, interested parties, visitors and users of the online offer, business partners (hereinafter we refer to the data subjects collectively as “users”).

purpose of processing

– Provision of the online offer, its contents and functions. – Provision of contractual services, service and customer care. – Answering contact requests and communicating with users. – Marketing, advertising and market research. – Security measures.

Status: 11.02.2020

legal basis

In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. • The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 GDPR. • The legal basis for processing to fulfill our services and carry out contractual measures as well as answering inquiries is Art. 6 Para. 1 lit. b GDPR. • The legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c GDPR • The legal basis for processing to protect our legitimate interests or those of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest is Art. 6 Para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 Para. 1 lit. d GDPR serves as the legal basis.

Changes and updates to the privacy policy

We ask you to regularly inform yourself about the content of our privacy policy. We will adapt the privacy policy as soon as changes to the data processing we carry out make this necessary.

security measures

In accordance with Art. 32 GDPR, we take suitable technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of processing as well as the varying likelihood of occurrence and severity of the risk to the rights and freedoms of natural persons. The measures include in particular ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, transfer, securing availability and separation of data. Furthermore, we have set up procedures that ensure the exercise of data subject rights, deletion of data and response to threats to data. Furthermore, we take the protection of personal data into account when developing or selecting hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).

The security measures include in particular the encrypted transmission of data between your browser and our server.

cooperation with processors and third parties

If, as part of our processing, we disclose data to other people and companies (contract processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if transmission of the data to third parties, such as payment service providers, is necessary to fulfill the contract in accordance with Art. 6 Para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 GDPR.

transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs as part of the use of third-party services or disclosure or transmission of data to third parties, this will only occur if it is necessary to fulfil our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have data processed in a third country if the special requirements of Art. 44 ff. GDPR are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

rights of the data subjects

• You have the right to request confirmation as to whether or not data concerning you is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR. • You have the right to request that the data concerning you be completed or that inaccurate data concerning you be corrected in accordance with Art. 16 GDPR. • In accordance with Art. 17 GDPR, you have the right to request that the data concerning you be deleted immediately or, alternatively, to request that the processing of the data be restricted in accordance with Art. 18 GDPR. • You have the right to request that the data concerning you that you have made available to us be received in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties. • You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.

right of withdrawal

You have the right to revoke any consent you have given in accordance with Art. 7 Para. 3 GDPR with effect for the future.

right of objection

You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. The objection can be made in particular against processing for direct marketing purposes.

Cookies and the right to object to direct advertising

We use temporary and permanent cookies, i.e. small files that are stored on users' devices (for an explanation of the term and function, see the last section of this privacy policy). Some of the cookies serve security purposes or are necessary for the operation of our online offering (e.g., for displaying the website) or to save the user decision when confirming the cookie banner. In addition, we or our technology partners use cookies for reach measurement and marketing purposes, about which users are informed in the course of the privacy policy. A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website https://www.aboutads.info/choices/ or the EU website https://www.youronlinechoices.com/ . Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case, not all functions of this online offering may be available.

deletion of data

The data we process is deleted or restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us is deleted as soon as it is no longer required for its intended purpose and there are no statutory retention periods that prevent deletion. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

• Germany: In accordance with legal requirements, data is stored for a period of 6 years in accordance with Section 257 (1) HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with Section 147 (1) AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.). • Austria: In accordance with legal requirements, data is stored for a period of 7 years in accordance with Section 132 (1) BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, statements of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years for documents in connection with electronically provided services, telecommunications, radio and television services that are provided to non-entrepreneurs in EU member states and for which the Mini One Stop Shop (MOSS) is used.

collection of access data and log files

• Based on our legitimate interests within the meaning of Art. 6 Paragraph 1 Letter f. GDPR, we collect data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. • Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data that needs to be retained for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.

online presence in social media

• We maintain online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about our services. When you access the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. • Unless otherwise stated in our data protection declaration, we process the data of users if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

Cookies & reach measurement

• Cookies are information that is transferred from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage. • Some of the cookies we use are so-called "session cookies", which are only stored for the duration of the current visit to our website (e.g. to store your login status or language and thus enable the use of our online service). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online service and, for example, log out or close the browser. • Cookies with longer lifespans than the session enable us to recognize your browser the next time you visit (persistent cookies). We only use these cookies to enable a better user experience. • Users are informed about the use of cookies as part of pseudonymous reach measurement in this privacy policy. • If users do not want cookies to be saved on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. Excluding cookies can lead to functional restrictions of this online offer. • You can object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative ( https://optout.networkadvertising.org /) and additionally the US website ( https://www.aboutads.info/choices ) or the European website ( https://www.youronlinechoices.com/uk/your-ad-choices/ ).

Google Analytics

• Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR), we use Google Analytics, a web analysis service provided by Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offering by users is usually transferred to a Google server in the USA and stored there. • Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ). • Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on activities within this online offering and to provide us with other services relating to the use of this online offering and Internet usage. Pseudonymous user profiles of users may be created from the processed data. • We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. • The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and related to their use of the online service and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de .

Opt-out cookies prevent your data from being collected in the future when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used. If you click here, the opt-out cookie will be set: Deactivate Google Analytics • You can find more information about Google's use of data, settings and options for objecting on the Google website: https://www.google.com/intl/de/policies/privacy/partners ("How Google uses data when you use our partners' websites or apps"), https://policies.google.com/technologies/ads ("How Google uses data for advertising purposes"), https://adssettings.google.com/authenticated ("Manage information that Google uses to show you ads").

Facebook, Custom Audiences and Facebook Marketing Services

• Due to our legitimate interests in the analysis, optimization and economic operation of our online offering and for these purposes, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used within our online offering. • Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active ). • With the help of the Facebook pixel, Facebook is able to determine the visitors to our online offering as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to only display the Facebook ads we place to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and do not appear annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). • The processing of data by Facebook takes place within the framework of Facebook’s data usage policy. Accordingly, general information on the display of Facebook ads can be found in Facebook’s data usage policy: https://www.facebook.com/policy.php . Specific information and details about the Facebook pixel and how it works can be found in the Facebook help section: https://www.facebook.com/business/help/651294705016616. • You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. To set which types of advertisements are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads . The settings are platform-independent, ie they are applied to all devices, such as desktop computers or mobile devices. • To prevent the collection of your data using the Facebook pixel on our website,

please click the following link: Facebook-Opt-Out

Note: If you click the link, an "opt-out" cookie will be saved on your device. If you delete the cookies in this browser, you must click the link again. Furthermore, the opt-out only applies within the browser you are using and only within our web domain on which the link was clicked. • You can also object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative ( https://optout.networkadvertising.org/ ) and additionally the US website ( https://www.aboutads.info/choices ) or the European website ( https://www.youronlinechoices.com/uk/your-ad-choices/ ).

Facebook Social Plugins

• Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR), we use social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognizable by one of the Facebook logos (white “f” on a blue tile, the terms “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/ . • Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). • If a user calls up a function of this website that contains such a plug-in, their device establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted by Facebook directly to the user's device, which then integrates it into the website. User profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects using this plug-in and therefore inform users according to our level of knowledge. • By integrating the plug-in, Facebook receives the information that a user has accessed the corresponding page of the website. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plug-ins, for example by pressing the Like button or leaving a comment, the corresponding information is transmitted directly from their device to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany. • The purpose and scope of data collection and the further processing and use of the data by Facebook as well as the related rights and setting options for protecting the privacy of users can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/ . • If a user is a Facebook member and does not want Facebook to collect data about him or her via this online service and link it to his or her member data stored on Facebook, he or she must log out of Facebook and delete his or her cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site https://www.aboutads.info/choices/ or the EU site https://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. To prevent the collection of your data using the Facebook pixel on our website, please click the following link

Affiliate

We work with affiliate programs on the basis of our legitimate interests (i.e. interest in the economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR). For this purpose, we use tracking cookies on our website to correctly record sales and/or leads from partners. Cookies are small text files that your computer saves when you visit a website. These tracking cookies do not store any personal data. Rather, only our identification number with the partner and the serial number of the advertising material clicked on by the website visitor are recorded. This information is required for payment processing between us and the advertiser. The partner identification number is used to allocate the commission to be paid to the intermediary partner when a transaction is completed. You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to fully use all functions of our website.