PRIVACY POLICY

Thank you very much for your interest in our website and the information provided there. Because we take the protection of the privacy of both our website users and our customers very seriously and comply with the legal provisions for the protection of personal data, such as those contained in the Federal Data Protection Act and the Telemedia Act, we would like to inform you below about how we handle your data:

Data collection and data processing

Whenever our website is accessed and files stored there are retrieved, this is logged for statistical purposes and to improve our online services. The access and retrieval data does not allow us to identify you personally. We store the data in server log files. The logged and stored data includes: the name of the retrieved file, the date and time of the retrieval, the amount of data transferred, notification of the success of the access or retrieval, and the IP address of the requesting device.

We only collect personal data ourselves if the website user provides it to us on a voluntary basis, for example in the form of inquiries (e.g. by email or by using a contact form on our homepage) or in the context of legally binding agreements with us.

Controller within the meaning of the General Data Protection Regulation

The data controller within the meaning of the General Data Protection Regulation (GDPR) is the operator of the website you are currently visiting. Our contact details can be found in the legal notice (Impressum) of the website you are visiting.

Encryption of the transfer of electronic data using Secure Sockets Layer (SSL)

To ensure that your personal data cannot be read, altered, copied or deleted by unauthorized third parties during electronic transmission between you and us, we use connections encrypted by the network protocol "Secure Sockets Layer" (SSL) for purposes such as receiving your inquiries and processing orders via email or input forms, if such forms are currently available on our homepage.

Such an encrypted connection is enabled when the address bar of your internet browser displays "...".
“https://” appears. Otherwise, “http://” is displayed; therefore, without an SSL-encoded connection, an “s” is missing from the browser protocol information.

Data collection and data processing

1. Creation of log files when you visit our website

Whenever our website is accessed and files stored there are retrieved, data is automatically logged. We store this data in so-called server log files. Specifically, the logged and stored data includes:

• Name of the retrieved file,
• Date and time of retrieval,
• Amount of data transferred,
• Notification of successful access or retrieval,
• IP address of the requesting device,
• browser type,
• Operating system used by the visitor.

These data are never combined with other personal data of the visitor to our homepage, which is why the information provided does not allow us to draw any conclusions about you personally.

Processing purpose

Storing your IP address is necessary because without it, the content of our website cannot be transferred to your computer. Your IP address must be stored for the duration of the session – that is, the ongoing connection between the internet browser you use to access our website (the so-called "client-side application") and the server we use to operate the website. The purpose of storing your data in server log files is twofold: firstly, to ensure the functionality of our website, and secondly, to optimize the website you are visiting. Furthermore, this data helps us maintain the security of the information technology systems used here.

Legal basis for the processing of the data:

The relevant legal basis for the storage of the data and also the server log files is, taking into account the described processing purpose, Section 15 I TMG valid for the period up to and including 24 May 2018, and from 25 May 2018 onwards, Article 6 I letter f GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party).

Storage duration

We delete automatically stored access and retrieval data as soon as it is no longer needed to fulfill the purpose for which it was collected. Insofar as this concerns the provision of our website, this is the case when the respective session – that is, the active connection between the internet browser you use to access our website (the so-called "client-side application") and the server we use to operate the website – has ended. The stored IP address and the associated server log file are deleted no later than 7 days after the time of storage to prevent any association of the other data (name of the accessed file, date and time of access, amount of data transferred, notification of successful access, browser type, operating system used by the visitor) with the requesting device and its IP address.

Option to object

The data collected for the provision of our website and its storage in server log files are essential and absolutely necessary for the operation of this website. Therefore, you have no right to object to this.

2. Processing of personal data for inquiries regarding our services or products

We collect personal data even when website users voluntarily provide it to us in the form of inquiries about our services or products (for example, via email). The personal data transmitted to us with the inquiry is stored. This data will under no circumstances be shared with third parties and will be used solely for processing the correspondence initiated by the inquiry.

Processing purpose

The processing of the data transmitted to us in connection with the service or product-related inquiry serves the purpose of processing the inquiry and subsequently answering it.

Legal basis for the processing of the data:

The relevant legal basis for storing the data transmitted to us in connection with inquiries regarding our services or products is, taking into account the processing purpose described above, for the period up to and including May 24, 2018.
Section 28 I 1 No. 2 BDSG,
starting from May 25, 2018, then
Article 6(1)(f) GDPR
(The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party). If the request is already aimed at concluding a contract with us, the following also applies for the period up to and including May 24, 2018.
Section 28 I 1 No. 1 BDSG,
starting from May 25, 2018, then

Article 6(2)(b), second alternative, GDPR legal basis for data processing.

Storage duration

We delete the data transmitted to us in connection with service or product-related inquiries, or collected by us in this context, at the point in time when it is no longer necessary for the purpose for which it was stored. In the case of an inquiry regarding our service or product offerings, this is the case when the inquiry has been answered and it is clear from the circumstances that no further correspondence with the inquirer regarding their request is necessary.

Option to object

The person asking the question has the right to object to the storage of their personal data. However, in that case, their inquiry can no longer be answered.
Should you wish to object to this processing, we kindly request that you submit your objection in writing to one of the contact options listed in the legal notice on our website (postal address, email, fax). Upon receipt of your objection, the personal data transmitted to us and stored here as part of your inquiry will be deleted immediately.

3. Processing of personal data for inquiries regarding our services or products using the “dsa Secure” contact form

To receive and process your inquiries, we use a contact form provided by dsa Marketing AG (www.dsa-marketing.ag; Im Lipperfeld 22 a – 24, 46047 Oberhausen), which is embedded in our website using an iframe. An iframe is an HTML element positioned within a web page as a frame or window. HTML is a text-based markup language for web pages. The contact form provided here by dsa Marketing AG is encrypted using the Secure Sockets Layer (SSL) network protocol.
When you submit an inquiry via the aforementioned contact form, it is first forwarded to servers of dsa Marketing AG, temporarily stored there, and then automatically transmitted to us. The aforementioned company does not process the personal data you provide in your inquiry for its own purposes or for the purposes of third parties – with the express exception of us. After this final transfer, dsa Marketing AG completely deletes your personal data using an automated process. According to information provided by dsa Marketing AG, the employees who monitor this automated transmission and deletion process have each submitted internal declarations of commitment to comply with data protection requirements and have also pledged confidentiality.

Processing purpose

The processing of the data transmitted to us in connection with the service or product-related inquiry serves the purpose of processing the inquiry and subsequently answering it.

Legal basis for the processing of the data:

The legal basis for data processing when using the "dsa Secure" contact form is, for which we obtain voluntary consent from the website visitor,
is valid for the period up to and including May 24, 2018
§ 4 I BDSG §§ 12, 13 TMG valid,
starting from May 25, 2018, then
Article 6(1)(a) GDPR
(Consent by the data subject to the processing of their personal data for one or more specific purposes).

Obtaining your consent

Before you submit the "dsa Secure" contact form you have completed, you will be made aware of this privacy policy, and we will ask for your consent to the data processing associated with it.

Right to cancel


You have the right to withdraw your consent to the processing of your personal data.
Should you wish to revoke your consent, we kindly request that you submit your revocation in writing to one of the contact options listed in the legal notice on our website (postal address, email, fax). Upon receipt of your revocation, your personal data will be deleted immediately, unless there is another legal basis for processing this data. The lawfulness of data processing carried out before your revocation based on your consent remains unaffected by your revocation.

Storage duration

Should you fail to withdraw your consent, we will delete all data transmitted to us in connection with service- or product-related inquiries, or collected by us in this context, as soon as it is no longer necessary for the purpose for which it was stored. In the case of an inquiry regarding our services or products, this is the case when the inquiry has been answered and it is clear from the circumstances that no further correspondence with the inquirer regarding their request is necessary.

Processing of personal data for contract initiation, contract fulfillment and contract amendment

We process the personal data that is necessary for the conclusion, performance, or modification of a contract between you and us. This data includes:

• Name and address of the contracting party,
• Type and quantity of booked service or goods,
• the payment method used.

Depending on the subject matter of the (contractual) service in question, further data may be required.
If the payment method used is the SEPA direct debit scheme, the following will also be processed:

• the account details of the contractual partner.

If payment by credit card has been agreed upon with our contractual partner, the following additional data will be processed:

• The credit card details of the contracting party. Should the purchase of the services and/or goods ordered from us be subject to legal restrictions (such as age restrictions), we will also process the data that is required for the performance of the contract due to the relevant legal restriction, in addition to the data already specified above (e.g., in the case of a legal age restriction, the age of the contracting party).

Processing purpose

The processing of the aforementioned data serves the purpose of fulfilling the contracts concluded with us, including the provision of services as agreed. Data will be transferred to third parties in the following cases: Data required for the fulfillment of the contract will be transferred to third parties in the following cases:

a. Agreed payment method SEPA direct debit: Your account details will be forwarded to the bank processing the payment.
b. Agreed payment method credit card: Your credit card details will be forwarded to the bank or payment service provider processing the payment.
c. Shipping or delivery of goods: Your address and the data relating to the ordered goods will be forwarded to the shipping or transport company that we have engaged for delivery purposes.
d. Fulfillment of tax obligations: If we have engaged a tax advisor, data will be passed on to them to the extent that is absolutely necessary to fulfill our tax obligations.

Legal basis for the processing of the data:

The relevant legal basis for the processing of the data, taking into account the described processing purpose, is Article 6(1)(b), first alternative, GDPR (processing is necessary for the performance of a contract to which the data subject is a party), which also covers processing in connection with pre-contractual measures.

Storage duration

We store the data required for the fulfillment and modification of an existing contractual relationship with us until the expiry of the statutory retention periods, in particular those under tax law. For example, the retention period for contracts and standing order documents, insofar as these do not form the basis for accounting entries, as well as for shipping documents, is currently six years each (in the case of standing order documents, this period begins after the contract expires), cf. Section 147 Paragraph 3 Sentence 1 of the German Fiscal Code (AO). Invoices must be retained for ten years in accordance with Section 147 Paragraph 2 in conjunction with Section 147 Paragraph 1 Numbers 1, 4 and 4a of the German Fiscal Code (AO).
After the legally prescribed retention periods have expired, we delete or block the data, unless it is still required for entering into or fulfilling a contract.

• If no contract is concluded between you and us, we will delete the data collected or transmitted for pre-contractual measures if it becomes clear from the circumstances that further correspondence with you regarding the service or goods to which dialogues or offers from your or our side referred is no longer necessary. Right to object: If the processing of your personal data was related to pre-contractual measures and these measures did not lead to a contract between you and us, you are entitled to object to the data storage.
• Should you wish to submit such an objection, we kindly ask you to do so in writing and to send your objection to one of the contact options listed in the legal notice on our website (postal address, email, fax).
  Upon receipt of the objection, the personal data that we collected or transmitted to us and stored here in connection with taking pre-contractual measures will be deleted immediately.

With regard to data that is necessary for the performance of the contract or any changes to the contract, you have no right to object precisely because of its necessity for the stated purposes.

Processing in general

If the collection and use of personal data is not possible due to factual circumstances and none of the above-mentioned situations apply, data processing regularly only takes place with the consent of the data subject.

Processing purpose

The collection and use of personal data otherwise only takes place to enable and improve the proper functioning of our website. Legal basis for data processing: The legal basis for data processing where consent is obtained from the data subject is...
Article 6(1)(a) GDPR
(Consent by the data subject to the processing of their personal data for one or more specific purposes) .

Right to cancel


You have the right to withdraw your consent to the processing of your personal data. Should you wish to withdraw your consent, we kindly ask you to do so in writing and send your withdrawal notice to one of the contact options listed in the legal notice on our website (postal address, email, fax). Upon receipt of your withdrawal notice, your personal data will be deleted immediately, unless there is another legal basis for processing this data.
The lawfulness of data processing carried out before your withdrawal of consent remains unaffected by the withdrawal declaration.

Use of "cookies" to ensure and improve the user-friendliness and ease of use of our website

Our website uses so-called "cookies".

"Cookies" are text files that are transmitted to the respective website user at the request of the operator of a homepage when the website is accessed and are temporarily stored in or by the internet browser of the accessing device.

There are two types of "cookies": temporary and persistent.

The temporary "cookies" are automatically deleted from your device as soon as you close your internet browser.

In contrast, persistent cookies remain stored on your device even after you close your web browser and can be recognized by the website operator the next time you visit their site. This is because such cookies usually contain a characteristic sequence of characters known as a "cookie ID." Websites and web servers assign this string to the web browser on which the persistent cookie was stored. Therefore, your browser can be uniquely identified using the cookie ID.

We primarily use temporary "cookies" that are automatically deleted after you leave our website.
However, we also use persistent cookies, which allow us to recognize your internet browser on your next visit to our website. Persistent cookies remain on the device you use to access the website until you delete them.

We ourselves use "cookies" to make it easier for visitors or users of our website to navigate and to allow them to use certain page functions that would not be available without the setting of "cookies".

Cookies do not cause any harm to your computer. By changing your internet browser settings, you can ensure that you are notified about upcoming temporary storage of cookies on your device. Furthermore, it is possible to configure your internet browser to block the acceptance of individual cookies or all cookies altogether.

Please note that if you do not accept the "cookies" we use, the full functionality of our homepage may be impaired.

Processing purpose

The purpose we pursue in processing personal data using cookies is to provide a user-friendly website for the benefit of website visitors and to improve its functionality. Legal basis for data processing: The relevant legal basis for data processing, taking into account the described processing purpose, is valid until and including May 24, 2018.
§ 15 I TMG,
starting from May 25, 2018, then
Article 6(1)(f) GDPR
(processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party).

Storage period and deletion

You can delete persistent cookies stored on your device at any time using your internet browser or other software. If you remove persistent cookies that we have placed on your device, the full functionality of our website may be impaired.

Option to object

By changing your internet browser settings, you can permanently prevent the transfer of cookies to the device you use to visit or access websites. Making such changes to your browser settings effectively prevents the setting of cookies for a period of time of your choosing.

Processing of personal data for inquiries regarding our services or products using the “dsa Secure” contact form

To receive and process your inquiries, we use a contact form provided by the company dsa Marketing AG (www.dsa-marketing.ag; Im Lipperfeld 22 a – 24, 46047 Oberhausen), which is integrated into our website using an “iFrame”.

An "iframe" is an "HTML" element that is positioned within a web page in the form of a frame or window. "HTML" is a text-based markup language for web pages.

The contact form used here by dsa Marketing AG is encrypted using the network protocol “Secure Sockets Layer” (SSL for short).

When you send an inquiry via the aforementioned contact form, it is first forwarded to servers of dsa Marketing AG, temporarily stored there and then automatically transmitted to us, without the aforementioned company processing the personal data provided in your inquiry for its own purposes or for the purposes of third parties – with the express exception of us.

After this final transfer, dsa Marketing AG will completely delete your personal data using an automated process.

According to information provided by dsa Marketing AG, the employees who monitor this automated transmission and deletion process have each committed themselves internally to complying with data protection requirements and maintaining confidentiality.

The following data is requested from website visitors via the contact form: a) Name of the requesting person,
b) Email address of the requesting person,
c) Telephone number of the requesting person,
d) Subject (= reason for contacting).
The data listed under letters a), b) and d) are mandatory details which are urgently required on our part in order to be able to answer inquiries from visitors to our website appropriately and in a context-specific manner.

Processing purpose

The processing of the data transmitted to us in connection with the service or product-related inquiry serves the purpose of processing the inquiry and the subsequent answering.

Legal basis for the processing of the data

Since we obtain voluntary consent from website visitors submitting inquiries via the “dsa Secure” contact form, the relevant legal basis for the data processing in this regard is [insert relevant legal basis here].
Article 6(1)(a) GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).

Obtaining your consent

Before you submit the “dsa Secure” contact form you have completed, you will be made aware of this privacy policy, and we will ask for your consent to the data processing associated with it.

Right to cancel


You have the right to withdraw your consent to the processing of your personal data.

Should you wish to revoke your consent, we kindly ask you to do so in writing and to send your revocation to one of the contact options listed in the legal notice on our website (postal address, email, fax).

Upon receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data.

The lawfulness of data processing carried out before your withdrawal of consent remains unaffected by the withdrawal declaration.

Storage duration

Should you fail to revoke your consent, we will delete the data transmitted to us in the course of service- or product-related inquiries, or collected by us in this context, in any case at the point in time when it is no longer necessary for the purpose for which it was stored.

This is the case, as far as an inquiry regarding our services or product offerings is concerned, when the inquiry has been answered from here and it is clear from the circumstances that no further correspondence with the inquirer regarding their request is necessary.

Sending newsletters using the "CleverReach" service

If you wish to receive our company newsletters, in which we inform you about news regarding our company and our services, via email, your explicit consent is required before we can start our newsletter service for your benefit.

After receiving your declaration of consent, we will send you an authorization email in which we ask you to click on the link contained therein, thereby (re)confirming your consent to receive the newsletter.

We use "CleverReach" to send newsletters.

This is a service for organizing and analyzing newsletter distribution, offered by CleverReach GmbH & Co. KG (website: http://www.cleverreach.de; address: Mühlenstraße 43 in 26180 Rastede, Federal Republic of Germany).

On our website, we offer you the free option of subscribing to our regular newsletter, in which we inform you about news concerning our company and our services. To subscribe, we provide an input form where you must enter at least the following information:

• Your first and last name,
• Your email address.

The data you enter in the input form to receive the newsletter will be stored on servers of CleverReach GmbH & Co. KG, located in Germany and Ireland. This data is stored in an area accessible only to CleverReach GmbH & Co. KG customers – but not to other limited liability companies or third parties – via a password-protected system. Our contract with CleverReach GmbH & Co. KG is based on their General Terms and Conditions, which can be found at [link to terms and conditions]. https://www.cleverreach.de/agb/ can be viewed.

According to its content, CleverReach GmbH & Co. KG does not access the data of newsletter recipients.

The service "CleverReach" analyzes the reach of each newsletter to ensure that these email notifications reach the recipients' inboxes. Individual behavioral patterns of recipients revealed by these analyses are used solely for statistical evaluation of newsletter success ("visitor analysis"). Through "conversion tracking," "CleverReach" can determine whether, after clicking a hyperlink in a newsletter to our website, you have performed predefined actions, such as clicking buttons on the website.

This information will not be passed on to third parties or used in any other way based on individual behavioral patterns.

Further information on data processing using “CleverReach” can be found in the privacy policy of CleverReach GmbH & Co. KG at http://www.cleverreach.de/datenschutz/ Processing purpose

Your email address is collected so that we can successfully send you our newsletters. We need your first and last name to prevent misuse of both our services and the email address you provide via the website's contact form, and to be able to effectively address any misuse if necessary.

We use CleverReach to analyze the behavior of our newsletter recipients and to use this information to optimize the quality of our website, including its content and services. This service allows us to identify which buttons or pages on our website are accessed via hyperlinks in our newsletters, providing us with a foundation for continuously improving our online offerings.

Legal basis for the processing of the data:

The relevant legal basis for the processing of the data, taking into account the described processing purpose, is valid for the period up to and including May 24, 2018.
§ 4 I BDSG §§ 12, 13 TMG,
starting from May 25, 2018, then
Article 6(1)(a) GDPR
(Consent by the data subject to the processing of their personal data for one or more specific purposes).

Obtaining your consent

When you access the input form provided on our homepage for newsletter subscription, you will be informed about the use of "CleverReach", whereby we on the one hand ask for your consent to the data processing associated with this, and on the other hand draw your attention to this privacy policy.

Right to cancel


You have the right to withdraw your consent to the processing of your personal data.

Should you wish to revoke your consent, we kindly ask you in advance to at least use written form and to send the revocation notice to one of the contact options listed in the legal notice of our homepage (postal address, email, fax).

Upon receipt of your withdrawal of consent, your personal data will be deleted immediately, unless there is another legal basis for processing this data. The lawfulness of data processing carried out before your withdrawal of consent remains unaffected by the withdrawal.

Duration of data storage

The data you provide when subscribing to our newsletter will be stored until you withdraw your consent. Once you withdraw your consent, this data will be deleted from both the server used here and the servers of CleverReach GmbH & Co. KG.

Should your personal data have been stored by us for purposes other than those we have mentioned above regarding the use of "CleverReach" (for example, in connection with the fulfillment of contracts concluded between you and us), its processing will remain unaffected by the revocation of your consent to the newsletter distribution, including its analysis using "CleverReach".

Sending newsletters

If you wish to receive our company newsletters, in which we inform you about news regarding our company and our services, via email, your explicit confirmation is required first. This confirmation is necessary so that we can activate our newsletter service for your benefit.

After receiving this declaration, we will send you an authorization email in which we ask you to click on the link contained therein, thereby confirming your consent to receive the newsletter.

You can unsubscribe from our newsletter at any time with effect for the future by either clicking the unsubscribe link at the end of each newsletter email or by withdrawing your consent to receive the newsletter by email. Our current email address can be found in the legal notice of this website.

Use of the web analytics service "Matomo"

Our website uses the open-source software "Matomo", which is provided by InnoCraft Ltd. (www.innocraft.com, 150 Willis St, 6011 Wellington, New Zealand).

The "Matomo" homepage can be accessed via https://matomo.org/

The open-source software "Matomo" uses "cookies".

"Cookies" are text files that are transmitted to the respective website user at the request of the operator of a homepage when the website is accessed and are temporarily stored in or by the internet browser of the accessing device.

There are two types of "cookies": temporary and persistent.

Temporary cookies are automatically deleted from your device as soon as you close your web browser. Persistent cookies, on the other hand, remain stored on your device even after you close your web browser and can be recognized by the website operator the next time you visit their website. This is because such cookies usually contain a characteristic sequence of characters known as a "cookie ID." Websites and web servers assign this string to the web browser on which the persistent cookie was stored. Therefore, a unique identification of your browser is possible using the cookie ID.

The “cookie” generated when using the open-source software “Matomo” is recorded, for example:

• Date and time of your visit to our homepage,
• the homepage you previously visited,
• Information about the internet browser you are using,
• the IP address of the requesting device, which is always shortened before being stored.

Based on this data, pseudonymized usage profiles of visitors to our homepage can be created.

The data in question will not be transferred to third parties, but will be stored solely on the server used for the operation of our company website.

Processing purpose

We use the web analytics service "Matomo" to optimize the quality of our website, including its content and services. This service allows us to understand how our website is used, providing us with the data we need to continuously improve our online offerings.

Legal basis for the processing of the data:

The relevant legal bases for the processing of the data, taking into account the described processing purpose, are valid for the period up to and including May 24, 2018.
Section 15 I TMG and Section 28 I 1 No. 2 BDSG,
The legal basis begins on May 25, 2018.
Article 6(1)(f) GDPR
(processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party).

Storage period and deletion: You can delete persistent cookies stored on your device yourself at any time using your internet browser or other software. If you remove persistent cookies used by us from your device, the full functionality of our website may be impaired.

Option to object

By changing your internet browser settings, you can permanently prevent the transfer of cookies to the device you use to visit or access websites. Making such changes to your browser settings effectively prevents the setting of cookies for a period of time of your choosing.

 

Use of plug-ins from the video portal "YouTube"

We use plugins from the video portal “YouTube” operated by YouTube, LLC (www.youtube.com; address: 901 Cherry Ave, San Bruno, CA 94066, United States of America) on our website. YouTube, LLC is a subsidiary of Google Inc. (www.google.de; address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America). YouTube, LLC is represented by Google Inc., which in turn is represented by its Board of Directors (see [link to relevant section]). https://www.youtube.com/t/contact_us.

The “YouTube” plug-ins are marked with a “YouTube” logo.

When you access a specific page on our website, your browser establishes a direct connection to the servers of YouTube, LLC. This results in the content of the respective "YouTube" plug-in being transferred to your browser and integrated into the accessed webpage. Through this process, YouTube, LLC receives information that you have visited our website.

If you are logged into your personal “YouTube” account while visiting our website, YouTube, LLC, will be able to associate your visit to our homepage with that account.

When you interact with plug-ins – for example, by clicking a “YouTube” button – this information is immediately transmitted to and stored on the servers of YouTube, LLC.

We expressly have no influence on the scope and content of the information collected by YouTube, LLC, through its plugins. We cannot rule out the possibility that the IP address of the device accessing the website is recorded and transmitted.

Further information regarding the reason for data collection, the scope of data collection, data use, data processing, your rights to protect your privacy, and settings options to protect your privacy by YouTube, LLC, can be found at https://www.youtube.com/t/contact_us,

there, via the "Privacy" button provided at the bottom of the page, clicking which will take you directly to https://www.google.de/intl/de/policies/privacy/ will be forwarded.

Processing purpose

By using the “YouTube” plug-ins, we aim to present our website in an appealing way and to supplement the information on the services offered on this homepage.

Legal basis for data processing: The relevant legal basis for data processing, taking into account the fact that your IP address may be transferred to servers of YouTube, LLC, in the USA, is for the purpose of processing up to and including May 24, 2018.
§ 13 II TMG,
starting from May 25, 2018, then
Article 6(1)(a) GDPR
(Consent by the data subject to the processing of their personal data for one or more specific purposes).

Obtaining your consent

When you visit our homepage, you will be informed about the use of "YouTube" plug-ins, whereby we on the one hand ask for your consent to the data processing associated with this, and on the other hand draw your attention to this privacy policy.

Right to cancel


You have the right to withdraw your consent to the processing of your personal data. Should you wish to withdraw your consent, we kindly request that you do so in writing and send your withdrawal notice to one of the contact options listed in the legal notice on our website (postal address, email, fax). Upon receipt of your withdrawal notice, your personal data will be deleted immediately, unless there is another legal basis for processing this data. The lawfulness of data processing carried out before your withdrawal of consent remains unaffected by your withdrawal.

Preventing potential data transfer to YouTube, LLC: You can prevent the transfer of personal data to servers of YouTube, LLC, in the USA, which cannot be ruled out from here, by logging out of your personal “YouTube” account before accessing our website.

Use of “Google Maps API”

Our website uses the “Google Maps API” service. This is a service offered within the European Economic Area and in Switzerland by Google Ireland Limited (www.google.de; address: Gordon House, Barrow Street, Dublin 4, Ireland) to visually display geographical data on a virtual and interactive map.

The use of the “Google Maps API” means that when you visit our website, your internet browser establishes a connection to the web servers used by Google Ireland Limited. During this connection between your internet browser and the servers of Google Ireland Limited, data about the website visitor is automatically collected and forwarded to Google Ireland Limited.

We cannot rule out the possibility that the information collected also includes the full IP address of the requesting device.

Furthermore, we cannot rule out the possibility that the aforementioned information, which is personal data, is stored by Google Ireland Limited.

Further information on Google's data protection policy is available from Google Ireland Limited at https://policies.google.com/privacy?hl=de&gl=de.

Processing purpose

We use the “Google Maps API” service to make the locations listed on our homepage as easy to find as possible and to present them in a visually appealing way.

Legal basis for the processing of the data

The relevant legal basis for the processing of the data is, taking into account the fact that a transfer of your IP address to servers of the company Google Ireland Limited cannot be ruled out,
Article 6(1)(a) GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).

Obtaining your consent

When you visit our homepage, you will be informed about the use of “Google Maps API”, whereby we on the one hand ask for your consent to the data processing associated with this, and on the other hand draw your attention to this privacy policy.

Right to cancel


You have the right to withdraw your consent to the processing of your personal data.

Should you wish to revoke your consent, we kindly ask you to do so in writing and to send your revocation to one of the contact options listed in the legal notice on our website (postal address, email, fax).

Upon receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data.

The lawfulness of data processing carried out before your withdrawal of consent remains unaffected by the withdrawal declaration.

Preventing data transfer to Google Ireland Limited

By changing the settings of your internet browser, it is possible to prevent the collection of data relating to you by Google Ireland Limited in connection with the use of “Google Maps API” in the future.

For example, there is the option to disable the “JavaScript” program, which interacts with your internet browser and enables the rapid loading of functions of a static homepage, in the internet browser you are using. However, this will mean that you will no longer be able to use the map function of the “Google Maps API” service for the duration of the deactivation.

Your rights as a data subject

Insofar as we process personal data relating to you, you as a data subject within the meaning of the GDPR have the following rights against us:

1. Right to information

You are entitled to request information from us as to whether we process personal data concerning you. If so, you may request free information from us about:

• the processing purposes,
• the categories of data whose processing takes place,
• the recipients and/or categories of recipients to whom we have disclosed or will disclose the data,
• the data retention period provided for here or, if it is impossible to provide specific information in this regard, our criteria for determining the data retention period,
• the existence of a right to rectification of personal data, - the existence of a right to erasure of personal data,
• the existence of a right to restriction of processing of personal data by the controller within the meaning of the GDPR,
• the existence of a right to object to the processing of personal data,
• the existence of a right to lodge a complaint with a supervisory authority,
• all available information on the origin of the data, insofar as the data collection did not take place from you as the data subject,
• the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR, and, where such processing is deemed to exist, meaningful information about the logic involved, the scope and the intended effects of such data processing on you as a data subject within the meaning of the GDPR.
• whether a transfer of your personal data to a third country or to an international organization takes place, either by us or at our instigation, in which case you may additionally request that we inform you about suitable safeguards within the meaning of Art.
  46 GDPR information.

If you wish to make such a request for information, please submit your application in written form to one of the contact options listed in the legal notice on our homepage.

According to Article 12 I 2 GDPR, this information can also be provided orally to the data subject, provided that their identity has been proven in another form.

2. Right to data correction and data completion

You can request that we correct any data we hold about you at any time if it is incorrect, cf. Art. 16 para. 1 GDPR.

The same applies to the completion of incomplete personal data, cf. Art. 16 para. 2 GDPR.

Should you wish to correct or complete your personal data, please submit a written request to one of the contact options listed in the legal notice on our website.

3. Right to erasure of personal data

As a data subject within the meaning of the GDPR, you can request the immediate deletion of your personal data from us if one of the following conditions set out in Article 17(1) GDPR is met:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• The data subject withdraws their consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing;
• The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR;
• The personal data were processed unlawfully;
  The erasure of personal data is necessary for compliance with a legal obligation under European Union law or the law of the Member States to which the controller is subject;
• The personal data were collected in relation to information society services offered, in accordance with Article 8(1) of the GDPR.

Should we have made your personal data public and be obliged to erase it pursuant to Article 17(1) GDPR, we will take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform controllers who are processing the personal data that you, as a data subject within the meaning of the GDPR, have requested the erasure of all links to, or copies or replications of, your personal data from those controllers.

Exceptions to the right to data erasure

According to Article 17(3) GDPR, the data subject rights under Article 17(1) and (2) GDPR do not apply insofar as the data processing

• to exercise the right to freedom of expression and information
  or
• to fulfill a legal obligation which requires processing under the law of the European Union or of the Member States to which the controller is subject,
  or
• to perform a task carried out in the public interest or in the exercise of official authority vested in the controller
  or
• for reasons of public interest in the area of ​​public health pursuant to Art. 9 II letters h and i GDPR and Art. 9 III GDPR
  or
• for archiving purposes in the public interest, scientific
  or
• historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing.
  or

for the establishment, exercise or defense of legal claims
is required.

4. Right to restriction of processing of personal data

As a data subject within the meaning of the GDPR, you can request that we restrict the processing of your personal data if one of the following conditions, as set out in Article 18(1) of the GDPR, is met:

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
• The processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data;
• The controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
• The data subject has objected to the processing pursuant to Art. 21 I GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

If the processing of your personal data has been restricted, such data may – apart from being stored – only be processed with your explicit consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State, cf. Art. 18 II GDPR.

According to Article 18 III GDPR, we are obliged to inform you, insofar as you are a data subject within the meaning of the GDPR, of a restriction of data processing carried out under the conditions of Article 18 I GDPR; this at a time before the restriction is lifted.

5. Right to be informed about notification obligations in connection with the rectification or erasure of personal data or the restriction of processing

Should you have asserted against us a right to rectification or erasure of personal data concerning you or to restriction of processing of this data, we are obliged to inform all recipients to whom the relevant data have been disclosed of the rectification or erasure of that data or of the data processing restrictions that have been carried out, cf. Art. 19 para. 1 GDPR.

You are entitled to be informed about the recipients of your personal data upon your request, cf. Art. 19 para. 2 GDPR.

Exceptions to the notification requirement

The notification obligation under Section 19 Sentence 1 GDPR does not apply if the notification proves impossible or involves a disproportionate effort.

6. Right to data portability

According to Article 20(1) of the GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from us, as the controller to whom the personal data was provided, provided that

• the processing is based on consent pursuant to Art. 6 I letter a GDPR or Art. 9 II letter a or on a contract pursuant to Art. 6 I letter b
  and
• the processing is done using automated procedures.

According to Article 20 III 1 GDPR, the right to data portability does not apply to data processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

When exercising your right to data portability, you as a data subject have the right to have your personal data transmitted directly from one controller to another, where technically feasible, provided that this does not adversely affect the rights and freedoms of other persons.

7. Right to object to data processing

As a data subject within the meaning of the GDPR, you have the right, pursuant to Article 21(1) GDPR, to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.

In the event of a valid objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, you, as the data subject, have the right under Article 21 II GDPR to object at any time to the processing of personal data concerning you for such marketing, which also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes. In connection with the use of information society services, and notwithstanding Directive 2002/58/EC (the ePrivacy Directive), you may exercise your right to object by automated means using technical specifications.

8. Right to withdraw your consent under data protection law

If you have given us your consent to the processing of your personal data, you are entitled to revoke this consent at any time.
The lawfulness of data processing carried out before your withdrawal of consent remains unaffected by the withdrawal declaration.

9. Your rights regarding automated individual decisions, including profiling

As a data subject within the meaning of the GDPR, you have the right under Article 22(1) GDPR not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Exceptions to this right under Article 22(1) GDPR
According to Article 22 II GDPR, the aforementioned right does not apply if the automated decision

is necessary for the conclusion or performance of a contract between the data subject and the controller (i.e., between you on the one hand and us on the other),
is permitted under the laws of the European Union or of the Member States to which the controller is subject, and such laws contain appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject or
with the express consent of the data subject.
However, the decisions described above, which are exempt under Article 22(2) GDPR, may not be based on special categories of personal data as defined in Article 9(1) GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject have been taken.

In the (exceptional) cases mentioned in Article 22 II GDPR, we take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to

• to obtain the intervention of a person on behalf of the controller,
• to present one's own point of view
  and
• The decision was appealed.

10. Right to complain to a supervisory authority

According to Article 78(1) GDPR, if you are a data subject within the meaning of the GDPR, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

According to Article 22 II GDPR, the supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy under Article 78.

Subject to change regarding the privacy policy

To comply with applicable legal regulations in your and our best interests, we expressly reserve the right to amend or update this privacy policy. Therefore, we strongly encourage you to review the privacy policy available on our website and read it carefully at regular intervals.

Other information

We strive to protect personal data from unauthorized access by third parties to the extent technically and organizationally possible. However, we cannot guarantee complete data security when communicating via email, which is why we recommend that you send us confidential information by postal mail.