Privacy

PRIVACY POLICY

This data protection declaration informs you about the nature, scope and purpose of the processing of personal data within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles on Facebook, Instagram and Pinterest. (hereinafter collectively referred to as "Online Offer").

A. GENERAL INFORMATION

I. Definitions

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Where reference is made below to "data", this always refers to personal data.

"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and encompasses virtually any handling of data.

"Controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

"User" refers to the visitors and users of our online offer.

"GDPR" is the basic data protection regulation.

II. Responsible party:

The responsible party is

LEICHT Kitchens AG

Gmünder Street 70

73550 Waldstetten | Germany

Commercial Register/No.: HRB 701337, Registry Court: Ulm Local Court

Board of Directors : Stefan Waldenmaier (Chairman), Ralph Glorim

Phone number : +49 | 7171 | 402-0

E-mail address: info@leicht.de

The data protection officer can be reached at the e-mail address datenschutz@leicht.de or via the above postal address with the addition "To the data protection officer".

III. types of data processed:

When visiting and using our online offer, the following data is processed:

- Inventory data, e.g. name, address

- Contact data, e.g. e-mail address

- Content data, e.g. text contributions, photographs

- Usage data, e.g. access times, websites visited

Metadata, e.g. IP addresses, information about operating system and internet service provider

IV. Purpose of data processing

We process your data when you visit and use our online offer for the purpose of providing a functional website and our content and services.

V. Legal basis for the processing of personal data

Your data will only be processed if there is a legal basis as specified in Art. 6 (1) DSGVO, in particular

- if you have given your consent in accordance with Art. 6 Para. 1 lit. a DSGVO

- for the performance of a contract or for the implementation of a pre-contractual measure pursuant to Art. 6 (1) lit. b DSGVO. This also applies to processing operations that are necessary for the performance of pre-contractual measures

- for the fulfillment of a legal obligation to which our company is subject pursuant to Art. 6 para. 1 lit. c DSGVO

- for the protection of a legitimate interest of our company or a third party pursuant to Art. 6 (1) lit. f DSGVO, provided that the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest.

We will inform you of the relevant legal basis in each case separately in this data protection declaration for the individual processing activities.

VI. Data transfer, transfer to other countries

1. disclosure of data to processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission, in particular if

- you have expressly consented to this,

- a transfer of data to third parties, such as payment service providers, according to Art. 6 para. 1 lit. b DSGVO is necessary for the performance of the contract or for the implementation of pre-contractual measures,

- a legal obligation provides for this according to Art. 6 para. 1 lit. c DSGVO,

- the disclosure is necessary to protect our legitimate interests (e.g. when using agents, web hosts, etc.) as well as for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding interest worthy of protection in the non-disclosure of your data.

If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 DSGVO.

2. transfers to third countries

Insofar as we lawfully process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in the context of the use of third-party services or disclosure, or transfer of data to third parties, this only occurs if the special requirements of Art. 44 et seq. DSGVO. In particular, processing is carried out on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or the conclusion of the EU standard data protection clauses.

VII. rights of the data subjects

If personal data are processed, you as the data subject have the following rights vis-à-vis us:

1. right to information pursuant to Art. 15 DSGVO,

2. right to rectification according to Art. 16 DSGVO

3. right to deletion according to Art. 17 DSGVO

4. right to restriction of processing according to Art. 18 DSGVO

5. right to data portability according to Art. 20 DSGVO

6. right to object to processing according to Art. 21 DSGVO

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, pursuant to Art. 77 DSGVO, if you consider that the processing of personal data concerning you infringes the DSGVO.

You can find the competent supervisory authority at: Website of the Federal Commissioner for Data Protection and Freedom of Information - Addresses and links.

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority responsible for us is the

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg,

P.O. Box 10 29 32,

70025 Stuttgart

or

Königstraße 10a,

70173 Stuttgart,

Telephone: 07 11/61 55 41-0,

fax: 07 11/61 55 41-15,

e-mail: poststelle@lfdi.bwl.de

VIII Right of revocation and right of objection

1. objection to the processing of your data

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO, in accordance with Article 21 DSGVO. This is the case if the processing is not necessary, in particular, for the performance of a contract with you. When exercising your right to object, we ask you to explain the reasons why your personal data should not be processed as carried out by us. In the event of a justified objection, we will discontinue or adapt the data processing or demonstrate compelling legitimate grounds for you to continue the processing that override your interests, rights and freedoms or serve the assertion, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

2. right to revoke your declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

3. you can inform us about your objection or revocation at the following contact data: datenschutz@leicht.de IX. Deletion of data and storage period

The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 DSGVO. Unless expressly stated otherwise within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law. According to legal requirements in Germany, storage may be necessary for up to 10 years due to commercial and tax law requirements. We delete e-mail inquiries and contacts via our website within a reasonable period of time, within which a conclusion of a contract or the like is no longer to be expected.

X. Security measures

We take appropriate technical and organizational measures in accordance with Article 32 of the GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk. The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, entry into, disclosure of, assurance of availability of and segregation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, deletion of data, and response to data compromise. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 DSGVO).

The security measures include in particular the encrypted transmission of data between your browser and our server.

B. DATA PROCESSING

I. Collection of personal data during informative use of our website

During purely informational use of our website, i.e. when you do not log in to use the website, register or otherwise transmit information to us, our system automatically collects data and information that your browser transmits to enable you to visit the website. This data is also stored in the log files of our system. A link with other visitor data does not take place. The legal basis for the temporary storage is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest here lies in the provision of the core functionalities of the website, which are absolutely necessary for the functional, secure and stable website operation.

The following data is collected in this context:

- Information about the browser type and version used;

- The user's operating system;

- The user's Internet service provider;

- The IP address of the user;

- Date and time of access;

- Websites from which the user's system accesses our website;

- Websites that are accessed by the user's system via our website.

In the context of the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of users in protection against misuse and other unauthorized use. In principle, this data is not passed on to unauthorized third parties, unless it is necessary for the prosecution of our claims or there is a legal obligation to do so pursuant to Art. 6 Para. 1 lit. c DSGVO.

The hosting services of our third-party provider used by us serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this website. The legal basis for this is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest also lies in the functional and secure provision of this website.

II. Contacting

We offer various services on our website that you can use if you are interested.

You can contact us via contact form or e-mail. In this case, your e-mail address and your country data provided by you will be processed to handle the contact request and its processing. The legal basis for this is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the processing of the request. If your contact is aimed at the conclusion or execution of a contract, the legal basis is Art. 6 para. 1 lit. b) DSGVO.

III. data processing within the framework of the user account

1. user account

You have the option to create a user account in order to upload projects for participation in the Global Kitchen Design Award 2021 (GKD 2021). During the registration process, you will be asked to provide the following mandatory information:

- Salutation

- Name (also first and last name of contact persons),

- e-mail address,

- telephone number

- Country

- City

The data entered during registration is used for the purposes of using our services. Users may be informed by e-mail about information relevant to the offer or registration, such as changes to the scope of the offer or technical circumstances. If users have terminated their user account, their data with regard to the user account will be deleted, provided that their retention is not necessary. It is the responsibility of users to back up their data upon termination prior to the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract. The legal basis for data processing is Art. 6 para. 1 lit. a, lit. b or lit. f DSGVO. Our legitimate interest here lies in the provision of the functions within the scope of the user account.

2. uploading projects

If you use our services and upload projects to participate in GKD 2021, we also collect and process the following project information for this purpose in addition to the above-mentioned data:

- Project images,

- project names,

- project country,

- project city,

- execution details

- Photographer.

The legal basis for this is Art. 6 para. 1 lit. b, f DSGVO. Our legitimate interest in data processing is to ensure the participation and implementation of the Global Kitchen Design Awards 2021.

3. follow-up comments

Follow-up comments can be subscribed to by users with their consent pursuant to Art. 6 (1) lit. a DSGVO. For this purpose, we use the double opt-in procedure for verification purposes, i.e. when a subscription is made via our site, we send a confirmation email to the user to verify that he or she is the owner of the email address entered. Users may unsubscribe from ongoing comment subscriptions at any time. They will also be advised of the cancellation options in the confirmation email. For the purpose of proving users' consent, we store the time of subscription along with users' IP address. If users unsubscribe, we store the unsubscribed email addresses until the expiry of limitation periods on the basis of our legitimate interests under Art. 6 (1) lit. f DSGVO, in order to be able to prove consent previously given. The processing of this data is thereby limited exclusively to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.

4. comments and contributions

When users register, leave comments or other contributions, their IP addresses are stored on the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f DSGVO. This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves may be prosecuted for the comment or post and are therefore interested in the identity of the author. As a matter of principle, this data is not passed on to third parties unless it is necessary for the prosecution of our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c DSGVO.

IV. Cookies

Cookies" are small text files that can be stored on your computer when you use our website. Cookies are stored on your hard drive by the browser you are using and allow certain information to flow to the entity that sets the cookie. The primary purpose of a cookie is to store information about a user (or the device on which the cookie is stored) during or even after his or her visit within an online offer and to make the Internet offer as a whole more user-friendly and effective. Some functions of our website cannot be provided without the use of cookies. Cookies cannot execute programs or transmit viruses.

We use the following types of cookies on our website:

(a) Temporary cookies

b) Permanent cookies

c) Third-party cookies

a) Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online store or a login jam can be stored.

b) Cookies that remain stored even after the browser is closed are referred to as "permanent" or "persistent". For example, the login status can be stored if users visit them after several days. Likewise, the interests of users can be stored in such a cookie, which is used for range measurement or marketing purposes.

c) Third-party cookies are cookies that are offered by providers other than the responsible party that operates the online offer (otherwise, if they are only its cookies, they are referred to as "first-party cookies").

We provide information about the specific cookies used as part of our privacy policy.

If you do not want cookies to be stored on your computer, you can deactivate the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of the browser.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/.

Please note that in this case not all functions of this online offer can be used.

XII. Google Analytics

Insofar as you have given your consent, Google Analytics, a web analytics service provided by Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

1. scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the User ID function. With the help of the User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyze user behavior across devices.

We use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalized ads (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.

We use the 'anonymizeIP' function (so-called IP masking): due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

During your website visit, the following data is collected, among other things:

- The pages you visit, your "click path".

- achievement of "website goals" (conversions, e.g. newsletter sign-ups, downloads, purchases)

- Your user behavior (for example, clicks, dwell time, bounce rates)

- Your approximate location (region)

- Your IP address (in shortened form)

- Technical information about your browser and the end devices you use (e.g., language setting, screen resolution)

- your internet service provider

- the referrer URL (via which website/ via which advertising medium you came to this website)

2. purposes of processing

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

3. Recipient

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. For this purpose, we have concluded an order processing agreement with Google. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.

4. transmission to third countries

A transfer of data to the USA cannot be ruled out.

5. storage period

The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by

a. Not giving your consent to the setting of the cookie or

b. downloading and installing the browser add-on to disable Google Analytics HERE.

You can also prevent cookies from being stored by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, you may experience limitations in functionality on this and other websites.

6 Legal basis and revocation option

The legal basis for this data processing is your consent, Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by calling up the cookie settings by clicking on the cookie icon in the lower left corner and changing your selection there.

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.

XIII Google Maps

We integrate the interactive maps of the "Google Maps" service on our website in order to provide you with the most important information about various locations as quickly as possible. The service provider for Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

When you call up a web page of our website on which Google Maps is integrated, your browser establishes a direct connection to Google's servers. In doing so, information about the use of this website may be transferred to Google servers in the USA and linked to further data from other Google services, especially if you are logged in to your Google account. To safeguard this data transfer, we have concluded the EU standard data protection clauses.

The data processed includes information about the devices and browsers used (e.g. unique identifier, IP address, date and time of the visit to the page in question, Internet address or the URL of the website accessed) and other user data provided as part of the route planner function (e.g. location data, addresses entered).

The legal basis for the data processing is your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

We have no influence on the storage period and further data processing by Google.

For more information on data processing by Google, see Additional Terms of Use for Google Maps/Earth - Google and Privacy Policy - Privacy Policy & Terms of Use - Google .

XIV Google Re/Marketing Services

We use the marketing and remarketing services (in short "Google marketing services") of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") for the purpose of analyzing, optimizing and economically operating our online offer.

The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use the Google marketing services Google AdWords, DoubleClick, AdSense and Google Optimizer. The legal basis for this is your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

1. data processing

Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products he or she was interested in on other websites, this is referred to as "remarketing". For these purposes, when our website and other websites on which Google marketing services are active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com.

2. scope of data processing

This file records which web pages the user has visited, which content the user is interested in and which offers the user has clicked on, as well as technical information on the browser and operating system, referring web pages, time of visit and other information on the use of the online offer. The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area and only in exceptional cases is transferred in full to a Google server in the USA and shortened there. The IP address will not be merged with data of the user within other offers of Google. The aforementioned information may also be linked on the part of Google with such information from other sources. If the user subsequently visits other websites, he can be shown ads tailored to his interests.

User data is processed pseudonymously as part of Google's marketing services. I.e. Google does not store and process e.g. the name or email address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. I.e. from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization.

3. data transmission

The information collected by Google marketing services about users is transmitted to Google and may be stored on Google's servers in the USA.

4. further information

For more information about Google's use of data for marketing purposes, please visit http://www.google.com/intl/de/policies/privacy , https://policies.google.com/technologies/ads, https://marketingplatform.google.com/about/enterprise/ and https://services.google.com/sitestats/de.html . Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: https://adssettings.google.com/authenticated .

Information on the individual Google marketing services

1. Google AdWords

(1) We use the offer of Google AdWords to draw attention to our attractive offers with the help of advertising media (so-called Google AdWords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

(2) These advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords stores a cookie on your PC.

The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. These cookies usually lose their validity after 30 days and are not intended to identify you personally.

(3) These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user has clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. The information obtained with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. These evaluations allow us to see which of the advertising measures used are particularly effective. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users from this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

5) You can prevent participation in this tracking process in various ways:

(a) by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;

b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads , which setting will be deleted when you delete your cookies;

c) by disabling interest-based ads from the providers that are part of the "About Ads" self-regulatory campaign, through the link http://www.aboutads.info/choices , with this setting being deleted when you delete your cookies;

d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin .

We would like to point out that in this case you may not be able to use all functions of this offer in full.

(6) Additional information can be found at https://services.google.com/sitestats/de.html .

2 DoubleClick

(1) This website continues to use the online marketing tool DoubleClick to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. DoubleClick uses cookies to enable Google and its partner websites to serve ads based on users' visits to this website or other websites on the Internet. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later calls up the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address.

(3) You can prevent participation in this tracking procedure in various ways:

(a) by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;

b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads , which setting will be deleted when you delete your cookies;

c) by disabling interest-based ads from the providers that are part of the "About Ads" self-regulatory campaign, through the link http://www.aboutads.info/choices , with this setting being deleted when you delete your cookies;

d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin . We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

(4) Additional information on DoubleClick is available at DoubleClick Digital Marketing - Google Help .

3. AdSense

(1) This website uses the online advertising service Google AdSense, through which you can be presented with advertisements tailored to your interests and third-party advertisements can be integrated. We thereby pursue the interest of showing you advertising that might be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These advertisements are recognizable by the reference "Google ads" in the respective advertisement.

(2) By visiting our website, Google receives the information that you have called up our website. For this purpose, Google uses a web beacon to set a cookie on your computer. This enables Google and its partner websites to place ads based on users' visits to this website or other websites on the Internet. In this process, the data mentioned under B - 1 of this statement are transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there. If you are logged in with your Google account, your data can be directly assigned to it. If you do not want the assignment with your Google profile, you must log out. It is possible that this data will be passed on to third parties and authorities to contractual partners of Google. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a DS-GVO. This website also has Google AdSense third-party ads enabled. The aforementioned data may be transferred to the third-party providers listed under Vendors that are certified for third-party ads - Google Ad Manager Help.

(3) You can prevent the installation of cookies from Google AdSense in various ways:

(a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies will prevent you from receiving third-party ads;

b) by deactivating Google's interest-based ads via the link http://www.google.de/ads/preferences , whereby this setting will be deleted when you delete your cookies;

c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices , this setting being deleted when you delete your cookies;

d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin .

We would like to point out that in this case you may not be able to use all functions of this offer in full.

(4) Additional information is available at https://policies.google.com/technologies/ads.

4 Google Optimizer

We also use the "Google Optimizer" service on our website. Google Optimizer allows us to track the effects of various changes to a website (e.g. changes to the input fields, design, etc.) within the framework of so-called "A/B testing" and to improve the user experience according to the behavior of our users on the website. For these testing purposes, cookies are placed on users' devices and the IP address and the user's behavior on the website are processed in pseudonymized form. The legal basis for the use is Art. 6 para. 1 lit. a DSGVO.

V. Google Tag Manager

Furthermore, we use the "Google Tag Manager" from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") to integrate and manage the Google analysis and marketing services on our website. The service provider for Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a solution with which we manage so-called website tags via an interface in order to integrate and manage the Google analysis and marketing services and other services into our website. With regard to the provisions on the individual services, we refer to further details in this privacy policy. With the Tag Manager itself (which implements the tags), therefore, no profiles of users are yet created or cookies are stored. Google only learns the IP address of the user, which is necessary to run the Google Tag Manager.

The legal basis is our legitimate interest iSd Art. 6 I lit. f DSGVO. This lies in the needs-based design in terms of effective control of the implementation of tags as well as the optimization of our service.

For more information, please visit Google Tag Manager | Google Developers and https://policies.google.com/privacy.

VI. YouTube

We use the YouTube service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") to embed videos. The responsible provider in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

YouTube sets cookies to collect information about visitors to its website. YouTube uses these to collect video statistics, prevent fraud, and improve user experience, among other things. This leads to a connection with the Google DoubleClick network. In the process, data may be transferred to the USA and linked to other data from other Google services, especially if you are logged into your Google account. The data processed includes

- Information about the devices and browsers used (e.g., unique identifiers, IP address, type and settings, operating system, mobile network)

- Your activities (videos viewed, date and time of the visit to the page in question, interactions)

- Location data

We have no influence on the storage period of the data and further data processing by YouTube and Google.

In order to reduce the transmitted data, we use the extended data protection mode. The legal basis is therefore your consent according to Art.6 I lit.a DSGVO.

For more information about data protection at YouTube and Google, please see their privacy statements at: Terms of Use (youtube.com) and https://policies.google.com/privacy?hl=en.

VII. Use of social media plug-in: Facebook, Instagram, Pinterest.

(1) We currently use the following social media plug-ins: Facebook, Instagram, Pinterest. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the provider of the plug-in. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. The Facebook button, for example, has a white "f" on a blue background. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under B - 1 of this statement will be transmitted. In the case of Facebook, according to the provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data is therefore transmitted from you to the plug-in provider and stored there or, if applicable, also at the US parent company in the USA. Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

(2) We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the plug-in provider to exercise this right. Via the plug-in, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO.

(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's data protection declarations communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.

(6) Addresses of the respective plug-in providers and URL with their privacy notices:

Facebook:

Service provider: Facebook Inc, Menlo Park, CA 94025, USA.

Service provider for Europe: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

https://www.facebook.com/terms/

https://www.facebook.com/privacy/explanation/

https://www.facebook.com/policies/cookies/

Instagram:

Service provider: Facebook Inc., Menlo Park, CA 94025, USA

Service Provider for Europe: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Instagram Privacy Policy | Instagram Help Area (facebook.com)

Instagram Help Center (facebook.com)

About cookies | Instagram help section

Pinterest:

Service Provider: Pinterest Inc., 651 Brannan Street, San Francisco, California 94107, USA

Service Provider for Europe: Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

Privacy Policy | Pinterest Policy

Cookies | Pinterest Policy

VIII. Facebook, Website Custom Audience and Facebook Marketing Services

Within our online offer, we use the so-called "Facebook pixel" for the purpose of analysis, optimization and economic operation of our online offer. This enables users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the social network Facebook or other websites that also use the procedure. We thereby pursue the interest of displaying advertisements that are of interest to you in order to make our website more interesting for you. This is provided by the service provider Facebook Inc. (Menlo Park, CA 94025, USA) or, if you are a resident of the EU, Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (hereinafter "Facebook"). The legal basis is your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

1. data processing

With the help of the Facebook Pixel, it is possible for Facebook, on the one hand, to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads") by allowing us to track your actions after you have viewed or clicked on an advertisement on Facebook or Instagram. Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users on Facebook and within the services of partners cooperating with Facebook (so-called "Audience Network" https://www.facebook.com/audiencenetwork/ ) who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences").

With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can also track and evaluate the effectiveness of the Facebook ads for statistical and market research purposes and optimize future advertising measures by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). The data collected is anonymous for us, i.e. we cannot view the personal data of individual users. In principle, we only receive access to summarized information about the success of our advertisements. However, in the context of so-called conversion measurements, we can check which of our online marketing methods have led to a so-called conversion, i.e., for example, to a contract being concluded with us. The conversion measurement is used solely to analyze the success of our marketing measures.

Furthermore, we use the additional function "advanced matching" when using the Facebook Pixel. Here, data such as telephone numbers, e-mail addresses or Facebook IDs of the users are transmitted to Facebook (encrypted) for the formation of target groups ("Custom Audiences" or "Look Alike Audiences"). Further information on "extended matching" is available at https://www.facebook.com/business/help/611774685654668 .

We also use the "Custom Audiences from File" procedure. In this case, the email addresses of the newsletter recipients are uploaded to Facebook. The upload process takes place in encrypted form. The upload is used solely to determine recipients of our Facebook ads. In this way, we want to ensure that the ads are only displayed to users who have an interest in our information and services.

2. data transmission

The data collected in this way is anonymous for us. Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. In doing so, a transmission of data to the USA is possible. To secure such a third-country data transfer, we have concluded the EU standard data protection clauses. A connection to your Facebook account as well as the use of the data by Facebook for its own advertising purposes is thereby possible. This may affect identifiers such as your IP address, username, cookie ID, user ID, advertising ID. But even if you are not registered with Facebook or have not logged in, there is a possibility that corresponding identifiers will be processed. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool.

3. joint responsibility

We are jointly responsible with Facebook Ireland Ltd. for the collection or receipt in the course of a transmission (but not the further processing) of "event data" that Facebook collects or receives in the course of a transmission by means of the Facebook Pixel and comparable functions (e.g. interfaces) that are executed on our online offer for the following purposes:

(a) displaying content advertising information that corresponds to the presumed interests of users;

b) Delivery of commercial and transactional messages (e.g., targeting users via Facebook Messenger);

c) Improving ad delivery and personalization of features and content (e.g., improving the detection of which content or advertising information presumably matches users' interests).

We have entered into a special agreement with Facebook ("Addendum for Responsible Parties", https://www.facebook.com/legal/controller_addendum), which regulates in particular which security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill the data subject rights (i.e. users can, for example, direct information or deletion requests directly to Facebook).

4 Further information

General guidance on the display of Facebook Ads, can be found in Facebook's Data Use Policy https://www.facebook.com/policy.php . Specific information and details about the Facebook Pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616 .

In addition to the option to prevent tracking by Facebook via our cookie consent banner, you have the following options to object to the collection by the Facebook pixel and use of your data to display Facebook ads:

To adjust which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there regarding the settings for usage-based advertising e: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can further object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative ( http://optout.networkadvertising.org/ ) and additionally the US website (http://www.aboutads.info/choices ) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/ ).

IX. Akismet Anti-Spam Checking

Our online offer uses the service "Akismet", which is provided by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) DSGVO.

With the help of this service, comments from real people are distinguished from spam comments. This is also our legitimate interest. For this purpose, all comment details are sent to a server in the USA, where they are analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data is stored beyond this time.

This data includes

- the name entered,

- the email address,

- the IP address,

- the comment content,

- the referrer,

- information about the browser used and the computer system and

- the time of the entry.

We have concluded the EU standard data protection clauses to secure the transfer of data.

More information on the collection and use of data by Akismet can be found in Automattic's privacy policy: https://automattic.com/privacy/ .

Users are welcome to use pseudonyms or refrain from entering their name or email address. You can completely prevent the transfer of data by not using our commenting system.

X. Google Fonts

We use "Google Fonts" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to integrate external fonts. When script or font libraries are called up, a connection to the Google servers in the USA is automatically established. To secure the data transfer, we have concluded the EU standard data protection clauses. It is therefore possible for Google to record the IP address of the browser of your end device or to transmit which website you have visited. We use Google Fonts for optimization purposes, in particular for the user-friendly design of our website through improved loading times, search engine optimization and a uniform display across devices. This is also our legitimate interest according to Art. 6 para. 1 lit. f DSGVO. We have no influence on the scope, further processing and storage period of the data collected and processed by Google through the use of the tool.

For further information on Google Fonts, please refer to Frequently Asked Questions | Google Fonts | Google Developers . The privacy policy of Google can be found at Privacy Policy - Privacy Policy & Terms of Use - Google .

XI. Online presence in social media

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.

Unless otherwise stated in our privacy policy, we process the data of users insofar as they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

1. Facebook

Within our online offer, functions and contents of the service Facebook can be integrated, offered by Facebook Inc, Menlo Park, California 94025. Service provider for Europe is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

As the operator of the Facebook Fanpage, we are a joint controller with Facebook. For this purpose, we have concluded a special agreement with Facebook ("Addendum for Responsible Parties", https://www.facebook.com/legal/controller_addendum), which regulates in particular which security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill the rights of data subjects (i.e. users can direct information or deletion requests to Facebook, for example).

The offer on Facebook may include, for example, content such as images, videos or texts and buttons with which users can make known their like regarding the content, subscribe to the authors of the content or our posts. If the users are members of the Facebook platform, Facebook can assign the call of the above-mentioned content and functions to the profiles of the users there. For more information about Facebook, please visit: https://www.facebook.com/terms/ ,

https://www.facebook.com/privacy/explanation/ ,

https://www.facebook.com/policies/cookies/

2. Instagram

Within our online offer, functions and contents of the service Instagram may be integrated, offered by Facebook Inc., Menlo Park, CA, 94025, USA. The service provider for Europe is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

This may include, for example, content such as images, videos or texts and buttons with which users can make known their like regarding the content, subscribe to the authors of the content or our posts. If the users are members of the Instagram platform, Instagram can assign the call of the above-mentioned content and functions to the profiles of the users there. For more information, please see: Instagram Privacy Policy | Instagram Help Area (facebook.com) ,

Instagram Help Center (facebook.com) ,

About cookies | Instagram help section

3. Pinterest

Within our online offer, functions and contents of the service Pinterest can be integrated, offered by Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA. The service provider for Europe is Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

This may include, for example, content such as images, videos or texts and buttons with which users can make known their liking regarding the content, subscribe to the authors of the content or our posts. If the users are members of the Pinterest platform, Pinterest can assign the call of the above-mentioned content and functions to the profiles of the users there. For more information, please visit Privacy Policy | Pinterest Policy ,

Cookies | Pinterest Policy

Status of the privacy policy: April 2021