Privacy Policy

Introduction and Overview

We have written this privacy policy (version 18.08.2026-113233122) to explain to you in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws which personal data (short data) we as controllers – and the processors commissioned by us (e.g. providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We inform you comprehensively about data that we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, however, aims to describe the most important things to you as simply and transparently as possible. As far as it promotes transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics put into use. We thus inform in clear and simple language that we only process personal data within the scope of our business activities when there is a corresponding legal basis. This is certainly not possible if one provides as brief, unclear, and legally-technical explanations as are often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is some information you did not know yet.
If you still have questions, we ask you to contact the responsible entity mentioned below or in the imprint, follow the available links, and view further information on third-party sites. Of course, you can also find our contact details in the imprint.

Scope of application

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as name, email address, and postal address of a person. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes:

all online presences (websites, online shops) that we operate
social media presences and email communication
mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the mentioned channels. Should we enter into legal relationships with you outside these channels, we will inform you separately if necessary.

Legal bases

In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, which enable us to process personal data.
With regard to EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 read up.

We only process your data if at least one of the following conditions applies:

Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you entered in a contact form.
Contract (Article 6 paragraph 1 lit. b GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information in advance.
Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

Other conditions such as the perception of recordings in the public interest and the exercise of public authority as well as the protection of vital interests generally do not occur with us. If such a legal basis should nevertheless be applicable, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

In Austria this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), abbreviated DSG.
In Germany the following applies Federal Data Protection Act, short BDSG.

If additional regional or national laws apply, we will inform you about them in the following sections.

Contact details of the responsible party

If you have any questions about data protection or the processing of personal data, you can find below the contact details of the responsible party according to Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR):
Pizza & Baguette Ltd.
Mühlehen 2
A-4681 Rottenbach

E-mail: office@pizza-baguette.at
Telephone: +43 7732 / 3866
Imprint: https://www.pizza-baguette.at/impressum/

Storage duration

That we only store personal data as long as it is absolutely necessary for the provision of our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and as long as there is no obligation to store it.

We will inform you below about the specific duration of the respective data processing, provided we have further information about it.

Rights under the General Data Protection Regulation

According to Articles 13 and 14 of the GDPR, we inform you about the following rights to which you are entitled to ensure fair and transparent data processing:

According to Article 15 of the GDPR, you have the right to obtain information about whether we process data about you. If this is the case, you have the right to receive a copy of the data and to learn the following information:
- the purpose for which we carry out the processing;
- the categories, i.e., the types of data that are processed;
- who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
- how long the data is stored;
- the existence of the right to rectification, deletion or restriction of processing and the right to object to processing;
- that you can file a complaint with a supervisory authority (links to these authorities can be found below);
- the origin of the data if we did not collect it from you;
- whether profiling is carried out, i.e. whether data is automatically evaluated to create a personal profile of you.
According to Article 16 GDPR, you have the right to rectification of data, which means that we must correct data if you find errors.
According to Article 17 GDPR, you have the right to deletion („right to be forgotten“), which specifically means that you may request the deletion of your data.
According to Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.
According to Article 20 GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request.
According to Article 21 GDPR, you have the right to object, which, once enforced, results in a change in processing.
- If the processing of your data is based on Article 6(1)(e) (public interest, exercise of public authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then review as quickly as possible whether we can legally comply with this objection.
- If data is used for direct advertising, you can object to this type of data processing at any time. We may no longer use your data for direct marketing thereafter.
- If data is used for profiling, you can object to this type of data processing at any time. We may no longer use your data for profiling thereafter.
According to Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (e.g., profiling).
According to Article 77 GDPR, you have the right to lodge a complaint. This means you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible entity listed above with us!

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can complain to the supervisory authority. For Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/ found. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) For our company, the following local data protection authority is responsible:

Austrian Data Protection Authority

Head: Dr. Matthias Schmidl
Address: Barichgasse 40-42, 1030 Vienna
Phone no.: +43 1 52 152-0
Email address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

Data Processing Agreement (DPA)

In this section, we would like to explain to you what a Data Processing Agreement is and why it is needed. Because the word “Data Processing Agreement” is quite a tongue twister, we will often use the acronym DPA in the text. Like most companies, we do not work alone but also use services from other companies or individuals. By involving various companies or service providers, it may be that we pass on personal data for processing. These partners then act as data processors, with whom we conclude a contract, the so-called Data Processing Agreement (DPA). The most important thing for you to know is that the processing of your personal data takes place exclusively according to our instructions and must be regulated by the DPA.

Who are processors?

As a company and website owner, we are responsible for all data we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or person who processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, authority, institution, or other body that processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies like Google or Microsoft.

For better understanding of the terminology, here is an overview of the three roles in the GDPR:

Data subject (You as a customer or interested party) → Controller (We as a company and client) → Processor (Service providers such as web hosts or cloud providers)

Content of a data processing agreement

As mentioned above, we have concluded a data processing agreement (DPA) with our partners who act as processors. It primarily states that the processor processes the data to be handled exclusively in accordance with the GDPR. The contract must be concluded in writing, but in this context, electronic contract conclusion is also considered „in writing.“ Processing of personal data only takes place on the basis of the contract. The contract must include the following:

Obligation to us as the controller
Duties and rights of the controller
Categories of data subjects
Type of personal data
Type and purpose of data processing
Subject matter and duration of data processing
Place of data processing

Furthermore, the contract contains all obligations of the processor. The most important obligations are:

Ensuring data security measures
to take possible technical and organizational measures to protect the rights of the data subject
to maintain a data processing record
to cooperate with the data protection supervisory authority upon request
to conduct a risk analysis regarding the received personal data
sub-processors may only be commissioned with the written approval of the controller

For example, you can see what such a data processing agreement specifically looks like at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html view. Here a sample contract is presented.

Cookies

Cookies summary
👥 Data subjects: visitors of the website
🤝 Purpose: depends on the respective cookie. More details can be found below or from the software manufacturer who sets the cookie.
📓 Processed data: depends on the respective cookie used. More details can be found below or from the software manufacturer who sets the cookie.
📅 Storage duration: depends on the respective cookie, can vary from hours to years
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used, so you can better understand the following privacy policy.

Whenever you surf the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing is undeniable: cookies are really useful helpers. Almost all websites use cookies. More precisely, these are HTTP cookies, as there are also other cookies for other application areas. HTTP cookies are small files stored by our website on your computer. These cookie files are automatically placed in the cookie folder, basically the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data from you, such as language or personal page settings. When you revisit our site, your browser sends the „user-related“ information back to our site. Thanks to the cookies, our website knows who you are and offers you the settings you are used to. In some browsers, each cookie has its own file, in others like Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie from the server, which the browser uses again when another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to several years. Cookies are not software programs and do not contain viruses, trojans, or other „malware.“ Cookies also cannot access information on your PC.

Cookie data can look like this, for example:

Name: _ga
Value: GA1.2.1326744211.152113233122-9
Purpose: Distinguishing website visitors
Expiration date: after 2 years

A browser should be able to support these minimum sizes:

At least 4096 bytes per cookie
At least 50 cookies per domain
At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we specifically use depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly address the different types of HTTP cookies.

Four types of cookies can be distinguished:

Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user adds a product to the shopping cart, then continues browsing other pages and only later proceeds to checkout. These cookies ensure that the shopping cart is not deleted, even if the user closes their browser window.

Functional Cookies
These cookies collect information about user behavior and whether the user encounters any error messages. Additionally, these cookies also measure the loading time and behavior of the website across different browsers.

Targeted Cookies
These cookies ensure better user-friendliness. For example, entered locations, font sizes, or form data are saved.

Advertising Cookies
These cookies are also called targeting cookies. They serve to deliver individually tailored advertising to the user. This can be very practical but also very annoying.

Usually, you are asked on your first visit to a website which of these types of cookies you want to allow. And of course, this decision is also stored in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments by the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism.”.

Purpose of processing via cookies

The purpose ultimately depends on the respective cookie. More details can be found below or from the manufacturer of the software that sets the cookie.

What data is processed?

Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the processed or stored data within the scope of the following privacy policy.

Storage duration of cookies

The storage duration depends on the respective cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.

You also have control over the storage duration. You can manually delete all cookies at any time via your browser (see also below “Right to object”). Furthermore, cookies based on consent are deleted at the latest after you withdraw your consent, whereby the legality of the storage until then remains unaffected.

Right to object – how can I delete cookies?

Whether and how you want to use cookies is up to you. Regardless of which service or website the cookies come from, you always have the option to delete, disable, or only partially allow cookies. For example, you can block third-party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser or want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable, and manage cookies in Chrome

Safari: Managing cookies and website data with Safari

Firefox: Deleting cookies to remove data stored by websites on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally do not want any cookies, you can set up your browser to always notify you when a cookie is about to be set. This way, you can decide for each individual cookie whether to allow it or not. The procedure varies depending on the browser. It is best to search for instructions on Google using the terms “delete cookies Chrome” or “disable cookies Chrome” in case of a Chrome browser.

Legal basis

Since 2009, there have been the so-called „cookie guidelines.“ These state that storing cookies requires a Consent (Article 6 para. 1 lit. a GDPR) from you. However, within the EU countries, there are still very different reactions to these guidelines. In Austria, the implementation of this guideline was done in § 165 para. 3 of the Telecommunications Act (2021). In Germany, the cookie guidelines were not implemented as national law. Instead, the implementation of this guideline was largely done in § 15 para. 3 of the Telemedia Act (TMG), which has been replaced since May 2024 by the Digital Services Act (DDG).

For strictly necessary cookies, even if no consent is given, there are legitimate interests (Article 6(1)(f) GDPR), which are economic in nature in most cases. We want to provide website visitors with a pleasant user experience, and certain cookies are often absolutely necessary for this.

If cookies that are not strictly necessary are used, this only happens with your consent. The legal basis for this is Article 6(1)(a) GDPR.

In the following sections, you will be informed in more detail about the use of cookies, provided that the software used employs cookies.

Contact form

Contact details summary
👥 Data subjects: Website visitors who enter data into a contact form
🤝 Purpose: Processing inquiries and communication in the context of pre-contractual measures or existing interest in our services
📓 Processed data: Name, email address, phone number (if provided), content of the message, IP address, technical metadata (e.g., timestamp, browser information)
📅 Storage duration: The data will be deleted as soon as it is no longer necessary for processing the inquiry and no legal retention obligation exists.
⚖️ Legal bases: Consent (Art. 6(1)(a) GDPR), legitimate interest (Art. 6(1)(f) GDPR), contract or pre-contractual measures (Art. 6(1)(b) GDPR)

What is a contact form?

A contact form is a web form that you can fill out on our website to easily get in touch with us. Typically, personal data such as your name, your email address, and your message are transmitted to us. This information helps us to process your inquiries specifically and to contact you.

Why do we use a contact form?

We offer a contact form so that you can communicate with us quickly and easily. Whether it is questions about our services, feedback, or other concerns – with the contact form you can reach us directly. The data entered is used exclusively to process your request and to contact you. If further steps arise from the contact, such as an offer or a contractual relationship, we also use the data for that purpose.

What data is processed?

Which specific data is processed depends on the information you provide in the contact form. Usually, this includes:

Name
Email address
Phone number (optional)
Content of the message
Date and time of transmission
IP address and technical metadata (for security and traceability)

This information helps us to better classify and answer your inquiry.

How long will the data be stored?

We only store data from the contact form as long as it is necessary to process your request. If a business relationship is established, the corresponding retention periods applicable to customer data apply. In special cases (e.g., legal disputes), longer retention periods may apply.

Legal basis

Legal bases for processing your data via the contact form are Art. 6 para. 1 lit. a GDPR (consent – by submitting the form), Art. 6 para. 1 lit. b GDPR (pre-contractual measures), and Art. 6 para. 1 lit. f GDPR (legitimate interest – efficient communication and organization of inquiries). If you voluntarily provide special categories of personal data, processing is carried out according to Art. 9 para. 2 lit. a GDPR (consent).

Customer data

Customer data summary
👥 Data subjects: Customers or business and contractual partners
🤝 Purpose: Provision of contractually or pre-contractually agreed services including related communication
📓 Processed data: Name, address, contact details, email address, telephone number, payment information (such as invoices and bank details), contract data (such as duration and subject of the contract), IP address, order data
📅 Storage duration: the data will be deleted as soon as it is no longer necessary for the fulfillment of our business purposes and there is no legal retention obligation.
⚖️ Legal bases: Legitimate interest (Art. 6 para. 1 lit. f GDPR), contract (Art. 6 para. 1 lit. b GDPR)

What are customer data?

In order to provide our service or contractual services, we also process data from our customers and business partners. Among this data are always personal data. Customer data refers to all information processed on the basis of a contractual or pre-contractual cooperation in order to be able to provide the offered services. Customer data are therefore all collected information that we collect and process about our customers.

Why do we process customer data?

There are many reasons why we collect and process customer data. The most important is that we simply need various data to provide our services. Sometimes your email address is sufficient, but if you purchase a product or service, we also need data such as name, address, bank details, or contract data. We also use the data for marketing and sales optimizations so that we can improve our service for our customers overall. Another important point is our customer service, which is always very important to us. We want you to be able to contact us with questions about our offers at any time, and for that, we at least need your email address.

What data is processed?

Which data exactly is stored can only be represented here based on categories. This always depends on which services you receive from us. In some cases, you only provide us with your email address so that we can, for example, contact you or answer your questions. In other cases, you purchase a product or service from us, and for that, we need significantly more information, such as your contact details, payment data, and contract data.

Here is a list of possible data that we receive and process from you:

Name
Contact address
Email address
Phone number
Date of birth
Payment data (invoices, bank details, payment history, etc.)
Contract data (duration, content)
Usage data (visited websites, access data etc.)
Metadata (IP address, device information)

How long will the data be stored?

As soon as we no longer need the customer data to fulfill our contractual obligations and purposes and the data is not required for possible warranty and liability obligations, we delete the corresponding customer data. This is the case, for example, when a business contract ends. After that, the limitation period is usually 3 years, although longer periods are possible in individual cases. Of course, we also comply with the statutory retention obligations. Your customer data will definitely not be passed on to third parties unless you have explicitly given your consent.

Legal basis

Legal bases for the processing of your data are Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures), Art. 6 para. 1 lit. f GDPR (legitimate interests) and in special cases (e.g. for medical services) Art. 9 para. 2 lit. a GDPR (processing of special categories).

In the case of protection of vital interests, data processing is carried out in accordance with Art. 9 para. 2 lit. c GDPR. For purposes of health care, occupational medicine, medical diagnostics, care or treatment in the health or social sector, or for the management of systems and services in the health or social sector, the processing of personal data is carried out in accordance with Art. 9 para. 2 lit. h GDPR. If you voluntarily provide data of special categories, processing is based on Art. 9 para. 2 lit. a GDPR.

Webhosting Introduction

Webhosting Summary
👥 Data subjects: visitors of the website
🤝 Purpose: professional hosting of the website and securing operation
📓 Processed data: IP address, time of website visit, browser used and other data. More details can be found below or from the respective web hosting provider used.
📅 Storage duration: depends on the respective provider, but usually 2 weeks
⚖️ Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is web hosting?

When you visit websites nowadays, certain information – including personal data – is automatically created and stored, also on this website. This data should be processed as sparingly as possible and only with justification. By website, we mean the entirety of all web pages on a domain, i.e. everything from the homepage to the very last subpage (like this one). By domain, we mean for example beispiel.de or musterbeispiel.com.

If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We simply call them browsers or web browsers.

To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complicated and demanding task, which is why it is usually handled by professional providers. They offer web hosting and thus ensure reliable and error-free storage of website data. Quite a lot of technical terms, but please stay with us, it gets better!

When the browser on your computer (desktop, laptop, tablet, or smartphone) establishes a connection and during data transmission to and from the web server, personal data may be processed. On one hand, your computer stores data; on the other hand, the web server must also store data for a period of time to ensure proper operation.

A picture is worth a thousand words, so the following graphic illustrates the interaction between the browser, the internet, and the hosting provider.

Why do we process personal data?

The purposes of data processing are:

Professional hosting of the website and securing the operation
to maintain operational and IT security
Anonymous evaluation of access behavior to improve our offer and, if necessary, for prosecution or assertion of claims

What data is processed?

Even while you are currently visiting our website, our web server, which is the computer on which this website is stored, usually automatically saves data such as

the complete internet address (URL) of the accessed website
browser and browser version (e.g. Chrome 87)
the operating system used (e.g. Windows 10)
the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen/)
the hostname and the IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
date and time
in files, the so-called web server log files

How long is data stored?

As a rule, the aforementioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but cannot rule out that this data may be accessed by authorities in the event of unlawful behavior.

In short: Your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not share your data without consent!

Legal basis

The legality of processing personal data within the framework of web hosting arises from Art. 6 para. 1 lit. f GDPR (protection of legitimate interests), as the use of professional hosting with a provider is necessary to present the company securely and user-friendly on the internet and to be able to pursue attacks and claims arising from this if necessary.

There is usually a contract for commissioned processing according to Art. 28 et seq. GDPR between us and the hosting provider, which ensures compliance with data protection and guarantees data security.

Web hosting provider external privacy policy

Below you will find the contact details of our external hosting provider, where you can learn more about data processing in addition to the information above:

Cloudways Ltd., 52 Springvale, Pope Pius XII Street, Mosta MST2653, Malta
Server location: Frankfurt

Learn more about data processing by this provider in the Privacy Policy.

Website Builder Systems Introduction

Website Builder Systems Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Optimization of our service
📓 Processed data: Data such as technical usage information like browser activity, clickstream activities, session heatmaps, as well as contact details, IP address, or your geographic location. More details can be found further down in this privacy policy and in the provider's privacy policy.
📅 Storage duration: depends on the provider
⚖️ Legal bases: Art. 6 para. 1 lit. f GDPR (legitimate interests), Art. 6 para. 1 lit. a GDPR (consent)

What are website builder systems?

We use a website builder system for our website. Builder systems are special forms of a content management system (CMS). With a builder system, website operators can easily create a website without programming knowledge. In many cases, web hosts also offer builder systems. By using a builder system, personal data from you may also be collected, stored, and processed. In this privacy text, we provide you with general information about data processing by builder systems. More detailed information can be found in the provider's privacy policies.

Why do we use website builder systems for our website?

The biggest advantage of a modular system is its ease of use. We want to offer you a clear, simple, and well-structured website that we ourselves can easily operate and maintain without external support. A modular system now offers many helpful functions that we can use even without programming knowledge. This allows us to design our web presence according to our wishes and provide you with an informative and pleasant experience on our website.

What data is stored by a modular system?

Exactly which data is stored naturally depends on the website modular system used. Each provider processes and collects different data from the website visitor. However, technical usage information is generally collected, such as operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your website visit. Furthermore, tracking data (e.g., browser activity, clickstream activities, session heatmaps, etc.) may also be processed. Additionally, personal data can be collected and stored. This usually includes contact data such as email address, phone number (if you have provided it), IP address, and geographic location data. You can find exactly which data is stored in the provider's privacy policy.

How long and where is the data stored?

We inform you about the duration of data processing further below in connection with the website modular system used, provided we have further information on this. Detailed information can be found in the provider's privacy policy. In general, we process personal data only as long as it is absolutely necessary for providing our services and products. It may be that the provider stores data about you according to their own criteria, over which we have no influence.

Right to object

You always have the right to access, correct, and delete your personal data. If you have questions, you can also contact the responsible parties of the website modular system used at any time. Contact details can be found either in our privacy policy or on the website of the respective provider.

Cookies that providers use for their functions can be deleted, disabled, or managed in your browser. Depending on which browser you use, this works in different ways. Please note, however, that then not all functions may work as usual.

Legal basis

We have a legitimate interest in using a website modular system to optimize our online service and present it efficiently and user-friendly for you. The corresponding legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use the modular system to the extent that you have given consent.

To the extent that data processing is not absolutely necessary for operating the website, the data is processed only based on your consent. This particularly concerns tracking activities. The legal basis is Art. 6 para. 1 lit. a GDPR.

With this privacy policy, we have provided you with the most important general information about data processing. If you want to learn more about this, you can find further information – if available – in the following section or in the provider's privacy policy.

Elementor Privacy Policy

We use the Elementor website builder system for our website. The service provider is the Israeli company Elementor Ltd., Rehov Tuval 40, 5252247 Ramat Gan, Israel.

Your data may be transferred to Israel. Israel is outside the scope of the GDPR. However, the European Commission has decided on the basis of Art. 45 para. 1 GDPR that Israel provides a level of protection comparable to the GDPR standard. You can view the decision here: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32011D0061

Learn more about the data processed through the use of Elementor in the privacy policy at https://elementor.com/about/privacy/.

Web Analytics Introduction

Web Analytics Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Evaluation of visitor information to optimize the web offering.
📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found with the respective web analytics tool used.
📅 Storage duration: depends on the web analytics tool used
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is Web Analytics?

We use software on our website to analyze the behavior of website visitors, called Web Analytics or web analysis for short. Data is collected, which the respective analytics tool provider (also called tracking tool) stores, manages, and processes. Using the data, analyses of user behavior on our website are created and made available to us as the website operator. Additionally, most tools offer various testing options. For example, we can test which offers or content are most popular with our visitors. For this, we show you two different offers for a limited period. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such testing procedures, as well as for other analytics methods, user profiles can also be created and the data stored in cookies.

Why do we operate Web Analytics?

With our website, we have a clear goal in mind: we want to provide the best web offering on the market for our industry. To achieve this goal, we want to offer the best and most interesting content on the one hand and ensure that you feel completely comfortable on our website on the other. With the help of web analysis tools, we can examine the behavior of our website visitors more closely and then improve our web offering accordingly for you and us. For example, we can see the average age of our visitors, where they come from, when our website is most visited, or which content or products are particularly popular. All this information helps us optimize the website and thus tailor it perfectly to your needs, interests, and wishes.

What data is processed?

Which exact data is stored naturally depends on the analysis tools used. But usually, for example, it is stored which content you view on our website, which buttons or links you click, when you visit a page, which browser you use, with which device (PC, tablet, smartphone, etc.) you visit the website, or which computer system you use. If you have agreed that location data may also be collected, these can also be processed by the web analytics tool provider.

In addition, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually pseudonymized (i.e., stored in an obscured and shortened form). For the purpose of testing, web analysis, and web optimization, no direct data such as your name, age, address, or email address are generally stored. All these data, if collected, are stored pseudonymized. Thus, you cannot be identified as a person.

The following example schematically shows the functionality of Google Analytics as an example of client-based web tracking with JavaScript code.

How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, while other cookies can store data for several years.

Duration of data processing

We inform you about the duration of data processing further below, provided we have additional information on this. In general, we process personal data only as long as it is absolutely necessary for providing our services and products. If, as in the case of accounting, it is legally required, this storage period may also be exceeded.

Right to object

You also have the right and the possibility at any time to revoke your consent to the use of cookies or third parties. This works either via our cookie management tool or through other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Legal basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (Consent) this is the legal basis for the processing of personal data, as it may occur during collection by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors to technically and economically improve our offer. With the help of web analytics, we identify website errors, can detect attacks, and improve economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use the tools to the extent that you have given consent.

Since cookies are used in web analytics tools, we also recommend reading our general privacy policy on cookies. To find out exactly which data of yours is stored and processed, you should read the privacy policies of the respective tools.

Information on specific web analytics tools can be found – if available – in the following sections.

Google Analytics Privacy Policy

Google Analytics Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Evaluation of visitor information to optimize the web offering.
📓 Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behavior, and click behavior. More details can be found further below in this privacy policy.
📅 Storage duration: individually adjustable, by default Google Analytics 4 stores data for 14 months
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is Google Analytics?

We use the analytics tracking tool Google Analytics in the version Google Analytics 4 (GA4) from the American company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. Through the combination of various technologies such as cookies, device IDs, and login information, you as a user can be identified across different devices. This allows your actions to be analyzed across platforms.

For example, if you click a link, this event is stored in a cookie and sent to Google Analytics. With the help of the reports we receive from Google Analytics, we can better tailor our website and service to your wishes. Below we will go into more detail about the tracking tool and especially inform you about which data is processed and how you can prevent this.

Google Analytics is a tracking tool used for traffic analysis of our website. The basis of these measurements and analyses is a pseudonymous user identification number. This number does not contain personal data such as name or address but serves to assign events to an end device. GA4 uses an event-based model that captures detailed information about user interactions such as page views, clicks, scrolling, and conversion events. Additionally, GA4 has integrated various machine learning functions to better understand user behavior and certain trends. GA4 relies on modeling using machine learning functions. This means that based on the collected data, missing data can also be extrapolated to optimize the analysis and to provide forecasts.

For Google Analytics to function in principle, a tracking code is embedded in the code of our website. When you visit our website, this code records various events that you perform on our website. With GA4's event-based data model, we as website operators can define and track specific events to obtain analyses of user interactions. Thus, in addition to general information such as clicks or page views, special events important to our business can also be tracked. Such special events can be, for example, submitting a contact form or purchasing a product.

As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we receive reports about your user behavior. These can include, among others, the following reports:

Audience reports: Through audience reports, we get to know our users better and know more precisely who is interested in our service.
Ad reports: Ad reports allow us to analyze and improve our online advertising more easily.
Acquisition reports: Acquisition reports provide us with helpful information about how we can attract more people to our service.
Behavior reports: Here we learn how you interact with our website. We can track the path you take on our site and which links you click.
Conversion reports: A conversion is a process where you perform a desired action based on a marketing message. For example, when you change from a mere website visitor to a buyer or newsletter subscriber. With the help of these reports, we learn more about how our marketing measures are received by you. This way, we want to increase our conversion rate.
Real-time reports: Here we always immediately learn what is currently happening on our website. For example, we see how many users are currently reading this text.

In addition to the above-mentioned analysis reports, Google Analytics 4 also offers the following features, among others:

Event-based data model: This model records very specific events that can occur on our website. For example, playing a video, purchasing a product, or signing up for our newsletter.
Advanced analysis features: With these features, we can better understand your behavior on our website or certain general trends. For example, we can segment user groups, perform comparative analyses of audiences, or trace your path on our website.
Predictive modeling: Based on collected data, missing data can be extrapolated through machine learning to predict future events and trends. This can help us develop better marketing strategies.
Cross-platform analysis: Data collection and analysis are possible from both websites and apps. This gives us the opportunity to analyze user behavior across platforms, provided you have consented to data processing, of course.

Why do we use Google Analytics on our website?

Our goal with this website is clear: We want to provide you with the best possible service. The statistics and data from Google Analytics help us achieve this goal.

The statistically evaluated data give us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is more easily found by interested people on Google. On the other hand, the data help us understand you as a visitor better. We therefore know very precisely what we need to improve on our website to offer you the best possible service. The data also serve us to carry out our advertising and marketing measures more individually and cost-effectively. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics creates a random, unique ID using a tracking code, which is linked to your browser cookie. This way, Google Analytics recognizes you as a new user and assigns you a user ID. When you visit our site next time, you will be recognized as a „returning“ user. All collected data is stored together with this user ID. This makes it possible to evaluate pseudonymous user profiles.

To analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is the default. Depending on the property used, data is stored for different lengths of time.

Through identifiers such as cookies, app instance IDs, user IDs, or custom event parameters, your interactions are measured across platforms, provided you have consented. Interactions are all types of actions you perform on our website. If you also use other Google systems (such as a Google account), data generated via Google Analytics can be linked with third-party cookies. Google does not share Google Analytics data unless we as the website operator approve it. Exceptions may occur if legally required.

According to Google, no IP addresses are logged or stored in Google Analytics 4. However, Google uses IP address data to derive location data and deletes it immediately afterward. All IP addresses collected from users in the EU are therefore deleted before the data is stored in a data center or on a server.

Since Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies compared to previous versions (such as Google Universal Analytics). However, there are some specific cookies used by GA4. These include, for example:

Name: _ga
Value: 2.1326744211.152113233122-5
Purpose: By default, analytics.js uses the _ga cookie to store the user ID. Essentially, it serves to distinguish website visitors.
Expiration date: after 2 years

Name: _gid
Value: 2.1687193234.152113233122-1
Purpose: The cookie also serves to distinguish website visitors
Expiration date: after 24 hours

Name: _gat_gtag_UA_
Value: 1
Purpose: Used to reduce the request rate. When Google Analytics is delivered via Google Tag Manager, this cookie is named _dc_gtm_.
Expiration date: after 1 minute

Note: This list cannot claim to be complete, as Google frequently changes its choice of cookies. The goal of GA4 is also to improve data protection. Therefore, the tool offers several options to control data collection. For example, we can set the storage duration ourselves and also control data collection.

Here we show you an overview of the most important types of data collected with Google Analytics:

Heatmaps: Google creates so-called heatmaps. Heatmaps show exactly the areas you click on. This way we get information about where you are „active“ on our site.

Session duration: Google defines session duration as the time you spend on our site without leaving the page. If you are inactive for 20 minutes, the session ends automatically.

Bounce rate (English: bounce rate): A bounce is when you view only one page on our website and then leave our website again.

Account creation: When you create an account or place an order on our website, Google Analytics collects this data.

Location: IP addresses are not logged or stored in Google Analytics. However, shortly before the IP address is deleted, derivations for location data are used.

Technical information: Technical information includes, among other things, your browser type, your internet provider, or your screen resolution.

Source: Google Analytics, or rather we, are of course also interested in which website or advertisement brought you to our site.

Other data include contact details, any reviews, media playback (e.g., if you play a video through our site), sharing content via social media, or adding to your favorites. The list is not exhaustive and serves only as a general guide to data storage by Google Analytics.

How long and where is the data stored?

Google has its servers distributed worldwide. Here you can read exactly where the Google data centers are located: https://datacenters.google/

Your data is distributed across various physical storage devices. This has the advantage that the data can be accessed faster and is better protected against manipulation. Each Google data center has corresponding emergency programs for your data. For example, if hardware fails at Google or natural disasters disable servers, the risk of service interruption at Google remains low.

The retention period of the data depends on the properties used. The storage duration is always set individually for each property. Google Analytics offers us four options to control the retention period:

2 months: this is the shortest retention period.
14 months: by default, data in GA4 is stored for 14 months.
26 months: data can also be stored for 26 months.
Data is only deleted when we delete it manually.

Additionally, there is the option that data is only deleted when you do not visit our website within the chosen retention period. In this case, the retention period is reset each time you revisit our website within the specified period.

When the set period expires, data is deleted once a month. This retention period applies to your data linked with cookies, user identification, and advertising IDs (e.g., cookies from the DoubleClick domain). Reporting results are based on aggregated data and are stored independently of user data. Aggregated data is a merging of individual data into a larger unit.

How can I delete my data or prevent data storage?

Under European Union data protection law, you have the right to access your data, update it, delete it, or restrict it. Using the browser add-on to disable Google Analytics JavaScript (analytics.js, gtag.js) prevents Google Analytics 4 from using your data. You can download the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de download and install it. Please note that this add-on only disables data collection by Google Analytics.

If you generally want to disable, delete, or manage cookies, you can find the corresponding links to the instructions for the most popular browsers under the „Cookies“ section.

Legal basis

The use of Google Analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (Consent) this is the legal basis for the processing of personal data, as it may occur during collection by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors in order to technically and economically improve our offer. With the help of Google Analytics, we identify website errors, can detect attacks, and improve economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use Google Analytics to the extent that you have given consent.

Google processes data from you, among other places, in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google commits to maintaining the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we have provided you with the most important information about the data processing of Google Analytics. If you want to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.

If you want to learn more about data processing, use the Google Privacy Policy at https://policies.google.com/privacy?hl=de.

Data Processing Agreement (DPA) Google Analytics

We have concluded a Data Processing Agreement (DPA) with Google in accordance with Article 28 of the General Data Protection Regulation (GDPR). What exactly a DPA is and especially what must be included in a DPA can be read in our general section „Data Processing Agreement (DPA)“.

This contract is legally required because Google processes personal data on our behalf. It clarifies that Google may only process data received from us according to our instructions and must comply with the GDPR. The link to the data processing terms can be found at https://business.safety.google/intl/de/adsprocessorterms/

Google Analytics reports on demographic characteristics and interests

We have enabled advertising features in Google Analytics. The reports on demographic characteristics and interests include information on age, gender, and interests. This allows us to get a better picture of our users – without being able to assign this data to individual persons. You can learn more about the advertising features at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.

You can stop the use of activities and information from your Google account under “Ad Settings” at https://adssettings.google.com/authenticated via checkbox.

Google Analytics e-commerce tracking

We also use the e-commerce tracking of the web analytics tool Google Analytics for our website. This allows us to analyze very precisely how you and all our other customers interact with our website. E-commerce tracking mainly concerns purchasing behavior. Based on the data obtained, we can tailor and optimize our service to your wishes and expectations. Likewise, we can use our online advertising measures more targeted so that our ads are only shown to people who are interested in our products or services. E-commerce tracking records, for example, which orders were placed, how long it took you to purchase the product, what the average order value is, or how high the shipping costs are. All this data can be recorded and stored under a specific ID.

Google Analytics Google Signals Privacy Policy

We have activated Google Signals in Google Analytics. This updates the existing Google Analytics features (advertising reports, remarketing, cross-device reports, and reports on interests and demographic characteristics) to receive aggregated and anonymized data from you, provided you have allowed personalized ads in your Google account.

The special thing about this is that it is cross-device tracking. This means your data can be analyzed across devices. By activating Google Signals, data is collected and linked to the Google account. For example, Google can recognize if you view a product on our website via a smartphone and only later purchase the product via a laptop. Thanks to the activation of Google Signals, we can start cross-device remarketing campaigns that would otherwise not be possible in this form. Remarketing means that we can also show you our offer on other websites.

In Google Analytics, additional visitor data such as location, search history, YouTube history, and data about your actions on our website are also collected through Google Signals. This allows us to receive better advertising reports and more useful information about your interests and demographic characteristics from Google. These include your age, the language you speak, where you live, or your gender. Furthermore, social criteria such as your profession, marital status, or income are also included. All these characteristics help Google Analytics define groups of people or target audiences.

The reports also help us better assess your behavior, wishes, and interests. This allows us to optimize and tailor our services and products for you. These data expire by default after 26 months. Please note that this data collection only takes place if you have allowed personalized advertising in your Google account. These are always aggregated and anonymous data and never data of individual persons. You can manage or delete this data in your Google account.

Google Analytics in consent mode

Depending on your consent, personal data about you is processed by Google Analytics in the so-called consent mode. You can choose whether to agree to Google Analytics cookies or not. This also determines which data Google Analytics is allowed to process about you. The collected data is mainly used to measure user behavior on the website, deliver targeted advertising, and provide us with web analytics reports. Usually, you consent to data processing by Google via a cookie consent tool. If you do not consent to data processing, only aggregated data is collected and processed. This means data cannot be assigned to individual users and thus no user profile is created about you. You can also consent only to statistical measurement. In this case, no personal data is processed and consequently not used for advertising or advertising success measurement.

Google Analytics IP anonymization

We have implemented IP address anonymization from Google Analytics on this website. This feature was developed by Google so that this website can comply with applicable data protection regulations and recommendations of local data protection authorities when they prohibit storing the full IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data occurs.

More information about IP anonymization can be found at https://support.google.com/analytics/answer/2763052?hl=de.

Google Analytics without cookies

We do use Google Analytics (GA) on our website, but without setting cookies in your browser. We have already explained what cookies are above, hopefully the explanations are still remembered. Briefly and specifically regarding GA: Cookies store helpful data for GA in your browser on your device. By not using cookies, no personal data is stored in such cookies that would create a user profile. Google Analytics can perform various measurements and web analyses, but the data collected for this is only stored on Google servers, and your privacy is significantly more respected and protected.

Google Tag Manager privacy policy

Google Tag Manager privacy policy summary
👥 Data subjects: visitors of the website
🤝 Purpose: Organization of individual tracking tools
📓 Processed data: The Google Tag Manager itself does not store any data. The data is collected by the tags of the web analytics tools used.
📅 Storage duration: depends on the web analytics tool used
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is the Google Tag Manager?

For our website, we use the Google Tag Manager from the company Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. This Tag Manager is one of many helpful marketing products from Google. Through the Google Tag Manager, we can centrally integrate and manage code snippets from various tracking tools that we use on our website.

In this privacy policy, we want to explain to you in more detail what the Google Tag Manager does, why we use it, and in what form data is processed.

The Google Tag Manager is an organizational tool that allows us to centrally embed and manage website tags via a user interface. Tags are small code snippets that, for example, record (track) your activities on our website. For this purpose, JavaScript code snippets are inserted into the source code of our page. The tags often come from Google-internal products like Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. Such tags perform different tasks. They can collect browser data, feed marketing tools with data, embed buttons, set cookies, and also track users across multiple websites.

Why do we use the Google Tag Manager for our website?

As the saying goes: Organization is half the battle! And this of course also applies to the maintenance of our website. To design our website as well as possible for you and all people interested in our products and services, we need various tracking tools such as Google Analytics. The data collected by these tools shows us what interests you most, where we can improve our services, and which people we should still show our offers to. And for this tracking to work, we need to embed the corresponding JavaScript codes into our website. Basically, we could embed each code snippet of the individual tracking tools separately into our source code. However, this requires quite a bit of time and it is easy to lose track. That's why we use the Google Tag Manager. We can easily embed the necessary scripts and manage them from one place. In addition, the Google Tag Manager offers an easy-to-use user interface and no programming skills are required. This way, we manage to keep order in our tag jungle.

What data is stored by the Google Tag Manager?

The Tag Manager itself is a domain that does not set cookies and does not store any data. It acts as a mere „manager“ of the implemented tags. The data is collected by the individual tags of the different web analytics tools. The data is basically passed through the Google Tag Manager to the individual tracking tools and not stored.

It looks completely different, however, with the embedded tags of various web analytics tools, such as Google Analytics. Depending on the analytics tool, various data about your web behavior is usually collected, stored, and processed with the help of cookies. For this, please read our privacy texts on the individual analysis and tracking tools that we use on our website.

In the account settings of the Tag Manager, we have allowed Google to receive anonymized data from us. However, this only concerns the use and utilization of our Tag Manager and not your data stored via the code sections. We enable Google and others to receive selected data in anonymized form. Thus, we consent to the anonymous transmission of our website data. Which summarized and anonymous data is exactly forwarded, we could not find out despite extensive research. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking compares one's own results with those of competitors. Based on the collected information, processes can be optimized.

How long and where is the data stored?

When Google stores data, this data is stored on Google's own servers. The servers are distributed worldwide. Most of them are located in America. Under https://datacenters.google/ you can read exactly where the Google servers are located.

How long the individual tracking tools store data about you can be found in our individual privacy texts for the respective tools.

How can I delete my data or prevent data storage?

The Google Tag Manager itself does not set cookies but manages tags from various tracking websites. In our privacy texts on the individual tracking tools, you will find detailed information on how you can delete or manage your data.

Please note that when using this tool, data about you may also be stored and processed outside the EU. Most third countries (including the USA) are currently considered unsafe under European data protection law. Data may therefore not simply be transferred, stored, and processed in unsafe third countries unless there are appropriate guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Legal basis

The use of the Google Tag Manager requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (Consent) this is the legal basis for the processing of personal data, as it may occur during collection by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our offer technically and economically. With the help of the Google Tag Manager, we can improve our economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). Nevertheless, we only use the Google Tag Manager to the extent that you have given consent.

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

If you want to learn more about Google Tag Manager, we recommend the FAQs at https://support.google.com/tagmanager/?hl=de#topic=3441530.

Which data Google generally collects and what they use this data for can be found at https://policies.google.com/privacy?hl=de read up.

Data Processing Agreement (DPA) Google Tag Manager

This contract is legally required because Google processes personal data on our behalf. It clarifies that Google may only process data they receive from us according to our instructions and must comply with the GDPR. The link to the Data Processing Agreement (DPA) can be found at https://business.safety.google/adsprocessorterms/.

Rank Math Privacy Policy

We use the SEO plugin Rank Math. The service provider is the Indian company One.com India Private Limited, Office No. 2, Floor 5, Tower A, Building 9 DLF Cyber City Complex, Phase III, Haryana, Gurgaon, India.

Data may be transferred to India through the service. We point out that India is a third country not subject to the scope of the GDPR. This may result in limitations regarding data protection and data security.

Learn more about the data processed through the use of Rank Math in the privacy policy at https://rankmath.com/privacy-policy/.

Social Media Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Presentation and optimization of our service, contact with visitors, interested parties, etc., advertising
📓 Processed data: Data such as phone numbers, email addresses, contact details, user behavior data, information about your device and your IP address.
More details can be found with the respective social media tool used.
📅 Storage duration: depends on the social media platforms used
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is social media?

In addition to our website, we are also active on various social media platforms. Data from users can be processed so that we can specifically address users interested in us via social networks. Furthermore, elements of a social media platform can also be directly embedded in our website. This is the case, for example, when you click a so-called social button on our website and are directly redirected to our social media presence. So-called social media are websites and apps through which registered members produce content, exchange content openly or in certain groups, and network with other members.

Why do we use social media?

For years, social media platforms have been the place where people communicate and connect online. With our social media presences, we can bring our products and services closer to interested parties. The social media elements embedded on our website help you to quickly and easily switch to our social media content.

The data stored and processed through your use of a social media channel primarily serves the purpose of conducting web analyses. The goal of these analyses is to develop more precise and personalized marketing and advertising strategies. Depending on your behavior on a social media platform, suitable conclusions about your interests can be drawn using the evaluated data, and so-called user profiles can be created. This also enables the platforms to present you with tailored advertisements. Usually, cookies are set in your browser for this purpose, which store data about your usage behavior.

We generally assume that we remain responsible under data protection law even if we use services of a social media platform. However, the European Court of Justice has ruled that in certain cases the operator of the social media platform can be jointly responsible with us within the meaning of Art. 26 GDPR. If this is the case, we will point this out separately and work on the basis of a corresponding agreement. The essence of the agreement is then reproduced below for the affected platform.

Please note that when using social media platforms or our embedded elements, data about you may also be processed outside the European Union, as many social media channels, such as Facebook or Twitter, are American companies. As a result, you may no longer be able to easily assert or enforce your rights regarding your personal data.

What data is processed?

Which data exactly is stored and processed depends on the respective provider of the social media platform. But usually, it involves data such as phone numbers, email addresses, data you enter into a contact form, user data such as which buttons you click, whom you like or follow, when you visited which pages, information about your device, and your IP address. Most of this data is stored in cookies. Especially if you have a profile on the visited social media channel and are logged in, data can be linked to your profile.

All data collected via a social media platform is also stored on the providers' servers. Thus, only the providers have access to the data and can provide you with the appropriate information or make changes.

If you want to know exactly which data is stored and processed by the social media providers and how you can object to the data processing, you should carefully read the respective company's privacy policy. If you have questions about data storage and processing or want to assert corresponding rights, we recommend contacting the provider directly.

Duration of data processing

We inform you about the duration of data processing further below, provided we have additional information. For example, the social media platform Facebook stores data until it is no longer needed for its own purposes. Customer data that is matched with its own user data is deleted within two days. In general, we process personal data only as long as it is absolutely necessary for providing our services and products. If, as in the case of accounting, it is legally required, this storage period may be exceeded.

Right to object

You also have the right and the possibility at any time to revoke your consent to the use of cookies or third parties such as embedded social media elements. This can be done either via our cookie management tool or other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling, or deleting cookies in your browser.

Since cookies may be used in social media tools, we also recommend our general privacy policy on cookies. To find out exactly which data about you is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

If you have consented to data about you being processed and stored through embedded social media elements, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Basically, your data is also processed on the basis of our legitimate interest if consent is given (Art. 6 para. 1 lit. f GDPR) stored and processed for quick and good communication with you or other customers and business partners. However, we only use the tools to the extent that you have given consent. Most social media platforms also use cookies in your browser to store data. Therefore, we recommend that you read our privacy text about cookies carefully and review the privacy policy or cookie policies of the respective service provider.

Information about specific social media platforms can be found – if available – in the following sections.

Facebook Comments Privacy Policy

We also use the Facebook Comments plugin. The service provider is the American company Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

Facebook processes data from you, among other places, in the USA. Facebook or Meta Platforms is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Facebook uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Facebook commits to maintaining the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Facebook data processing terms, which refer to the Standard Contractual Clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.

If you want to learn more about Facebook's data protection, we recommend the company's own data policies at https://www.facebook.com/privacy/policy.

Facebook Privacy Policy

Facebook Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Optimization of our service
📓 Processed Data: Data such as customer data, user behavior data, information about your device, and your IP address.
More details can be found further below in the privacy policy.
📅 Storage Duration: until the data is no longer useful for Facebook's purposes
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What are Facebook Tools?

We use selected tools from Facebook on our website. Facebook is a social media network of the company Meta Platforms Inc., or for the European region, the company Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With the help of these tools, we can offer you and people interested in our products and services the best possible offer.

If data about you is collected and transmitted via our embedded Facebook elements or via our Facebook page (fan page), both we and Facebook Ireland Ltd. are responsible. Facebook alone is responsible for the further processing of this data. Our joint obligations are also anchored in a publicly accessible agreement under https://www.facebook.com/legal/controller_addendum . This agreement states, for example, that we must clearly inform you about the use of Facebook tools on our site. Furthermore, we are also responsible for ensuring that the tools are integrated into our website in a data protection-compliant manner. Facebook, on the other hand, is responsible, for example, for the data security of the Facebook products. If you have any questions about data collection and data processing by Facebook, you can contact the company directly. If you direct the question to us, we are obliged to forward it to Facebook.

Below we provide an overview of the various Facebook tools, which data is sent to Facebook, and how you can delete this data.

Among many other products, Facebook also offers the so-called “Facebook Business Tools.” This is the official term used by Facebook. Since the term is hardly known, we have decided to simply call them Facebook tools. These include, among others:

Facebook Pixel
social plugins (such as the „Like“ or „Share“ button)
Facebook Login
Account Kit
APIs (Application Programming Interface)
SDKs (collection of programming tools)
platform integrations
plugins
codes
specifications
Documentations
Technologies and Services

Through these tools, Facebook expands services and has the ability to obtain information about user activities outside of Facebook.

Why do we use Facebook tools on our website?

We only want to show our services and products to people who are truly interested. With the help of advertising (Facebook Ads), we can reach exactly these people. However, to show users appropriate ads, Facebook needs information about people's wishes and needs. This provides the company with information about user behavior (and contact details) on our website. As a result, Facebook collects better user data and can display suitable ads about our products or services to interested people. The tools thus enable tailored advertising campaigns on Facebook.

Data about your behavior on our website is called „event data“ by Facebook. These are also used for measurement and analysis services. Facebook can create „campaign reports“ on the effectiveness of our advertising campaigns on our behalf. Furthermore, analyses give us better insight into how you use our services, website, or products. With some of these tools, we optimize your user experience on our website. For example, you can share content from our site directly on Facebook using social plugins.

What data is stored by Facebook tools?

By using individual Facebook tools, personal data (customer data) can be sent to Facebook. Depending on the tools used, customer data such as name, address, phone number, and IP address may be transmitted.

Facebook uses this information to match the data with the data it has about you (if you are a Facebook member). Before customer data is transmitted to Facebook, a so-called „hashing“ process takes place. This means that an arbitrarily large data set is transformed into a string of characters. This also serves to encrypt data.

In addition to contact data, „event data“ is also transmitted. „Event data“ refers to information we receive about you on our website. For example, which subpages you visit or which products you buy from us. Facebook does not share the received information with third parties (such as advertisers), unless the company has explicit permission or is legally obligated to do so. „Event data“ can also be linked with contact data. This allows Facebook to offer better personalized advertising. After the aforementioned matching process, Facebook deletes the contact data again.

To be able to deliver optimized advertisements, Facebook only uses event data when it has been combined with other data (collected by Facebook in other ways). Facebook also uses this event data for security, protection, development, and research purposes. Many of these data are transferred to Facebook via cookies. Cookies are small text files used to store data or information in browsers. Depending on the tools used and whether you are a Facebook member, different numbers of cookies are placed in your browser. In the descriptions of the individual Facebook tools, we go into more detail about specific Facebook cookies. General information about the use of Facebook cookies can also be found at https://www.facebook.com/policies/cookies.

How long and where is the data stored?

Basically, Facebook stores data until it is no longer needed for its own services and Facebook products. Facebook has servers distributed worldwide where its data is stored. However, customer data is deleted within 48 hours after being matched with its own user data.

How can I delete my data or prevent data storage?

According to the General Data Protection Regulation, you have the right to access, correct, transfer, and delete your data.

A complete deletion of the data only occurs if you completely delete your Facebook account. And this is how you delete your Facebook account:

1) Click on Settings on the right side of Facebook.

2) Then click on „Your Facebook Information“ in the left column.

3) Now click on “Deactivation and Deletion.”.

4) Now select „Delete Account“ and then click on „Continue and Delete Account.“

5) Now enter your password, click „Continue,“ and then „Delete Account.“

The storage of data that Facebook receives through our site occurs, among other things, via cookies (e.g., with social plugins). In your browser, you can disable, delete, or manage individual or all cookies. Depending on which browser you use, this works in different ways. Under the „Cookies“ section, you will find the corresponding links to the respective instructions for the most well-known browsers.

If you generally do not want any cookies, you can configure your browser to always inform you when a cookie is about to be set. This way, you can decide for each individual cookie whether to allow it or not.

Legal basis

If you have consented to data about you being processed and stored through embedded Facebook tools, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Basically, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in quick and good communication with you or other customers and business partners. However, we only use the tools to the extent that you have given consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy text about cookies and review Facebook's privacy policy or cookie policies.

The Facebook data processing terms, which refer to the Standard Contractual Clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.

We hope we have provided you with the most important information about the use and data processing by the Facebook tools. If you want to learn more about how Facebook uses your data, we recommend the data policies at https://www.facebook.com/privacy/policy/.

We have integrated the convenient Facebook Login on our site. This way, you can easily log in with your Facebook account without having to create another user account. If you decide to register via Facebook Login, you will be redirected to the social media network Facebook. There, the login is done using your Facebook user data. Through this login procedure, data about you or your user behavior is stored and transmitted to Facebook.

To store the data, Facebook uses various cookies. Below we show you the most important cookies that are set in your browser or already exist when you log in to our site via Facebook Login:

Name: fr
Value: 0jieyh4c2GnlufEJ9..Bde09j…1.0.Bde09j
Purpose: This cookie is used to ensure the social plugin on our website functions optimally.
Expiration date: after 3 months

Name: datr
Value: 4Jh7XUA2113233122SEmPsSfzCOO4JFFl
Purpose: Facebook sets the “datr” cookie when a web browser accesses facebook.com, and the cookie helps identify login activities and protect users.
Expiration date: after 2 years

Name: _js_datr
Value: deleted
Purpose: This session cookie is set by Facebook for tracking purposes, even if you do not have a Facebook account or are logged out.
Expiration date: after session ends

Note: The listed cookies are only a small selection of the cookies available to Facebook. Other cookies include, for example, _fbp, sb, or wd. A complete list is not possible as Facebook has a wide variety of cookies and uses them variably.

The Facebook login offers you a fast and easy registration process on one hand, and on the other hand, it allows us to share data with Facebook. This enables us to better tailor our offerings and promotions to your interests and needs. Data we receive from Facebook in this way are public data such as

Your Facebook name
Your profile picture
a registered email address
Friend lists
Button information (e.g., „Like“ button)
Date of birth
Language
Place of residence

In return, we provide Facebook with information about your activities on our website. This includes, among other things, information about the device you use, which subpages you visit on our site, or which products you have purchased from us.

By using Facebook Login, you consent to the data processing. You can revoke this agreement at any time. If you want to learn more about data processing by Facebook, we recommend the Facebook privacy policy at https://www.facebook.com/privacy/policy/.

If you are logged into Facebook, you can change your ad settings under https://www.facebook.com/help/109378269482053 yourself.

Facebook Lookalike Audience Privacy Policy

We also use the advertising tool Facebook Lookalike Audience. The service provider is the American company Meta Platforms Inc. For the European region, the company Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is responsible.

In addition, Meta Platforms uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are template contracts provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Meta Platforms commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Facebook data processing terms, which refer to the Standard Contractual Clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.

You can learn more about the data processed through the use of Facebook Lookalike Audience in the privacy policy on https://www.facebook.com/about/privacy.

Facebook Social Plugins Privacy Policy

Our website includes so-called social plugins from the company Meta Platforms Inc. You can recognize these buttons by the classic Facebook logo, such as the „Like“ button (the hand with the raised thumb) or by a clear „Facebook Plugin“ label. A social plugin is a small part of Facebook integrated into our site. Each plugin has its own function. The most commonly used functions are the well-known “Like” and “Share” buttons.

The following social plugins are offered by Facebook:

“Save” button
“Like” button, share, send and quote
Page plugin
Comments
Messenger plugin
Embedded posts and video player
Groups plugin

On https://developers.facebook.com/docs/plugins get more information on how the individual plugins are used. We use the social plugins on the one hand to offer you a better user experience on our site, and on the other hand because Facebook can optimize our advertisements through them.

If you have a Facebook account or https://www.facebook.com/ have visited before, Facebook has already set at least one cookie in your browser. In this case, your browser sends information to Facebook via this cookie as soon as you visit our site or interact with social plugins (e.g. the „Like“ button).

The received information is deleted or anonymized within 90 days. According to Facebook, this data includes your IP address, which website you visited, the date, the time, and other information related to your browser.

To prevent Facebook from collecting a lot of data during your visit to our website and linking it with Facebook data, you must log out of Facebook during the website visit.

If you are not logged into Facebook or do not have a Facebook account, your browser sends less information to Facebook because you have fewer Facebook cookies. Nevertheless, data such as your IP address or which website you visit can be transmitted to Facebook. We would like to explicitly point out that we do not know the exact contents of the data. However, we try to inform you as well as possible about the data processing according to our current knowledge. How Facebook uses the data can also be found in the company's data policy at https://www.facebook.com/about/privacy/update read up.

The following cookies are set in your browser at a minimum when you visit a website with Facebook social plugins:

Name: dpr
Value: no information
Purpose: This cookie is used to ensure that the social plugins on our website function properly.
Expiration date: after session ends

Name: fr
Value: 0jieyh4113233122c2GnlufEJ9..Bde09j…1.0.Bde09j
Purpose: This cookie is also necessary for the plugins to function properly.
Expiration date:: after 3 months

Note: These cookies were set after a test, even if you are not a Facebook member.

If you are logged into Facebook, you can change your ad settings under https://www.facebook.com/help/109378269482053 change yourself. If you are not a Facebook user, you can on https://www.youronlinechoices.com/de/praferenzmanagement/?tid=113233122 basically manage your usage-based online advertising. There you have the option to deactivate or activate providers.

If you want to learn more about Facebook's data protection, we recommend the company's own data policies at https://www.facebook.com/privacy/policy/.

Facebook Fanpage Privacy Policy

We also have a Facebook fan page for our website. The service provider is the American company Meta Platforms Inc. For the European area, the company Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is responsible.

The Facebook data processing terms, which refer to the Standard Contractual Clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.

Learn more about the data processed through the use of Facebook in the Privacy Policy on https://www.facebook.com/about/privacy.

Instagram Privacy Policy

Instagram Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Optimization of our service
📓 Processed data: Data such as user behavior data, information about your device, and your IP address.
More details can be found further below in the privacy policy.
📅 Storage duration: until Instagram no longer needs the data for its purposes
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is Instagram?

We have integrated Instagram features on our website. Instagram is a social media platform of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Since 2012, Instagram has been a subsidiary of Meta Platforms Inc. and is part of the Facebook products. Embedding Instagram content on our website is called embedding. This allows us to show you content such as buttons, photos, or videos from Instagram directly on our website. When you visit pages of our web presence that have integrated an Instagram feature, data is transmitted, stored, and processed by Instagram. Instagram uses the same systems and technologies as Facebook. Therefore, your data is processed across all Facebook companies.

Below we want to give you a more detailed insight into why Instagram collects data, what data is involved, and how you can largely control the data processing. Since Instagram belongs to Meta Platforms Inc., we derive our information on the one hand from the Instagram policies, but also from the Meta privacy policies themselves.

Instagram is one of the most well-known social media networks worldwide. Instagram combines the advantages of a blog with the advantages of audiovisual platforms like YouTube or Vimeo. You can upload photos and short videos on „Insta“ (as many users casually call the platform), edit them with various filters, and also share them on other social networks. And if you don’t want to be active yourself, you can also just follow other interesting users.

Why do we use Instagram on our website?

Instagram is the social media platform that has really taken off in recent years. And of course, we have also responded to this boom. We want you to feel as comfortable as possible on our website. Therefore, a varied presentation of our content is a matter of course for us. Through the embedded Instagram features, we can enrich our content with helpful, funny, or exciting content from the Instagram world. Since Instagram is a subsidiary of Facebook, the collected data can also be useful for personalized advertising on Facebook. This way, our ads only reach people who are truly interested in our products or services.

Instagram also uses the collected data for measurement and analysis purposes. We receive aggregated statistics and thus gain more insight into your wishes and interests. It is important to mention that these reports do not personally identify you.

What data is stored by Instagram?

When you come across one of our pages that have integrated Instagram features (such as Instagram images or plugins), your browser automatically connects to Instagram's servers. Data is sent, stored, and processed by Instagram. This happens regardless of whether you have an Instagram account or not. This includes information about our website, your computer, purchases made, advertisements you see, and how you use our offer. Furthermore, the date and time of your interaction with Instagram are also stored. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.

Facebook distinguishes between customer data and event data. We assume this is the case with Instagram as well. Customer data includes, for example, name, address, phone number, and IP address. These customer data are only transmitted to Instagram after they have been „hashed.“ Hashing means that a data record is transformed into a string of characters. This allows contact data to be encrypted. In addition, the above-mentioned „event data“ are also transmitted. Facebook – and consequently Instagram – understands „event data“ as data about your user behavior. It may also happen that contact data is combined with event data. The collected contact data is matched with the data Instagram already has about you.

Through small text files (cookies), which are usually set in your browser, the collected data is transmitted to Facebook. Depending on the Instagram features used and whether you have an Instagram account yourself, different amounts of data are stored.

We assume that data processing on Instagram works the same way as on Facebook. This means: if you have an Instagram account or www.instagram.com have visited, Instagram has at least set a cookie. If this is the case, your browser sends information to Instagram via the cookie as soon as you interact with an Instagram feature. These data are deleted or anonymized no later than 90 days (after matching). Although we have studied Instagram's data processing intensively, we cannot say exactly which data Instagram collects and stores.

Below we show you cookies that are set in your browser at least when you click on an Instagram feature (such as a button or an Insta image). In our test, we assume that you do not have an Instagram account. If you are logged into Instagram, of course, many more cookies are set in your browser.

These cookies were used in our test:

Name: csrftoken
Value: “”
Purpose: This cookie is very likely set for security reasons to prevent request forgery. However, we could not find out more precisely.
Expiration date: after one year

Name: mid
Value: “”
Purpose: Instagram sets this cookie to optimize its own services and offerings on and off Instagram. The cookie assigns a unique user ID.
Expiration date: after the end of the session

Name: fbsr_113233122124024
Value: no information
Purpose: This cookie stores the login request for users of the Instagram app.
Expiration date: after the end of the session

Name: rur
Value: ATN
Purpose: This is an Instagram cookie that ensures functionality on Instagram.
Expiration date: after the end of the session

Name: urlgen
Value: “{”194.96.75.33”: 1901}:1iEtYv:Y833k2_UjKvXgYe113233122”
Purpose: This cookie is used for Instagram's marketing purposes.
Expiration date: after the end of the session

Note: We cannot claim completeness here. Which cookies are set in the individual case depends on the embedded functions and your use of Instagram.

How long and where is the data stored?

Instagram shares the received information between the Facebook companies with external partners and with people you connect with worldwide. Data processing is carried out in compliance with its own data policy. Your data is distributed on Facebook servers worldwide, partly for security reasons. Most of these servers are located in the USA.

How can I delete my data or prevent data storage?

Thanks to the General Data Protection Regulation, you have the right to access, portability, correction, and deletion of your data. You can manage your data in the Instagram settings. If you want to completely delete your data on Instagram, you must permanently delete your Instagram account.

And this is how the deletion of the Instagram account works:

First, open the Instagram app. On your profile page, scroll down and click on „Help Center.“ Now you will be directed to the company's website. On the website, click on „Managing Your Account“ and then on „Delete Your Account.“.

If you delete your account entirely, Instagram deletes posts such as your photos and status updates. Information that other people have shared about you does not belong to your account and will therefore not be deleted.

As mentioned above, Instagram primarily stores your data via cookies. You can manage, disable, or delete these cookies in your browser. Depending on your browser, management always works a little differently. Under the „Cookies“ section, you will find the corresponding links to the instructions for the most well-known browsers.

You can also generally set up your browser so that you are always informed when a cookie is about to be set. Then you can always decide individually whether you want to allow the cookie or not.

Legal basis

If you have consented to data about you being processed and stored through embedded social media elements, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Basically, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) stored and processed for quick and good communication with you or other customers and business partners. However, we only use the embedded social media elements to the extent that you have given consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you read our privacy text about cookies carefully and view the privacy policy or cookie policies of the respective service provider.

Instagram processes data from you, among other places, also in the USA. Instagram or Meta Platforms is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Instagram uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are template contracts provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Instagram commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

We have tried to provide you with the most important information about data processing by Instagram. On https://privacycenter.instagram.com/policy/ you can further explore Instagram's data policies.

Instagram Lookalike Audience Privacy Policy

We also use the advertising tool Instagram Lookalike Audience. The service provider is the American company Meta Platforms Inc. For the European region, the responsible company is Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

Instagram or Meta processes data from you, among other places, also in the USA. Facebook or Meta Platforms is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

The Instagram or Meta data processing terms, which refer to the Standard Contractual Clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.

Learn more about the data processed through the use of Instagram Lookalike Audience in the privacy policy at https://privacycenter.instagram.com/policy/.

Cookie Consent Management Platform Summary
👥 Affected: Website visitors
🤝 Purpose: Obtaining and managing consent for certain cookies and thus the use of certain tools
📓 Processed data: Data for managing the configured cookie settings such as IP address, time of consent, type of consent, individual consents. More details can be found in the respective tool used.
📅 Storage duration: Depends on the tool used, one must expect periods of several years
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is a Cookie Consent Management Platform?

We use a Consent Management Platform (CMP) software on our website that facilitates the correct and secure handling of scripts and cookies for us and you. The software automatically creates a cookie popup, scans and controls all scripts and cookies, provides a legally required cookie consent for you, and helps us and you keep track of all cookies. Most cookie consent management tools identify and categorize all existing cookies. As a website visitor, you then decide which scripts and cookies you allow or do not allow. The following graphic illustrates the relationship between browser, web server, and CMP.

Why do we use a cookie management tool?

Our goal is to provide you with the best possible transparency in the area of data protection. Additionally, we are legally obligated to do so. We want to inform you as well as possible about all tools and all cookies that can store and process data from you. It is also your right to decide which cookies you accept and which you do not. To grant you this right, we must first know exactly which cookies have landed on our website. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we are aware of all cookies and can provide you with GDPR-compliant information about them. Through the consent system, you can then accept or reject cookies.

What data is processed?

Within the framework of our cookie management tool, you can manage each individual cookie yourself and have full control over the storage and processing of your data. Your consent declaration is stored so that we do not have to ask you every time you visit our website and so that we can prove your consent if legally required. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the storage duration of your cookie consent varies. Usually, this data (such as pseudonymous user ID, time of consent, detailed information about cookie categories or tools, browser, device information) is stored for up to two years.

Duration of data processing

We inform you about the duration of data processing further below, provided we have more information about it. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. Data stored in cookies is stored for varying lengths of time. Some cookies are deleted as soon as you leave the website, others can be stored in your browser for several years. The exact duration of data processing depends on the tool used; usually, you should expect a storage period of several years. In the respective privacy policies of the individual providers, you will usually find detailed information about the duration of data processing.

Right to object

You also have the right and the possibility at any time to revoke your consent to the use of cookies. This can be done either via our cookie management tool or through other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Information about specific cookie management tools can be found – if available – in the following sections.

Legal basis

If you consent to cookies, personal data about you will be processed and stored via these cookies. If we are allowed to use cookies through your Consent (Article 6 para. 1 lit. a GDPR), this consent also serves as the legal basis for the use of cookies or the processing of your data. To be able to manage cookie consent and enable you to give consent, a cookie consent management platform software is used. The use of this software allows us to operate the website in a legally compliant manner efficiently, which is a legitimate interest (Article 6 para. 1 lit. f GDPR).

BorlabsCookie Privacy Policy

We use BorlabsCookie on our website, which is among other things a tool for storing your cookie consent. The service provider is the German company Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany.

You can learn more about the data processed through the use of BorlabsCookie in the privacy policy at https://de.borlabs.io/datenschutz/.

Audio & Video Introduction

Audio & Video Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Optimization of our service
📓 Processed Data: Data such as contact details, user behavior data, information about your device, and your IP address may be stored.
More details can be found below in the respective privacy texts.
📅 Storage Duration: Data is generally stored as long as it is necessary for the service purpose
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What are audio and video elements?

We have integrated audio and video elements on our website so that you can watch videos or listen to music/podcasts directly on our website. The content is provided by service providers. All content is therefore also retrieved from the respective servers of the providers.

These are embedded functional elements from platforms such as YouTube, Vimeo, or Spotify. The use of these portals is usually free of charge, but paid content may also be published. With the help of these embedded elements, you can listen to or watch the respective content on our website.

When you use audio or video elements on our website, personal data about you may also be transmitted, processed, and stored by the service providers.

Why do we use audio & video elements on our website?

Of course, we want to provide you with the best offer on our website. And we are aware that content is no longer conveyed merely through text and static images. Instead of simply giving you a link to a video, we offer you audio and video formats directly on our website that are entertaining or informative and ideally both. This expands our service and makes it easier for you to access interesting content. Thus, in addition to our texts and images, we also offer video and/or audio content.

What data is stored by audio & video elements?

When you visit a page on our website that, for example, has an embedded video, your server connects to the service provider's server. Data from you is also transmitted to the third party and stored there. Some data is collected and stored regardless of whether you have an account with the third party or not. This usually includes your IP address, browser type, operating system, and other general information about your device. Furthermore, most providers also collect information about your web activity. This includes session duration, bounce rate, which button you clicked, or through which website you use the service. All this information is usually stored via cookies or pixel tags (also called web beacons). Pseudonymized data is usually stored in cookies in your browser. You can always find out exactly which data is stored and processed in the privacy policy of the respective provider.

Duration of data processing

How long the data is stored on the third-party servers can be found either further down in the privacy text of the respective tool or in the provider's privacy policy. Basically, personal data is only processed as long as it is absolutely necessary for providing our services or products. This generally also applies to third parties. Usually, you can assume that certain data is stored on the third-party servers for several years. Data can be stored for different lengths of time, especially in cookies. Some cookies are deleted as soon as you leave the website, while others can be stored in your browser for several years.

Right to object

You also have the right and the possibility at any time to revoke your consent to the use of cookies or third parties. This works either via our cookie management tool or other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling, or deleting cookies in your browser. The legality of the processing until the revocation remains unaffected.

Since the embedded audio and video functions on our site usually also use cookies, you should also read our general privacy policy about cookies. In the privacy policies of the respective third parties, you can learn more about the handling and storage of your data.

Legal basis

If you have consented to data about you being processed and stored through embedded audio and video elements, this consent serves as the legal basis for data processing. (Art. 6 para. 1 lit. a GDPR). Basically, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) stored and processed for fast and good communication with you or other customers and business partners. However, we only use the embedded audio and video elements to the extent that you have given consent.

Vimeo Privacy Policy

Vimeo Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Optimization of our service
📓 Processed Data: Data such as contact details, user behavior data, information about your device, and your IP address may be stored.
You can find more details about this further down in this privacy policy.
📅 Storage Duration: Data is generally stored as long as it is necessary for the service purpose
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is Vimeo?

We also use videos from the company Vimeo on our website. The video portal is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. With the help of a plug-in, we can display interesting video material directly on our website. Certain data from you may be transmitted to Vimeo in the process. In this privacy policy, we show you which data is involved, why we use Vimeo, and how you can manage or prevent your data or the data transmission.

Vimeo is a video platform founded in 2004 that has enabled streaming of videos in HD quality since 2007. Since 2015, streaming in 4k Ultra HD has also been possible. The use of the portal is free of charge, but paid content can also be published. Compared to the market leader YouTube, Vimeo primarily focuses on high-quality content. The portal offers many artistic contents such as music videos and short films on the one hand, and informative documentaries on a wide range of topics on the other.

Why do we use Vimeo on our website?

The goal of our web presence is to provide you with the best possible content. And to make it as easily accessible as possible. Only when we have achieved this are we satisfied with our service. The video service Vimeo helps us achieve this goal. Vimeo gives us the opportunity to present high-quality content directly on our website. Instead of just giving you a link to an interesting video, you can watch the video right here with us. This expands our service and makes it easier for you to access interesting content. Thus, in addition to our texts and images, we also offer video content.

What data is stored on Vimeo?

When you visit a page on our website that has an embedded Vimeo video, your browser connects to Vimeo's servers. This results in a data transfer. This data is collected, stored, and processed on Vimeo's servers. Regardless of whether you have a Vimeo account or not, Vimeo collects data about you. This includes your IP address, technical information about your browser type, your operating system, or very basic device information. Furthermore, Vimeo stores information about which website you use the Vimeo service from and what actions (web activities) you perform on our website. These web activities include, for example, session duration, bounce rate, or which button you clicked on our website with the integrated Vimeo function. Vimeo can track and store these actions using cookies and similar technologies.

If you are logged in as a registered member on Vimeo, usually more data can be collected because more cookies may already have been set in your browser. In addition, your actions on our website are directly linked to your Vimeo account. To prevent this, you must log out of Vimeo while “surfing” on our website.

Below we show you cookies that are set by Vimeo when you are on a website with an integrated Vimeo function. This list does not claim to be complete and assumes that you do not have a Vimeo account.

Name: player
Value: “”
Purpose: This cookie stores your settings before you play an embedded Vimeo video. This way, the next time you watch a Vimeo video, you will have your preferred settings again.
Expiration date: after one year

Name: vuid
Value: pl1046149876.614422590113233122-4
Purpose: This cookie collects information about your actions on websites that have an embedded Vimeo video.
Expiration date: after 2 years

Note: These two cookies are always set as soon as you are on a website with an embedded Vimeo video. If you watch the video and click the button to, for example, “share” or “like” the video, additional cookies are set. These also include third-party cookies such as _ga or _gat_UA-76641-8 from Google Analytics or _fbp from Facebook. Which cookies are set here exactly depends on your interaction with the video.

The following list shows a selection of possible cookies that are set when you interact with the Vimeo video:

Name: _abexps
Value: %5B%5D
Purpose: This Vimeo cookie helps Vimeo remember the settings you have made. This can be, for example, a preset language, a region, or a username. In general, the cookie stores data about how you use Vimeo.
Expiration date: after one year

Name: continuous_play_v3
Value: 1
Purpose: This cookie is a first-party cookie from Vimeo. The cookie collects information about how you use the Vimeo service. For example, the cookie stores when you pause or resume a video.
Expiration date: after one year

Name: _ga
Value: GA1.2.1522249635.1578401280113233122-7
Purpose: This cookie is a third-party cookie from Google. By default, analytics.js uses the _ga cookie to store the user ID. Essentially, it is used to distinguish website visitors.
Expiration date: after 2 years

Name: _gcl_au
Value: 1.1.770887836.1578401279113233122-3
Purpose: This third-party cookie from Google AdSense is used to improve the efficiency of advertisements on websites.
Expiration date: after 3 months

Name: _fbp
Value: fb.1.1578401280585.310434968
Purpose: This is a Facebook cookie. This cookie is used to display advertisements or advertising products from Facebook or other advertisers.
Expiration date: after 3 months

Vimeo uses this data, among other things, to improve its own service, to communicate with you, and to set its own targeted advertising measures. Vimeo emphasizes on its website that only first-party cookies (i.e., cookies from Vimeo itself) are used for embedded videos as long as you do not interact with the video.

How long and where is the data stored?

Vimeo is headquartered in White Plains in the state of New York (USA). However, the services are offered worldwide. The company uses computer systems, databases, and servers in the USA and also in other countries. Your data may therefore also be stored and processed on servers in America. The data remains stored at Vimeo as long as the company has an economic reason for the storage. Then the data is deleted or anonymized.

How can I delete my data or prevent data storage?

You always have the option to manage cookies in your browser according to your preferences. For example, if you do not want Vimeo to set cookies and thus collect information about you, you can delete or disable cookies in your browser settings at any time. This works a bit differently depending on the browser. Please note that after disabling/deleting cookies, various functions may no longer be fully available. Under the section „Cookies“ you will find the corresponding links to the respective instructions of the most well-known browsers.

If you are a registered Vimeo member, you can also manage the cookies used in the settings at Vimeo.

Legal basis

If you have consented to data about you being processed and stored by embedded Vimeo elements, this consent serves as the legal basis for data processing. (Art. 6 para. 1 lit. a GDPR). Basically, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) stored and processed for fast and good communication with you or other customers and business partners. However, we only use the embedded Vimeo elements to the extent that you have given consent. Vimeo also sets cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy text about cookies and view the privacy policy or cookie policies of the respective service provider.

Vimeo processes data about you, among other places, also in the USA. We point out that according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks for the legality and security of data processing.

As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or data transfer thereto, Vimeo uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to third countries (such as the USA) and stored there. Through these clauses, Vimeo commits to complying with the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

More information about the standard contractual clauses at Vimeo can be found at https://vimeo.com/privacy#international_data_transfers_and_certain_user_rights.

Learn more about the use of cookies at Vimeo at https://vimeo.com/cookie_policy, information about data protection at Vimeo can be found at https://vimeo.com/privacy read up.

YouTube Data API Privacy Policy

We also use the YouTube feature YouTube Data API. The service provider is the American company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes data from you, among other places, in the USA. YouTube or Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

Learn more about the data processed through the use of the YouTube Data API in the Privacy Policy at https://policies.google.com/privacy?hl=de.

YouTube Privacy Policy

YouTube Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Optimization of our service
📓 Processed Data: Data such as contact details, user behavior data, information about your device, and your IP address may be stored.
You can find more details about this further down in this privacy policy.
📅 Storage Duration: Data is generally stored as long as it is necessary for the service purpose
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is YouTube?

We have embedded YouTube videos on our website. This allows us to present interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that has an embedded YouTube video, your browser automatically connects to the servers of YouTube or Google. Various data is transmitted depending on settings. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing within the European area.

Below we want to explain in more detail which data is processed, why we have integrated YouTube videos, and how you can manage or delete your data.

On YouTube, users can watch, rate, comment on, and upload videos for free. Over the past years, YouTube has become one of the most important social media channels worldwide. To display videos on our website, YouTube provides a code snippet that we have embedded on our site.

Why do we use YouTube videos on our website?

YouTube is the video platform with the most visitors and the best content. We strive to offer you the best possible user experience on our website. And of course, interesting videos must not be missing. With the help of our embedded videos, we provide you with additional helpful content alongside our texts and images. Additionally, our website is easier to find on the Google search engine thanks to the embedded videos. Even when we run ads via Google Ads, Google can – thanks to the collected data – show these ads only to people who are really interested in our offers.

What data is stored by YouTube?

As soon as you visit one of our pages that has an embedded YouTube video, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information like browser type, screen resolution, or your internet provider. Other data can include contact details, any ratings, sharing content via social media, or adding to your favorites on YouTube.

If you are not logged into a Google account or a YouTube account, Google stores data with a unique identifier linked to your device, browser, or app. For example, your preferred language setting is retained. But many interaction data cannot be stored because fewer cookies are set.

In the following list, we show cookies that were set in a test in the browser. On the one hand, we show cookies that are set without a logged-in YouTube account. On the other hand, we show cookies that are set with a logged-in account. The list cannot claim to be complete because user data always depends on interactions on YouTube.

Name: YSC
Value: b9-CV6ojI5Y113233122-1
Purpose: This cookie registers a unique ID to store statistics of the viewed video.
Expiration date: after session ends

Name: PREF
Value: f1=50000000
Purpose: This cookie also registers your unique ID. Google receives statistics via PREF on how you use YouTube videos on our website.
Expiration date: after 8 months

Name: GPS
Value: 1
Purpose: This cookie registers your unique ID on mobile devices to track the GPS location.
Expiration date: after 30 minutes

Name: VISITOR_INFO1_LIVE
Value: 95Chz8bagyU
Purpose: This cookie attempts to estimate the user's bandwidth on our websites (with embedded YouTube video).
Expiration date: after 8 months

Additional cookies set when you are logged into your YouTube account:

Name: APISID
Value: zILlvClZSkqGsSwI/AU1aZI6HY7113233122-
Purpose: This cookie is used to create a profile about your interests. The data is used for personalized advertisements.
Expiration date: after 2 years

Name: CONSENT
Value: YES+AT.de+20150628-20-0
Purpose: The cookie stores the consent status of a user for the use of various Google services. CONSENT also serves security purposes to verify users and protect user data from unauthorized attacks.
Expiration date: after 19 years

Name: HSID
Value: AcRwpgUik9Dveht0I
Purpose: This cookie is used to create a profile of your interests. This data helps to display personalized advertising.
Expiration date: after 2 years

Name: LOGIN_INFO
Value: AFmmF2swRQIhALl6aL…
Purpose: This cookie stores information about your login data.
Expiration date: after 2 years

Name: SAPISID
Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM
Purpose: This cookie works by uniquely identifying your browser and device. It is used to create a profile of your interests.
Expiration date: after 2 years

Name: SID
Value: oQfNKjAsI113233122-
Purpose: This cookie stores your Google account ID and your last login time in digitally signed and encrypted form.
Expiration date: after 2 years

Name: SIDCC
Value: AN0-TYuqub2JOcDTyL
Purpose: This cookie stores information about how you use the website and which advertisements you may have seen before visiting our site.
Expiration date: after 3 months

How long and where is the data stored?

The data that YouTube receives and processes from you is stored on Google's servers. Most of these servers are located in America. Under https://datacenters.google/ you can see exactly where Google's data centers are located. Your data is distributed across the servers. This makes the data faster to access and better protected against manipulation.

Google stores the collected data for different lengths of time. Some data you can delete at any time, others are automatically deleted after a limited time, and still others are stored by Google for a longer period. Some data (such as items from „My Activity“, photos or documents, products) stored in your Google account remain stored until you delete them. Even if you are not signed in to a Google account, you can delete some data linked to your device, browser, or app.

How can I delete my data or prevent data storage?

Basically, you can manually delete data in your Google account. With the automatic deletion feature for location and activity data introduced in 2019, information is stored and then deleted depending on your choice – either after 3 or 18 months.

Whether or not you have a Google account, you can configure your browser to delete or disable cookies from Google. Depending on which browser you use, this works in different ways. Under the „Cookies“ section, you will find the corresponding links to the instructions for the most well-known browsers.

Legal basis

If you have consented to data being processed and stored by embedded YouTube elements, this consent serves as the legal basis for data processing. (Art. 6 para. 1 lit. a GDPR). Basically, your data is also stored and processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) stored and processed in fast and good communication with you or other customers and business partners. However, we only use the embedded YouTube elements if you have given consent. YouTube also sets cookies in your browser to store data. Therefore, we recommend that you read our privacy text about cookies carefully and review the privacy policy or cookie guidelines of the respective service provider.

YouTube processes data from you, among other things, also in the USA. YouTube or Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

Since YouTube is a subsidiary of Google, there is a joint privacy policy. If you want to learn more about how your data is handled, we recommend the privacy policy at https://policies.google.com/privacy?hl=de.

YouTube Subscribe Button Privacy Policy

We have integrated the YouTube Subscribe Button on our website. You usually recognize the button by the classic YouTube logo. The logo shows the words „Subscribe“ or „YouTube“ in white letters on a red background and the white „Play symbol“ to the left. However, the button can also be displayed in a different design.

Our YouTube channel offers you funny, interesting, or exciting videos from time to time. With the embedded „Subscribe Button,“ you can subscribe to our channel directly from our website without having to visit the YouTube website separately. We want to make access to our comprehensive content as easy as possible for you. Please note that YouTube can store and process data from you as a result.

If you see an embedded subscription button on our site, YouTube – according to Google – sets at least one cookie. This cookie stores your IP address and our URL. YouTube can also learn information about your browser, your approximate location, and your preset language. In our test, the following four cookies were set without being logged into YouTube:

Name: YSC
Value: b9-CV6ojI5113233122Y
Purpose: This cookie registers a unique ID to store statistics of the viewed video.
Expiration date: after session ends

Name: GPS
Value: 1
Purpose: This cookie registers your unique ID on mobile devices to track the GPS location.
Expiration date: after 30 minutes

Name: VISITOR_INFO1_LIVE
Value: 11323312295Chz8bagyU
Purpose: This cookie attempts to estimate the user's bandwidth on our websites (with embedded YouTube video).
Expiration date: after 8 months

Note: These cookies were set after a test and cannot claim to be complete.

If you are logged into your YouTube account, YouTube can store many of your actions/interactions on our website using cookies and associate them with your YouTube account. This allows YouTube to obtain information such as how long you browse our site, which browser type you use, your preferred screen resolution, or which actions you perform.

YouTube uses this data partly to improve its own services and offerings, and partly to provide analyses and statistics for advertisers (who use Google Ads).

YouTube IFrame Player Privacy Policy

We also use the YouTube IFrame Player to embed videos on our website. The service provider is the American company Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

Learn more about the data processed through the use of the YouTube IFrame Player in the Privacy Policy at https://policies.google.com/privacy?hl=de.

We also use the YouTube video widget on our website. The service provider is the American company Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

Learn more about the data processed through the use of the YouTube video widget in the Privacy Policy at https://policies.google.com/privacy?hl=de.

Online Map Services Introduction

Online Map Services Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Improving the user experience
📓 Processed data: Which data is processed depends heavily on the services used. Usually, this includes IP address, location data, search items, and/or technical data. More details can be found in the respective tools used.
📅 Storage duration: depends on the tools used
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What are online map services?

We also use online map services as an extended service for our website. Google Maps is probably the service you know best, but there are also other providers specializing in creating digital maps. Such services allow locations, route plans, or other geographic information to be displayed directly on our website. With an integrated map service, you no longer have to leave our website to, for example, view the route to a location. To make the online map work on our website, map sections are embedded using HTML code. The services can then display street maps, the earth's surface, or aerial and satellite images. When you use the embedded map offer, data is also transmitted to and stored by the tool used. This data may also include personal data.

Why do we use online map services on our website?

In general terms, our goal is to offer you a pleasant time on our website. And your time is only pleasant if you can easily find your way around our website and quickly and easily find all the information you need. Therefore, we thought that an online map system could be a significant improvement to our service on the website. Without leaving our website, you can easily view route descriptions, locations, or sights with the help of the map system. It is also very practical that you can see at a glance where our company headquarters are, so you can find us quickly and safely. You see, there are simply many advantages, and we clearly consider online map services on our website as part of our customer service.

What data is stored by online map services?

When you open a page on our website that has an online map function integrated, personal data can be transmitted to the respective service and stored there. Usually, this is your IP address, which can also be used to determine your approximate location. In addition to the IP address, data such as entered search terms as well as longitude and latitude coordinates are stored. For example, if you enter an address for route planning, this data is also stored. The data is not stored with us but on the servers of the integrated tools. You can imagine it roughly like this: although you are on our website, when you interact with a map service, this interaction actually takes place on their website. To ensure the service functions properly, at least one cookie is usually set in your browser. For example, Google Maps also uses cookies to record user behavior and thus optimize its service and display personalized advertising. You can learn more about cookies in our „Cookies“ section.

How long and where is the data stored?

Each online map service processes different user data. If we have further information, we inform you about the duration of data processing below in the respective sections for the individual tools. Basically, personal data is only stored as long as necessary to provide the service. For example, Google Maps stores certain data for a fixed period, while other data you must delete yourself. For Mapbox, the IP address is stored for 30 days and then deleted. As you can see, each tool stores data for different lengths of time. Therefore, we recommend that you carefully review the privacy policies of the tools used.

The providers also use cookies to store data about your user behavior with the map service. More general information about cookies can be found in our „Cookies“ section, but you can also learn in the privacy texts of the individual providers which cookies may be used. However, these are usually only exemplary lists and are not complete.

Right to object

You always have the option and the right to access your personal data and to object to the use and processing. You can also revoke your consent given to us at any time. Usually, this works easiest via the cookie consent tool. However, there are also other opt-out tools that you can use. Possible cookies set by the providers used can also be managed, deleted, or deactivated by you with just a few clicks. However, it may then happen that some functions of the service no longer work as usual. How you manage cookies in your browser also depends on the browser you use. In the „Cookies“ section, you will also find links to the instructions for the most important browsers.

Legal basis

If you have consented to the use of an online map service, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data as it may occur when captured by an online map service.

We also have a legitimate interest in using an online map service to optimize our service on our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). However, we only use an online map service if you have given consent. We want to emphasize this point here again.

Information about specific online map services can be found – if available – in the following sections.

Google Maps Privacy Policy

Google Maps Privacy Policy Summary
👥 Data subjects: visitors of the website
🤝 Purpose: Optimization of our service
📓 Processed data: Data such as entered search terms, your IP address, and also latitude and longitude coordinates.
You can find more details about this further down in this privacy policy.
📅 Storage duration: depends on the stored data
⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is Google Maps?

We use Google Maps from Google Inc. on our website. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google Maps, we can better show you locations and thus tailor our service to your needs. By using Google Maps, data is transmitted to Google and stored on Google's servers. Here we want to explain in more detail what Google Maps is, why we use this Google service, what data is stored, and how you can prevent this.

Google Maps is an internet map service from Google. With Google Maps, you can search online via a PC, tablet, or app for exact locations of cities, sights, accommodations, or businesses. If companies are represented on Google My Business, additional information about the company is displayed alongside the location. To show directions, map sections of a location can be embedded into a website using HTML code. Google Maps displays the earth's surface as a street map or as an aerial or satellite image. Thanks to Street View images and high-quality satellite images, very precise representations are possible.

Why do we use Google Maps on our website?

All our efforts on this page aim to provide you with a useful and meaningful time on our website. By integrating Google Maps, we can provide you with the most important information about various locations. You can see at a glance where our company headquarters are located. The directions always show you the best or fastest way to us. You can retrieve the route for travel by car, public transport, on foot, or by bicycle. For us, providing Google Maps is part of our customer service.

What data is stored by Google Maps?

In order for Google Maps to fully offer its service, the company must collect and store data from you. This includes, among other things, the search terms entered, your IP address, and also the latitude and longitude coordinates. If you use the route planner function, the entered starting address is also stored. However, this data storage takes place on the Google Maps websites. We can only inform you about this but have no influence on it. Since we have integrated Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google primarily uses this data to optimize its own services and to provide individual, personalized advertising for you.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID
Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ113233122-5
Purpose: NID is used by Google to tailor advertisements to your Google search. With the help of the cookie, Google „remembers“ your most frequently entered search queries or your previous interaction with ads. This way, you always receive customized advertisements. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.
Expiration date: after 6 months

Note: We cannot guarantee the completeness of the information about the stored data. Especially when using cookies, changes can never be ruled out. To identify the NID cookie, a dedicated test page was created where only Google Maps was embedded.

How long and where is the data stored?

Google's servers are located in data centers around the world. However, most servers are in America. For this reason, your data is increasingly stored in the USA. Here you can read exactly where the Google data centers are located: https://datacenters.google/

Google distributes the data across different storage media. This makes the data faster to access and better protected against potential manipulation attempts. Each data center also has special emergency programs. For example, if there are problems with Google hardware or a natural disaster disables the servers, the data remains quite securely protected.

Google stores some data for a fixed period. For other data, Google only offers the option to delete it manually. Furthermore, the company anonymizes information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 or 18 months.

How can I delete my data or prevent data storage?

With the automatic deletion function for location and activity data introduced in 2019, information about location and web/app activity is stored for either 3 or 18 months depending on your choice and then deleted. Additionally, these data can be manually deleted from the history at any time via the Google account. If you want to completely prevent location tracking, you must pause the „Web & App Activity“ section in your Google account. Click on „Data & Personalization“ and then on the „Activity Controls“ option. Here you can turn activities on or off.

In your browser, you can also deactivate, delete, or manage individual cookies. Depending on which browser you use, this always works a bit differently. Under the „Cookies“ section, you will find the corresponding links to the instructions for the most well-known browsers.

Legal basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (Consent) this consent constitutes the legal basis for the processing of personal data as it may occur during data collection by Google Maps.

On our part, there is also a legitimate interest in using Google Maps to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use Google Maps to the extent that you have given your consent.

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

If you want to learn more about Google's data processing, we recommend the company's own privacy policy at https://policies.google.com/privacy?hl=de.

Explanation of used terms

We always strive to write our privacy policy as clearly and understandably as possible. However, this is not always easy, especially with technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical expressions (such as cookies, IP address). However, we do not want to use these without explanation. Below you will find an alphabetical list of important terms used that we may not have sufficiently addressed in the previous privacy policy. If these terms are taken from the GDPR and are definitions, we will also cite the GDPR texts here and, if necessary, add our own explanations.

Processor

Definition according to Article 4 of the GDPR

For the purposes of this regulation, the term means:

„Processor“ a natural or legal person, authority, agency or other body which processes personal data on behalf of the controller;

Explanation: As a company and website owner, we are responsible for all data we process from you. In addition to the controllers, there may also be so-called processors. This includes any company or person who processes personal data on our behalf. Processors can therefore be, besides service providers like tax consultants, for example hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

Consent

Definition according to Article 4 of the GDPR

For the purposes of this regulation, the term means:

„Consent“ the data subject's any voluntary, specific, informed and unambiguous indication of their wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them;

Explanation: Usually, such consent on websites is given via a cookie consent tool. You probably know this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to or consent to data processing. Usually, you can also make individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data of yours may be processed. In principle, consent can of course also be given in writing, i.e., not via a tool.

Health data

Definition according to Article 4 of the GDPR

For the purposes of this regulation, the term means:

„Health data“ personal data related to the physical or mental health of a natural person, including the provision of health services, from which information about their health status is derived;

Explanation: Health data therefore includes all stored information concerning your own health. Often, these are data also recorded in a patient file. This includes, for example, which medications you use, X-rays, the entire medical history, or usually also the vaccination status.

Personal data

Definition according to Article 4 of the GDPR

For the purposes of this regulation, the term means:

„personal data“ alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person (im Folgenden „betroffene Person“) beziehen; als identifizierbar wird eine natürliche Person angesehen, die direkt oder indirekt, insbesondere mittels Zuordnung zu einer Kennung wie einem Namen, zu einer Kennnummer, zu Standortdaten, zu einer Online-Kennung oder zu einem oder mehreren besonderen Merkmalen, die Ausdruck der physischen, physiologischen, genetischen, psychischen, wirtschaftlichen, kulturellen oder sozialen Identität dieser natürlichen Person sind, identifiziert werden kann;

Explanation: Personenbezogene Daten sind also all jene Daten, die Sie als Person identifizieren können. Das sind in der Regel Daten wie etwa:

Name
Adresse
Email address
Post-Anschrift
Phone number
Date of birth
Kennnummern wie Sozialversicherungsnummer, Steueridentifikationsnummer, Personalausweisnummer oder Matrikelnummer
Bankdaten wie Kontonummer, Kreditinformationen, Kontostände uvm.

Laut Europäischem Gerichtshof (EuGH) zählt auch Ihre IP-Adresse zu den personenbezogenen Daten. IT-Experten können anhand Ihrer IP-Adresse zumindest den ungefähren Standort Ihres Geräts und in weiterer Folge Sie als Anschlussinhabers feststellen. Daher benötigt auch das Speichern einer IP-Adresse eine Rechtsgrundlage im Sinne der DSGVO. Es gibt auch noch sogenannte „besondere Kategorien“ der personenbezogenen Daten, die auch besonders schützenswert sind. Dazu zählen:

rassische und ethnische Herkunft
politische Meinungen
religiöse bzw. weltanschauliche Überzeugungen
die Gewerkschaftszugehörigkeit
genetische Daten wie beispielsweise Daten, die aus Blut- oder Speichelproben entnommen werden
biometrische Daten (das sind Informationen zu psychischen, körperlichen oder verhaltenstypischen Merkmalen, die eine Person identifizieren können).
Health data
Daten zur sexuellen Orientierung oder zum Sexualleben

Profiling

Definition according to Article 4 of the GDPR

For the purposes of this regulation, the term means:

„Profiling“ jede Art der automatisierten Verarbeitung personenbezogener Daten, die darin besteht, dass diese personenbezogenen Daten verwendet werden, um bestimmte persönliche Aspekte, die sich auf eine natürliche Person beziehen, zu bewerten, insbesondere um Aspekte bezüglich Arbeitsleistung, wirtschaftliche Lage, Gesundheit, persönliche Vorlieben, Interessen, Zuverlässigkeit, Verhalten, Aufenthaltsort oder Ortswechsel dieser natürlichen Person zu analysieren oder vorherzusagen;

Explanation: Beim Profiling werden verschiedene Informationen über eine Person zusammengetragen, um daraus mehr über diese Person zu erfahren. Im Webbereich wird Profiling häufig für Werbezwecke oder auch für Bonitätsprüfungen angewandt. Web- bzw. Werbeanalyseprogramme sammeln zum Beispiel Daten über Ihre Verhalten und Ihre Interessen auf einer Website. Daraus ergibt sich ein spezielles Userprofil, mit dessen Hilfe Werbung gezielt an eine Zielgruppe ausgespielt werden kann.

Controller

Definition according to Article 4 of the GDPR

For the purposes of this regulation, the term means:

„Verantwortlicher“ die natürliche oder juristische Person, Behörde, Einrichtung oder andere Stelle, die allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung von personenbezogenen Daten entscheidet; sind die Zwecke und Mittel dieser Verarbeitung durch das Unionsrecht oder das Recht der Mitgliedstaaten vorgegeben, so kann der Verantwortliche beziehungsweise können die bestimmten Kriterien seiner Benennung nach dem Unionsrecht oder dem Recht der Mitgliedstaaten vorgesehen werden;

Explanation: In unserem Fall sind wir für die Verarbeitung Ihrer personenbezogenen Daten verantwortlich und folglich der “Verantwortliche”. Wenn wir erhobene Daten zur Verarbeitung an andere Dienstleister weitergeben, sind diese “Auftragsverarbeiter”. Dafür muss ein “Auftragsverarbeitungsvertrag (AVV)” unterzeichnet werden.

Verarbeitung

Definition according to Article 4 of the GDPR

For the purposes of this regulation, the term means:

„Verarbeitung“ jeden mit oder ohne Hilfe automatisierter Verfahren ausgeführten Vorgang oder jede solche Vorgangsreihe im Zusammenhang mit personenbezogenen Daten wie das Erheben, das Erfassen, die Organisation, das Ordnen, die Speicherung, die Anpassung oder Veränderung, das Auslesen, das Abfragen, die Verwendung, die Offenlegung durch Übermittlung, Verbreitung oder eine andere Form der Bereitstellung, den Abgleich oder die Verknüpfung, die Einschränkung, das Löschen oder die Vernichtung;

Note: Wenn wir in unserer Datenschutzerklärung von Verarbeitung sprechen, meinen wir damit jegliche Art von Datenverarbeitung. Dazu zählt, wie oben in der originalen DSGVO-Erklärung erwähnt, nicht nur das Erheben sondern auch das Speichern und Verarbeiten von Daten.

Privacy Policy

Introduction and Overview

Scope of application

Legal bases

Contact details of the responsible party

Storage duration

Rights under the General Data Protection Regulation

Austrian Data Protection Authority

Data Processing Agreement (DPA)

Who are processors?

Content of a data processing agreement

Cookies

What are cookies?

What types of cookies are there?

Purpose of processing via cookies

What data is processed?

Storage duration of cookies

Right to object – how can I delete cookies?

Legal basis

Contact form

What is a contact form?

Why do we use a contact form?

What data is processed?

How long will the data be stored?

Legal basis

Customer data

What are customer data?

Why do we process customer data?

What data is processed?

How long will the data be stored?

Legal basis

Webhosting Introduction

What is web hosting?

Why do we process personal data?

What data is processed?

How long is data stored?

Legal basis

Web hosting provider external privacy policy

Website Builder Systems Introduction

What are website builder systems?

Why do we use website builder systems for our website?

What data is stored by a modular system?

How long and where is the data stored?

Right to object

Legal basis

Elementor Privacy Policy

Web Analytics Introduction

What is Web Analytics?

Why do we operate Web Analytics?

What data is processed?

Duration of data processing

Right to object

Legal basis

Google Analytics Privacy Policy

What is Google Analytics?

Why do we use Google Analytics on our website?

What data is stored by Google Analytics?

How long and where is the data stored?

How can I delete my data or prevent data storage?

Legal basis

Data Processing Agreement (DPA) Google Analytics

Google Analytics reports on demographic characteristics and interests

Google Analytics e-commerce tracking

Google Analytics Google Signals Privacy Policy

Google Analytics in consent mode

Google Analytics IP anonymization

Google Analytics without cookies

Google Tag Manager privacy policy

What is the Google Tag Manager?

Why do we use the Google Tag Manager for our website?

What data is stored by the Google Tag Manager?

How long and where is the data stored?

How can I delete my data or prevent data storage?

Legal basis

Data Processing Agreement (DPA) Google Tag Manager

Rank Math Privacy Policy

Social Media Introduction

What is social media?

Why do we use social media?

What data is processed?