Security and protection of your personal data
We consider it our primary responsibility to maintain the confidentiality of the information you provide
to preserve personal data and to protect it from unauthorized access. That's why
we apply the utmost care and state-of-the-art security standards to ensure maximum protection
To ensure your personal data.
As a company under private law, we are subject to the provisions of the European
General Data Protection Regulation (GDPR) and the provisions of the Federal Data Protection Act
(BDSG). We have taken technical and organizational measures to ensure that
the data protection regulations both from us and from our external parties
Service providers are observed.
Definitions
The legislature requires that personal data be processed in a lawful manner, in good faith and
Belief and processed in a way that is understandable for the person concerned
("Legality, Good Faith Processing, Transparency"). To ensure this,
we inform you about the individual legal definitions, which are also used in this
Privacy policy are used:
1. Personal data
"Personal data" is any information that relates to an identified or
refer to an identifiable natural person (hereinafter "data subject"); as identifiable
a natural person is considered to be directly or indirectly, in particular by means of assignment to
an identifier such as a name, an identification number, location data, an online
Identifier or one or more special features that can be identified
Expression of the physical, physiological, genetic, psychological, economic, cultural
or social identity of this natural person.
2. Processing
“Processing” is any operation or process carried out with or without the aid of automated processes
any such series of operations in connection with personal data such as the collection, the
Capturing, organizing, arranging, storing, adapting or changing, that
Reading, querying, use, disclosure by transmission, dissemination or
another form of provision, comparison or linking, restriction, the
Extinguishing or annihilation.
3. Restriction of processing
"Restriction of processing" is the marking of stored personal data with
with the aim of restricting their future processing.
4. File system
"File system" is any structured collection of personal data that is sorted according to specific
Criteria are accessible, regardless of whether this collection is centralized, decentralized or according to
is managed according to functional or geographical aspects.
5. Responsible
"Responsible" is a natural or legal person, authority, institution or other
Body that alone or jointly with others about the purposes and means of processing
personal data decides; are the purposes and means of this processing by the
Union law or the law of the member states, the person responsible can
or the specific criteria for its nomination under Union law or the
Law of the member states.
6. Processors
"Processor" is a natural or legal person, authority, agency or other
Body that processes personal data on behalf of the person responsible.
7. Recipient
"Recipient" is a natural or legal person, authority, institution or other body,
to which personal data is disclosed, regardless of whether it is a
Third party acts or not. Authorities who, as part of a specific investigation,
the Union law or the law of the member states possibly personal data
received, but are not considered to be recipients; the processing of this data by the named
Authorities takes place in accordance with the applicable data protection regulations in accordance with the purposes of
Processing.
8. Third
“Third party” is a natural or legal person, authority, institution or other body, except
the data subject, the person responsible, the processor and the persons under
the direct responsibility of the controller or the processor are authorized,
process the personal data.
9. Consent
A "consent" of the data subject is always voluntary for the specific case in
informed and unambiguous declaration of intent in the form of a declaration
or any other unequivocal affirmative act with which the data subject to
understand there that they are dealing with the processing of personal data relating to them
agrees.
10. Profiling
"Profiling" is any type of automated processing of personal data contained therein
insists that this personal data is used to identify certain personal
To evaluate aspects that relate to a natural person, in particular aspects
regarding work performance, economic situation, health, personal preferences, interests,
Reliability, behavior, whereabouts or change of location of this natural person
analyze or predict.
11. Pseudonymization
"Pseudonymization" is the processing of personal data in such a way that the
personal data without the use of additional information is no longer one
specific data subjects can be assigned, provided that these additional
Information is kept separately and technical and organizational measures
subject to ensuring that the personal data is not an identified or
can be assigned to an identifiable natural person.
12. Lawfulness of processing
The processing of personal data is only lawful if a
Legal basis exists. According to Article 6 Paragraph 1 lit.
- f GDPR in particular:
a. The data subject has their consent to the processing of the data concerning them
personal data given for one or more specific purposes;
b. The processing is necessary for the performance of a contract to which the data subject is a party
is, or necessary for the implementation of pre-contractual measures, which at the request of the
affected person;
c. The processing is necessary to fulfill a legal obligation that the
Controller is subject to;
d. The processing is necessary for the vital interests of the data subject or a
to protect another natural person;
e. The processing is necessary for the performance of a task in the public
Interest lies or takes place in the exercise of official authority, which is transferred to the person responsible
became;
f. the processing is to safeguard the legitimate interests of the person responsible or one of them
Third parties required, unless the interests or fundamental rights and freedoms of the
data subjects who require the protection of personal data predominate, in particular
if the person concerned is a child.
13. Information about the collection of personal data
(1) In the following we inform you about the collection of personal data when using our
Website. Personal data are e.g. B. Name, address, email addresses, gender.
(2) If you contact us by email or via our support portal, the information provided by
Data communicated to you (your e-mail address, possibly your name and your telephone number) from us
saved to answer your questions. The data arising in this context
we delete after the storage is no longer required or the processing becomes
restricted if there are statutory retention requirements.
14. Collection of personal data when you visit our website
When using the website for information purposes only, i.e. if you do not register or contact us
otherwise transmit information, we only collect the personal data that your
Browser transmitted to our server. If you want to look at our website, we collect
the following data that is technically necessary for us to display our website to you
and to ensure stability and security (the legal basis is Art. 6 Para. 1 S. 1 lit.
GDPR):
• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred in each case
• Website from which the request came
• Browser
• Operating system and its interface
• Language and version of the browser software
15. Use of cookies
(1) In addition to the data mentioned above, cookies are generated when you use our website
Saved on your computer. Cookies are small text files that are stored on your
Hard drive assigned to the browser you are using and through which
the place that sets the cookie receives certain information. Cookies cannot
Run programs or transfer viruses to your computer. They serve that
To make the Internet offer more user-friendly and effective overall.
(2) This website uses the following types of cookies, their scope and functionality in
The following are explained:
• Transient cookies (see a.)
• Persistent cookies (see b.).
a. Transient cookies are automatically deleted when you close the browser. These include
especially the session cookies. These save a so-called session ID, with which
Assign various requests from your browser to the joint session. This can
Your computer will be recognized when you return to our website. The session
Cookies are deleted when you log out or close the browser.
b. Persistent cookies are automatically deleted after a specified period, which depends on the
can differentiate between cookies. You can use the cookies in the security settings of your
Delete browser at any time.
c. You can configure your browser settings according to your wishes and e.g. B. the
Reject acceptance of third-party cookies or all cookies. So-called "Third Party Cookies" are
Cookies that were set by a third party, therefore not by the actual website
that you are currently in. We point out that by deactivating
Cookies may not be able to use all functions of this website.
d. We use cookies in order to be able to identify you for subsequent visits if you have one
Have an account with us. Otherwise you would have to log in again for each visit.
16. Further functions and offers on our website
(1) In addition to the purely informational use of our website, we offer various services
that you can use if you are interested. To do this, you usually need additional personal
Specify data that we use to provide the respective service and for which the previously
The data processing principles mentioned above apply.
(2) In some cases, we use external service providers to process your data. These were
carefully selected and commissioned by us, are bound by our instructions and will be
regularly checked.
(3) Furthermore, we can pass on your personal data to third parties if
Participation in campaigns, competitions, conclusion of contracts or similar services from us
offered together with partners. You will receive more information on this when you specify
Your personal data or below in the description of the offer.
(4) Insofar as our service providers or partners are based in a country outside of the European Union
Economic areas (EEA), we will inform you of the consequences of this in the
Description of the offer.
17. Registration on our website
(1) If you want to become a customer with us, it is necessary for the conclusion of the contract that you
Enter your personal data, which we need to process the contract. For the
The mandatory information required to process the contracts is marked separately, further information is
voluntarily. We process the data you provide to process the contract. In addition
we can pass on your payment details to our bank. The legal basis for this is Art. 6 Para.
1 p. 1 lit.b GDPR.
(2) Due to commercial and tax law requirements, we are obliged to keep your address, payment and
To save order data for a period of ten years. However, we take after two
Years ago a restriction on processing, d. H. Your data will only be used to comply with
legal obligations.
(3) To prevent unauthorized access by third parties to your personal data, in particular
Financial data, the order process is encrypted using TLS technology.
18. Newsletter
(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our
inform about current interesting offers. The advertised goods and services are in
named in the declaration of consent.
(2) We use the so-called double opt-in procedure to register for our newsletter.
This means that after you have registered, we will send you an email to the specified email address
in which we ask you to confirm that you wish to receive the newsletter.
If you do not confirm your registration within 24 hours, your information will be
blocked and automatically deleted after a month. We also save yours
IP addresses used and times of registration and confirmation. Purpose of the procedure
is to prove your registration and possibly a possible misuse of your personal data
to be able to enlighten.
(3) The only mandatory information for sending the newsletter is your email address. The information
further, separately marked data is voluntary and is used to personalize you
to be able to address. After your confirmation, we will save your email address for the purpose of
Sending the newsletter. The legal basis is Article 6, Paragraph 1, Sentence 1, Letter a of the GDPR.
(4) You can revoke your consent to the sending of the newsletter at any time and the
Unsubscribe Newsletter. You can revoke your consent by clicking on in every newsletter email
provided link, via this form on the website, by e-mail to
[email protected]
or by sending a message to the contact details given in the legal notice.
19. contact form
(1) Description and scope of data processing
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and saved. These data are:
Name, email address, subject, your message
At the time the message is sent, the following data is also stored:
(1) Email address
(2) name
(3) Date and time
(4) content
For the processing of the data, your consent is obtained as part of the sending process and reference is made to this data protection declaration.
Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be saved.
In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.
20. children
Our offer is generally aimed at people who have reached the age of 18.
Anyone under the age of 18 should not do so without the consent of their parents or guardians
transmit personal data to us.
21. Rights of the data subject
(1) Revocation of consent
If the processing of personal data is based on consent given,
you have the right to withdraw your consent at any time. By revoking the
Consent is the legality of the consent given up to the point of revocation
Processing not affected.
You can contact us at any time to exercise your right of withdrawal.
(2) Right to confirmation
You have the right to request confirmation from the person responsible as to whether we have you
process relevant personal data. You can request confirmation at any time under
Request the contact details mentioned above.
(3) Right to information
If personal data is processed, you can obtain information about it at any time
request personal data and the following information:
a. the purposes of the processing;
b. the categories of personal data that are processed;
c. the recipients or categories of recipients to whom the personal data is received
have been disclosed or are still being disclosed, especially for recipients in
Third countries or international organizations;
d. if possible, the planned duration for which the personal data will be stored, or,
if this is not possible, the criteria for determining that duration;
e. the existence of a right to correction or deletion of the data concerning you
personal data or restriction of processing by the person responsible
or a right to object to this processing;
f. the right to lodge a complaint with a supervisory authority;
G. if the personal data are not collected from the data subject, all
available information on the origin of the data;
H. the existence of automated decision-making including profiling in accordance with Article
22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about
the logic involved and the scope and intended effects of such
Processing for the data subject.
Will personal data be sent to a third country or an international organization
transmitted, you have the right to be informed about the appropriate guarantees in accordance with Article 46 GDPR in
To be informed in connection with the transmission. We will provide a copy of the
personal data that are the subject of the processing. For everyone else
Copies that you request, we can make a reasonable charge on the basis of the person
Request administrative costs. If you submit the application electronically, the information is in
to make it available in a common electronic format, unless otherwise specified.
The right to receive a copy in accordance with paragraph 3 may affect the rights and freedoms of other persons
not affect.
(4) Right to rectification
You have the right to request us to correct any incorrect data relating to you without delay
to request personal data. Taking into account the purposes of the processing
you have the right to have incomplete personal data completed - also
by means of a supplementary declaration.
(5) Right to deletion ("right to be forgotten")
You have the right to demand that the person responsible give you the relevant
personal data are deleted immediately, and we are obliged to
to delete personal data immediately if one of the following reasons applies:
a. The personal data are for the purposes for which they were collected or otherwise
processed are no longer necessary.
b. The data subject withdraws their consent on which the processing is based in accordance with Article 6
Paragraph 1 letter a or Article 9 paragraph 2 letter a GDPR was based, and one is missing
any other legal basis for the processing.
c. The data subject objects to the GDPR in accordance with Article 21 (1) of the GDPR
Processing and there are no overriding legitimate reasons for processing,
or the data subject objects to the GDPR in accordance with Article 21 (2) of the GDPR
Processing a.
d. The personal data was processed unlawfully.
e. The deletion of personal data is necessary to fulfill a legal obligation
required by Union law or the law of the member states to which the person responsible
subject.
f. The personal data was collected in relation to the services offered by
Information society in accordance with Article 8 (1) GDPR.
Has the person responsible made the personal data public and is he according to paragraph
1 is obliged to delete them, he takes into account the available technology
and the implementation costs reasonable measures, including technical ones, in order for the
Data processing controllers who process the personal data about it
inform that a data subject will delete all links to them
personal data or copies or replications of such personal data
has requested.
The right to erasure (“right to be forgotten”) does not exist if the processing takes place
is required:
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation that the processing according to the law of the Union
or of the member states to which the controller is subject, or for the performance
a task that is in the public interest or is carried out in the exercise of official authority that
has been assigned to the controller;
- for reasons of public interest in the field of public health in accordance with Article 9
Paragraph 2 letters h and i as well as Article 9 Paragraph 3 GDPR;
- for archival purposes in the public interest, scientific or historical
Research purposes or for statistical purposes in accordance with Article 89 Paragraph 1 GDPR, insofar as the in
Paragraph 1 is likely to achieve the objectives of this processing
makes impossible or seriously impaired, or
- to assert, exercise or defend legal claims.
(6) Right to restriction of processing
You have the right to request that we restrict the processing of your personal data
to be requested if one of the following conditions is met:
a. the accuracy of the personal data is contested by the data subject, and
for a period that enables the person responsible to verify the accuracy of the
to check personal data,
b. the processing is unlawful and the data subject requests the deletion of the
rejects personal data and instead restricts the use of the
requests personal data;
c. the controller no longer holds the personal data for the purposes of processing
required, but the data subject uses it for the establishment, exercise or defense of
Legal claims required, or
d. the data subject objects to the processing in accordance with Article 21 (1) GDPR
has lodged, as long as it has not yet been determined whether the legitimate reasons of the person responsible
outweigh those of the data subject.
If the processing has been restricted in accordance with the above conditions, then
these personal data - apart from their storage - only with the consent of
affected person or for the establishment, exercise or defense of legal claims
or to protect the rights of another natural or legal person or for reasons
processed in an important public interest of the Union or a Member State.
In order to exercise the right to restriction of processing, the data subject can contact
Contact us at any time using the contact details given above.
(7) Right to data portability
You have the right to have the personal data relating to you that you have provided to us
have to get in a structured, commonly used, and machine-readable format, and you have
the right to transfer this data to another person responsible without hindrance from the
To transmit the person responsible to whom the personal data was provided, provided that:
a. the processing is based on consent in accordance with Article 6 (1) (a) or Article 9
Paragraph 2 letter a or on a contract in accordance with Article 6 paragraph 1 letter b GDPR
and
b. the processing is carried out using automated procedures.
When exercising the right to data portability in accordance with paragraph 1, you have the right to
ensure that the personal data is transferred directly from one person in charge to another
Those responsible will be transmitted to the extent that this is technically feasible. Exercising the right
to data portability does not affect the right to deletion (“right to be forgotten”).
This right does not apply to processing that is necessary for the performance of a task
which is in the public interest or in the exercise of public authority which is the
Responsible has been assigned.
(8) Right of objection
You have the right to object at any time for reasons that arise from your particular situation
the processing of personal data relating to you, which is carried out on the basis of Article 6 Paragraph 1
Letter e or f GDPR takes place, to file an objection; this also applies to one on this
Regulations-based profiling. The person responsible processes the personal data
no longer, unless he can prove compelling legitimate reasons for the processing,
which outweigh the interests, rights and freedoms of the data subject, or processing
serves to assert, exercise or defend legal claims.
If personal data are processed in order to operate direct mail, you have that
Right to object at any time to the processing of personal data concerning you
insert for the purpose of such advertising; this also applies to profiling, insofar as it involves such
Direct mail related. Object to processing for the purposes of
Direct mail, the personal data will no longer be processed for these purposes.
In connection with the use of information society services, you can
Regardless of Directive 2002/58 / EC, your right to object using automated procedures
exercise that use technical specifications.
You have the right, for reasons that arise from your particular situation, against you
relevant processing of personal data relating to you, which is scientific or
is carried out for historical research purposes or for statistical purposes in accordance with Article 89 paragraph 1,
To object, unless the processing is for the fulfillment of a public
Interest-related task required.
You can exercise your right of objection at any time by contacting the respective
Contact those responsible.
(9) Automated decisions in individual cases including profiling
You have the right, not one exclusively on an automated processing -
including profiling - to be subject to decision-making made towards you
has legal effect or similarly significantly affects you. This does not apply
if the decision:
a. for the conclusion or performance of a contract between the data subject and the
Responsible person is required,
b. on the basis of legal provisions of the Union or of the member states to which the person responsible
is subject to, is permissible and these legal provisions take appropriate measures to safeguard the
Contain rights and freedoms as well as the legitimate interests of the data subject or
c. takes place with the express consent of the data subject.
The person responsible takes appropriate measures to safeguard the rights and freedoms as well as the
to protect the legitimate interests of the data subject, including at least the right to
Obtaining the intervention of a person on the part of the person responsible, based on his own statement
Standpoint and to contest the decision heard.
The data subject can exercise this right at any time by contacting the respective
Responsible person turns.
(10) Right to lodge a complaint with a supervisory authority
You also have, without prejudice to any other administrative or judicial
Legal remedy, the right to lodge a complaint with a supervisory authority, in particular in the
Member State of your place of residence, your place of work or the place of the alleged infringement,
if the data subject is of the opinion that the processing is of concern to them
personal data violates this regulation.
(11) Right to an effective judicial remedy
You have without prejudice to any available administrative or extrajudicial
Legal remedy including the right to lodge a complaint with a supervisory authority in accordance with Article
77 GDPR, you have the right to an effective judicial remedy if you are of the opinion
that your rights under this regulation are not in accordance with
processing of your personal data in accordance with this regulation have been violated.
22. Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service from Google Inc. (“Google”).
Google Analytics uses so-called "cookies", text files that are saved on your computer
and which allow an analysis of the use of the website by you. The through the
Information generated by cookies about your use of this website is usually sent to a
Transferred to a Google server in the USA and stored there. In the case of activation of IP anonymization
on this website, however, your IP address will be saved by Google within
Member States of the European Union or in other contracting states of the Agreement on the
European Economic Area previously shortened. The full IP address will only be sent in exceptional cases
transferred to a Google server in the USA and abbreviated there. On behalf of the operator this
Website, Google will use this information to evaluate your use of the website
Compile reports on website activity and provide further information on website activity
and internet-related services to the website operator
provide.
(2) The IP address transmitted by your browser as part of Google Analytics will not be used
merged with other data from Google.
(3) You can prevent the storage of cookies by setting your browser accordingly.
Prevent software; however, we would like to point out that in this case you may not be able to
all functions of this website can be used to their full extent. You can about it
In addition, the recording of the data generated by the cookie and related to your use of the website
Data (including your IP address) to Google and the processing of this data by Google
by downloading the browser plug-in available under the following link and
install: http://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the extension "_anonymizeIp ()". Through this
If IP addresses are further processed in abbreviated form, it can be used to identify individuals
be excluded. Insofar as the data collected about you can be linked to a person,
This is excluded immediately and the personal data is deleted immediately.
(5) We use Google Analytics to analyze the use of our website and regularly
to be able to improve. We can use the statistics obtained to improve our offer and
make it more interesting for you as a user. For the exceptional cases in which personal
Data is transferred to the USA, Google has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework. Legal basis for using Google
Analytics is Art. 6 Para. 1 S. 1 lit.f GDPR.
(6) Information from the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow
Street, Dublin 4, Ireland, Fax: +353 (1) 436
1001. User conditions:
http://www.google.com/analytics/terms/de.html, overview of data protection:
http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration:
http://www.google.de/intl/de/policies/privacy.
Existence of automated decision-making
We do not use automatic decision-making or profiling.
Up-to-dateness and changes to this data protection declaration
This data protection declaration is currently valid and was last updated on May 24, 2020.