Privacy Policy

Effective June 2022

Table of Contents

  1. Name and Address of the Responsible Party
  2. Contact Details of the Data Protection Officer
  3. General Information on Data Processing
  4. Rights of the Data Subject
  5. Provision of the Website and Creation of Log Files
  6. Use of Cookies
  7. Newsletter
  8. Email Contact
  9. Contact Form
  10. Application via Email and Application Form
  11. Corporate Appearances
  12. Use of Corporate Appearances in Profession-Oriented Networks
  13. Hosting
  14. Used Plugins



Name and Address of the Responsible Party

The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

qtec Services GmbH
Curtiusstr. 27
23568 Lübeck
Germany

+49 451 / 808503-60
info@qtec-group.com
www.qtec-group.com

Contact Details of the Data Protection Officer

The data protection officer of the responsible party is:

DataCo GmbH
Dachauer Straße 65
80335 Munich
Germany

+49 89 7400 45840
www.dataguard.de

General Information on Data Processing

  1. Scope of Processing Personal Data
    We generally process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users usually takes place only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is required by legal provisions.

  2. Legal Basis for the Processing of Personal Data
    To the extent that we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) GDPR serves as the legal basis.

    When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures.

    To the extent that processing personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

    In cases where the processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.

    If the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and the interests, rights, and freedoms of the data subject do not override these interests, Article 6(1)(f) GDPR serves as the legal basis for processing.

  3. Data Deletion and Retention Period
    The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Additionally, storage may occur if this is provided for by European or national legislators in Union regulations, laws, or other provisions to which the responsible party is subject. Data will also be blocked or deleted once a storage period prescribed by these norms expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Rights of the Data Subject

If personal data of yours are being processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the responsible party:

  1. Right to Information
    You can request confirmation from the responsible party as to whether personal data concerning you are being processed. If such processing exists, you can request information about:

    • The purposes for which the personal data are processed;
    • The categories of personal data being processed;
    • The recipients or categories of recipients to whom the personal data have been or will be disclosed;
    • The planned duration of storage of the personal data concerning you or, if specific information is not possible, the criteria for determining the storage period;
    • The existence of the right to request correction or deletion of the personal data concerning you, the right to request restriction of processing by the responsible party, or the right to object to such processing;
    • The existence of a right to lodge a complaint with a supervisory authority;
    • All available information about the origin of the data if the personal data were not obtained from the data subject;
    • The existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) GDPR, and in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

    You have the right to request information on whether your personal data are transferred to a third country or an international organization. In this context, you can request information about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

  2. Right to Rectification
    You have the right to request the rectification and/or completion of personal data concerning you if the processed personal data are incorrect or incomplete. The responsible party must promptly make the correction.

  3. Right to Restriction of Processing
    Under the following conditions, you can request the restriction of processing of personal data concerning you:

    • If you contest the accuracy of your personal data for a period that allows the responsible party to verify its accuracy;
    • If the processing is unlawful and you oppose the deletion of the personal data and request the restriction of their use instead;
    • If the responsible party no longer needs the personal data for the purposes of processing but you require them for the establishment, exercise, or defense of legal claims;
    • If you have objected to the processing pursuant to Article 21(1) GDPR and it is not yet clear whether the legitimate grounds of the responsible party override your reasons, or if you have objected pursuant to Article 21(2) GDPR.

    If the processing of your personal data has been restricted, such data may only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or a Member State.

    If the restriction of processing is lifted under the above conditions, the responsible party will inform you before lifting the restriction.

  4. Right to Erasure (Right to be Forgotten)
    a) Obligation to Erase
    You can request the responsible party to delete your personal data without delay, and the responsible party is obliged to delete these data without delay if one of the following reasons applies:

    • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;
    • You withdraw your consent on which the processing is based, and there is no other legal ground for processing;
    • You object to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object pursuant to Article 21(2) GDPR;
    • The personal data have been unlawfully processed;
    • The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the responsible party is subject;
    • The personal data have been collected in relation to offering services of the information society as referred to in Article 8(1) GDPR.

    b) Information to Third Parties
    If the responsible party has made the personal data concerning you public and is obliged to delete them pursuant to Article 17(1) GDPR, they will take appropriate measures, including technical measures, to inform the responsible parties processing the personal data that you, as the data subject, have requested the deletion of all links to these personal data or copies or replications of these personal data.

    c) Exceptions
    The right to erasure does not apply where processing is necessary:

    • For the exercise of the right to freedom of expression and information;
    • For compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority;
    • For reasons of public interest in the area of public health;
    • For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes;
    • For the establishment, exercise, or defense of legal claims.
  5. Right to Notification
    If you have exercised your right to rectification, deletion, or restriction of processing, the responsible party is obliged to inform all recipients to whom the personal data concerning you have been disclosed about the rectification or deletion of the data or the restriction of processing, unless this proves impossible or involves disproportionate effort.

    You have the right to be informed about these recipients.

  6. Right to Data Portability
    You have the right to receive the personal data concerning you, which you have provided to the responsible party, in a structured, commonly used, and machine-readable format. You also have the right to transmit these data to another responsible party without hindrance from the responsible party to which the personal data were provided, provided that:

    • The processing is based on your consent or a contract, and
    • The processing is carried out by automated means.

    Additionally, you have the right to have the personal data concerning you transmitted directly from one responsible party to another, where technically feasible. The freedoms and rights of other persons must not be affected.

    The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

  7. Right to Object
    You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation, including profiling based on these provisions.

    The responsible party will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

    If your personal data are processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling related to such direct marketing.

    If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

    You can exercise your right to object to the processing of your personal data in connection with the use of information society services by automated means.

  8. Right to Withdraw Consent
    You have the right to withdraw your consent to the data processing at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

  9. Right Not to Be Subjected to Automated Decision-Making
    You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract, authorized by Union or Member State law, or based on your explicit consent.

    Such decisions must not be based on special categories of personal data unless Article 9(2)(a) or (b) GDPR applies and appropriate measures to protect your rights and freedoms are in place.

    In cases mentioned in points 1 and 3, the responsible party takes appropriate measures to safeguard your rights, including the right to request human intervention, to express your viewpoint, and to contest the decision.

  10. Right to Lodge a Complaint with a Supervisory Authority
    Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or the place where the alleged infringement occurred, if you believe that the processing of your personal data violates the GDPR.

    The supervisory authority where the complaint was lodged will inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Provision of the Website and Creation of Log Files

  1. Description and Scope of Data Processing
    Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

    The following data are collected:

    • The user's IP address
    • Date and time of access

    This data is stored in the system's log files. These data are not stored together with other personal data of the user.

  2. Purpose of Data Processing
    The temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.

    Storage in log files occurs to ensure the functionality of the website. Additionally, the data help us optimize the website and ensure the security of our information technology systems. The data are not evaluated for marketing purposes in this context.

    These purposes also constitute our legitimate interest in data processing under Article 6(1)(f) GDPR.

  3. Legal Basis for Data Processing
    The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

  4. Duration of Storage
    The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of data collection for providing the website, this occurs when the respective session ends.

    In the case of storage in log files, this occurs after a maximum of seven days. Further storage is possible. In this case, users' IP addresses are deleted or anonymized so that the accessing client can no longer be identified.

  5. Right to Object and Erasure
    The collection of data for providing the website and the storage of data in log files are essential for operating the website. Consequently, users have no right to object.

Use of Cookies

  1. Description and Scope of Data Processing
    Our website uses cookies. Cookies are text files that are stored in the user's internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows for the unique identification of the browser when the website is accessed again.

    We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can still be identified after a page change.

    The following data are stored and transmitted in cookies:

    Additionally, we use cookies that enable the analysis of users' surfing behavior on our website.

    In this way, the following data can be transmitted:

    • Entered search terms
    • Frequency of page accesses
    • Google Analytics, banners

    The data collected in this way are pseudonymized through technical measures. Therefore, it is no longer possible to assign the data to the accessing user. The data are not stored together with other personal data of the users.

  2. Purpose of Data Processing
    The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.

    We require cookies for the following applications:

    • Banner about cookie storage

    User data collected through technically necessary cookies are not used to create user profiles.

    The use of analytical cookies serves the purpose of improving the quality of our website and its content. Through analytical cookies, we learn how the website is used and can continuously optimize our offerings.

    External Media and Statistics

  3. Legal Basis for Data Processing
    The legal basis for processing personal data using technically unnecessary cookies is Article 6(1)(a) GDPR.

    The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR.

  4. Duration of Storage, Right to Object, and Erasure
    Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.

    If you use a Safari browser version 12.1 or later, cookies are automatically deleted after seven days. This also applies to opt-out cookies set to prevent tracking measures.

Newsletter

  1. Description and Scope of Data Processing
    On our website, there is the option to subscribe to a free newsletter. During the newsletter registration, the data entered in the input form are transmitted to us.

    • Email address
    • Last name
    • First name
    • Language

    No data is shared with third parties in connection with the data processing for sending newsletters. The data are used exclusively for sending the newsletter.

  2. Purpose of Data Processing
    Collecting the user's email address is intended to deliver the newsletter.

    Collecting other personal data during the registration process serves to prevent misuse of the services or the used email address.

  3. Legal Basis for Data Processing
    The legal basis for processing the data after subscribing to the newsletter with the user's consent is Article 6(1)(a) GDPR.

  4. Duration of Storage
    The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. The user's email address is stored as long as the newsletter subscription is active.

    Other personal data collected during the registration process are usually deleted after a period of seven days.

  5. Right to Object and Erasure
    The newsletter subscription can be canceled by the affected user at any time. For this purpose, there is a corresponding link in each newsletter.

    This also allows for the withdrawal of consent to the storage of personal data collected during the registration process.

Email Contact

  1. Description and Scope of Data Processing
    On our website, it is possible to make contact via the provided email address. In this case, the personal data of the user transmitted with the email are stored.

    The data are used exclusively for processing the conversation.

  2. Purpose of Data Processing
    In the case of contact via email, the necessary legitimate interest for data processing lies in the contact itself.

  3. Legal Basis for Data Processing
    The legal basis for processing the data is, with the user's consent, Article 6(1)(a) GDPR.

    The legal basis for processing data transmitted via email is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, an additional legal basis for processing is Article 6(1)(b) GDPR.

  4. Duration of Storage
    The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. For personal data transmitted via email, this occurs when the respective conversation with the user has ended. The conversation is considered ended when it is clear from the circumstances that the affected matter has been conclusively resolved.

    Personal data additionally collected during the sending process are deleted after a maximum period of seven days.

  5. Right to Object and Erasure
    The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

    Procedures for objection are described here.

    All personal data stored in the course of contact are deleted in this case.

Contact Form

  1. Description and Scope of Data Processing
    Our website has a contact form that can be used for electronic contact. If a user utilizes this option, the data entered in the input form are transmitted to us and stored.

    At the time of sending the message, the following data are stored:

    • Email address
    • Last name
    • First name
    • Telephone/mobile number
    • Date and time of contact
    • Function, contact person, selection of requested information, company

    During the sending process, your consent is obtained for data processing, and this privacy policy is referenced.

    Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted with the email are stored.

    The data are used exclusively for processing the conversation.

  2. Purpose of Data Processing
    The processing of personal data from the input form is solely for handling the contact. In the case of contact via email, the necessary legitimate interest for data processing lies in the contact itself.

    Other personal data processed during the sending process serve to prevent misuse of the contact form and ensure the security of our information technology systems.

  3. Legal Basis for Data Processing
    The legal basis for processing the data is, with the user's consent, Article 6(1)(a) GDPR.

    The legal basis for processing data transmitted via email is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, an additional legal basis for processing is Article 6(1)(b) GDPR.

  4. Duration of Storage
    The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. For personal data from the contact form input and those transmitted via email, this occurs when the respective conversation with the user has ended. The conversation is considered ended when it is clear from the circumstances that the affected matter has been conclusively resolved.

    Personal data additionally collected during the sending process are deleted after a maximum period of seven days.

  5. Right to Object and Erasure
    The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the application cannot be considered further.

    Procedures for objection are described here.

    All personal data stored in the course of contact are deleted in this case.

Application via Email and Application Form

  1. Scope of Processing Personal Data
    Our website has an application form that can be used for electronic applications. If an applicant uses this option, the data entered in the input form are transmitted to us and stored. These data include:

    • First name
    • Last name
    • Telephone/mobile number
    • Email address
    • Message text

    During the sending process, your consent is obtained for data processing, and this privacy policy is referenced.

    Alternatively, you can send your application via email. In this case, we collect your email address and the data you provide in the email.

    After sending your application, you will receive a confirmation of receipt of your application documents via email from us.

    Your data are not shared with third parties. The data are used exclusively for processing your application.

  2. Purpose of Data Processing
    The processing of personal data from the application form is solely for handling your application. In the case of contact via email, the necessary legitimate interest for data processing lies in the contact itself.

    Other personal data processed during the sending process serve to prevent misuse of the application form and ensure the security of our information technology systems.

  3. Legal Basis for Data Processing
    The legal basis for processing your data is the initiation of a contract at the request of the data subject, Article 6(1)(b) GDPR and § 26(1) S.1 BDSG.

  4. Duration of Storage
    After the completion of the application process, the data are stored for up to six months. Your data are deleted no later than six months after that. In case of a legal obligation, the data are stored in accordance with applicable regulations.

    Personal data additionally collected during the sending process are deleted after a maximum period of seven days.

  5. Right to Object and Erasure
    The applicant has the right to object to the processing of personal data at any time. If the applicant contacts us via email, they can object to the storage of their personal data at any time. In such a case, the application cannot be considered further.

    Changes cannot be made retroactively in an automated manner.

    All personal data stored in the course of electronic applications are deleted in this case.

Corporate Appearances

Use of Corporate Appearances in Social Networks

YouTube:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

Instead, on our corporate page, we provide information and offer YouTube users the opportunity to communicate. If you perform an action on our YouTube corporate profile (e.g., comments, posts, likes, etc.), you may make personal data (e.g., your real name or photo from your user profile) public. However, since we generally do not have significant influence over the processing of your personal data by the companies co-responsible for the qtec Services GmbH corporate profile, YouTube, we cannot provide binding information on the purpose and scope of the processing of your data.

Our corporate presence in social networks is used for communication and information exchange with (potential) customers. Specifically, we use the corporate profile for:

  • Providing information about products
  • Providing information about services
  • Advertising
  • Customer contact

Users are free to publish personal data through their activities.

The legal basis for data processing is Article 6(1)(a) GDPR.

Data generated through the corporate profile are not stored in our own systems.

You can object to the processing of your personal data collected in the context of your use of our YouTube corporate profile at any time and assert your rights mentioned under IV. of this privacy policy. To do so, send us an informal email to info@qtec-group.com.

For processing your personal data by YouTube and the corresponding objection options, you can find more information here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=de

Use of Corporate Appearances in Profession-Oriented Networks

  1. Scope of Data Processing
    We use the option of corporate appearances on profession-oriented networks. We maintain a corporate profile on the following profession-oriented networks:

    LinkedIn:

    LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

    XING:

    XING SE, Dammtorstraße 30, 20354 Hamburg, Germany

    On our page, we provide information and offer users the opportunity to communicate.

    The corporate profile is used for applications, information/public relations, and active sourcing.

    We have no information on the processing of your personal data by the companies co-responsible for the corporate profile. For more information, refer to the privacy policy of:

    LinkedIn:

    https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

    XING:

    https://privacy.xing.com/de/datenschutzerklaerung

    If you perform an action on our corporate profile (e.g., comments, posts, likes, etc.), you may make personal data (e.g., your real name or photo from your user profile) public.

  2. Legal Basis for Data Processing
    The legal basis for processing your data in connection with the use of our corporate profile is Article 6(1)(f) GDPR.

  3. Purpose of Data Processing
    Our corporate profile serves to inform users about our services. Users are free to publish personal data through their activities.

  4. Duration of Storage
    We store your activities and personal data published through our corporate profile until the withdrawal of consent. Additionally, we comply with statutory retention periods.

  5. Right to Object and Erasure
    You can object to the processing of your personal data collected in the context of your use of our corporate profile at any time and assert your rights mentioned under IV. of this privacy policy. Send us an informal email to the email address mentioned in this privacy policy.

    For more information on objection and erasure options, refer to:

    LinkedIn:

    https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

    XING:

    https://privacy.xing.com/de/datenschutzerklaerung

Hosting

The website is hosted on servers by a service provider commissioned by us.

Our service provider is:

Hostpress

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when visiting the website. The stored information includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Date and time of the server request
  • IP address

These data are not combined with other data sources. The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of their website—this requires the collection of server log files.

The location of the website's server is geographically in Germany.

Used Plugins

We use plugins for various purposes. The used plugins are listed below:

Use of CleverReach

  1. Scope of Processing Personal Data
    We use the CleverReach software for sending our newsletter, which is operated by CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede, Germany (hereinafter referred to as CleverReach). CleverReach is an email marketing provider that enables us to communicate directly with potential customers via email newsletters. When you register for the newsletter, the data you enter during newsletter registration are transmitted to CleverReach and stored there. This may result in the storage and evaluation of additional personal data, especially the user's activity (specifically which pages have been visited and which elements have been clicked) and device and browser information (specifically the IP address and operating system). Your data are not shared with third parties for the purpose of receiving the newsletter, and CleverReach does not obtain any rights to share your data.

    For more information on data processing by CleverReach, please visit:
    https://www.cleverreach.com/de/datenschutz/

  2. Purpose of Data Processing
    The use of the CleverReach plugin serves the acquisition of new customers for our newsletter, as well as the creation, sending, and analysis of newsletter campaigns.

  3. Legal Basis for Data Processing
    The legal basis for processing users' personal data is primarily the user's consent under Article 6(1)(a) GDPR.

  4. Duration of Storage
    The data are stored and evaluated as long as data processing is not objected to or until the receipt of the newsletter by the recipient is discontinued.

  5. Right to Withdraw Consent and Erasure
    You have the right to withdraw your data protection consent at any time. By withdrawing consent, the lawfulness of processing based on consent before withdrawal is not affected.

    You can withdraw your consent to the storage of data and their use for sending the newsletter by CleverReach at any time. You can exercise your withdrawal at any time by emailing info@cleverreach.com or by clicking the link provided in each newsletter.

    For more information on objection and erasure options with CleverReach, visit:
    https://www.cleverreach.com/de/datenschutz/

Use of Contact Form 7

  1. Scope of Processing Personal Data
    We use the WordPress plugin Contact Form 7 by RockLobster LLC, Sakai 810-0001 Fukuoka Prefecture Chuo-ku Tenjin 1-chome 8-1, Fukuoka City Hall, Japan (hereinafter referred to as RockLobster) to manage contact forms on our online presence. Entered form data are transmitted via email. This may result in the storage and evaluation of personal data, especially the user's activity (specifically which pages have been visited and which elements have been clicked) and device and browser information (specifically the IP address and operating system). Data may be transmitted to RockLobster's servers in Japan. Regarding Japan, there is an adequacy decision by the European Union. You can find it here:
    https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=OJ:L:2019:076:TOC

    For more information on data processing by Contact Form 7, please visit:
    https://contactform7.com/privacy-policy/

  2. Purpose of Data Processing
    The use of the Contact Form 7 plugin serves to improve the user-friendliness of our online presence. We use this plugin to easily create, embed, and display contact forms attractively.

  3. Legal Basis for Data Processing
    The legal basis for processing users' personal data is primarily the user's consent under Article 6(1)(a) GDPR.

  4. Duration of Storage
    Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

  5. Right to Withdraw Consent and Erasure
    You have the right to withdraw your data protection consent at any time. By withdrawing consent, the lawfulness of processing based on consent before withdrawal is not affected.

    You can prevent the collection and processing of your personal data by Contact Form 7 by blocking the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

    For more information on objection and erasure options with Contact Form 7, visit:
    https://contactform7.com/privacy-policy/

Use of Google Analytics

  1. Scope of Processing Personal Data
    We use Google Analytics, a web analysis service provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). Google Analytics examines the origin of visitors, their duration of stay on individual pages, and the use of search engines, thereby allowing better success control of advertising campaigns. Google sets a cookie on your computer. This may result in the storage and evaluation of personal data, especially the user's activity (specifically which pages have been visited and which elements have been clicked), device and browser information (specifically the IP address and operating system), data about displayed advertisements (specifically which advertisements were displayed and whether the user clicked on them), and also data from advertising partners (specifically pseudonymized user IDs). The information generated by the cookie about your use of this online presence is transmitted to a Google server in the USA and stored there. In the case of activating IP anonymization on this online presence, your IP address is shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

    On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, compile reports on the activities of the online presence, and provide other services related to the use of the online presence and internet usage to the operator of the online presence. The IP address transmitted by your browser within the framework of Google Analytics will not be combined with other data from Google.

    You can prevent the storage of cookies by adjusting your browser software settings; however, we point out that in this case, you may not be able to use all functions of our online presence fully.

    For more information on data processing by Google, please visit:
    https://policies.google.com/privacy?gl=DE&hl=de

  2. Purpose of Data Processing
    The purpose of processing personal data is to target an audience that has already shown initial interest through the site visit.

  3. Legal Basis for Data Processing
    The legal basis for processing users' personal data is primarily the user's consent under Article 6(1)(a) GDPR.

  4. Duration of Storage
    Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs are anonymized by Google by deleting parts of the IP address and cookie information after 9 or 18 months, respectively.

  5. Right to Withdraw Consent and Erasure
    You have the right to withdraw your data protection consent at any time. By withdrawing consent, the lawfulness of processing based on consent before withdrawal is not affected.

    You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

    Additionally, you can prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
    https://tools.google.com/dlpage/gaoptout?hl=de

    You can deactivate the use of your personal data by Google using the following link:
    https://adssettings.google.de

    For more information on objection and erasure options with Google, visit:
    https://policies.google.com/privacy?gl=DE&hl=de

Use of Wordfence Security

  1. Scope of Processing Personal Data
    Our online presence uses functions of Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA (hereinafter referred to as Defiant). Wordfence Security secures our online presence and protects visitors from viruses and malware. When you visit a page with the plugin, a direct connection is established between your computer and the Defiant server. To determine whether the visitor is a human or a bot, the plugin sets cookies. This may result in the storage and evaluation of additional personal data, especially device and browser information (specifically the IP address and operating system).

    There is the possibility to evaluate behavior from sent notifications (e.g., how often a page is accessed). For the purpose of protection against brute-force and DDoS attacks or comment spam, IP addresses are stored on Wordfence servers. IP addresses deemed harmless are placed on a whitelist.

    For more information on data processing by Defiant, please visit:
    https://www.wordfence.com/privacy-policy/

  2. Purpose of Data Processing
    The online presence uses the plugin to protect against viruses and malware and to defend against attacks by cybercriminals.

  3. Legal Basis for Data Processing
    The legal basis for processing users' personal data is primarily the user's consent under Article 6(1)(a) GDPR.

  4. Duration of Storage
    Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

  5. Right to Withdraw Consent and Erasure
    You have the right to withdraw your data protection consent at any time. By withdrawing consent, the lawfulness of processing based on consent before withdrawal is not affected.

    You can prevent the collection and processing of your personal data by Wordfence Security by blocking the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

    For more information on objection and erasure options with Wordfence Security, visit:
    https://www.wordfence.com/privacy-policy/

Use of YouTube

  1. Scope of Processing Personal Data
    We use the YouTube plugin operated by Google, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, and their representative in the Union, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). We use the YouTube plugin to embed YouTube videos on our online presence. When you visit our online presence, your browser establishes a connection with YouTube's servers. This may result in the storage and evaluation of personal data, especially the user's activity (specifically which pages have been visited and which elements have been clicked) and device and browser information (specifically the IP address and operating system).

    We have no influence over the content of the plugin. If you are logged into your YouTube account during the visit, YouTube can associate your visit to our online presence with that account. Interacting with this plugin transmits these corresponding information directly to YouTube and stores them there.

    For more information on data processing by Google, please visit:
    https://policies.google.com/privacy?gl=DE&hl=de

  2. Purpose of Data Processing
    The use of the YouTube plugin serves to improve user-friendliness and provide an attractive display of our online presence.

  3. Legal Basis for Data Processing
    The legal basis for processing users' personal data is primarily the user's consent under Article 6(1)(a) GDPR.

  4. Duration of Storage
    Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

  5. Right to Withdraw Consent and Erasure
    You have the right to withdraw your data protection consent at any time. By withdrawing consent, the lawfulness of processing based on consent before withdrawal is not affected.

    You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

    You can deactivate the use of your personal data by Google using the following link:
    https://adssettings.google.de

    For more information on objection and erasure options with Google, visit:
    https://policies.google.com/privacy?gl=DE&hl=de

This privacy policy was created with the support of DataGuard.