Data protection declaration

 

This data protection declaration informs about the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") in the context of the provision of our services and within our online offer and the connected websites, functions and content as well as external online presences, such as our social media profile (hereinafter jointly referred to as "online offer"). With regard to the terminology used, such as "processing" or "responsible" we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

 

Responsible

Diamant-Gesellschaft Tesch GmbH

Carl-Goerdeler-Str. 14

D-71636 Ludwigsburg


Phone: +49 (0)7141/ 403-1
Fax: +49 (0)7141/ 403-217

info@diamanttesch.de

Managing Directors:

Martin Gerlitzky

Dr. Joachim Kübler-Tesch




Contact data protection officer: info@diamanttesch.de

Types of data processed

- Permanent data (e.g. personal master data, names or addresses). 
- Contact details (e.g. e-mail, telephone numbers). 
- Content data (e.g. text input, photographs, videos). 
- Usage data (e.g. websites visited, interest in contents, access times). 
- Meta/communication data (e.g. device information, IP addresses).

Categories of data subjects

Visitors and users of the online offer (hereinafter we also refer to the data subjects as “users”).

Purpose of the processing

- Making the online offer, its functions and content available. 
- Answering contact requests and communication with users. 
- Safety measures. 
- Reach measurement/marketing.

Terms used 

“Personal data” are all information that relates to an identified or identifiable natural person (hereinafter “data subject”); a natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features, which characterise the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

“Processing” is any process carried out with or without the aid of automated processes or any such series of processes in connection with personal data. The term has a broader meaning and includes practically every handling of data.

"Pseudonymisation" is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organisational measures that ensure that the personal data cannot be assigned to an identified or identifiable natural person.

“Profiling” means any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or change of location of this natural person.

“Responsible” means the natural or legal person, authority, institution or any other body that alone or jointly with others determines the purposes and means of processing personal data.

“Processor” means a natural or legal person, authority, institution or any other body that processes personal data on behalf of the responsible person.

Important legal basis

In accordance with Art. 13 GDPR, we will inform you about the legal basis of our data processing. For users in the territory covered by the General Data Protection Regulation (GDPR), i.e. in the EU and the EEC, the following applies, if the legal basis is not mentioned in the data protection declaration: 
The legal basis for obtaining consent is Art. 6 (1) lit. a and art. 7 GDPR; 
The legal basis for processing in order to fulfill our services and carry out contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b GDPR; 
The legal basis for processing in order to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR; 
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR is the legal basis. 
The legal basis for the processing required to perform a task that is in the public interest or subject to the exercise of public authority that has been transferred to the person responsible, is Art. 6 paragraph 1 lit. e GDPR.  
The legal basis for processing to safeguard our legitimate interests is Art. 6 para. 1 lit. f GDPR. 
The processing of data for purposes other than those for which they were collected is determined in accordance with the provisions of Art. 6 para. 4 GDPR. 
The processing of special categories of data (in accordance with Art. 9 para. 1 GDPR) is determined in accordance with the requirements of Art. 9 para. 2 GDPR.  

Security measures

We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.


The measures include, in particular, the securing of the confidentiality, integrity and availability of data by controlling the physical access to the data as well as the access, input, transfer, the ensuring of the availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, deletion of data and reaction to data threats. Moreover, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection by means of technology design and data protection-friendly default settings.

Cooperation with contract processors, jointly responsible persons and third parties

If we disclose data to other persons and companies (contract processors, jointly responsible persons or third parties) within the scope of our processing, transmit these to them or grant them otherwise access to the data, this shall only be done on the basis of a statutory permission (e.g. if a transfer of data to third parties, such as payment service providers, is necessary to fulfill a contract), if users have consented, on the basis of a legal obligation or our legitimate interests (e.g. when commissioning agents, web hosts, etc.).

If we disclose, transmit or grant otherwise access to data to other companies of our corporate group, this is done in particular for administrative purposes as a legitimate interest and on a legal basis.  

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EWR) or the Swiss Confederation) or if this shall be done in the context of use of third party services or disclosure or transmission of data to other individuals or companies, this only happens to fulfill our (pre)contractual obligations, on the basis of your consent, a legal obligation or our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the legal requirements are met. I.e. the processing is carried out e.g. on the basis of special guarantees, such as the official recognition of a data protection level corresponding to the EU (e.g. for the USA through the "Privacy Shield") or the compliance with officially recognised special contractual obligations.

Rights of the data subjects

You have the right to request confirmation as to whether the data in question are being processed and to request information about these data as well as further information and a copy of the data in accordance with the legal requirements.

 

According to the legal requirements you have the right to request the completion of the data concerning you or the correction of the incorrect data concerning you.  

In accordance with the legal requirements, you have the right to demand that the relevant data will be deleted immediately or, alternatively, to request, in accordance with the legal requirements, a restriction of the processing of the data.

You have the right, in accordance with the legal requirements, to request that you receive the respective data that you have provided to us and to request that they will be transmitted to other responsible parties. 

You have also the right, in accordance with the legal requirements, to submit a complaint to the competent supervisory authority.

Right of withdrawal

You have the right to withdraw your consent with effect for the future.

Right of objection

You can object to the future processing of the data concerning you at any time in accordance with the legal requirements. The objection can in particular be made against the processing for direct marketing purposes.

Cookies and right to object to direct advertising

“Cookies” are small files that are stored on the user's computer. Different information can be stored in the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit of an online offer. Temporary cookies or "session cookies" or "transient cookies" are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, e.g. the contents of a shopping cart in an online shop or a login status can be saved. Cookies are referred to as "permanent" or "persistent" and remain stored even after the browser is closed. The login status can e.g. be saved, if users visit the website again after several days. The interests of the users can also be stored in such a cookie, which are used for range measurement or marketing purposes. "Third-party cookies" are cookies that are offered by providers other than the person responsible for operating the online offer (otherwise, if they are only his cookies, they are referred to as "first-party cookies").

We can use temporary and permanent cookies and explain this in the context of our data protection declaration.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer. 

A general objection to the use of cookies used for online marketing purposes can be made for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/.

Furthermore, you can change the browser settings to prevent the storage of cookies. Please note that you may then not be able to use all the functions of this online offer. 

Deletion of data

The data processed by us will be deleted or restricted in their processing in accordance with the legal requirements. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose provided that there is no legal obligation to retain such data. 

If the data are not deleted because they are required for other purposes and legally permissible purposes, their processing will be restricted. I.e. the data will be blocked and not processed for other purposes. This applies e.g. to data that must be kept for commercial or tax reasons. 

Changes and updates of the data protection declaration

We ask you to keep you informed regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes of the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

 

Agency services

 

We process the data of our customers as part of our contractual services, which include conceptual and strategic advice, campaign planning, software and design development/advice or maintenance, implementation of campaigns and processes/handling, server administration, data analysis/consulting services and training services.

We process permanent data (e.g. customer master data, such as names or addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos), contract data (e.g. subject of the contract, term), payment data (e.g. bank details, payment history), usage and meta data (e.g. in the context of evaluating and measuring the success of marketing measures). In principle, we do not process special categories of personal data, unless these are part of a commissioned processing. Those concerned persons include our customers, interested parties and their customers, users, website visitors or employees as well as third parties. The purpose of processing is to provide contractual services, billing and our customer service. The legal basis for processing results from Art. 6 para. 1 lit. b GDPR (contractual services), Art. 6 para. 1 lit. f GDPR (analysis, statistics, optimization, security measures). We process data that are necessary for the justification and fulfillment of the contractual services and point out the necessity of their disclosure. The disclosure to external parties shall only be done, if it is necessary on the basis of an order. When processing the data provided to us as part of an order, we act in accordance with the instructions of the clients and the legal requirements for order processing in accordance with. Art. 28 GDPR and do not process the data for any other purpose than the purposes of the order.

We delete the data after the expiry of statutory warranty and comparable obligations. The necessity of storing the data is reviewed every three years; in the case of the statutory storing duties, the data shall be deleted after their expiry (6 Y, according to § 257 para. 1 HGB, 10 Y, according to § 147 para. 1 AO). In the case of data that were disclosed to us by the client as part of an order, we delete the data according to the specifications of the order, generally after the end of the order.

 

Administration, financial accounting, office organisation, contact management

 

We process data to perform the administrative tasks as well as the activities for the organisation of our company, the financial accounting and fulfilment of legal obligations, such as archiving. In doing so, we process the same data required for the performance of our contractual services. The basis for the processing is Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are concerned by the processing. The purpose and our interest in processing lies in the administration, the financial accounting, the office organisation and archiving of data, i.e. tasks that serve to maintain our business activities, to perform our tasks and provide our services. The deletion of the data with regard to contractual services and the contractual communication corresponds to the information given during these processing activities.

We disclose or transmit data to the financial administration, consultants such as tax consultants or auditors as well as other fee offices and payment service providers. 

Furthermore, on the basis of our business interests, we store information about suppliers, organisers and other business partners, e.g. for later contacts. We generally store this mostly company-related data permanently.

 

Data protection information in the application procedure

 

We process the applicant data only for the purpose and in connection with the application procedure according to the legal requirements. The applicant data shall be processed in order to fulfill our (pre)contractual obligations on the basis of the application procedure within the meaning of art. 6 paragraphe 1 lit. b. GDPR art. 6 paragraphe 1 lit. f. GDPR, if the data processing is required e.g. to comply with legal procedures (in Germany, § 26 BDSG also applies).

The application procedure requires that applicants provide us the applicant data. If we offer an online form, the necessary applicant data are marked, or they result otherwise from the job descriptions, including in general the personal details, postal and contact addresses as well as the documents belonging to the application, such as application letter, curriculum vitae and certificates. Besides, applicants can voluntarily provide us additional information. 

By submitting the application to us, the applicants consent to the processing of their data for the purposes of the application procedure in accordance with the type and scope set out in this data protection declaration.

Insofar as special categories of personal data within the meaning of art. 9 para. 1 GDPR are voluntarily provided as part of the application procedure, they are also processed in accordance with art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely handicapped status or ethnic origin). Insofar as special categories of personal data within the meaning of art. 9 para. 1 GDPR are requested from applicants during the application procedure, they are also processed in accordance with art. 9 para. 2 lit. a GDPR (e.g. health data, if this is necessary for the exercise of the profession).

If made available, applicants can send us their applications using an online form on our website. The data are transferred in encoded form to us according to the state of the art technology. 
Applicants can also send us their applications by e-mail. Please note, however, that generally e-mails are not sent in encrypted form and that the applicants themselves have to ensure their encryption. We therefore cannot assume responsibility for the transmission path of the application from the sender to its receipt on our server and therefore recommend using an online form or sending it by post. Instead of applying via the online form and by e-mail, applicants still have the opportunity to send us their application by post.


In the event of a successful application the data provided by the applicants can be further processed by us for the purposes of the employment relationship. However, if the application for a job offer is unsuccessful, the applicant's data will be deleted. The applicant's data will also be deleted, if an application is withdrawn, which applicants are entitled to do at any time. 

The deletion will be done, subject to a justified revocation by the applicant, after a period of six months, so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in according to tax law requirements. 

 

Registration function

 

Users can create a user account. As part of the registration, the required mandatory information is communicated to the users and processed on the basis of Art. 6 para. 1 lit. b GDPR for the purpose of providing the user account. The processed data include, in particular, the login information (name, password and an e-mail address). The data entered during registration will be used for the purpose of using the user account and its purpose. 

Users can be informed by e-mail about relevant aspects regarding their user account, such as technical changes. If users have canceled their user account, their data will be deleted with regard to the user account, subject to a statutory retention obligation. It is up to the users to save their data in the event of termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.

When using our registration and login functions and using the user account, we save the IP address and the time of the respective user action. The storage is carried out on the basis of our legitimate interests as well as those of the users in the protection against misuse and other unauthorised use. These data will not be passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c. GDPR. The IP addresses are anonymised or deleted after 7 days at the latest.

 

Contacting us

 

When contacting us (e.g. using the contact form, e-mail, phone or social media), the information provided by the user is used to process the contact request and to process it in accordance with Art. 6 para. 1 lit. b. (within the framework of contractual/pre-contractual relationships), Art. 6 para. 1 lit. f. GDPR (other inquiries). The user information can be stored in a customer relationship management system ("CRM system") or a comparable inquiry organisation.

We delete the inquiries, if they are no longer required. We review the requirement every two years; the statutory archiving obligations also apply.

 

Hosting and sending e-mails

 

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, sending e-mails, security services and technical maintenance services that we provide for the purpose of operation of this online offer.  

In doing so, we or our hosting provider process permanent data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offer based on our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).

 

Collection of access data and log files

 

We or our hosting provider collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR on every access to the server on which this service is located (so-called server log files). The access data include the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. 

For security reasons (e.g. to investigate acts of abuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data, of which the further storage is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified.

 

Google Analytics

 

We use Google Analytics, a web analysis service of Google LLC ("Google"), on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transferred to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with the European data protection law

(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and the internet. In doing so, pseudonymous user profiles can be created from the processed data. 

We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases.

The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; In addition, users can prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing these data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information on the use of data by Google, setting and objection options, see Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated). 

The personal data of users are deleted or anonymised after 14 months.

 

Google Adsense with personalised advertisements

 

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").

Google is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with the European data protection law
(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).


We use the AdSense service, with the help of which advertisements are displayed on our website and we receive remuneration for their display or other use. For these purposes, usage data such as the click on an advertisement and the IP address of the user are processed, whereas the IP address is shortened by the last two digits. Therefore, the processing of the user data is pseudonymised.

We use Adsense with personalised ads. Google draws conclusions about the interests based on the websites visited by users or apps used and the user profiles created thereof. Advertisers use this information to align their campaigns to these interests, which is beneficial for users and advertisers alike. For Google ads are personalised, if recorded or known data determine or influence the selection of ads. This includes previous searches, activities, website visits, the use of apps, demographic and location information. In detail, this includes: demographic targeting, targeting on interest categories, remarketing as well as targeting on lists for customer comparison and target group lists that have been uploaded to DoubleClick Bid Manager or Campaign Manager.

You can find more information about data usage by Google, setting and objection options in Google's data protection declaration (https://policies.google.com/technologies/ads) as well as in the settings for displaying advertisements by Google (https://adssettings.google.com/authenticated).

 

Google AdWords and conversion measurement

 

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").

Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the online marketing process Google "AdWords" to place advertisements in the Google advertising network (e.g. in search results, in videos, on websites, etc.), so that they can be displayed to users who have a presumed interest in the advertisements. This allows us to display advertisements for and within our online offer in a more targeted manner, in order to show the users only advertisements that potentially correspond to their interests. If e.g. advertisements for products are displayed to a user that he was interested in on other online offers, this is called "remarketing". When accessing our and other websites on which the Google advertising network is active, a code is immediately executed by Google and so-called (re)marketing tags (invisible graphics or code, also called "web beacons") are integrated into the website. By means of these tags,  an individual cookie, i.e. a small file, is stored on the device (instead of cookies comparable technologies can also be used). This file records which websites the user has visited, which content he is interested in and which offers the user has clicked, as well as technical information on the browser and operating system, referring websites, visiting time and other information on the use of the online offer. 

We also receive an individual "conversion cookie". The information obtained by means of the cookie is used by Google to create conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. But we do not receive any information by which users can be personally identified. 

The data of the users are processed pseudonymously within the framework of the Google advertising network. I.e. Google does not store and process e.g. the name or e-mail address of the user, but processes the relevant data in a cookie-related manner within pseudonymous user profiles. I.e. from Google's point of view, the advertisements are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply, if a user has expressly allowed Google to process the data without this pseudonymisation. The information collected about the users is transmitted to Google and stored on Google's servers in the USA.

For more information on the use of data by Google, setting and objection options, see Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated). 


The personal data of users are deleted or anonymised after 14 months.
 

Google Doubleclick

 

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").

Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the online marketing process Google "Doubleclick" to place advertisements in the Google advertising network (e.g. in search results, in videos, on websites, etc.). Double Click is characterized by the fact that ads are displayed in real time based on the presumed interests of the users. This allows us to display advertisements for and within our online offer in a more targeted manner , in order to show to the users only advertisements that potentially correspond to their interests. If a user is shown e.g. advertisements for products that he was interested in on other online offers, this is called "remarketing". For these purposes, when accessing our and other websites on which the Google advertising network is active, a code is immediately executed by Google and so-called (re)marketing tags (invisible graphics or code, also called "web beacons") are integrated into the website. By means of these tags an individual cookie, i.e. a small file, is stored on the device (instead of cookies comparable technologies can also be used). This file records which websites the user has visited, which content he is interested in and which offers the user has clicked, as well as technical information on the browser and operating system, referring websites, visiting time and other information on the use of the online offer.

The IP address of the user is also recorded, although it is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases transferred in full to a Google server in the USA and shortened there. The aforementioned information can also be combined by Google with information from other sources. If the user then visits other websites, advertisements can be shown to him consistent with his presumed interests based on his user profile.

The data of the users are processed pseudonymously within the framework of the Google advertising network. I.e. Google stores and processes e.g. not the name or e-mail address of the user, but processes the relevant data in a cookie-related manner within pseudonymous user profiles. I.e. from Google's point of view, the advertisements are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply, if a user has expressly allowed Google to process the data without this pseudonymisation. The information collected about the users is transmitted to Google and stored on Google's servers in the USA.

For more information on the use of data by Google, setting and objection options, see Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

Facebook-Pixel, Custom Audiences and Facebook-Conversion

 

Within our online offer, on the basis of our legitimate interests in analysis, optimisation and economic operation of our online offer and for these purposes the so-called "Facebook pixel" ("Facebook") of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, is used.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

By means of the Facebook pixel, Facebook is able to determine the visitors of our online offer as a target group for the presentation of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products being determined on the basis of the visited Websites) that we transmit to Facebook (so-called "Custom Audiences"). By using the Facebook pixel, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and are not harassing. By means of the Facebook pixel we can also understand the effectiveness of Facebook ads for statistical and market research purposes by seeing, whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion").

The processing of the data by Facebook takes place within the framework of Facebook's data usage guidelines. Accordingly, general information on the presentation of Facebook ads can be found in Facebook's data usage guidelines: https://www.facebook.com/policy.
Special information and details about the Facebook pixel and how it works can be found in the Facebook help section: https://www.facebook.com/business/help/651294705016616.


You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. In order to select which types of advertisements are shown to you within Facebook, you can access the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are adopted for all devices such as desktop computers or mobile devices.

You can also object to the use of cookies for range measurement and advertising purposes through the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and, in addition, the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

 

Bing Ads

 

We use within our online offer based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR) the conversion and tracking tool "Bing Ads" of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft stores cookies on the user's devices in order to provide an analysis of the use of our online offer by the users, if users have reached our online offer via a Microsoft Bing ad (so-called "conversion measurement"). Microsoft and we can thus recognize that someone who clicked on an ad, was forwarded to our online offer and reached a previously determined target page (so-called "conversion page"). We only get the information about the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No IP addresses are saved. No personal information about the identity of the user is given.

Microsoft is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with the European data protection law 
(https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).

If users do not want to participate in the Bing Ads tracking process, they can also deactivate the required setting of a cookie via their browser settings or use the Microsoft opt-out page: http://choice.microsoft.com/de-DE/opt-out.

Users can find more information on data protection and the cookies used by Microsoft Bing Ads in Microsoft's data protection declaration: https://privacy.microsoft.com/de-de/privacystatement.

 

Online presence in social media

 

We maintain an online presence within social networks and platforms, in order to be able to communicate with customers, interested parties and users who are active there and to inform them about our services.

We would like to point out that user data can be processed outside of the European Union. This can result in risks for the user, because e.g. the enforcement of user rights could be made more difficult. With regard to US providers who are certified under the Privacy Shield, we would like to point out that they undertake to comply with the data protection standards of the EU.

In addition, user data are usually processed for market research and advertising purposes. E.g. user profiles can be created from the usage behavior and the resulting interests of the users. The usage profiles can be used to place e.g. advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computers, in which the usage behavior and the interests of the users are saved. Furthermore, data can be stored in the usage profiles regardless of the devices of the users (especially if the users are members of the respective platforms and are logged in there).

The processing of the personal data of the users takes place on the basis of our legitimate interests in an effective information of the users and communication with the users according to Art. 6 para. 1 lit.  f. GDPR. If the users are asked by the respective providers for consent to the data processing (i.e. declare their consent, e.g. by ticking a check box or confirming a button), the legal basis for the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.

For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the linked information from the provider below.

Even in case of requests for information and the assertion of user rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information. If you still need help, you can contact us.

- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - Data protection declaration: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Data protection declaration:  https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Data protection declaration/ Opt-Out: http://instagram.com/about/legal/privacy/.

- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Data protection declaration: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Data protection declaration/ Opt-Out: https://about.pinterest.com/de/privacy-policy.

- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) - Data protection declaration https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) - Data protection declaration/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

- Wakalet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) - Data protection declaration/ Opt-Out: https://wakelet.com/privacy.html.

- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Deutschland) - Data protection declaration/ Opt-Out: https://soundcloud.com/pages/privacy.

 

Integration of services and content from third parties

 

We use content or service offers from third-party providers within our online offer based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), in order to include their content and services, such as videos or fonts (hereinafter referred to as "content"). 

This always assumes that the third-party providers of this contents use the IP address of the user, as they would not be able to send the contents to their browser without the IP address. The IP address is therefore required to display these contents. We aim to use only such contents whose respective providers only use the IP address to deliver the contents. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, and be linked to such information from other sources.

 

Vimeo

 

We can integrate the videos of the platform “Vimeo” from the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Data protection declaration: https://vimeo.com/privacy. We point out that Vimeo can use Google Analytics and refer to the privacy policy (https://policies.google.com/privacy) and opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or the Google settings for data usage for marketing purposes (https://adssettings.google.com/).

Youtube

 

We embed the videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

 

Google Maps

 

We integrate maps from the service “Google Maps” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, the user's IP addresses and location data, which, however, are not collected without their consent (usually within the settings of their mobile devices). The data can be processed in the USA. Data protection: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

 

Use of Facebook social plugins

 

We use on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook").

This includes e.g. contents such as images, videos or texts and buttons with which users can share contents of this online offer within Facebook. The list and the appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user accesses a function of this online offer that contains such a plugin, his device establishes a direct connection with the Facebook servers. The content of the plug-in is transmitted by Facebook directly to the user's device, which integrates it into the online offer. User profiles can thereby be created from the processed data. We thus have no influence on the amount of data that Facebook collects by the means of this plugin and therefore inform users according to our level of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by pressing the like button or making a comment, the corresponding information is sent directly from your device to Facebook and saved there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out his IP address and save it. According to Facebook, only an anonymised IP address is saved in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the corresponding rights and setting options to protect the privacy of users can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link them to his member data stored on Facebook, he must log out of Facebook before using our online offer and delete his cookies. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices such as desktop computers or mobile devices.

 

Instagram

 

Functions and contents of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated into our online offer. This includes e.g. contents such as pictures, videos or texts and buttons with which users can share contents of this online offer within Instagram. If the users are members of the Instagram platform, Instagram can assign the access to the aforementioned contents and functions to the profiles of the users. Data protection declaration of Instagram: http://instagram.com/about/legal/privacy/

 

Pinterest

 

Functions and contents of the Pinterest service, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, can be integrated into our online offer. This includes e.g. contents such as images, videos or texts and buttons with which users can share contents of this online offer within Pinterest. If the users are members of the Pinterest platform, Pinterest can assign the access to the aforementioned contents and functions to the profiles of the users. Data protection declaration of Pinterest: https://about.pinterest.com/de/privacy-policy

Created on the basis of the data protection generator.de by RA Dr. Thomas Schwenke