This data protection declaration informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within the scope of the provision of our services as well as within our online offer and the websites, functions and contents connected with it as well as external online presences, such as our social media profiles (hereinafter jointly referred to as "online offer"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Types of data processed
- Inventory data (e.g., person master data, names or addresses).
- Contact details (e.g., e-mail, telephone numbers).
- Content data (e.g., text entries, photographs, videos).
- Usage data (e.g., websites visited, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).Categories of data subjectsVisitors and users of the online offer (hereinafter we also refer to the data subjects collectively as "users").
Purpose of the processing - provision of the online offer, its functions and content.
- Responding to contact requests and communication with users.
- Safety measures.
- Reach Measurement/Marketing
Terms used "Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and includes virtually any handling of data.
"pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
"profiling" means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.
Controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.
The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 DSGVO;
The legal basis for the processing for the fulfillment of our services and implementation of contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b DSGVO;
The legal basis for the processing for the fulfillment of our legal obligations is Art. 6 para. 1 lit. c DSGVO;
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d DSGVO serves as the legal basis.
The legal basis for the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Art. 6(1)(e) DSGVO.
The legal basis for processing to protect our legitimate interests is Art. 6 (1) lit. f DSGVO.
The processing of data for purposes other than those for which they were collected is governed by the provisions of Art. 6 para. 4 FADP.
The processing of special categories of data (in accordance with Art. 9 para. 1 DSGVO) is governed by the provisions of Art. 9 para. 2 DSGVO.
Security measuresWe take appropriate technical and organizational measures to ensure a level of security appropriate to the risk in accordance with the law, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, safeguarding of availability and separation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, deletion of data, and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings.
Cooperation with processors, joint controllers and third partiesIf, in the course of our processing, we disclose data to other persons and companies (processors, joint controllers or third parties), transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if a transfer of the data to third parties, such as to payment service providers, is required for contract fulfillment).For example, if a transfer of data to third parties, such as payment service providers, is necessary for the performance of the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we disclose or transfer data to other companies in our group of companies or otherwise grant them access, this is done in particular for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the legal requirements.
Transfers to third countriesIf we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or do so in the context of using third-party services or disclosing, or transferring data to other persons or companies, this will only be done if it is done in order to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to express consent or contractually required transfer, we only process or allow data to be processed in third countries with a recognized level of data protection, which includes US processors certified under the "Privacy Shield" or on the basis of special guarantees, such as contractual obligation by so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection rules (Art. 44 to 49 DSGVO, Information page of the EU Commission).Rights of data subjectsRight of access: You have the right to request confirmation as to whether or not data in question are being processed and to obtain information about them, as well as further information and a copy of the data in accordance with the law.
Right of rectification: In accordance with the law, you have the right to request that the data concerning you be completed or that the inaccurate data concerning you be rectified.
Right to erasure and restriction of processing: You have the right, in accordance with the law, to demand that the data in question be erased without delay, or alternatively, in accordance with the law, to demand restriction of the processing of the data.
Right to data portability: You have the right to receive data relating to you that you have provided to us in a structured, common and machine-readable format in accordance with the legal requirements, or to request that it be transferred to another controller.
Complaint to the supervisory authority: You also have the right to file a complaint with the competent supervisory authority in accordance with the legal requirements.
Right of revocationYou have the right to revoke any consent given with effect for the future.Right of objectionRight to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.Cookies and right to object to direct advertising "Cookies" are small files that are stored on users' computers. Various data can be stored within the cookies. The primary purpose of a cookie is to store information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. Such a cookie may store, for example, the contents of a shopping cart in an online store or a login status. Cookies that remain stored even after the browser is closed are referred to as "permanent" or "persistent". For example, the login status can be stored if users visit them after several days. Likewise, the interests of users can be stored in such a cookie, which is used for range measurement or marketing purposes. Third-party cookies" are cookies that are offered by providers other than the responsible party that operates the online offer (otherwise, if it is only their cookies, it is called "first-party cookies").
If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.Changes and updates to the data protection statementWe ask you to inform yourself regularly about the content of our data protection statement. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.Amazon Partner ProgramWe are, on the basis of our legitimate interests (i.e. interest in the economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) participant of the affiliate program of Amazon EU, which was designed to provide a medium for websites, by means of which through the placement of advertisements and links to Amazon.de advertising fees can be earned (so-called affiliate system). I.e. as an Amazon partner we earn on qualified purchases.
Note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or one of its affiliated companies.DISQUS comment functionWe use the comment service DISQUS based on our legitimate interests in an efficient, secure and user-friendly comment management pursuant to Art. 6 para. 1 lit. f. DSGVO, we use the comment service DISQUS, offered by DISQUS, Inc, 301 Howard St, Floor 3 San Francisco, California- 94105, USA. DISQUS is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt0000000TRkEAAW&status=Active.
To use the DISQUS comment function, users can log in via their own DISQUS user account or an existing social media account (e.g. OpenID, Facebook, Twitter or Google). In this case, the user's login data is obtained by DISQUS from the platforms. It is also possible to use the DISQUS comment function as a guest without creating or using a user account with DISQUS or one of the specified social media providers.
Comments and postsWhen users leave comments or other posts, their IP addresses may be stored for 7 days on the basis of our legitimate interests as defined in Art. 6 (1) lit. f. DSGVO are stored for 7 days. This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.
Furthermore, we reserve the right, on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f. DSGVO, to process the information provided by users for the purpose of spam detection.
The personal information provided as part of the comments and contributions, any contact and website information as well as the content information, will be stored permanently by us until the user objects.Comment subscriptionsThe follow-up comments can be subscribed to by users with their consent pursuant to Art. 6 para. 1 lit. a DSGVO. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will include instructions on how to unsubscribe. For the purposes of proving users' consent, we store the time of subscription along with users' IP address and delete this information when users unsubscribe.
You can cancel receipt of our subscription at any time, i.e. revoke your consents. We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to be able to prove consent formerly given. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.Akismet anti-spam checkOur online offering uses the "Akismet" service provided by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) DSGVO. With the help of this service, comments from real people are distinguished from spam comments. For this purpose, all comment details are sent to a server in the USA, where they are analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data is stored beyond this time. This information includes the name entered, the email address, the IP address, the comment content, the referrer, information about the browser used as well as the computer system and the time of the entry.
Users are welcome to use pseudonyms, or to refrain from entering their name or email address. You can completely prevent the transfer of data by not using our commenting system. That would be a shame, but unfortunately we don't see any other alternatives that work just as effectively.
Retrieval of profile pictures at GravatarWe use the Gravatar service of Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA, within our online offer and especially in our blog.
Gravatar is a service where users can register and store profile pictures and their e-mail addresses. If users leave posts or comments on other online presences (especially blogs) with the respective email address, their profile pictures can be displayed next to the posts or comments. For this purpose, the email address provided by the users is transmitted to Gravatar in encrypted form for the purpose of checking whether a profile is stored for it. This is the sole purpose of the transmission of the email address and it will not be used for other purposes, but deleted afterwards.
The use of Gravatar is based on our legitimate interests within the meaning of Art. 6 (1) f) DSGVO, as we use Gravatar to offer post and comment authors the opportunity to personalize their posts with a profile picture.
The use of emojis is based on our legitimate interests, i.e. interest in an attractive design of our online offer according to Art. 6 para. 1 lit. f. DSGVO. Collection of access data and log filesWe, or rather our hosting provider, collects data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is excluded from deletion until the final clarification of the respective incident.New Relic - Server Monitoring and Error TrackingWith the help of server monitoring and error tracking, we ensure the availability and integrity of our online offering and use the data processed in the process to technically optimize our online offering.
For these purposes, we use the service New Relic, Inc. Attn: Legal Department 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA. New Relic is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNPiAAO&status=Active).
New Relic processes aggregated performance data, i.e. performance, utilization and comparable technical values, which provide information about the stability and any anomalies of our online offer. In the event of errors and conspicuousness, individual inquiries of the users of our online offer are recorded pseudonymously in order to identify and eliminate sources of problems. In this case, pseudonymous means in particular that the IP addresses of the users are stored shortened by the last two digits (so-called IP masking). The aggregated data is deleted after three months, the pseudonymized data after seven days.
We use New Relic on the basis of our legitimate interests in the security, freedom from errors and optimisation of our online offer in accordance with Art. 6 Para. 1 lit. f DSGVO.
Range measurement with Matomo
The following data is processed as part of Matomo's reach analysis: the browser type and version you use, the operating system you use, your country of origin, the date and time of the server request, the number of visits, the time you spend on the website, and the external links you click. The IP address of users is anonymized before it is stored.
Users can object to the anonymized data collection by the Matomo program at any time with effect for the future by clicking on the link below. In this case, a so-called opt-out cookie is stored in their browser, which means that Matomo no longer collects any session data. If users delete their cookies, however, this has the consequence that the opt-out cookie is also deleted and must therefore be reactivated by the users.
The logs with the users' data are deleted after 6 months at the latest.
Where we ask users to give their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Article 6(1)(a). DSGVO. Otherwise, the personal data of the users will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) will be processed.
[iframe src="https://www.net-toolbox.com/pi/index.php?module=CoreAdminHome&action=optOut&language=de" width="100%" height="150″]
Cookies and messages about access numbers
We use "session cookies" from VG Wort, Munich, to measure accesses to texts in order to record the probability of copying. Session cookies are small units of information that a provider stores in the RAM of the visitor's computer. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information about its origin and the storage period. Session cookies cannot store any other data. These measurements are carried out by Kantar Germany GmbH using the Scalable Central Measurement Method (SZM). They help to determine the copy probability of individual texts for the remuneration of legal claims of authors and publishers. We do not collect any personal data via cookies.
It is also possible to use our offers without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent.
Our website and our mobile website use the "Scalable Central Measurement Method" (SZM) of Kantar Germany GmbH to determine statistical parameters for determining the copy probability of texts.
Anonymous measurement values are collected in the process. The access count measurement alternatively uses a session cookie or a signature created from various automatically transmitted information from your browser to recognize computer systems. IP addresses are only processed in anonymized form.
The procedure was developed with due regard to data protection. The sole aim of the procedure is to determine the copying probability of individual texts.
At no time are individual users identified. Your identity always remains protected. You will not receive any advertising through the system.
Online presence in social media
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there.
We would like to point out that user data may be processed outside the European Union. This may result in risks for the users, because it could, for example, make it more difficult to enforce the rights of the users. With regard to U.S. providers that are certified under the Privacy Shield, we point out that they thereby commit themselves to comply with the data protection standards of the EU.
Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of users' personal data is based on our legitimate interest in effective information of users and communication with users in accordance with Art. 6, Paragraph 1, Letter f. DSGVO. If the users are asked by the respective providers of the platforms to give their consent to the aforementioned data processing, the legal basis for the processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.
For a detailed description of the respective processing and the opt-out options, please refer to the information of the providers linked below.
Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.