Data protection declaration

Responsible body within the meaning of § 13 para. 1 TMG

Responsible body in the sense of data protection law is:

shuffer GmbH
Adlerstraße 41
70199 Stuttgart

Tel.: +49 – 711 – 47 09 76 31
E-Mail: sales[at]power-ecard.de

Definitions

Our data protection declaration is based on the defined terms of the Basic Data Protection Ordinance (DSGVO). Our privacy policy should be easy to read and understand. To ensure this, we explain the terms used in advance:

Personal Information

Personal data are all information relating to an identified or identifiable natural person (hereinafter “data subject”). Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

Person concerned

Data subject is any identified or identifiable natural person whose personal data are processed by the data controller.

Processing

Processing means any operation or series of operations carried out with or without the aid of automated procedures in relation to personal data, such as the collection, collection, organisation, sorting, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, erasure or destruction.

Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

Profiling

Profiling is any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, behaviour, location or relocation of that natural person.

Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not assigned to an identified or identifiable natural person.

Data controller or controller

The data controller or controller is the natural or legal person, public authority, institution or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States.

Processor

Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller.

Recipient

Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities which may receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients.

Third party

A third party is a natural or legal person, authority, institution or other body other than the data subject, the data processor, the data processor and the persons authorised to process the personal data under the direct responsibility of the data processor or the data processor.

Consent

Consent shall mean any informed and unequivocal expression of will voluntarily given by the data subject in the particular case in the form of a declaration or other clear affirmative act by which the data subject indicates his or her consent to the processing of personal data concerning him or her.

General information on data processing

Data protection, data security and secrecy protection have high priority for us. The permanent protection of your personal data, your company data and your company secrets is particularly important to us.

You can visit our website without giving any personal information. However, if you make use of our company’s services via our website, you must provide your personal data. As a rule, we use the data provided by you and collected by the website and the data stored during use exclusively for our own purposes, namely for the implementation and provision of our website and the initiation, implementation and processing of the services/offers offered via the website (contract performance) and do not pass these on to external third parties, provided no officially ordered obligation exists in this respect. In all other cases we obtain your separate consent.

Your personal data will be processed in accordance with the requirements of the Basic Data Protection Ordinance and in accordance with the country-specific data protection regulations applicable to us. With this data protection declaration we would like to inform you about the type, scope and purpose of the personal data processed by us. In addition, we will inform you of your rights by means of this data protection declaration.

We have implemented technical and organisational measures to ensure adequate protection of personal data processed via this website. For security reasons and to protect the transmission of confidential content, such as requests via a contact form that you send to us as the site operator, this website uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, Internet-based data transmissions can have security gaps, so that no absolute protection can be guaranteed.

General information on the legal bases

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis for the processing of personal data.

In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for processing.

General information on data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Collection of general data and information

Our website collects a series of general data and information each time a person or an automated system accesses the website. This general data and information is stored in the log files of the server. We may record (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the subwebsites which are accessed via an accessing system on our website, (5) the date and time of access to the Website, (6) an Internet Protocol (IP) address, (7) the Internet service providers of the accessing system, and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.

When using this general data and information, we do not draw any conclusions about the person concerned. Rather, this information is required to (1) correctly deliver the contents of our website, (2) optimize the contents of our website and the advertising for it, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by us statistically and also with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.

Account registration to use our software:

To use our Power eCard software for free, you need to register first. For account registration we collect your email address on the basis of Art. 6 (1) (b) GDPR. We will store your data until you object to its storage by email to info@power-ecard.de in which you wish to delete your account. If there are no legal retention periods, your data will be deleted within 10 days after you have entered your objection.

You can use a free account if we may send you regular emails (such as news & product information) in return. The shuffer GmbH will use your data exclusively for the aforementioned purpose and will not pass it on to third parties. You can unsubscribe from the newsletter in any email or object to the storage of your data by email to info@power-ecard.de and request that we delete your data at any time, provided that the erasure does not conflict with any legal storage obligations.

Paid use:

If you want to use our Power eCard software as a paid version, you have to register first. We store and use your personal data, which you transmit in the course of the registration or an order process, on the basis of Art. 6 (1) (b) GDPR exclusively for the processing of your orders. We will use your email address to inform you about the status of your order or to send you the respective receipts. We also offer you to send you account reports and news & product information by email.

If after the conclusion of a chargeable contract there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization), this data is required for payment processing. Payment transactions via the common means of payment are made exclusively via an encrypted SSL or TLS connection. In the case of encrypted communication, your payment data you transmit to us cannot be read by third parties.

Legal bases: 

Art. 6 para. 1 lit. f DSGVO

(legitimate interest)

Storage purpose

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this the IP address of the user must remain stored for the duration of the session.

Storage time

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

Removal & objection possibility

No, as absolutely necessary for the operation of the website

Cookies – Description and scope of data processing

Cookies are used for our online offer – as on many websites. Cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognize your computer and to make any settings available immediately. Cookies help us to improve our online offer and to offer you a better and even more customized service.

The cookies we use are so-called session cookies, which are automatically deleted after the end of the browser session.

We also use cookies on our website which enable an analysis of the user’s surfing behaviour.

The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data will not be stored together with other personal data of the users.

When you visit our website, an information banner informs you about the use of cookies for analytical purposes and refers you to this data protection statement. You can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. If cookies are not accepted, the functionality of our website may be limited. The following links provide information on how to activate or deactivate cookies in the most important browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

You accept our cookies if you have activated or not deactivated the cookie setting and continue to use this website.

Legal bases

Art. 6 para. 1 lit. f DSGVO (legitimate interests) for technically mandatory cookies

By the way: Art. 6 para. 1 lit. a DSGVO

(consent)

Storage purpose

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer.

For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f DSGVO.

Storage time

Cookies are stored on the user’s computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies.

Removal & objection possibility

You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the Flash Player settings.

In addition, the following third party cookies are used when you visit our website.

Privacy Policy for the Use of Google Analytics

We use Google Analytics to analyze website usage. The data obtained is used to optimize our website and advertising measures.

Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the data on website usage on our behalf and contractually commits to measures to ensure the security and confidentiality of the processed data.

During your visit to our website, the following data will be transmitted to Google:

• Pages accessed
• Orders including revenue and ordered products
• Achievement of "website goals" (e.g., contact inquiries and newsletter sign-ups)
• Your behavior on the pages (e.g., dwell time, clicks, scroll depth)
• Your approximate location (country and city)
• Your internet address (IP address)
• Technical information such as browser, internet provider, device, and screen resolution
• Source of your visit (i.e., which website or advertising material you came to us from)
• A randomly generated user ID
• No personal data such as name, address, or contact details are transmitted to Google Analytics.

This data is transferred to Google servers in the USA. We point out that in the USA, data protection laws do not guarantee the same level of protection as within the EU.

Google Analytics stores cookies in your web browser for two years since your last visit. These cookies contain a randomly generated user ID that allows you to be recognized during future website visits.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. These user-related data are automatically deleted after 14 months. Other data remain stored in aggregate form indefinitely.

If you do not agree with the collection, you can prevent it by installing the browser add-on to disable Google Analytics or by rejecting cookies via our cookie settings dialog.

You can also prevent the collection of your data by Google Analytics by clicking on the following link - an opt-out cookie will be set that prevents the collection of your data during future visits to this website:

More information and the applicable Google privacy policy can be found at and. Google Analytics is explained in more detail under this link: https://www.google.com/intl/de_de/analytics/ 

Demographic Features with Google Analytics

We use “demographic features” of Google Analytics. This allows reports to be created that contain statements about the age, gender, and interests of website visitors. These data come from interest-based advertising from Google as well as visitor data from third-party providers. These data cannot be assigned to a specific person. You can disable this feature at any time in your Google account ad settings or generally prohibit the collection of your data by Google Analytics as described in the “Objection to Data Collection” section.

Privacy Policy for the Use of Google Tag Manager

We use the tag management system "Google Tag Manager (GTM)" from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website to manage JavaScript and HTML tags for tracking and analysis with our own and third-party software. Tags are small code elements that help us measure traffic and visitor behavior, understand the impact of our advertising, set up remarketing and targeting, and test and optimize our website. GTM is merely a support service that facilitates the integration and management of our tags through an interface. GTM itself only implements tags, meaning it does not set its own cookies (in an empty state) and does not collect any personal data. However, GTM triggers other tags that may, in turn, collect personal data. GTM does not access these data.

If deactivation has been carried out at the domain or cookie level, it remains in place for all tracking tags insofar as these are implemented with Google Tag Manager. These processing operations are carried out exclusively with the express consent of the user in accordance with Art. 6 para. 1 lit. a) GDPR.

For more information on Google Tag Manager and Google's privacy policy, please visit https://policies.google.com/privacy?hl=en and https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google Analytics Remarketing

Our websites uses Google Analytics Remarketing in conjunction with the cross-device capabilities of Google Ads and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device capabilities of Google Ads and Google DoubleClick. This allows interest-based, personalized advertising messages, which have been tailored to you based on your previous usage and surfing behavior on one device (e.g., mobile phone), to also be displayed on another of your devices (e.g., tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. This allows the same personalized advertising messages to be displayed on every device you sign in to with your Google account.

To support this feature, Google Analytics collects google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.

You can permanently opt-out of cross-device remarketing/targeting by disabling personalized advertising in your Google account; follow this link:
https://www.google.com/settings/ads/onweb/ 

The aggregation of the collected data in your Google account takes place exclusively on the basis of your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). For data collection processes that are not merged into your Google account (e.g., because you do not have a Google account or have objected to the merge), the data collection is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

Further information and the privacy policy can be found in Google's privacy policy:
https://policies.google.com/technologies/ads?hl=de 

Privacy Policy for the Use and Application of Google Ads and Google Conversion Tracking

This website uses Google Ads. Google Ads is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google Ads, we use conversion tracking. When you click on an ad served by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in tracking, you can object to this use by easily disabling the Google Conversion Tracking cookie in your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

More information about Google Ads and Google Conversion Tracking can be found in Google's privacy policy:
https://www.google.de/intl/de/policies/privacy/ 

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally, and to activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.

Privacy Policy for the Use and Application of Facebook Pixel

Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion measurement.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This enables the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous to us as the operators of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook Data Usage Policy. This allows Facebook to display ads on Facebook pages as well as outside of Facebook. This use of data cannot be influenced by us as the site operator.

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media.

For more information on protecting your privacy, please refer to Facebook's privacy policy:
https://de-de.facebook.com/about/privacy/ 

You can also disable the “Custom Audiences” remarketing feature in the ad settings section at. https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/ 

Privacy Policy for the Use and Application of LinkedIn Insight Tag

Our website uses the LinkedIn Insight Tag conversion tool of LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser, which allows the collection of data such as IP address, device and browser properties, and page events (e.g., page views). This data is encrypted, anonymized within seven days, and the anonymized data is deleted within 90 days. LinkedIn does not share any personal data with us but offers anonymized reports on website audience and ad performance. LinkedIn also offers retargeting via the Insight Tag. We can use this data to display targeted ads outside our website without identifying you as a website visitor.

For more information on LinkedIn's privacy, please refer to LinkedIn's privacy policy.

Members of LinkedIn can control the use of their personal data for advertising purposes in their account settings. To disable the Insight Tag on our website (“Opt-out”), click on the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out 

Privacy Policy for the Use of YouTube

We have integrated components from YouTube on this website. YouTube is an internet video portal that allows video publishers to upload video clips free of charge and other users to view, rate, and comment on these videos for free. YouTube allows the publication of all types of videos, so complete movies and TV shows, as well as music videos, trailers, or user-made videos, are available via the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, is called up, the internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be obtained at https://www.youtube.com/yt/about/de/. As part of this technical procedure, YouTube and Google gain knowledge of which specific sub-page of our website was visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognizes which specific sub-page of our website the data subject is visiting by calling up a sub-page containing a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information through the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the time of calling up our website; this happens regardless of whether the data subject clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desired by the data subject, the data subject can prevent the transmission by logging out of their YouTube account before accessing our website.

The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing, and use of personal data by YouTube and Google.

Privacy Policy for the Use of HubSpot

This website uses HubSpot. HubSpot is a software solution for inbound marketing management and implementation. The stored information is stored on HubSpot's servers. They can be used by us to contact visitors to our website and to determine which services of our company are of interest to them. All information we collect is subject to this privacy policy. We use all information collected solely to optimize our marketing.

HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500. HubSpot is subject to TRUSTe's Privacy Seal and the U.S. - EU Safe Harbor Framework and the U.S. - Swiss Safe Harbor Framework.

Privacy Policy for the Use of Calendly

You have the option to register for a callback on our website. We use the online calendar “Calendly” to request and select an appointment. “Calendly” is an offer from Calendly, LLC, 3423 Piedmont Road NE, Atlanta, GA 30305-1754, United States.

When you press the callback appointment button, you will automatically be connected to our appointment account at Calendly. After choosing your appointment, confirming it, and entering your contact details and concerns, you will receive an email from Calendly confirming your appointment. For more information about Calendly and privacy at Calendly, please refer to:
https://calendly.com/pages/privacy 

The information you provide in the Calendly form, including the data you enter there, will be stored by us for the purpose of processing the request and in case of follow-up questions. These data remain with us until you request us to delete them, revoke your consent to store them, or the purpose for data storage no longer applies (e.g., after the appointment has taken place). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Privacy Policy for the Use of Google Maps

We use the "Google Maps" component of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google."

Each time the "Google Maps" component is accessed, Google sets a cookie to process user settings and data when displaying the page on which the "Google Maps" component is integrated. This cookie is generally not deleted by closing the browser but expires after a certain period unless you manually delete it earlier.

If you disagree with this processing of your data, it is possible to disable the "Google Maps" service and thus prevent the transmission of data to Google. For this, you must deactivate the JavaScript function in your browser. We point out, however, that in this case, you will not be able to use the "Google Maps" or only to a limited extent.

"Google Maps" is in accordance with the Google Terms of Use and the additional terms and conditions for "Google Maps".

Links:
http://www.google.de/intl/de/policies/terms/regional.html 
https://www.google.com/intl/de_de/help/terms_maps.html 

Privacy Policy for the Use of Google Fonts

This website uses external fonts, Google Fonts. Google Fonts is a service of Google Inc. (“Google”). The integration of these web fonts is done by a server call, usually a Google server in the USA. This transmits to the server which of our internet pages you have visited. Also, the IP address of the browser of the visitor's terminal device is stored by Google.

Privacy Policy for the Use of Newsletter

If you wish to receive the newsletter offered on the website, we need your email address as well as information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No further data will be collected or only on a voluntary basis. We use this data exclusively for the dispatch of the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of data, the email address, and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data deposited with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after unsubscribing from the newsletter. Data stored for other purposes remain unaffected.

More Social-Media Plug-Ins

If we use additional social media plug-ins, you will find more detailed information on data protection in the respective data protection declarations of these providers. If you cannot find them, please contact us at the address given in our imprint.

Legal bases

Art. 6 para. 1 lit. f DSGVO

(legitimate interest)

Storage purpose

The purpose and legitimate interest in the setting of third-party cookies is to improve our offer to you by analysing your user behaviour. As a rule, only a pseudonymised data transmission to the third parties takes place. In addition, it is up to you to prevent the transmission of third party cookies by making the appropriate settings in your Internet browser. Please compare the above information on the individual third-party providers in detail.

Storage time

Third-party cookies are stored on the user’s computer and transferred to our site by the user. Therefore, you as a user also have full control over the use of third party cookies.

Removal & objection possibility

You can disable or restrict the transmission of third-party cookies by changing the settings in your Internet browser. Already stored third party cookies can be deleted at any time. This can also be done automatically.

The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the Flash Player settings.

Your rights

If personal data are processed by you, you are affected within the meaning of the DSGVO and you have the following rights vis-à-vis the person responsible:

Informational rights

You can ask the person in charge to confirm whether personal data concerning you will be processed by us.

If such processing has taken place, you can request the following information from the person responsible:

1. the purposes for which the personal data are processed;
2. the categories of personal data processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
4. the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
5. the existence of a right to have your personal data concerning you corrected or deleted, a right to have processing restricted by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. any available information on the origin of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) DSGVO and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO in connection with the transmission.

Right to correction

You have a right of rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.

Right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

1. if you dispute the accuracy of the personal data concerning you for a period of time that enables the data controller to verify the accuracy of the personal data;
2. the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
3. the controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or
4. if you have filed an objection to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

Right to cancellation

Duty of deletion

You may request the data controller to delete the personal data relating to you without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:

1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no other legal basis for the processing.
3. You file an objection against the processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 DSGVO.
4. The personal data concerning you have been processed unlawfully.
5. The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
6. The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

Information to third parties

If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 DSGVO, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

Exemptions

The right to cancellation does not exist insofar as the processing is necessary

1. to exercise freedom of expression and information;
2. for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
3. for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar
5. as the law referred to under a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or
6. to assert, exercise or defend legal claims.

Furthermore, there is no right to deletion if the personal data must be stored by the person responsible due to statutory retention obligations and periods. In such a case, the personal data will be blocked instead of being deleted.

Right to information

If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

The person responsible shall have the right to be informed of such recipients.

Right to data transferability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable and interoperable format. In addition, you have the right to pass this data on to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided that

1. processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
2. processing is carried out using automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the DSBER; this also applies to profiling based on these provisions.

The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time and without giving reasons. In the event of revocation, we will immediately delete your personal data and no longer process them.  The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.

Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the DSGVO.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

Changes to this Privacy Policy

The status of the data protection declaration is indicated by the date indicated (below). We reserve the right to change this data protection declaration at any time with effect for the future. A current version can be called up directly via the online offer. Please visit the website regularly and inform yourself about the applicable data protection declaration.