With this Privacy Policy, we would like to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to simply as “data”). Personal data means any information relating to you personally, such as your name, address, email address or user behavior. This Privacy Policy applies to all data processing activities carried out by us, both as part of our core business activities and in connection with the online media we operate.

Who is responsible for data processing?

The party responsible for data processing is:

PRODUCT PLACEMENT 4 YOU GmbH
Joerg Varlemann
Potsdamer Platz 1
10785 Berlin
Germany
+49 (30) 298 202 280
contact@productplacement4you.com
www.productplacement4you.com/impressum

Contact Details of Our Data Protection Officer

You can contact our Data Protection Officer by email or by post at our postal address, adding “Attn: Data Protection Officer” to the address.

Your Rights under the GDPR

Under the GDPR, you have the following rights, which you may exercise at any time by contacting the controller named in Section 1 of this Privacy Policy:

• Right of access: You have the right to request information from us as to whether and which data we process about you.
• Right to rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure: You have the right to request the deletion of your data.
• Right to restriction of processing: In certain cases, you have the right to request that we restrict the processing of your data.
• Right to data portability: You have the right to request that we provide your data to you or another controller in a structured, commonly used and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is the authority at your habitual place of residence, place of work or our registered office.

Right to Withdraw Consent

You have the right to withdraw your consent to the processing of your personal data at any time.

Right to Object

You have the right to object at any time to the processing of your data that we carry out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. If you exercise your right to object, we ask you to provide the reasons for your objection. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms.

Irrespective of the foregoing, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please address your objection to the contact address of the controller stated above.

When Do We Delete Your Data?

We delete your data when we no longer need it or when you request us to do so. This means that, unless otherwise specified in the individual privacy notices contained in this Privacy Policy, we delete your data:

• when the purpose of the data processing has ceased to apply and, consequently, the respective legal basis stated in the individual privacy notices no longer exists, for example:
  
  • after termination of the contractual or membership relationship existing between us (Art. 6(1)(a) GDPR), or
  • after our legitimate interest in further processing or storing your data has ceased to exist (Art. 6(1)(f) GDPR);
• if you exercise your right to withdraw consent and there is no other applicable legal basis for processing pursuant to Art. 6(1)(b)–(f) GDPR;
• if you exercise your right to object and there are no compelling legitimate grounds preventing the deletion.

However, if we are required to retain certain parts of your data for other purposes, for example because of statutory retention periods under tax law (generally 6 years for business correspondence and 10 years for accounting records) or because this is necessary for the assertion, exercise or defense of legal claims arising from contractual relationships (up to four years), or because the data is required to protect the rights of another natural or legal person, we will delete the relevant data only after these periods have expired. Until then, we restrict the processing of such data to these purposes (compliance with statutory retention obligations).

Cloud Services

We use cloud services in particular:

• to store and process documents;
• to send documents by email and exchange files of any kind;
• for calendar and appointment management;
• to prepare and create presentations and spreadsheets;
• to publish files of any kind;
• for internal and external communication by means of chats, audio and video conferences.

The software applications we use for these purposes are provided to us by the providers listed below on their servers. We access these servers via the Internet. Where you provide us with your data as part of communication with us or in connection with other processes described in this Privacy Policy, we process this data within the cloud service we use. This means that your data is stored on the servers of the third-party cloud service provider. The third-party providers process usage data and metadata to secure their servers and optimize their services. In particular, we process and store your contact, customer and contractual data.

If we use the cloud service to make files of any kind publicly available through our website, the respective third-party cloud service provider may store cookies on your computer if you access these files. The service provider may process the data collected in this way to analyze your usage behavior and browser settings.

Please note that, depending on the country in which the service provider listed below is based, the data described below may be transferred to and processed on servers outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that the enforcement of your rights may be difficult or impossible. If the service provider we use offers data processing exclusively within the EU, we intend—unless this has already been implemented—to process your data exclusively within the EU.

Data concerned:

• Master data (e.g. names, addresses)
• Contact data (e.g. email addresses, telephone and mobile phone numbers)
• Content data (e.g. photos, videos, texts)
• Usage data (e.g. access times, websites visited, interest in content)
• Metadata (e.g. IP address, computer system information)

Data subjects: Prospective customers, communication partners, customers, employees (e.g. applicants, current and former employees)

Purpose of processing: Organization of office and administrative tasks

Legal basis: Consent, Art. 6(1)(a) GDPR; performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legitimate interests, Art. 6(1)(f) GDPR

Cloud Service Provider Used

Dropbox

Service provider: Dropbox, Inc., 333 Brannan Street, San Francisco, California 94107, USA
Website: https://www.dropbox.com/de
Privacy Policy: https://www.dropbox.com/privacy

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the device you use. Cookies are primarily used to exchange information between your device and our website. This includes, among other things, language settings on a website, login status or the position at which a video was watched.

When visiting our websites, two types of cookies are used:

Temporary cookies (session cookies): These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. Session cookies are deleted when you log out or close your browser.

Permanent cookies: Permanent cookies remain stored even after you close your browser. This allows our website to recognize your computer when you return to our website. These cookies may store information such as language settings or login information. They may also be used to document and store your browsing behavior. This data may be used for statistical, marketing and personalization purposes.

In addition to the above classification, cookies can also be distinguished according to their purpose:

Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, for example to store logins or shopping carts for the duration of your session, or cookies that are set for security reasons.

Statistical, marketing and personalization cookies: These cookies are used for analysis purposes or to measure reach. Such “tracking” cookies may store information about search terms entered or the frequency of page views. The browsing behavior of an individual user (e.g. viewing certain content, using certain functions, etc.) may also be stored in a user profile. Such profiles are used to display content to users that corresponds to their potential interests. If we use services through which cookies for statistical, marketing and personalization purposes are stored on your device, we will inform you separately about this in the relevant sections of this Privacy Policy or when obtaining your consent.

Data concerned:

• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our online services

Purpose of processing: Delivery of our websites, ensuring the operation of our websites, improving our online offering, communication and marketing

Legal basis:
Legitimate interest, Art. 6(1)(f) GDPR
If we do not obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, in particular its content and functions. You can object to the use of cookies set by us on the basis of our legitimate interest via your browser’s security settings. There you can specify, for example, whether you do not want to accept cookies at all, only accept them upon request, or have cookies deleted each time you close your browser. If cookies are disabled for our website, it may no longer be possible to use all functions of the website fully.

Consent, Art. 6(1)(a) GDPR
If, before visiting our website, we ask you for permission to place certain cookies on your device and you consent to this, your consent constitutes the legal basis for processing. As part of the consent process, we inform you which cookies we set individually. If you do not give your consent, only technically necessary cookies will be set that are required for the proper operation of our websites and their display in your browser. If you have consented to the use of cookies, you may withdraw your consent from us at any time.

Web Hosting

We use a service provider to host our websites. This means that our websites are stored on the provider’s servers and made available for retrieval over the Internet. In this context, the provider may process all data transmitted via the browser you use that arises when using our websites. This includes, in particular, your IP address, which the provider requires to deliver our online offering to your browser, as well as all information you enter via our website. In addition, the provider we use may collect:

• the date and time of access to our website;
• the time zone difference from Greenwich Mean Time (GMT);
• access status (HTTP status);
• the amount of data transferred;
• the Internet service provider of the accessing system;
• the browser type and version you use;
• the operating system you use;
• the website from which you may have accessed our website; and
• the pages and subpages you visit on our website.

The above data is stored as log files on our provider’s servers. This is necessary to ensure the stability and security of our website.

Data concerned:

• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our website

Purpose of processing: Delivery of our websites and ensuring their operation

Legal basis: Legitimate interest, Art. 6(1)(f) GDPR

Web Host Commissioned by Us

Pagejumper
Service provider: Pagejumper
Address: Hans-Oster-Straße 3, 04157 Leipzig, Germany
Privacy Policy: www.pagejumper.de

Contact

If you contact us by email, social media, telephone, fax, post, our contact form or any other means and provide us with personal data such as your name, telephone number or email address, or provide other information about yourself or your request, we process this data to respond to your inquiry within the context of our existing pre-contractual or contractual relationship.

Data concerned:

• Master data (e.g. names, addresses)
• Contact data (e.g. email address, telephone number, postal address)
• Content data (texts, photos, videos)
• Contract data (e.g. subject matter and duration of the contract)

Data subjects: Prospective customers, customers, business and contractual partners

Purpose of processing: Communication and responding to contact inquiries, office and organizational procedures

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legitimate interest, Art. 6(1)(f) GDPR

Processing of Your Data During the Application Process

If you apply to us, we process the personal data you provide during the application process, such as your name, address, place of residence, age, application photograph, email address and telephone number, as well as your professional background, including schools, vocational training and university education. If you send us your data by email or via a contact form on our website, the processing takes place electronically. If you submit your application via the contact form, your data is transmitted in encrypted form in accordance with the current state of the art. If you send your data by email, please note that transmission is generally unencrypted. If an employment contract is subsequently concluded, we store your data for the purpose of managing the employment relationship in compliance with the applicable statutory provisions.

Data concerned:

• Master data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices)
• Contact data (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter and duration of the contract)

Data subjects: Applicants

Purpose of processing: Handling the application process

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legal obligation, Art. 6(1)(c) GDPR

Deletion: If no employment contract is concluded, your data will be deleted after completion of the application process or, at the latest, two months after its completion. This does not apply if statutory provisions prevent deletion or if further storage of your data is necessary for evidentiary purposes, for example in proceedings under the General Act on Equal Treatment (AGG). The application process is deemed completed when the rejection is sent to you.

Registration, Login and User Account

You have the option of registering on our online platform to create a user account. This requires the provision of personal data as specified in the relevant input form. This includes, in particular, your name, email address, and, where applicable, a username and password. We store and process this data in order to set up a user account for you and enable repeated login. You may change or delete the data at any time. The data will not be passed on to third parties unless this is necessary for the technical and organizational handling of the user agreement between us. To protect you and us against fraudulent registrations, we store the IP address assigned to you at the time of registration, as well as the date and time of registration.

Data concerned:

• Master data (e.g. names, addresses)
• Contact data (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter and duration of the contract)
• Payment data (e.g. bank details, invoices)
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Purpose of processing: Performance of contractual services, communication and responding to contact inquiries, security measures

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legal obligation, Art. 6(1)(c) GDPR; legitimate interest, Art. 6(1)(f) GDPR

Deletion: Please refer to the section “When Do We Delete Your Data?”. In addition, please note that we will delete the data collected during registration and the content data stored in your account, subject to statutory retention obligations, as soon as you delete your account. If you wish or need to access content stored in your account after deleting your account, please back up this data elsewhere before deleting the account.

Your Comments or Reviews

You have the opportunity to comment on our posts, express your opinion or upload content in the designated areas of our website. Since we may ourselves be held liable under certain circumstances for unlawful content in your comments (such as insults, defamatory criticism, incitement to hatred or prohibited depictions of violence), we store your IP address for a period of seven days in order to be able to determine your identity if necessary.

Legal basis: Art. 6(1)(f) GDPR

Data concerned:

• Master data (e.g. names, addresses)
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Purpose of processing: Fulfillment of contractual obligations, communication and handling of inquiries, obtaining feedback, security measures

Processing of Your Data When Placing an Order in Our Online Shop

If you place orders through our online shop, we process the information you provide during the ordering process in order to process your order. This includes, in particular, your name, address and electronic contact details, information required to process payment, and information relating to your specific order. We will inform you during the ordering process which data is required in each individual case.

If this is necessary to fulfill the contract concluded with you, protect your vital interests or comply with statutory provisions, we may transfer your data to third parties in compliance with your rights, such as the logistics company commissioned with delivery, payment service providers for payment processing, and our tax advisor. Where we use third-party providers to provide our services, the privacy notices of the respective third-party providers apply.

User accounts: You may voluntarily create a user account in which you can view and manage your orders. If you terminate your account, your data will be deleted. You are responsible for backing up your data before terminating the account. We use transient cookies (see the definition under “Cookies” above) to store shopping cart contents and persistent cookies to store login status. When you place an order, register for a user account or log in again, we store your IP address and the time of the respective user action. The purpose of storing this information is to protect both our legitimate interests and yours against misuse and other unauthorized use.

Data concerned:

• Master data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices)
• Contact data (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter and duration of the contract)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Customers, prospective customers, business and contractual partners

Purpose of processing: Processing orders, communication and, where applicable, marketing and responding to inquiries, data security, office and organizational procedures

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legal obligation, Art. 6(1)(c) GDPR; legitimate interest, Art. 6(1)(f) GDPR

Payment Service Providers

In accordance with our statutory obligations and our legitimate interests in efficient, secure and customer-oriented payment processing, persons who have entered into a contract or other legal relationship with us may use banks, credit institutions and other payment service providers to make payments. The payment service providers we offer process master data in this context, including names, addresses and bank details such as account or credit card numbers, passwords, TANs and verification numbers, as well as information about the contract concluded and the recipient of the payment.

The data collected in this context is required to process the payment through the payment service provider. Only the payment service provider commissioned by us collects and processes this personal information. We never receive information about your bank account or credit card details. Our payment service provider informs us whether or not our customers’ payments have been received. Payment service providers may also forward customer data to credit reporting agencies in order to verify the identity and creditworthiness of the person making the payment. In this respect, please refer to the privacy policies and general terms and conditions of our payment service providers.

The terms and conditions and privacy policies of the respective payment service provider apply. You can find these notices on the relevant provider’s website or in the transaction application. For further information and to exercise your rights regarding withdrawal of consent and access, please refer to the provisions of the respective service provider.

Data concerned:

• Master data (e.g. name, address)
• Usage data (e.g. websites visited, interest in certain topics, access times)
• Payment data (e.g. bank details, invoices, payment history)
• Business transaction data (e.g. contract duration, customer category, subject matter of the contract)
• Communication and metadata (e.g. IP address, information about the device or computer system)

Purpose of processing: Effective, secure and customer-oriented payment services and processing of payments in accordance with contractual agreements

Legal basis: Performance of a contract and fulfillment of pre-contractual inquiries, Art. 6(1)(b) GDPR; legitimate interests, Art. 6(1)(f) GDPR

Withdrawal options: You may withdraw your consent to the use of your personal data from the respective payment service provider at any time. Despite such withdrawal, the payment service provider may remain entitled to process, use and transmit personal data that is strictly necessary for contractual payment processing. With regard to the storage and timely deletion of personal data, please refer to the respective privacy provisions of the payment service provider.

Payment Service Providers We Use

PayPal
Service provider: PayPal (Europe) S.à.r.l. et Cie., S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg
Website: https://www.paypal.com/de/webapps/mpp/home
Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full#

Stripe

Service provider: Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA
Website: https://stripe.com/de
Privacy Policy: https://stripe.com/de/privacy

Online Advertising

We use services to display online advertising. The services we use collect certain user data through cookies or pixels. This includes, in particular, information about the website from which you reached our website (so-called referrer), the pages of our website you accessed, how long you visited our pages and which interactions you performed there. Data relating to the browser, computer system and device type you use may also be collected. Such a service may also collect demographic information, such as age or gender, in pseudonymous form. If you have consented to the collection of location data, this may also be processed depending on the provider. To collect and store this data, the respective service places a cookie or so-called tracking pixel on your device, which also collects the IP address assigned to you. However, the IP address is shortened using an IP masking procedure so that it can no longer be associated with your visit to our website. As a general rule, clear-text data such as names or email addresses is not stored when using the relevant service. This only occurs if you are a member of a social network offering one of the services listed below and your profile is combined with the aforementioned data.

The data is evaluated by the service we use to produce reports containing statistical information about the number of visitors generated through advertising and the success of advertising campaigns. These reports include, among other things, the total number of users redirected to our website via our advertisements. The reports also contain information about users’ devices and browsers, their locations and the times at which advertisements were clicked. However, the reports do not contain information that would personally identify you as a user of our website.

Please note that, depending on the location of the service provider, data collected through the service may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or impossible.

Data concerned:

• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our online services

Purpose of processing: Reach measurement, monitoring of campaign success, remarketing, and interest- and behavior-based marketing

Legal basis: If we ask for your consent before using the respective service, this constitutes the legal basis, Art. 6(1)(a) GDPR. Otherwise, we use the respective service on the basis of our legitimate interest in directing visitor traffic to our website and analyzing this traffic in order to continuously improve our functions, services and user experience, Art. 6(1)(f) GDPR.

Online Advertising Service Provider

Google Ads
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
European office: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://ads.google.com/home/
Privacy Policy: http://www.google.de/intl/de/policies/privacy

Newsletter

We regularly send a newsletter to inform our customers, business partners and prospective customers about our offers and related news. You have the opportunity to subscribe to our newsletter on our website and consent to receiving it as part of the registration process. When subscribing to our newsletter, providing your email address is mandatory. We store your email address so that we can send you the newsletter. Once you subscribe to our newsletter, you will receive a confirmation email at the email address provided during registration as part of the so-called double opt-in procedure. This email contains a link. By clicking on this link, you confirm that you wish to receive the newsletter. This ensures that your email address was not misused by a third party when registering. For the same reason, we store the date and time of registration and the IP address assigned to you at the time of registration. We do not pass this data on to third parties.

Data concerned:

• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our website

Purpose of processing: Delivery of our website and ensuring its operation

Legal basis: Consent, Art. 6(1)(a) GDPR; legitimate interest, Art. 6(1)(f) GDPR

Deletion: The email address will be deleted either if you have not clicked the confirmation link within one month after the confirmation email was sent as part of the double opt-in procedure, or immediately after you unsubscribe from our newsletter.

Withdrawal: You may withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent by:

• clicking the corresponding link provided in the newsletter.

Mailchimp

Service provider: “Mailchimp” – Rocket Science Group LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA
Website: https://mailchimp.com
Privacy Policy: https://mailchimp.com/legal/privacy/

Web Analytics and Statistics

To record and statistically evaluate visitor traffic to our website, we use web analytics services. Such services collect, among other things, data about the website from which you reached our website (so-called referrer), the pages of our website you accessed, how long you visited our pages and which interactions you performed there. Data relating to your browser, computer system and device type may also be collected. Such a service may also collect demographic information, such as age or gender, in pseudonymous form. If you have consented to the collection of location data, this may also be processed depending on the provider.

To collect and store this data, the web analytics service we use generally places a cookie on your device, which also collects the IP address assigned to you. However, the IP address is shortened using an IP masking procedure so that it can no longer be associated with your visit to our website. No clear-text data such as names or email addresses is otherwise stored. Neither we nor the service provider we use knows the identity of visitors to our website.

When collecting data, however, the service provider may use cookies to create pseudonymous usage profiles containing information from the use of different devices.

Please note that, depending on the country in which the service provider listed below is based, data collected through the service may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or impossible.

Data concerned:

• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our online services

Purpose of processing: Reach measurement, monitoring of campaign success, remarketing, and interest- and behavior-based marketing

Legal basis: If we ask for your consent before using the respective service, this constitutes the legal basis, Art. 6(1)(a) GDPR. Otherwise, we use the respective service on the basis of our legitimate interest in analyzing visitor traffic to our websites in order to continuously improve the functions, services and user experience, Art. 6(1)(f) GDPR.

Web Analytics Services We Use

Google Analytics 4
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU office: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Privacy Policy: https://policies.google.com/privacy?hl=de

Information on data transfer to Google Analytics servers: When our website is accessed from within the EU (based on the geographical location determined from the IP address), the IP address assigned to you is collected exclusively via servers in the EU and used as geolocation data, after which it is immediately deleted. It is neither logged nor otherwise used. The remaining measurement data is subsequently transferred to Google Analytics servers for evaluation.

Opt-out option: If you do not want Google Analytics to use your data, you can install an opt-out plugin that will prevent data relating to you from being collected on our website in the future. The plugin is available here: https://tools.google.com/dlpage/gaoptout?hl=de

Jetpack
Service provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA
Website: https://automattic.com
Privacy Policy: https://automattic.com/privacy/

Third-Party Plugins We Use

We have integrated plugins on our website in the form of “social media buttons” provided by the services we use. You can identify which plugin belongs to which provider by the respective logo with which the plugin is marked. When you access a page of our online presence on which such a plugin is implemented, a connection is automatically established between your browser and the provider’s servers, and the provider places a cookie on your device. Data may be transmitted even if you do not have an account with the respective social network or have an account but are not logged in when visiting our website. Additional data is transmitted to the provider as a result of further interactions with the respective social plugin (e.g. clicking the “Like” button on Facebook or the “Re-Tweet” button on Twitter).

Please note that, depending on the location of the service provider, the data described below may be transferred to and processed on servers outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or impossible.

Data concerned:

• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our website

Purpose of processing: Delivery of our websites, provision of content, ensuring the operation of our websites

Legal basis: Consent via the cookie consent banner, Art. 6(1)(a) GDPR; legitimate interests, Art. 6(1)(f) GDPR

Plugins We Use

Google (Invisible) reCAPTCHA
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: https://developers.google.com/recaptcha/docs/invisible
Privacy Policy: http://www.google.de/intl/de/policies/privacy

Our Social Media Presences

We maintain online presences on the social networks listed below. If you visit one of these presences, the respective provider collects and processes the data described below. As a rule, this data is collected for advertising and market research purposes and used to create usage profiles. Usage profiles may contain data independently of the device you use. This is particularly the case if you are a member of the respective platform and logged in. Providers may use these usage profiles to display interest-based advertising to you. You have the right to object to the creation of such user profiles. To exercise this right, you must contact the respective provider.

If you have an account with one of the providers listed below and are logged in when visiting our website, the respective provider may collect data about your usage behavior on our website. To prevent such linking of your data, you can log out of the provider’s service before visiting our website.

For information on the purpose and scope of data collection by the respective provider, please refer to the privacy policies listed below.

Please note that, depending on the country in which the provider listed below is based, data collected through its platform may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or impossible.

Data concerned:

• Master and contact data (e.g. name, address, telephone number, email address)
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Purpose of processing: Communication and marketing, tracking and analysis of user behavior

Legal basis: Consent, Art. 6(1)(a) GDPR; legitimate interests, Art. 6(1)(f) GDPR

Objection options: For the respective objection/opt-out options, please refer to the information provided by the respective providers below.

Facebook

Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU office: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.facebook.com/
Privacy Policy: https://www.facebook.com/about/privacy/
Privacy Policy for Facebook Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU office: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.instagram.com/
Privacy Policy: http://instagram.com/about/legal/privacy

LinkedIn

Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
German office: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich, Germany
Website: https://www.linkedin.com/?trk=nav_logo
Privacy Policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Pinterest

Service provider: Pinterest Inc., 635 High Street, Palo Alto, CA 94301, USA
EU office: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
Website: https://www.pinterest.de/
Privacy Policy: https://about.pinterest.com/de/privacy-policy

TikTok

Service provider: musical.ly Inc., 10351 Santa Monica Boulevard #310, Los Angeles, CA 90025, USA
EU office: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Website: https://www.tiktok.com/de/
Privacy Policy: https://www.tiktok.com/de/privacy-policy

Twitter

Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Website: https://twitter.com/?lang=de
Privacy Policy: https://twitter.com/de/privacy

WhatsApp

Service provider: WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA
EU office: WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.whatsapp.com/
Privacy Policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

Messenger Services

We communicate via messenger services. Messenger services are chat programs that enable users to send text messages, as well as image or video files, in real time over the Internet. Messenger services may also be used to send emoticons, electronic greeting cards and contacts. In order to transmit messages, participants must connect to each other directly or via a server using a computer program (known as a client) over a network such as the Internet. As a rule, messages can also be sent when the conversation partner is not online. In such cases, the message is temporarily stored on the service’s server and delivered to the recipient once they become available again. These services may also be used for screen sharing and online games.

If the service uses end-to-end encryption for the content sent (texts, attachments), only the selected communication partners, but not third parties or the service provider itself, can view the message. We therefore recommend regularly installing updates for the service to ensure the encryption of content. However, the service provider may have access to communication metadata. This includes the time and, depending on the settings, location of the communication, as well as the device you use.

Please note that, depending on the country in which the provider listed below is based, data collected through its platform may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or impossible.

Data concerned:

• Master and contact data (e.g. name, telephone number, email address)
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Purpose of processing: Communication and marketing

Legal basis: If we ask for your consent before using the respective service, this constitutes the legal basis, Art. 6(1)(a) GDPR. We expressly clarify that we will not initially transmit your contact details to the service provider without your consent. If we communicate with you via one of the services listed below as part of initiating a contract or within the context of an existing contractual relationship, the legal basis is the performance or preparation of the contract, Art. 6(1)(b) GDPR. Otherwise, we rely on our legitimate interests in fast and efficient communication and in meeting the communication needs of our communication partners via the services listed below, Art. 6(1)(f) GDPR.

Objection options: You may withdraw consent given to us for the use of the relevant service at any time. You may also object to communication via the messenger service at any time.

Messenger Service We Use

WhatsApp
Service provider: WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA
EU office: WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.whatsapp.com/
Privacy Policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

Chat Software

We use the Userlike chat software on our website to enable visitors to communicate with us quickly and directly. When you use the chat function, the personal data you provide as part of the communication is processed. This may include, in particular, your name, e-mail address and the content of your communication. In addition, technical data such as the date and time the chat was initiated, browser type and browser version, IP address, operating system used, the website previously visited and the amount of data transmitted may be processed. Depending on the content of your enquiry, additional personal data that you voluntarily provide to us during the chat may also be processed.

The data is processed for the purpose of handling and responding to your enquiry and for communicating with you. The processing is based on our legitimate interest in efficient and user-friendly communication with visitors to our website pursuant to Art. 6 para. 1 lit. f GDPR. Where consent is required for the use of the service, the processing is based on Art. 6 para. 1 lit. a GDPR.

Data concerned:

• Master and contact data (e.g. name, telephone number, e-mail address)
• Content data (e.g. chat messages and other content you provide)
• Usage data (e.g. time and duration of communication)
• Communication and metadata (e.g. IP address, information about the browser, operating system and computer system used)

Data subjects: Users of our website, interested parties, customers as well as business and contractual partners

Purpose of processing: Communication with visitors to our website, handling and responding to enquiries, and customer support

Legal basis: Legitimate interests, Art. 6 para. 1 lit. f GDPR, and, where required, consent, Art. 6 para. 1 lit. a GDPR

Chat Service We Use

Lime Connect (Userlike)
Service provider: Lime Connect (Userlike) GmbH, Kölnturm, Im Mediapark 8, 50670 Köln, Germany
Website: Lime Connect (Userlike)
Privacy Policy: Lime Connect Privacy Policy

Appointment Scheduling via Calendly 

We provide the option on our website to schedule appointments with us via a link. For this purpose, we use the Calendly service. When you click on the relevant link, you are redirected to the Calendly website, where you can select and book an appointment.

We also offer the option of scheduling appointments via Calendly through links in emails sent to interested parties and customers. When you access such a link, you are likewise redirected to the Calendly appointment booking page.

When using the appointment booking function, personal data is processed. This may include, in particular, your name, email address, telephone number, as well as the information you provide during the appointment scheduling process and the appointment details you select. Depending on the configuration of the appointment booking, additional personal data may be processed that you voluntarily provide.

In addition, Calendly may process technical data such as your IP address, browser type and version, operating system, date and time of access, as well as other usage and communication data.

The processing of data serves the purpose of scheduling, organizing and managing appointments as well as communicating with you in connection with the scheduled appointment. The processing is based on our legitimate interest in providing an efficient and user-friendly appointment scheduling process pursuant to Art. 6 para. 1 lit. f GDPR. If the appointment scheduling serves to initiate a contract, the processing may also be based on Art. 6 para. 1 lit. b GDPR.

Calendly may use cookies and similar technologies when providing its services. When accessing the Calendly website, you will be informed about the use of such cookies and will have the option to accept or reject them. The processing by Calendly is therefore subject to Calendly’s privacy policy and cookie settings.

Data concerned:

• Master and contact data (e.g. name, email address, telephone number)
• Appointment and contractual data (e.g. selected appointment, time and purpose of the meeting)
• Content data (e.g. information voluntarily provided during the appointment scheduling process)
• Usage data (e.g. access times and use of the appointment booking page)
• Communication and metadata (e.g. IP address, browser information, operating system and device information)
• Cookie and similar technology data, where applicable

Data subjects: Users of our website, interested parties, customers as well as business and contractual partners

Purpose of processing: Appointment scheduling, organization and management of appointments as well as communication with interested parties and customers

Legal basis: Legitimate interests, Art. 6 para. 1 lit. f GDPR; where the appointment scheduling serves to initiate a contract, Art. 6 para. 1 lit. b GDPR

Appointment scheduling Service We Use

Calendly
Service provider: Calendly, LLC, 115 E. 23rd Street, New York, NY 10010, USA
Website: Calendly
Privacy Policy: Calendly Privacy Notice

Content Services

We use certain services to display specific content or graphics (videos, images, music, fonts, maps) on our website. For this purpose, the services we use process the IP address assigned to you at the time of your visit to our website, as this is the only way the respective content can be displayed in the browser you use. In addition, the providers of these services may place further cookies on your device through which information about your usage behavior, interests, device and browser, as well as the time and duration of your session, is collected. The providers regularly use this data for analysis, statistical and marketing purposes. This information may also be combined with information from other sources. This applies in particular if you have an account with the service provider and are logged in at the time of the session.

Please note that, depending on the country in which the service provider is based, the data described below may be transferred to and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that enforcement of your rights may be difficult or impossible.

Data concerned:

• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our website

Purpose of processing: Delivery of our websites, provision of content, ensuring the operation of our websites

Legal basis: Consent via the cookie consent banner, Art. 6(1)(a) GDPR; legitimate interests, Art. 6(1)(f) GDPR

Google Maps

We use Google Maps on our website. Google collects and processes the visitor’s IP address. When you visit a website on which Google Maps is integrated, your IP address and location data (the latter generally only with your consent) are transmitted to Google, regardless of whether you actually use Google Maps or are logged into your Google account. If you are logged into your Google account when visiting our website, your IP address may be associated with your Google account.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.de/maps
Privacy Policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

Vimeo

We use components from Vimeo on this website to embed videos on our websites so that they can be played through your web browser when you visit our websites. This process requires Vimeo to process the IP address assigned to you, as otherwise the content could not be sent to your browser. Vimeo recognizes when you visit one of our pages containing an embedded Vimeo video if you are logged in to Vimeo. This information is also transmitted to Vimeo even if you do not click on the Vimeo video. Vimeo collects this information and associates it with your Vimeo account.

Service provider: Vimeo LLC, 555 West 18th Street, New York 10011, USA
Website: https://vimeo.com/de/
Privacy Policy: https://vimeo.com/privacy

YouTube

We use components from YouTube on this website to embed videos on our websites so that they can be played through your web browser when you visit our websites. During your visit to our websites, both YouTube and Google are informed about which page or subpage you have accessed because your IP address is transmitted to Google’s external servers in the USA. This transmission takes place regardless of whether you actually watch or click on the videos displayed or whether you are logged into your YouTube or Google account. This information is collected and associated with your Google account if you are logged in when you access our website.

Service provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Privacy Policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

Security Measures

We also take technical and organizational security measures in accordance with the state of the art in order to comply with data protection legislation and protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

Current Status and Amendments to this Privacy Policy

This Privacy Policy is currently valid and was last updated in August 2026. Due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.

This Privacy Policy was created with the assistance of the Privacy Policy Generator provided by SOS Recht. SOS Recht is a service offered by Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.