Privacy Policy
Preamble
With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to simply as "data") that we process, for what purposes, and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as "Online Offering").
The terms used are not gender-specific.
Status: August 3, 2023
Contents Overview
- Preamble
- Controller
- Overview of Processing Activities
- Relevant Legal Basis
- Transfer of Personal Data
- Use of Cookies
- Business Services
- Use of Online Platforms for Offer and Sales Purposes
- Provision of the Online Offering and Web Hosting
- Contact and Request Management
- Web Analytics, Monitoring, and Optimization
- Online Marketing
- Plugins and Embedded Functions as well as Content
Controller
Hamburger Tauwerk Fabrik GmbH & Co.KG
Schützenstr. 107 / Gate 1
22761 Hamburg
Germany
Relevant Legal Basis
Relevant Legal Basis under the GDPR: Below is an overview of the legal basis under the GDPR on which we process personal data. Please note that in addition to the GDPR regulations, national data protection regulations may apply in your or our place of residence. If more specific legal bases apply in individual cases, we will inform you in the privacy policy.
- Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR) - The data subject has given their consent to the processing of personal data for a specific purpose or multiple specific purposes.
- Performance of Contract and Pre-Contractual Inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR) - The processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures taken at the request of the data subject.
- Legal Obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR) - The processing is necessary for compliance with a legal obligation to which the controller is subject.
- Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR) - The processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
National Data Protection Regulations in Germany: In addition to the GDPR data protection regulations, national data protection regulations in Germany also apply. This includes, in particular, the Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG), which contains special provisions on the right to access, the right to deletion, the right to object, the processing of special categories of personal data, processing for other purposes, and automated decision-making in individual cases, including profiling. Furthermore, state data protection laws of individual German states may apply.
Note on GDPR and Swiss DPA Applicability: This data protection notice serves both as information under the Swiss Federal Data Protection Act (Swiss DPA) and under the General Data Protection Regulation (GDPR). Therefore, please note that for broader geographical application and comprehensibility, the terms used in the GDPR are used. In particular, instead of the terms "processing" of "personal data," "legitimate interest," and "special categories of data," used in the GDPR, the Swiss DPA terms "processing," "personal data," "predominant interest," and "particularly sensitive personal data" are used. The legal meaning of the terms, however, is determined by the Swiss DPA within its scope.
Overview of Processing Activities
The following overview summarizes the types of data processed, the purposes of processing, and the data subjects involved.
Types of Processed Data
- Master data.
- Payment data.
- Contact data.
- Content data.
- Contract data.
- Usage data.
- Meta, communication, and procedural data.
Categories of Data Subjects
- Customers.
- Prospective customers.
- Communication partners.
- Users.
- Business and contract partners.
Purposes of Processing
- Providing contractual services and fulfilling contractual obligations.
- Contact inquiries and communication.
- Security measures.
- Reach measurement.
- Tracking.
- Office and organizational procedures.
- Conversion measurement.
- Management and response to inquiries.
- Feedback.
- Marketing.
- Profiles with user-related information.
- Provision of our online offering and user-friendliness.
- Information technology infrastructure.
Transfer of Personal Data
During the processing of personal data, data may be transferred to other entities, companies, legally independent organizational units, or individuals or disclosed to them. Recipients of this data may include service providers for IT tasks or providers of services and content integrated into a website. In such cases, we comply with legal requirements and enter into corresponding contracts or agreements with the recipients of your data to protect your data.
Data Transfer within the Organization: We may transfer personal data to other departments within our organization or grant them access to such data. If this transfer is for administrative purposes, it is based on our legitimate business and economic interests or is necessary to fulfill our contractual obligations or if there is consent from the data subjects or a legal permit.
Use of Cookies
Cookies are small text files or other notes stored on devices and read from devices to store information, for example, the login status of a user account, shopping cart content in an e-shop, accessed content, or functions used in an online offering. Cookies may also be used for various purposes, such as functionality, security, and convenience of online offerings and analyzing visitor flows.
Consent Notice: We use cookies in accordance with legal requirements. Therefore, we obtain prior consent from users unless it is not legally required. Consent is not required if storing and reading the information (including cookies) is essential to provide a telemedia service explicitly requested by users (i.e., our online offering). Necessary cookies generally include functions that serve the display and operability of the online offering, load balancing, security, storage of preferences and choices of users, or similar purposes related to providing the primary and secondary functions of the requested online offering. The revocable consent is clearly communicated to the users and contains information on the respective cookie usage.
Data Protection Law Legal Basis: The legal basis on which we process the personal data of users using cookies depends on whether we ask for user consent. If users consent, the legal basis for processing their data is their declared consent. Otherwise, the data processed using cookies is based on our legitimate interests (e.g., a business operation of our online offering and improving its usability) or if necessary, to fulfill our contractual obligations. We explain the purposes for which cookies are processed in this privacy policy or as part of our consent and processing procedures.
Storage Duration: Regarding storage duration, the following types of cookies are distinguished:
- Temporary Cookies (also: Session Cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their device (e.g., browser or mobile application).
- Persistent Cookies: Persistent cookies remain stored even after closing the device. For example, login status or preferred content may be saved to be displayed directly when a user revisits a website. The data collected with cookies may also be used to measure reach. Unless specified otherwise (e.g., during consent collection), users should assume that cookies are permanent and may be stored for up to two years.
General Notes on Withdrawal and Objection ("Opt-Out"): Users can withdraw their consent at any time and object to processing according to legal requirements. Users can restrict the use of cookies in their browser settings, which may also restrict the functionality of our online offering. An objection to using cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
- Legal Bases: Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR). Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Further Information on Processing Procedures, Processes, and Services:
- Processing of Cookie Data Based on Consent: We use a cookie consent management procedure in which users' consents to the use of cookies and the processing and providers named in the cookie consent management procedure can be managed and withdrawn. Here, the consent declaration is stored to avoid re-querying the consent and to provide evidence of consent as legally required. The storage may occur server-side and/or in a cookie (so-called Opt-In Cookie or with comparable technologies) to assign the consent to a user or their device. Unless otherwise specified regarding cookie management service providers, the following information applies: The consent storage duration can be up to two years. A pseudonymous user identifier is created and stored along with the time of consent, the scope of consent (e.g., which categories of cookies and/or service providers), as well as browser, system, and device information used. Legal Bases: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Business Services
We process data from our contractual and business partners, such as customers and prospective clients (collectively referred to as "contractual partners") as part of contractual and comparable legal relationships, as well as related measures and in the context of communication with the contractual partners (or pre-contractually), for example, to respond to inquiries.
We process this data to fulfill our contractual obligations. These include, in particular, the obligations to provide agreed services, any update obligations, and remedies for warranty and other performance issues. In addition, we process the data to safeguard our rights and for purposes of administrative tasks associated with these obligations as well as organizational management. Furthermore, we process data on the basis of our legitimate interest in proper and economically efficient business operations and in implementing security measures to protect our contractual partners and our business operations from misuse, threats to their data, confidentiality, information, and rights (e.g., to involve telecommunications, transport, and other support services, as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). Within the scope of applicable law, we only pass on the data of contractual partners to third parties to the extent necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners are informed of other forms of processing, such as for marketing purposes, within the context of this privacy policy.
We inform contractual partners which data is required for the aforementioned purposes before or during data collection, for example, in online forms, through specific labeling (e.g., colors) or symbols (e.g., asterisks, etc.), or personally.
We delete the data after the expiration of statutory warranty and similar obligations, i.e., generally after 4 years, unless the data is stored in a customer account, e.g., as long as it must be retained for archiving purposes for legal reasons. The statutory retention period for documents relevant for tax purposes as well as for commercial books, inventories, opening balances, annual financial statements, the working instructions and other organizational documents required for understanding these documents, and booking records is ten years, and for received commercial and business letters and copies of sent commercial and business letters, it is six years. The period begins at the end of the calendar year in which the last entry in the book was made, the inventory, the opening balance, the annual financial statement, or the management report was prepared, the commercial or business letter was received or sent, or the booking record was created; further, when the recording was made, or the other documents were created.
If we use third-party providers or platforms to provide our services, the terms and privacy policies of the respective third-party providers or platforms apply in the relationship between users and the providers.
- Types of Data Processed: Inventory data (e.g., names, addresses); Payment data (e.g., bank details, invoices, payment history); Contact data (e.g., email, phone numbers); Contract data (e.g., contract subject, duration, customer category); Usage data (e.g., visited websites, interest in content, access times). Meta-, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
- Affected Persons: Customers; Prospective clients; Business and contractual partners.
- Purposes of Processing: Provision of contractual services and fulfillment of contractual obligations; security measures; handling of inquiries and communication; office and organizational procedures; management and response to inquiries.
- Legal Bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); legal obligations (Art. 6 para. 1 sentence 1 lit. c) GDPR); legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Additional Information on Processing Procedures, Methods, and Services:
- Customer Account: Customers can create an account (e.g., customer or user account, briefly referred to as "customer account") within our online offering. If registering a customer account is required, customers are also informed about the necessary information for registration. Customer accounts are not public and cannot be indexed by search engines. During registration, as well as subsequent logins and uses of the customer account, we store customers' IP addresses along with access times to provide proof of registration and to prevent misuse of the customer account. If the customer account is terminated, the customer account data will be deleted following termination, unless it is required for other purposes or must be retained for legal reasons (e.g., internal storage of customer data, orders, or invoices). It is the customer's responsibility to secure their data upon termination of the customer account; Legal Bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
- Shop and E-Commerce: We process customer data to enable them to select, purchase, or order selected products, goods, and related services, as well as to pay for and receive or execute them. If necessary to fulfill an order, we employ service providers, particularly postal, freight, and shipping companies, to handle the delivery or execution on behalf of our customers. We use the services of banks and payment service providers to process payment transactions. Required information is identified in the order process or comparable purchasing transaction and includes the information necessary for delivery or provision and billing, as well as contact information for any inquiries; Legal Bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
Use of Online Platforms for Offer and Distribution Purposes
We offer our services on online platforms operated by other service providers. In this context, the privacy policies of the respective platforms apply in addition to our privacy policy, especially concerning payment processing and procedures for reach measurement and interest-based marketing on the platforms.
- Types of Data Processed: Inventory data (e.g., names, addresses); Payment data (e.g., bank details, invoices, payment history); Contact data (e.g., email, phone numbers); Contract data (e.g., contract subject, duration, customer category); Usage data (e.g., visited websites, interest in content, access times). Meta-, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
- Affected Persons: Customers.
- Purposes of Processing: Provision of contractual services and fulfillment of contractual obligations; marketing.
- Legal Bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Additional Information on Processing Procedures, Methods, and Services:
- Amazon: Online marketplace for e-commerce; Service Provider: Amazon EU S.à r.l. (Société à responsabilité limitée), 38 avenue John F. Kennedy, L-1855 Luxembourg; Legal Bases: Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website:https://www.amazon.de/; Privacy Policy:https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010; Third-Country Transfer Basis: EU-US Data Privacy Framework (DPF).
Provision of Online Offer and Web Hosting
We process users' data to provide our online services. To this end, we process the user's IP address, which is necessary to transmit the content and functions of our online services to the user's browser or device.
- Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times); Meta-, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status). Content data (e.g., entries in online forms).
- Affected Persons: Users (e.g., website visitors, users of online services).
- Purposes of Processing: Provision of our online offering and user-friendliness; IT infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)); security measures.
- Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Additional Information on Processing Procedures, Methods, and Services:
- Collection of Access Data and Log Files: Access to our online offering is logged in the form of "server log files." Server log files may include the address and name of the accessed websites and files, date and time of access, transferred data volumes, messages about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), and, generally, IP addresses and the requesting provider. Server log files may be used for security purposes, such as to prevent server overload (especially in the case of misuse, so-called DDoS attacks) and to ensure server load and stability; Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Deletion of Data: Log file information is stored for up to 30 days and then deleted or anonymized. Data required for evidentiary purposes are excluded from deletion until final resolution of the incident.
- Email Dispatch and Hosting: The web hosting services we use also include sending, receiving, and storing emails. For these purposes, the recipients' and senders' addresses, as well as other information related to email dispatch (e.g., involved providers) and the content of the respective emails, are processed. These data may also be processed for SPAM detection purposes. Please note that emails are generally not encrypted on the internet. Emails are usually encrypted during transport, but (unless end-to-end encryption is used) not on the servers from which they are sent and received. We, therefore, cannot assume responsibility for the transmission path of emails between the sender and our server; Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Contact and Inquiry Management
When contacting us (e.g., by mail, contact form, email, phone, or via social media) as well as within the framework of existing user and business relationships, the information of the requesting persons is processed as necessary to respond to contact inquiries and any requested actions.
- Types of Data Processed: Contact data (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times). Meta-, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
- Affected Persons: Communication partners.
- Purposes of Processing: Contact inquiries and communication; management and response to inquiries; feedback (e.g., gathering feedback via online form). Provision of our online offer and user-friendliness.
- Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
Additional Information on Processing Procedures, Methods, and Services:
- Contact Form: When users contact us via our contact form, email, or other communication channels, we process the data provided in connection with the matter of concern; Legal Bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Web Analysis, Monitoring, and Optimization
Web analysis (also referred to as "reach measurement") is used to evaluate visitor flows on our online offering and can include information such as behavior, interests, or demographic information about visitors, such as age or gender, in pseudonymous form. With the help of reach measurement, we can, for example, determine the time at which our online offering or its functions or content are most frequently used or invite reuse. Similarly, we can identify which areas need optimization.
In addition to web analysis, we can also use testing procedures, for example, to test and optimize different versions of our online offering or its components.
Unless otherwise specified below, profiles may be created for these purposes, i.e., data aggregated for a usage process, and information may be stored in a browser or on a device and read from it. The collected information includes, in particular, visited websites and elements used there, as well as technical information such as the browser used, the computer system, and usage times. If users have consented to the collection of their location data either with us or with the providers of the services we use, location data may also be processed.
The IP addresses of users are also stored. However, we use an IP masking process (i.e., pseudonymization by shortening the IP address) to protect users. Generally, the personal data of users (such as email addresses or names) are not stored within the framework of web analysis, A/B testing, and optimization, but rather pseudonyms are used. This means that we, as well as the providers of the software used, do not know the actual identity of users, only the information stored in their profiles for the purposes of the respective procedures.
- Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times). Meta-, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
- Affected Persons: Users (e.g., website visitors, users of online services).
- Purposes of Processing: Reach measurement (e.g., access statistics, identification of returning visitors); Profiles with user-related information (creating user profiles). Provision of our online offer and user-friendliness.
- Security Measures: IP masking (pseudonymization of the IP address).
- Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Additional Information on Processing Procedures, Methods, and Services:
- Google Analytics 4: We use Google Analytics to measure and analyze the use of our online offering based on a pseudonymous user identification number. This identification number does not contain any unique data, such as names or email addresses. It is used to associate analytics information with a device to identify which content users have accessed within one or several usage processes, what search terms they have used, accessed again, or interacted with in our online offering. The usage time and duration, as well as the sources of users who refer to our online offering and technical aspects of their devices and browsers, are also stored. Pseudonymous profiles of users with information from the use of different devices are created using cookies. Google Analytics does not log or store individual IP addresses for EU users. Analytics, however, provides general geographic location data by deriving the following metadata from IP addresses: city (and the derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based counterparts). For EU data traffic, IP address data is exclusively used for this derivation of geolocation data before being immediately deleted. They are not logged, accessible, or used for further purposes. When Google Analytics collects measurement data, all IP queries are processed on EU-based servers before being forwarded for processing to Analytics servers; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website:https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy:https://policies.google.com/privacy; Data Processing Agreement:https://business.safety.google/adsprocessorterms/; Third-Country Transfer Basis: EU-US Data Privacy Framework (DPF), standard contractual clauses (https://business.safety.google/adsprocessorterms); Opt-Out Option: Opt-Out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of advertising: https://adssettings.google.com/authenticated. Additional Information:https://privacy.google.com/businesses/adsservices (types of processing and data processed).
- Google Tag Manager: Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate other services into our online offer (for further information, please refer to this privacy policy). The Tag Manager itself (which implements the tags) does not create any user profiles or store cookies. Google only receives the user's IP address, which is necessary to execute the Google Tag Manager; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website:https://marketingplatform.google.com; Privacy Policy:https://policies.google.com/privacy; Data Processing Agreement:https://business.safety.google/adsprocessorterms. Third-Country Transfer Basis: EU-US Data Privacy Framework (DPF), standard contractual clauses (https://business.safety.google/adsprocessorterms).
-
Online Marketing
We process personal data for the purposes of online marketing, which includes, in particular, the marketing of advertising space or displaying promotional and other content (collectively referred to as "content") based on the potential interests of users and measuring their effectiveness.
For these purposes, user profiles are created and stored in a file (referred to as a "cookie") or similar methods are used to store user data relevant to displaying the aforementioned content. This data can include, for example, viewed content, visited websites, used online networks, as well as communication partners and technical data such as the browser used, the computer system, and information on usage times and functions used. If users have consented to the collection of their location data, this may also be processed.
IP addresses of users are also stored. However, we use available IP masking procedures (i.e., pseudonymization by shortening the IP address) to protect users. In general, no clear data of users (such as email addresses or names) is stored within the scope of online marketing; pseudonyms are used instead. This means that we and the providers of online marketing procedures do not know the actual identity of the users, only the information stored in their profiles.
The information in the profiles is generally stored in cookies or similar methods. These cookies can later be read and analyzed for the purposes of displaying content, as well as supplemented with additional data and stored on the online marketing provider's server.
Exceptionally, clear data can be assigned to the profiles. This is the case if users are, for example, members of a social network whose online marketing procedure we use and the network links the users' profiles with the aforementioned data. Please note that users may enter into additional agreements with providers, e.g., by consenting as part of the registration process.
We generally only have access to aggregated information on the success of our advertising. However, we can use so-called conversion measurements to determine which of our online marketing procedures have led to a conversion, such as a contract with us. Conversion measurement is solely used to analyze the success of our marketing measures.
Unless otherwise stated, please assume that the cookies used are stored for a period of two years.
- Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times). Meta-, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
- Affected Persons: Users (e.g., website visitors, users of online services).
- Purposes of Processing: Reach measurement (e.g., access statistics, identification of returning visitors); Tracking (e.g., interest-/behavior-based profiling, use of cookies); Marketing; Profiles with user-related information (creating user profiles). Conversion measurement (measuring the effectiveness of marketing measures).
- Security Measures: IP masking (pseudonymization of the IP address).
- Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
- Opt-Out Option: We refer to the privacy notices of the respective providers and the opt-out options specified with each provider (so-called "Opt-Out"). If no explicit opt-out option is provided, there is the possibility of disabling cookies in your browser settings. However, this may restrict the functions of our online offering. We also recommend the following opt-out options for different regions:
- a) Europe: https://www.youronlinechoices.eu .
- b) Canada: https://www.youradchoices.ca/choices .
- c) USA: https://www.aboutads.info/choices .
- d) Cross-region: https://optout.aboutads.info .
Additional Information on Processing Procedures, Methods, and Services:
- Google Ads and Conversion Measurement: Online marketing procedure for placing content and advertisements within the service provider's advertising network (e.g., in search results, videos, websites, etc.), so that they are displayed to users who are likely interested in the ads. Additionally, we measure the conversion of the ads, i.e., whether users interact with the ads and use the advertised offers (so-called conversion). However, we only receive anonymous information and no personal data about individual users; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website:https://marketingplatform.google.com; Privacy Policy:https://policies.google.com/privacy; Third-Country Transfer Basis: EU-US Data Privacy Framework (DPF); Additional Information: Types of processing and data processed: https://privacy.google.com/businesses/adsservices. Data processing terms between controllers and standard contractual clauses for third-country data transfers: https://business.safety.google/adscontrollerterms.
- Google Adsense with Personalized Ads: We use Google Adsense with personalized ads, which allows us to display ads within our online offering and receive remuneration for displaying or otherwise using them; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website:https://marketingplatform.google.com; Privacy Policy:https://policies.google.com/privacy; Third-Country Transfer Basis: EU-US Data Privacy Framework (DPF); Additional Information: Types of processing and data processed: https://privacy.google.com/businesses/adsservices. Data processing terms for Google advertising products: information on the services data processing terms between controllers and standard contractual clauses for third-country data transfers: https://business.safety.google/adscontrollerterms.
- Google Adsense with Non-Personalized Ads: We use Google Adsense with non-personalized ads, which allows us to display ads within our online offering and receive remuneration for displaying or otherwise using them; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website:https://marketingplatform.google.com; Privacy Policy:https://policies.google.com/privacy; Third-Country Transfer Basis:
Plugins and Embedded Functions and Content
We integrate functional and content elements into our online offering that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). This may include graphics, videos, or maps (hereinafter collectively referred to as "content").
Integration always requires that the third-party providers of this content process the IP address of users, as they cannot send the content to their browser without the IP address. The IP address is therefore necessary for displaying this content or functionalities. We strive to use only content whose providers use the IP address solely to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. "Pixel tags" can be used to evaluate visitor traffic on the pages of this website. Pseudonymous information can also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visit times, and other information on the use of our online offering, and be combined with such information from other sources.
- Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times). Meta-, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
- Affected Persons: Users (e.g., website visitors, users of online services).
- Purposes of Processing: Provision of our online offering and user-friendliness.
- Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Additional Information on Processing Procedures, Methods, and Services:
- Google Fonts (Hosting on our own server): Provision of font files for a user-friendly presentation of our online offering; Service Provider: Google Fonts are hosted on our server, so no data is transferred to Google; Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
- Font Awesome (Hosting on our own server): Display of fonts and icons; Service Provider: Font Awesome icons are hosted on our server, so no data is transferred to the provider of Font Awesome; Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
-