This data protection declaration informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as „data“) within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as „online offer“). With regard to the terms used, such as „processing“ or „controller“, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Person in Charge (Mailing Address):
Im Winkel 5
Types of data processed:
– Inventory data (e.g., names, addresses).
– Contact data (e.g., e-mail, telephone numbers).
– Content data (e.g., text input, photographs, videos).
– Usage data (e.g., web pages visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).
Categories of data subjectsVisitors and users of the online offer (hereinafter we also refer to the data subjects collectively as „users“).
Purpose of processing:
– Provision of the online offer, its functions and content.
– Answering contact requests and communication with users.
„Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Connection with personal data. The term is broad and encompasses virtually every handling of data.
„Pseudonymization“ means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
„Profiling“ means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.
„Controller“ means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
„Processor“ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.
Relevant Legal Bases
We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure the exercise of data subjects‘ rights, deletion of data, and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).
Cooperation with Processors and Third Parties
If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is required for the performance of the contract pursuant to Art. 6 (1) lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called „order processing agreement“, this is done on the basis of Art. 28 GDPR.
Transfers to Third Countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using third-party services or disclosing or transferring data to third parties, this is only done if it is done in order to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. GDPR are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the „Privacy Shield“) or compliance with officially recognised special contractual obligations (so-called „standard contractual clauses“).
Rights of the Data Subjects
You have the right to request confirmation as to whether data in question is being processed and to information about this data, as well as further information and a copy of the data in accordance with Art. 15 GDPR.
You have the right according to. Article 16 of the GDPR, you have the right to request that the data concerning you be completed or that the inaccurate data concerning you be corrected.
In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted without delay or, alternatively, to demand restriction of the processing of the data in accordance with Art. 18 GDPR.
You have the right to request to receive the data relating to you that you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other data controllers.
You also have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.
Right of Rrevocation
The right to revoke your consent pursuant to Art. 7 (3) GDPR with effect for the future.
Right of Appeal
You may object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes.
Cookies and Right to Refuse Direct Advertising
Cookies“ are small files that are stored on users‘ computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his or her visit to an online offer. Temporary cookies, or „session cookies“ or „transient cookies“, are cookies that are deleted after a user leaves an online offer and closes his or her browser. In such a cookie, for example, the contents of a shopping basket in an online shop or a login status can be stored. Cookies that remain stored even after the browser is closed are referred to as „permanent“ or „persistent“. For example, the login status can be stored if users visit them after several days. Likewise, the interests of users can be stored in such a cookie, which is used for range measurement or marketing purposes. Third-party cookies“ are cookies that are offered by providers other than the responsible party that operates the online offer (otherwise, if they are only its cookies, they are referred to as „first-party cookies“).
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.f.
Deletion of Data
The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 GDPR. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
In accordance with legal requirements in Germany, storage is in particular for 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 nos. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 nos. 2 and 3, para. 4 HGB (commercial letters).
According to legal requirements in Austria, storage is carried out in particular for 7 years pursuant to § 132 para. 1 BAO (accounting records, vouchers/invoices, accounts, receipts, business papers, statement of income and expenditure, etc.), for 22 years in connection with real property and for 10 years for records in connection with electronically provided services, telecommunications, radio and television services provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is claimed.
When contacting us (e.g. via contact form, email, telephone or social media), the user’s details will be used to process the contact request and handle it in accordance with Art. 6 Para. 1 lit. b. (in the context of contractual/pre-contractual relations), Art. 6 para. 1 lit. f. (other enquiries) GDPR. The user’s details may be stored in a customer relationship management system („CRM system“) or comparable enquiry organisation.
We delete the requests if they are no longer necessary. We review the necessity every two years; furthermore, the legal archiving obligations apply.
In order to leave a comment, the user is asked to enter a comment text, his/her name, email address and a website. The provision of a name is compulsory, but pseudonyms are permitted. The e-mail address is to be given for contacting me and will only be seen by me and will not be published.
By contacting us, a submitted comment can of course be deleted again.
WordPress as a content management system offers the possibility to write comments under blog posts and similar content. The cookie stores the name, email address and website of a commenter in order to display them again if the commenter wants to write another comment on this website.
WordPress Emoji is an emoji set loaded from wordpress.org. No cookies in the technical sense are set on the user’s client, but technical and personal data such as the IP address are transferred from the client to the service provider’s server to enable the use of the service.
Hosting and E-Mail Dispatch
The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services, which we use for the purpose of operating this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a contract processing agreement). Art. 28 GDPR (conclusion of order processing agreement).
Collection of Access Data and Log Files
We, or rather our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. German Data Protection Act, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.
Online presence in Social Media
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Integration of Third-Party Services and Content
Within our online offer, we use content or service offers of third-party providers on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as „content“).
This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as „web beacons“) for statistical or marketing purposes. The „pixel tags“ can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offering, as well as being linked to such information from other sources.
Map functions and caching of the selected settings. This data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually executed within the framework of the settings of their mobile devices).
Typekit Fonts by Adobe
We use external „Typekit“ fonts from the provider Adobe Systems Software Ireland Limited, 6-6 Riverwalk Citywest Business Campus Dublin 24, Republic of Ireland, on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 (1) lit. f. GDPR). GDPR) external „Typekit“ fonts from the provider Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).
Use of Facebook Social Plugins
We use social plugins („plugins“) of the social network facebook.com, which is operated by Facebook Ireland Ltd. GDPR) social plugins („plugins“) of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognisable by one of the Facebook logos (white „f“ on a blue tile, the terms „Like“, „Like“ or a „thumbs up“ sign) or are marked with the addition „Facebook Social Plugin“. The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user calls up a function of this online offer that contains such a plugin, his or her device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offer by the latter. In the process, user profiles can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.
Durch die Einbindung der Plugins erhält Facebook die Information, dass ein Nutzer die entsprechende Seite des Onlineangebotes aBy integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted from their device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store his or her IP address. According to Facebook, only an anonymised IP address is stored in Germany.
If a user is a Facebook member and does not want Facebook to collect data about him/her via this online offer and link it to his/her membership data stored on Facebook, he/she must log out of Facebook and delete his/her cookies before using our online offer. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
Steam is an online platform on which video games are sold. Steam allows content published on Steam (such as video games and workshop content) to be embedded directly into websites. Cookies are used to collect visited websites and detailed statistics about user behaviour. This data can be linked to the data of users logged on to store.steampowered.com or steampowered.com.
The social media network SoundCloud is an online music platform that serves the exchange and distribution of audio files. On SoundCloud, musicians or podcasters offer their audio files for download. In addition, SoundCloud also allows you to embed the audio files in other websites. And that’s exactly what we did. Typical for SoundCloud are the graphic representations of the audio files in wave form and the comment bar. This way, registered users can listen to and comment on music tracks or podcasts at any time.
Our aim is to provide you with the best possible service on our website. By that we don’t just mean our products or services. A holistic customer service also includes how comfortable you feel on our website and how helpful our website is for you. Through the embedded SoundCloud playback function, we can deliver acoustic content to you directly and free of charge. You don’t have to follow a link to listen to an audio file, but can start right away via our website.As soon as you visit one of our web pages that has a widget (like or share button or play function) built in, your browser connects to a SoundCloud server. In the process, data from you may be transferred to SoundCloud, managed and stored there. For example, SoundCloud learns in this way your IP address and which page (in this case ours) you visited and when. If you have a SoundCloud account and are logged in while browsing our website, the collected data will be directly assigned to your account. You can only prevent this by logging out of SoundCloud while you are on our website. In addition to the information mentioned above, data about your user behaviour is also stored in the cookies. For example, whenever you click a button, play or pause a piece of music, this information is stored in the cookies. The widget or SoundCloud is thus able to recognise you and sometimes the widget is also used to deliver personalised content to you. SoundCloud not only uses its own cookies, but also cookies from third-party providers such as Facebook or Google Analytics. These cookies serve the company to get more information about your behaviour on external websites and its own platform. We as the website operator do not receive any information about your user behaviour through the cookies used by SoundCloud. The data transfer and therefore also the information about technical devices and your behaviour on the website takes place between you and SoundCloud.
Comments and Posts
When users leave comments or other contributions, their IP addresses are stored for 7 days on the basis of our legitimate interests as defined in Art. 6 (1) lit. f. GDPR for 7 days. This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.
The follow-up comments can be subscribed to by users with their consent pursuant to Art. 6 para. 1 lit. a GDPR. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information on the cancellation options.
Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke, AdSimple and own formulations.