Privacy policy

Thank you for your interest in our website. 

The protection of your personal data during the collection, processing and use on the occasion of your visit to our website is an important concern for us. Your data will be protected within the framework of the statutory provisions. 

Please take a moment to read the information below. This will tell you how we handle your personal data, how and for what purpose this data is used, with whom we share this data and how we protect your personal data. 

Your privacy rights are our top priority and we make every effort to protect and ensure these rights. 

The controller for the processing of your personal data within the meaning of the European Data Protection Regulation is:

Alexander Thamm GmbH
Sapporobogen 6-8
80637 Munich
E-mail: contact@alexanderthamm.com

1 Data Protection Officer

If you have any questions regarding data protection, our external data protection officer DataCo GmbH | Dachauer Straße 65 | 80335 Munich | datenschutz@dataguard.de will be happy to help. 

2 Collection and processing of data

Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes.

To be logged:

  • Name of the retrieved file,
  • Date and time of retrieval,
  • Volume of data transferred,
  • Message about successful retrieval,
  • Operating system used,
  • Browser and browser type,
  • the website from which the link was redirected,
  • the internet service provider,
  • Pages visited and
  • requesting domain.

In addition, the IP addresses of the requesting computers are logged. However, the responsible person does not draw any conclusions about a person. 

This data is only required to display the content of our website correctly, to optimise the content for you on a permanent basis and to support prosecutions in the event of hacker attacks. The data is processed on the basis of our legitimate interest pursuant to Art. 6 (1) UAbs. 1 lit. f) DSGVO. The processing of the data is necessary for the operation of the website. The data is stored for as long as it is needed to fulfil the purpose and then automatically deleted. 

3 Data subject rights

Pursuant to Article 15 of the GDPR, you have the right to information about the processing of your personal data. In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, restriction of processing and data portability in accordance with Articles 16-18, 20 DSGVO. Should you wish to exercise this right, please contact our data protection officer. 

Furthermore, you have the right to complain to the competent supervisory authority at any time. If you are of the opinion that the processing of your personal data is not carried out in compliance with data protection laws, we would kindly ask you to contact our data protection officer. Furthermore, you have the right to object to the processing of your personal data at any time in accordance with Art. 13 para. 2 lit. b) DSGVO. 

Use of the Data Subject Request Tool (DSR) for the management of data subject requests

1. scope of the processing of personal data

We use functionalities of the data protection plugin "DSR" of DataCo GmbH, Dachauer Str. 65, 80335, Munich, Bavaria, Germany (hereinafter referred to as: DataCo).

By using the button "Submit data subject request", all visitors to our website have the opportunity to make use of their data subject rights. To do this, you specify your relationship to our company, which data subject right you wish to exercise, provide further optional information and, if necessary, identify yourself with further characteristics. The data subject request will then be processed by us.

The following personal data will be processed by DataCo as a result:

  • Last name
  • First name
  • Reference to the person responsible (employee, customer, interested party, etc.)
  • E-mail address
  • Other voluntarily communicated personal data

For further information on the processing of data by DataCo, please click here: https://www.dataguard.com/privacy-policy

In addition, log files may be forwarded to DataCo GmbH to ensure technical functionality, which include the following:

  • Information about the browser type and version used
  • The operating system of the user
  • The user's internet service provider
  • The IP address of the user
  • Date and time of access
  • Websites from which the user's system made the request

2. purpose of the data processing

The use of DSR serves to protect the data protection rights of our website visitors. We thereby enable you to make use of your data protection rights and to contact us quickly and easily.

3. legal basis for the processing of personal data

The legal basis for the use of the DSR tool and the sending of corresponding data is your declaration of consent according to Art. 6 para. 1 p. 1 lit. a DSGVO.

The legal basis for the use of the log files is our legitimate interest in ensuring the technical functionality of the tool according to Art. 6 para. 1 p. 1 lit. f DSGVO.

4. duration of the storage

Your personal information will be retained for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5. possibility of revocation and removal

You can object to the collection as well as the processing of your personal data or revoke your declaration of consent by contacting the responsible person by e-mail or using the DSR tool.

4 Contact forms

All your personal data and other information that you provide to us via the contact forms set up on our website will only be collected and processed for the purpose of processing and responding to your enquiries on the basis of Art. 6 (1) UAbs. 1 lit. a) and b) DSGVO. Your data will be forwarded to us via our hubspot. If it is not provided, it is unfortunately not possible for us to contact you and process your request. An automated check of the validity of your email is carried out by Hubspot upon entry. A transfer of the personal data provided by you to a third country or an international organisation does not take place and is not planned. Your personal data will not be passed on to external third parties. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing carried out until the revocation remains unaffected. Your personal data, which you provide to us via the contact forms, will be stored by us for the duration of the processing of your request and deleted or blocked immediately after processing. 

We use the Hubspot service for the contact forms. 

You can find more detailed information on Hubspot at "11 Hubspot" experience 

5 E-mail contact

On our website, it is possible to contact us via the e-mail address provided. If you make use of this option, the personal data transmitted with the e-mail will be stored and processed only for the purpose of handling and answering your enquiries on the basis of Art. 6 (1) UAbs. 1 lit. a) and b) DSGVO. If you do not provide us with this information, we will unfortunately not be able to process your request. An automated decision-making process is not carried out. A transfer of the personal data provided by you to a third country or an international organisation does not take place and is not planned. Your personal data will not be passed on to external third parties. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing carried out until the revocation remains unaffected. Your personal data, which you provide to us, will be stored by us for the duration of the processing of your request and deleted or blocked immediately after processing. 

6 Newsletter

Insofar as you order our electronic newsletter, your personal data will only be processed for the purpose of regularly sending our newsletter and the associated measurement of success on the basis of Art. 6 (1) UAbs. 1 lit. a) DSGVO. After registration, we will send you a confirmation e-mail, which allows us to verify your identity and again confirms your consent. Your data will be forwarded to us by e-mail via our provider. If they are not provided, it is unfortunately not possible for us to provide you with our newsletter, contact you and process your request. An automated decision-making process is not carried out. A transfer of your personal data to a third country or an international organisation does not take place and is not planned. Your personal data will not be passed on to external third parties. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. Your personal data, which you provide to us in the context of ordering the newsletter, will be stored by us for the purpose of receiving the newsletter until you revoke your consent and will be removed from the distribution list after you unsubscribe. 

We use the Hubspot service to send our newsletter. 

Unsubscribing from the newsletter is possible at any time, for example via a link at the end of each newsletter. 

You can find more detailed information on Hubspot at "11 Hubspot" experience 

7 Online application

We process the personal data you submit exclusively in the application process. Your data is transmitted to us in encrypted form using so-called Transport Layer Security (TLS). We will provide you with the required information in accordance with Art. 13 DSGVO upon receipt of your application by means of a reply e-mail or for download in the online application form. In the area of job advertisements, we use the "Personio" software of the company Personio GmbH, Buttermelcherstraße 16, 80469 Munich, Germany. If you use the online application, you will be redirected to the recruiting page of Alexander Thamm GmbH at Personio. For your application via the online form, the privacy policy stated there applies in its current form. 

7.1 Online registration for seminars and workshops

All your personal data and other information that you provide to us via the registration form set up on our website for our seminars and workshops will only be collected and processed for the purpose of registering for our seminars and workshops on the basis of Art. 6 (1) UAbs. 1 lit. b) DSGVO. Your data will be forwarded to us by e-mail via our provider. If they are not provided, we are unfortunately unable to register you for one of our seminars and workshops. No automated decision-making is carried out. 

A transfer of the personal data provided by you to a third country or an international organisation does not take place and is not planned. Your personal data will not be passed on to external third parties. Your personal data that you provide to us via the registration form will be stored by us for the duration of the contractual relationship and for the duration of the statutory retention period and then deleted or blocked. 

7.2 Protection of the stored data 

We use technical and organisational security measures to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved and adapted according to the state of the art. It cannot be ruled out that data transmitted by you without encryption can be viewed by third parties during transmission. We would like to point out that with regard to data transmission via the Internet (e.g. communication by e-mail), no conclusive guarantee can be given for secure transmission. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the Internet. 

7.3 Protection of minors 

Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child is permissible from the age of sixteen in accordance with Art. 8 GDPR. 

8 Storage of anonymised data/cookies

Tracking cookies are used on this website. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. However, these collect and store data only in pseudonymous form. They are not used to identify you personally and are not merged with data about the bearer of the pseudonym. We use this information to determine the attractiveness of our website and to continuously improve its content. The legal basis for the use of tracking cookies is the consent given by you in accordance with Art. 6 (1) UAbs. 1 lit. a) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. Your data will not be transmitted to external bodies. You can delete the cookies on your PC at any time. 

9 Technically necessary cookies (session cookies)

In addition to the use of cookies for analysis purposes, other cookies are used to make our website more user-friendly. In order to use the full range of functions of our website, it is therefore necessary for technical reasons to allow session cookies. The purpose of using such cookies is to enable you to use the website in a simplified and more user-friendly manner. It is therefore necessary for the browser to be able to identify you even after you have changed pages. The data stored and transmitted in this process are language settings. The data is not used to create a user profile of you. The legal basis for the use of technical cookies is our legitimate interest according to Art. 6 para. 1 UAbs. 1 lit. f) DSGVO. It is not possible to use the website without session cookies. 

Adjust your cookie preferences here:

Cookie settings

10 Social media

We would like to get in touch with you and other interested parties, customers and users. We use various social networks for this purpose. You can find out which individual social networks we use in the following section. However, we would like to point out that we generally have no influence on which data is collected. As a rule, however, this is data that is used for market research and advertising purposes. This usually happens through the creation of user profiles and the interests determined from them. This makes it possible to show you tailor-made advertising. Therefore, cookies may also be set for you through the use of social networks. 

Basically, we would like to communicate information to you or give you the opportunity to share such information in the simplest and quickest way. Therefore, unless you have consented to data processing on the respective platform, the legal basis is our legitimate interest pursuant to Art. 6 (1) UAbs. 1 lit. f) DSGVO. If you have given your consent on the respective platform, the legal basis for processing is your consent pursuant to Art. 6 para. 1 UAbs. 1 lit. a) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. 

10.1 Facebook

On our website, we use a link to our presence on the social network Facebook (Facebook fan page) in order to interact with Facebook users who visit the fan page. For this Facebook fan page, we are a joint controller with Meta Platforms Ireland Limited, ( 4 Grand Canal Square, Dublin 2, Ireland; hereinafter: "Facebook") in accordance with Art. 26 of the General Data Protection Regulation (GDPR). You can find the joint responsibility agreement under the following link: https://www.facebook.com/legal/controller_addendum 

The purpose of processing your personal data is to provide visitors with an up-to-date information platform and an opportunity to interact on Facebook. The basis of the processing is therefore our legitimate interest pursuant to Art. 6 (1) UAbs. 1 lit. f) DSGVO. In doing so, the interests of the users are always taken into account. Information on the legal basis for processing on Facebook is available athttp://www.facebook.com/about/privacy/legal_bases/to find. 

When visiting our Facebook fan page, Facebook collects and processes personal data on the basis of legitimate interest pursuant to Art. 6 (1) UAbs. 1 lit. f) DSGVO. Part of this data is provided to us in summarised form via the so-called "Insights" (Facebook user statistics). A cookie is stored on the user's end device for this purpose. This is used to be able to use this information again at a later time. The cookie remains active for a period of two years if it is not deleted. Further information from Facebook on the use of cookies can be found in the Facebook Cookie Policy athttps://de-de.facebook.com/policies/cookies/can be found on our website. The transmission of these user statistics takes place exclusively in anonymised form and there is no possibility of access on our part to the respective underlying data. 

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. 

Details can be found here: 

https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php 

If you are already logged in to Facebook via your personal user account, the information about your visit to our website is automatically forwarded to Facebook. It is then possible that Facebook assigns the visit to the website to your account. If you do not wish your data to be transmitted and stored by Facebook, please log out of your Facebook account. 

You can object to Facebook storing a user profile and information about your visit to our website and to Facebook setting tracking cookies on other websites by clicking this opt-out link. 

Privacy policy Facebook

Status June 2022

Table of contents
  1. Privacy Policy Facebook Fan Page
  1. Privacy Policy Facebook Fan Page
  2. I. PRINCIPLES

    1. common controller for the processing of personal data

    The purposes and means of processing personal data when visiting our Facebook page https://www.facebook.com/alexanderthammgmbh/ ("Facebook Page") are determined by Alexander Thamm GmbH, Sapporobogen 6-8, 80637 Munich, Germany ("Alexander Thamm GmbH").
    and Facebook Ireland Ltd ("Facebook") jointly within the meaning of Art. 26 of the EU General Data Protection Regulation (DSGVO). This results from the fact that Alexander Thamm GmbH, as the operator of the Facebook page, by setting up such a page gives Facebook the opportunity to place cookies on the computer or any other device of the person visiting the Facebook page ("visitor"), regardless of whether the visitor has a Facebook account.

    Facebook assumes primary responsibility under the GDPR for the processing of Insights Data as part of its shared responsibility and complies with all obligations under the GDPR with respect to the processing of Insights Data (including Articles 12 and 13 of the GDPR, Articles 15 to 22 of the GDPR and Articles 32 to 34 of the GDPR). In addition, Facebook makes the essence of this Page Insights Addendum available to data subjects (the corresponding "Page Insights Controller Addendum" can be found here:
    https://www.facebook.com/legal/terms/page_controller_addendum).

    Below you will find a description of how personal data is handled by Alexander Thamm GmbH and Facebook when you visit the Facebook page. However, since Alexander Thamm GmbH generally or to a large extent has no influence on the data collected by Facebook and its processing by Facebook, we are currently unable to provide any conclusive information on the purpose and scope of the processing of your data by Facebook. However, we will monitor further developments in this regard and adapt this privacy policy accordingly if necessary.

    We would like to point out that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (especially commenting, sharing, rating).

    2. name and address of the jointly responsible persons

    a) The primary responsible person is:

    Facebook

    Facebook Ireland Ltd.

    4 Grand Canal Square

    Grand Canal Harbour

    Dublin 2 Ireland

    b) Further responsible person is:

    Alexander Thamm GmbH
    Sapporobogen 6-8
    80637 Munich
    Germany
    Tel.: 089 30760880
    Email: contact@alexanderthamm.com
    Website: https://www.alexanderthamm.com/

    3. contact details of the data protection officer of the primary controller Facebook

    You can contact the data protection officer of the primary controller Facebook at the following link:

    https://www.facebook.com/help/contact/540977946302970

    4. name and address of the data protection officer of the other controller

    You can reach the data protection officer of the other data controller Alexander Thamm GmbH under 2.b) at:

    DataCo GmbH

    Dachauer Str. 65

    80335 Munich

    Germany

    +49 89 7400 45840

    www.dataguard.de

    5. legal basis for the processing of personal data

    Insofar as consent of the data subject is obtained for processing operations of personal data, Art. 6 para. 1 sentence 1 lit. a (DSGVO) serves as the legal basis for the processing of personal data.

    When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) sentence 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

    Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which Alexander Thamm GmbH or Facebook is subject, Art. 6 (1) sentence 1 lit. c DSGVO serves as the legal basis.

    In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) sentence 1 lit. d DSGVO serves as the legal basis.

    If the processing is necessary to protect a legitimate interest of Alexander Thamm GmbH, Facebook or a third party, and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Article 6 (1) sentence 1 lit. f DSGVO serves as the legal basis for the processing.

    6. possibility of objection and removal

    The visitor has the possibility to revoke his consent to the processing of personal data at any time (see also rights of data subjects). If the visitor contacts us by e-mail, he or she can object to the storage of his or her personal data at any time.

    The collection of data for the provision of the Facebook page and the storage of the data in log files is absolutely necessary for the operation of the Facebook page. Consequently, there is no possibility for the visitor to object.

    7. rights of the data subjects

    If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the persons responsible:

    Right to information about your personal data stored by Alexander Thamm GmbH or Facebook;

    Right to rectification, erasure or restriction of processing of your personal data;

    Right to object to processing which serves the legitimate interests of Alexander Thamm GmbH or Facebook, a public interest or profiling, unless Alexander Thamm GmbH or Facebook can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims;

    Right to data portability;

    right to complain to a supervisory authority;

    Right to revoke your consent to the collection, processing and use of your personal data at any time with effect for the future.

    If you wish to make use of your rights, you can address your concerns to Alexander Thamm GmbH as well as Facebook. For this purpose, you can, for example, use the contact options listed above. If you contact us, we will forward your request to Facebook, insofar as it concerns questions regarding the processing of Insights data. Facebook will respond to enquiries in accordance with the obligations incumbent upon us under the Page Insights Supplement.
    II. PROCESSING OF PERSONAL DATA BY Alexander Thamm GmbH

    1. purpose of the data processing

    Alexander Thamm GmbH maintains online presences within social networks in order to communicate with the interested parties and users active there and to be able to inform them there about our products, events and news.
    When you visit our Facebook page (regardless of whether you are logged into your Facebook account or not), your browser transmits certain data to the web server for which Facebook is responsible for technical reasons. In addition, Facebook uses so-called "cookies". Cookies are small text files that are stored in the memory of your end device via your browser. Cookies set by Facebook are intended, among other things, to enable Alexander Thamm GmbH, as the operator of the Facebook page, to obtain statistics that Facebook compiles based on visits to this page for the purpose of controlling the marketing of our activities.

    2. description and scope of data processing

    As the operator of the Facebook page, Alexander Thamm GmbH can obtain anonymised statistical data regarding the visitors to our Facebook page with the help of the Facebook Page Insights function, which Facebook provides to us free of charge as a non-derogable part of the user relationship. This data is collected with the help of cookies set by Facebook, each of which contains a unique user code that Facebook stores on the visitor's terminal device. The user code, which can be linked to the login data of such users who are registered with Facebook, is collected and processed when the Facebook page is called up.

    In particular, the Fan Page operator may receive demographic data provided by Facebook about its target group - and thus the processing of such data - including. Trends in age, gender, relationship status and professional situation, information about the lifestyle and interests of his target group and information about the purchases and online purchasing behaviour of visitors to his page, the categories of goods or services they are most interested in, as well as geographical data informing him where to carry out special promotions or organise events and, more generally, enabling him to target his information offer as closely as possible.

    Although the visitor statistics generated by Facebook are transmitted exclusively in anonymised form to Alexander Thamm GmbH as the operator of the Facebook page, the generation of these statistics is based on the prior collection - through the cookies set by Facebook on the end device of the visitors - and the processing of the personal data of these visitors for these statistical purposes. You can find more information on Facebook Page Insights at:

    https://de-de.facebook.com/legal/terms/information_about_page_insights_data

    https://de-de.facebook.com/help/pages/insights

    Data on the Facebook groups linked to our Facebook page are also provided in this way. Due to the constant development of Facebook, the availability and processing of the data changes, so that we refer for further details to the data protection information of Facebook mentioned in the previous paragraph and below under "PROCESSING OF PERSONAL DATA BY FACEBOOK".

    We use this data, which is available in aggregated form, to make our posts and activities on our Facebook page more attractive to users. For example, we use the distributions by age and gender for an adapted address and the preferred visiting times of the users for a time-optimised planning of our posts. Information about the type of end devices used by visitors helps us to adapt the visual design of the posts accordingly. In accordance with the Facebook terms of use, which each user has agreed to as part of creating a Facebook profile, we can identify the subscribers and fans of the page and view their profiles and other shared information from them.

    In addition to this automatically collected anonymised data, we also process the data that you have voluntarily provided to us, e.g. in the context of comments on posts or contacting us.

    If you click on the link https://www.alexanderthamm.com/de/datenschutzerklaerung/ (you are currently on this page), which is set on the Facebook fan page of Alexander Thamm GmbH, you will be taken to a sub-page of the Alexander Thamm GmbH website. Personal data is also processed on this page. The data protection declaration applicable to these pages can be found here: https://www.alexanderthamm.com/de/datenschutzerklaerung/

    3. data deletion and storage period

    Personal data will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, storage may still be necessary if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which Alexander Thamm GmbH is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract.

    III. PROCESSING OF PERSONAL DATA BY FACEBOOK

    In what way Facebook uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not fully known to us. We will, however, observe further developments in this regard and, if necessary, adapt this data protection declaration accordingly. The following information is based on information publicly provided by Facebook regarding the processing of personal data when using Facebook products.

    1. purpose of the data processing

    Facebook states that it processes visitors' personal data for the following purposes:

    • Providing, personalising and improving Facebook products;
    • Provide measurement, analytics and other Facebook services;
    • Promoting protection, integrity and security;
    • Communication with Facebook users;
    • Research and innovation for social purposes.

    For more information on the purposes of data processing by Facebook, please refer to the Facebook Data Policy:
    https://de-de.facebook.com/policy.php

    Further information on Facebook's legitimate interests with regard to the processing of personal data can be found here:
    https://de-de.facebook.com/about/privacy/legal_bases

    When you visit our Facebook page (regardless of whether you are logged into your Facebook account or not), your browser transmits certain data to the web server for which Facebook is responsible for technical reasons. In addition, Facebook uses "cookies". Facebook uses cookies, among other things, to provide Alexander Thamm GmbH, as the operator of the Facebook page, with statistics for the purpose of controlling the marketing of our activities. Further information on the use of cookies by Facebook can be found in the Facebook Cookie Policy: \nhttps://de-de.facebook.com/policies/cookies/

    2. description and scope of data processing

    a) What types of information does Facebook process?

    In order to provide the Facebook Products, it is necessary for Facebook to process information about visitors. The types of information collected by Facebook depend on how the visitor uses the Facebook Products. The following information may be processed by Facebook:

    Things done and provided by visitors and others, such as information about how the visitor uses Facebook Products, information about transactions made on Facebook Products, or information about the people, pages, accounts, hashtags and groups with which the visitor is connected.

    Device information such as device attributes, identifiers, network and connections, and cookie data.

    Information from partners whereby advertisers, app developers and publishers can send information to Facebook through the Facebook business tools they use, including the social plugins (such as the "Like" button), Facebook Login or the Facebook Pixel. These partners provide Facebook with information about the visitor's activities outside of Facebook.

    In addition, Facebook uses cookies that are set on the visitor's end device when the Facebook page is called up, regardless of whether the visitor is logged in to his or her Facebook account or not. In addition, Facebook also processes the information stored in the cookies when a person visits the Facebook services, services provided by other members of the Facebook group of companies and services provided by other companies that use the Facebook services. In addition, other entities such as Facebook partners and other third parties may use cookies on the Facebook Services to provide services to Facebook or the companies advertising on Facebook. For more information about Facebook's use of cookies, please see the Facebook Cookie Policy:
    https://de-de.facebook.com/policies/cookies/

    When you access a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for "German" IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (in particular as part of the "login notification" function); this may enable Facebook to assign IP addresses to individual users.

    If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies present on your device and close and restart your browser. In this way, Facebook information that can directly identify you will be deleted. This allows you to use our Facebook page without revealing your Facebook identifier. When you access interactive features of the page (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognisable to Facebook as a specific user.

    For information on how to manage or delete information about you, please visit the following Facebook support pages:
    https://de-de.facebook.com/about/privacy.

    For more information on the types of information Facebook processes, please see the Facebook Data Policy:
    https://de-de.facebook.com/policy.php

    b) How is the information processed by Facebook shared with others?

    Facebook works with third party partners who help Facebook provide and improve its products or who use Facebook business tools to help Facebook grow its business. Facebook may share information with the following third party partners:

    • Partners using Facebook analytics services;
    • Advertisers;
    • Partner for measurements;
    • Partners offering goods and services in Facebook products;
    • Suppliers and service providers;
    • Researchers and scientists;
    • law enforcement authorities or legal enquiries.

    For more information about the data Facebook may share with third party partners, please see the Facebook Data Policy:
    https://de-de.facebook.com/policy.php

    c) How does Facebook process and transmit data as part of its global services?

    Facebook shares information globally, both internally between Facebook companies and externally with its partners, as well as with such persons or organisations with whom the visitor connects and shares something around the world. In doing so, data may also be transferred to and processed in the US or other third countries that do not have an adequate level of data protection. In this regard, Facebook uses standard data protection clauses approved by the European Commission or relies on adequacy decisions issued by the European Commission regarding specific countries.

    For more information on data transfers by Facebook, please refer to the Facebook Data Policy:
    https://de-de.facebook.com/policy.php

    3. data deletion and storage period

    Facebook retains data until it is no longer needed to provide its services and Facebook products, or until the user's Facebook account is deleted, whichever comes first. This is a case-by-case determination and depends on things like the nature of the data, why it is being collected and processed, and relevant legal or operational storage needs.

    For more information on data deletion and retention period, please refer to the Facebook Data Policy:
    https://de-de.facebook.com/policy.php

    Regarding the storage period of cookies set by Facebook, you can find more information in the Facebook Cookie Policy:
    https://de-de.facebook.com/policies/cookies/

This privacy policy was developed with the support of DataGuard created.

10.2 Instagram (appearance) 

We operate a presence on the social network Instagram. This is an application of Facebook Inc. (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland; hereinafter: "Facebook"). We would like to point out that we do not receive any knowledge of the content of the transmitted data or its use by Facebook. You can find further information at:https://help.instagram.com/519522125107875 

10.3 LinkedIn 

10.3.1 LinkedIn Ads 

We use the tracking service "LinkedIn Ads" on our website, a service of LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland; hereinafter referred to as: "LinkedIn"). LinkedIn Ads stores and processes information about your user behaviour on our website. For this purpose, LinkedIn Ads uses, among other things, cookies, small text files that are stored locally in the cache of your web browser on your end device and that enable an analysis of your use of our website. 

We use LinkedIn Ads for marketing and optimisation purposes, in particular to analyse the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO. 

Please note that this setting will be deleted when you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of this data by deactivating the execution of Java Script in your browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. 

It is possible that personal data will be transferred to the USA in the course of using this LinkedIn service. In this case, LinkedIn has concluded corresponding standard contractual clauses that regulate the protection of personal data transferred from the European Union to the USA. You can find further information at: https://www.linkedin.com/help/linkedin/answer/62533  

Further information from the third-party provider on data protection can be found on the following website:https://www.linkedin.com/legal/privacy-policy 

On our website, we use a link to the social network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter: "LinkedIn"). The link is identified by means of the LinkedIn logo (no LinkedIn plug-in). When you click on the LinkedIn logo, your browser establishes a direct connection with the LinkedIn servers. If you are already logged in to LinkedIn via your personal user account, the information about your visit to our website is automatically forwarded to LinkedIn. It is then possible that LinkedIn assigns the visit to the website to your account. We would like to point out that we have no knowledge of the content of the transmitted data or its use by LinkedIn. The following link leads to the privacy policy of LinkedIn:http://de.linkedin.com/legal/privacy-policy

It is possible that personal data will be transferred to the USA in the course of using this LinkedIn service. In this case, LinkedIn has concluded corresponding standard contractual clauses that regulate the protection of personal data transferred from the European Union to the USA. You can find further information at: https://www.linkedin.com/help/linkedin/answer/62533  

10.3.3 LinkedIn (Insight) 

Our website uses the LinkedIn Insight conversion tool of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter: "LinkedIn"). LinkedIn Insight allows us to obtain information about our website usage and to present you with advertising content on other websites that is tailored to your interests. For this purpose, a cookie with a validity of 120 days is set in your browser to enable LinkedIn to recognise you when you visit a website. The collection within the scope of this service only takes place after your express consent has been given. The legal basis for the processing is accordingly Art. 6 (1) UAbs. 1 lit. a) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. 

You can find more information on data protection at LinkedIn here:https://www.linkedin.com/legal/privacy-policy#choices-oblig

It is possible that personal data will be transferred to the USA in the course of using this LinkedIn service. In this case, LinkedIn has concluded corresponding standard contractual clauses that regulate the protection of personal data transferred from the European Union to the USA. You can find further information at: https://www.linkedin.com/help/linkedin/answer/62533  

You can object to LinkedIn Insight storing a user profile and information about your visit to our website and to LinkedIn Insight setting tracking cookies on other websites by clicking this opt-out link. 

10.4 YouTube 

10.4.1 YouTube appearance 

We operate a presence on the video platform YouTube. This is an application of YouTube LLC (901 Cherry Ave, San Bruno, CA 94066 USA, represented by Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland; hereinafter: "YouTube"). We would like to point out that we have no knowledge of the content of the transmitted data or its use by YouTube. You can find further information at:https://www.google.de/intl/de/policies/privacy/ 

There is a possibility that personal data will be transferred to the USA in the course of using this Google service. Google has concluded SCCs for this case. You can find more information at:https://policies.google.com/privacy/frameworks 

10.4.2 YouTube (videos) 

The plug-ins from YouTube.de/YouTube.com, which we use on our website, are operated by YouTube , represented by Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland. If the plug-ins are called up on our website, a connection is established to the YouTube servers. This results in the transmission of information about which of our websites you have visited to the YouTube server. If you are logged in as a member of YouTube, it is possible for YouTube to assign this information (videos viewed and comments) to your personal user account. You can avoid the collection of your data by logging out. YouTube's privacy policy can be accessed via:https://www.google.de/intl/de/policies/privacy/

It is possible that personal data may be transferred to the USA in the course of using this Google service. In this case, Google has concluded corresponding standard contractual clauses that regulate the protection of personal data transferred from the European Union to the USA. You can find further information at:https://policies.google.com/privacy/frameworks  

You can object to the storage of a user profile and information about your visit to our website by YouTube as well as to the setting of YouTube tracking cookies on other websites by clicking on this opt-out link. 

On our website, we use a reference (link) to our presence on the social career network XING. This is an application of XING SE (Dammtorstraße 30, 20354 Hamburg; hereinafter: "XING"). We would like to point out that we do not receive any knowledge of the content of the transmitted data or its use by XING. We have used functions of the XING service on our website. When you visit the website, your web browser connects to the XING servers for a short time, through which the XING functions are provided (e.g. calculation of the counter value). XING does not use cookies and does not store any personal data. Furthermore, no evaluation of your usage behaviour takes place. We would like to point out that we have no knowledge of the content of the transmitted data or its use by XING. You can find further information at:https://privacy.xing.com/de/datenschutzerklaerung 

10.6 Kununu 

We operate a presence on the employer review portal "kununu". This is an application of XING SE (Dammtorstraße 30, 20354 Hamburg, Germany; hereinafter: "XING"). 
We would like to point out that we do not receive any knowledge of the content of the transmitted data or its use by kununu or XING. You can find further information at:https://privacy.xing.com/de/datenschutzerklaerung 

10.7 Podigee Podcast Hosting 

We use the podcast hosting service Podigee from the provider Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are loaded by Podigee or transmitted via Podigee. 

The use is based on our legitimate interests, i.e. interest in a secure and efficient provision, analysis and optimisation of our podcast offer pursuant to Art. 6 Para. 1 lit. f. DSGVO. 

Podigee processes IP addresses and device information in order to enable podcast downloads/playbacks and to determine statistical data, such as call-up figures. This data is anonymised or pseudonymised before being stored in Podigee's database unless it is necessary for the provision of the podcasts. 

Further information and objection options can be found in Podigee's privacy policy: https://www.podigee.com/de/about/privacy/

11 HubSpot 

For our online marketing activities we use HubSpot ('25 First Street, 2nd Floor, Cambridge, MA 02141 USA). This is an integrated software solution that we use to cover various aspects of our online marketing. 

These include, among others: 

  • E-mail marketing (newsletters and automated mailings, e.g. to provide downloads) 
  • Social Media Publishing & Reporting 
  • Reporting (e.g. traffic sources, accesses, etc. ...) 
  • Contact management (e.g. user segmentation & CRM) 
  • Contact forms incl. automated verification of the email when entered 
  • Call-to-Actions Button/Links 

Our sign-up service allows visitors to our website to learn more about our company, download content and provide their contact information and other demographic information. 

This information, as well as the content of our website, is stored on servers of our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. We have specified server location within Europe via AWS within our contract with Hubspot. 

All information we collect is subject to this privacy policy. We use all information collected solely to optimise our marketing. 

HubSpot is a software company from the USA. We have completed the SCCs of the EU, as well as a Data Processing Addendum, which you can find under this link https://legal.hubspot.com/dpa

If you have any further questions about Hubspot's privacy policy, you are welcome to contact Hubspot directly at the following link https://preferences.hubspot.com/privacy or write to Nicholas Knoop, Data Protection Officer, HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. 

  • More information about the cookies used by HubSpot can be found at here

12 Glassdoor

We operate a presence on the employer review portal "Glassdoor". Glassdoor Inc. is a company registered in Delaware (100 Shoreline Highway, Mill Valley California, USA; hereinafter "Glassdoor") as the responsible entity. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Glassdoor. 

The following link leads to the privacy policy of Glassdoor Inc: https://hrtechprivacy.com/de/brands/glassdoor#privacypolicy 

13 Shopify 

13.1 Shopify appearance 

We host our online shop with Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify"). 

Shopify is a tool for creating and hosting websites. When you visit our website, Shopify collects your IP address and information about the device and browser you are using. Shopify also analyses the number of visitors, the sources of visitors, customer behaviour and compiles user statistics. When you make a purchase on our website, Shopify also collects your name, email address, shipping and billing addresses, payment information and other data related to the purchase (e.g. phone number, amount of sales made, etc.). For analytics, Shopify stores cookies in your browser. 

For details, please refer to Shopify's privacy policy: 

https://www.shopify.de/legal/datenschutz

The use of Shopify is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the most reliable presentation of our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. 

Job processing 

We have concluded a contract on order processing (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. 

For details please see https://www.shopify.com/legal/dpa

13.2 Shopify Pay 

Shopify Pay has integrated components from Stripe. The European operating company of Stripe is Stripe Payments Europe Ltd, C/O A&L Goodbody, Ifsc, North Wall Quay, Dublin 1, Ireland. 

Stripe is an online payment service provider. When you want to buy something from our shop, Stripe processes transaction data. The "transaction data" collected by Stripe includes personal data and may include : your name, email address, billing address, shipping address, payment method information (such as credit or debit card number, bank account information or the symbol of the card you selected for payment), merchant and location, purchase amount, purchase date and in some cases some information about what you purchased and your phone number. Stripe may also receive your transaction history within our shop. 

Similarly, Stripe uses personal information about your identity, including information provided by you and our service providers, to provide verification services to Stripe or to the business users with whom you do business and to reduce fraudulent activity and increase security. If you provide a "selfie" along with a picture of your identity document, we use technology to compare and calculate whether they match and your identity can be verified. 

Stripe uses your personal information collected through the Services to detect and prevent fraudulent activity against Stripe, its business users and financial partners, including detecting unauthorised logins using your online activity. Stripe may provide business users (including card issuers and others involved in payment processing activities) with personal information about you (including your attempted transactions) to help them assess the fraud risk associated with the transaction in question. They may here and here learn more about how Stripe can use technology to assess the fraud risk associated with an attempted transaction and what information Stripe can share with business users regarding such risks. 

You have the option to revoke your consent to the handling of personal data at any time vis-à-vis Stripe. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. 

Stripe's privacy policy is available at the following link https://stripe.com/de/privacy. The Stripe Cookie Policy can be viewed here https://stripe.com/cookies-policy/legal. Stripe's processors can be seen here https://stripe.com/service-providers/legal. The Privacy Center can be found under this link https://stripe.com/privacy-center/legal. The applicable regulations on data transfer can be found under this link https://stripe.com/at/privacy-center/legal#data-transfers  

Privacy policy Spotify

Status June 2022

Table of contents
  1. Name and address of the person responsible
  2. Contact details of the data protection officer
  3. General information on data processing
  4. Rights of the data subject
  5. Provision of the website and creation of log files
  6. Use of cookies
  7. Registration
  8. Webshop
  9. Payment options
  10. Shipping service provider
  11. Email contact
  12. Contact form
  13. Company websites
  14. Use of company presences in job-oriented networks
  15. Plugins used
  16. Integration of plugins via external service providers
  1. Name and address of the person responsible
  2. The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is the:

    Alexander Thamm GmbH

    Sapporobogen 6-8

    80637 Munich

    Germany

    089 30760880

    contact@alexanderthamm.com

    https://shop.alexanderthamm.com/

  3. Contact details of the data protection officer
  4. The data protection officer of the data controller is:

    DataCo GmbH

    Dachauer Street 65

    80335 Munich

    Germany

    +49 89 7400 45840

    www.dataguard.de

  5. General information on data processing
  6. 1. scope of the processing of personal data

    As a matter of principle, we only process personal data of our users insofar as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users is regularly only carried out after the consent of the user. An exception applies in those cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is required by legal regulations.

    2. legal basis for the processing of personal data

    Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) sentence 1 lit. a DSGVO serves as the legal basis.

    When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) sentence 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

    Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) sentence 1 lit. c DSGVO serves as the legal basis.

    In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Article 6 (1) sentence 1 lit. d DSGVO serves as the legal basis.

    If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) sentence 1 lit. f DSGVO serves as the legal basis for the processing.

    3. data deletion and storage period

    The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

  7. Rights of the data subject
  8. If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

    1. right to information

    You may request confirmation from the controller as to whether personal data concerning you are being processed by him.

    If there is such processing, you can request information from the controller about the following:

    1. the purposes for which the personal data are processed;
    1. the categories of personal data which are processed;
    1. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
    1. the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage duration;
    1. the existence of a right to rectify or erase personal data concerning you, a right to have processing restricted by the controller or a right to object to such processing;
    1. the existence of a right of appeal to a supervisory authority;
    1. any available information on the origin of the data if the personal data are not collected from the data subject;
    1. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

    You have the right to request information on whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 of the GDPR in connection with the transfer.

    2. right of rectification

    You have a right of rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

    3. right to restriction of processing

    You may request the restriction of the processing of personal data concerning you under the following conditions:

    • if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
    • the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data;
    • the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims, or
    • if you have objected to the processing pursuant to Art. 21 (1) DSGVO and it has not yet been determined whether the legitimate grounds of the controller outweigh your grounds.

    Where the processing of personal data relating to you has been restricted, those data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

    If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

    4. right to erasure

    a) Obligation to delete

    You may request the controller to erase the personal data concerning you without delay and the controller is obliged to erase this data without delay if one of the following reasons applies:

    1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
    1. You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a DSGVO and there is no other legal basis for the processing.
    1. You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
    1. The personal data concerning you has been processed unlawfully.
    1. The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
    1. The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.

    b) Information to third parties

    If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to, or copies or replications of, that personal data.

    c) Exceptions

    The right to erasure does not exist insofar as the processing is necessary

    1. to exercise the right to freedom of expression and information.
    1. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
    1. for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) DSGVO;
    1. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, where the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
    1. for the assertion, exercise or defence of legal claims.

    5. right to information

    If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves a disproportionate effort.

    You have the right to be informed of these recipients by the controller.

    6. right to data portability

    You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that

    1. the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b DSGVO and
    1. the processing is carried out with the aid of automated procedures.

    In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.

    The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

    7. right of objection

    You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) sentence 1 lit. e or f DSGVO; this also applies to profiling based on these provisions.

    The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

    If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

    If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

    You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

    8. right to revoke the declaration of consent under data protection law

    You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

    9. automated decision in individual cases including profiling

    You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

    1. is necessary for the conclusion or performance of a contract between you and the responsible person,
    1. is authorised by legislation of the Union or the Member States to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
    1. is done with your express consent.

    However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (b) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

    With regard to the cases referred to in 1 and 3, the controller shall take reasonable steps to safeguard the rights and freedoms of, and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

    10. right to complain to a supervisory authority

    Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

    The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

  9. Provision of the website and creation of log files
  10. 1. description and scope of data processing

    Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

    The following data is collected:

    • Information about the browser type and version used
    • The operating system of the user
    • The IP address of the user
    • Date and time of access
    • Websites from which the user's system accesses our website

    This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

    2. purpose of the data processing

    The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

    The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

    These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f DSGVO.

    3. legal basis for the data processing

    The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f DSGVO.

    4. duration of the storage

    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

    In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

    5. possibility of objection and removal

    The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

  11. Use of cookies
  12. 1. description and scope of data processing

    Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

    We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

    The following data is stored and transmitted in the cookies:

    • Language settings
    • Article in shopping cart
    • Log-in information
    • Search terms entered
    • Use of website functions

    2. purpose of the data processing

    The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

    We need cookies for the following applications:

    • Shopping cart
    • Adoption of language settings
    • Remembering search terms

    The user data collected through technically necessary cookies are not used to create user profiles.

    3. legal basis for the data processing

    The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 lit. f DSGVO.

    4. duration of storage, possibility of objection and elimination

    Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

    If you use a Safari browser from version 12.1, cookies are automatically deleted after seven days. This also applies to opt-out cookies, which are set to prevent tracking measures.

  13. Registration
  14. 1. description and scope of data processing

    On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:

    • Email address
    • Name
    • First name
    • Address
    • Date and time of registration

    As part of the registration process, the user's consent to the processing of this data is obtained.

    2. purpose of the data processing

    Registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.

    The user's identification is stored for the purpose of processing the contract.

    3. legal basis for the data processing

    The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a DSGVO if the user has given his consent.

    If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b DSGVO.

    4. duration of the storage

    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

    This is the case for the data collected during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

    5. possibility of objection and removal

    As a user, you have the option of cancelling your registration at any time. You can have the data stored about you changed at any time.

    The user can change his data at any time via his account.

    If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

  15. Webshop
  16. We offer a webshop on our website. For this purpose, we use the Software as a Service (SaaS) rental shop system of a service provider commissioned by us.

    The name of our rental shop system and the name and address of the service provider are:

    Shopify of the provider Shopify International Limited, 1-2 Haddington Road, D04 XN32, Dublin , Ireland (hereinafter referred to as Shopify).

    You can find more information in the provider's privacy policy:
    https://www.shopify.de/legal/datenschutz

    The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

    • Browser type and version
    • Operating system used
    • Referrer URL
    • Host name of the accessing computer
    • Date and time of the server request
    • IP address

    This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - for this purpose, the server log files must be collected.

    We have concluded an order processing contract with the relevant service provider, in which we oblige the relevant service provider to protect user data and not to disclose it to third parties.

    The website server is geographically located in the European Union (EU) or the European Economic Area (EEA).

  17. Payment options
  18. 1. description and scope of data processing

    We offer our customers various payment options for processing their orders. For this purpose, we forward customers to the platform of the corresponding payment service provider depending on the payment option. After completion of the payment process, we receive the customers' payment data from the payment service providers or our house bank and process them in our systems for the purposes of invoicing and accounting.

    Payment via Klarna

    It is possible to process the payment transaction with the payment service provider Klarna.

    Klarna is a payment service provider that enables purchase on account or payment by instalments.

    The European operating company of Klarna is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

    If you select "purchase on account" or "purchase by instalment" as a payment option during the transaction via Klarna, your personal data will be automatically transmitted to Klarna. The personal data transmitted to Klarna is in particular the following

    • First name
    • Last name
    • Address
    • Date of birth
    • Gender
    • Email address
    • IP address
    • Telephone/mobile phone number
    • Bank details
    • Credit card number incl. expiry date and CVC code
    • Number of articles
    • Article number
    • Data on goods and/or services
    • Transaction amount and tax levies

    The purpose of the transmission of the data is in particular identity verification, payment administration and fraud prevention. The personal data exchanged between Klarna and us may be transmitted by Klarna to credit agencies.

    This transfer is for the purpose of checking identity and creditworthiness. Klarna may also pass on personal data to affiliated companies (Klarna Group) and service providers or subcontractors, insofar as this is necessary to fulfil contractual obligations or the data is to be processed on behalf.

    For more information on the processing of your data by Klarna, please refer to Klarna's privacy policy at:
    https://pay.amazon.com/de/help/201751600
    https://www.klarna.com/de/datenschutz/ can be retrieved.

    Payment by credit card

    It is possible to complete the payment process by credit card.

    If you have selected payment by credit card, payment data will be passed on to payment service providers for payment processing. All payment service providers comply with the specifications of the "Payment Card Industry (PCI) Data Security Standards" and have been certified by an independent PCI Qualified Security Assessor.

    Within the framework of payment by credit card, the following data are regularly transmitted:

    • Purchase amount
    • Date and time of purchase
    • First name and surname
    • Address
    • Email address
    • Credit card number
    • Period of validity of the credit card
    • Security code (CVC)
    • IP address
    • Telephone number / mobile phone number

    Payment data is passed on to the following payment service providers:

    • Stripe Inc, 510 Townsend Street San Francisco, CA 94103, USA

    You can find more information on the data protection guidelines as well as revocation and removal options vis-à-vis the payment service providers here:

    Stripe:

    Other payment options

    Furthermore, we offer payment with the following options:

    Shopify Pay

    2. purpose of the data processing

    The transmission of payment data to payment service providers serves to process the payment, e.g. when you purchase a product and/or use a service.

    3. legal basis for the data processing

    The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b DSGVO, as the processing of the data is necessary for the execution of the concluded purchase contract.

    4. duration of the storage

    All payment data as well as data on possible chargebacks will only be stored for as long as they are needed for payment processing and possible processing of chargebacks and debt collection as well as for combating misuse.

    Furthermore, payment data may be stored beyond this if and as long as this is necessary to comply with statutory retention periods or to prosecute a specific case of misuse.

    Your personal data will be deleted upon expiry of the statutory retention obligations, i.e. after 10 years at the latest.

    5. possibility of objection and removal

    You can revoke your consent to the processing of your payment data at any time by notifying the responsible party or the payment service provider used. However, the payment service provider used may still be entitled to process your payment data if and as long as this is necessary for the contractual processing of payments.

  19. Shipping service provider
  20. 1. description and scope of data processing

    If you order products or services on our website for which a shipping service provider is used for delivery, you will receive your order and shipping confirmation via your email address as well as, depending on the respective shipping service provider, the notification that your shipment has arrived and/or the notification for the package announcement as well as possible delivery options.

    The data will be transmitted to the following service providers:

    • DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

    The data transmitted are regularly:

    • Name
    • Address
    • Email address

    2. purpose of the data processing

    The purpose of processing the personal data is to enable shipping service providers to inform recipients about the progress of the shipment by email and thus increase the likelihood of a successful delivery.

    3. legal basis for the data processing

    The legal basis for the transmission of the email address to the respective shipping service provider as well as its use is consent pursuant to Art. 6 para. 1 lit. a DSGVO.

    4. duration of the storage

    The transmitted data will be deleted from the respective shipping service provider once the package has been delivered.

    5. possibility of objection and removal

    The notification service by the dispatch service provider can be cancelled by the user concerned at any time. For this purpose, a corresponding opt-out link is included in every email.

  21. Email contact
  22. 1. description and scope of data processing

    On our website, it is possible to contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.

    The data is used exclusively for processing the conversation.

    2. purpose of the data processing

    In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

    3. legal basis for the data processing

    The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.

    The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f DSGVO. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

    4. duration of the storage

    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

    The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

    5. possibility of objection and removal

    The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.

    The revocation of consent and the objection to storage are to be sent via e-mail to atmarketing@alexanderthamm.com.

    All personal data stored in the course of contacting us will be deleted in this case.

  23. Contact form
  24. 1. description and scope of data processing

    Our website contains a contact form that can be used for electronic contact. If a user uses this option, the data entered in the input mask is transmitted to us and stored.

    The following data is stored at the time the message is sent:

    • Email address
    • Name
    • First name
    • Date and time of registration

    For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy.

    Alternatively, it is possible to contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.

    The data is used exclusively for processing the conversation.

    2. purpose of the data processing

    The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

    The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

    3. legal basis for the data processing

    The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a DSGVO if the user has given his consent.

    The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 p. 1 lit. f DSGVO. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.

    4. duration of the storage

    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

    The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

    5. possibility of objection and removal

    The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.

    The revocation of consent and the objection to storage are to be sent via e-mail to atmarketing@alexanderthamm.com.

    All personal data stored in the course of contacting us will be deleted in this case.

  25. Company websites
  26. Use of company presences in social networks

    Instagram:

    Instagram, Part of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland


    On our company page, we provide information and offer Instagram users the opportunity to communicate. If you carry out an action on our Instagram company page (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by the Instagram company jointly responsible for the Alexander Thamm GmbH company page, we cannot provide any binding information on the purpose and scope of the processing of your data.

    Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the corporate presence for:

    Our company website is used for advertising purposes, products and competitions.

    In this context, publications about the company's appearance may contain the following contents:

    • Information about products
    • Raffles
    • Advertising

    Every user is free to publish personal data through activities.

    The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a DSGVO.

    The data generated by the company website is not stored in our own systems.


    You can object at any time to the processing of your personal data that we collect in the course of your use of our Instagram - company presence and assert your data subject rights mentioned under IV. of this data protection declaration. To do so, send us an informal email to atmarketing@alexanderthamm.com.Zur Processing of your personal data by Instagram and the corresponding objection options, you can find more information here:

    Instagram: https://help.instagram.com/519522125107875

    YouTube:

    YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, United States


    On our company website, we provide information and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube company website (e.g. comments, posts, likes, etc.), it is possible that you make personal data (e.g. real name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by YouTube, the company jointly responsible for the Alexander Thamm GmbH company website, we cannot make any binding statements on the purpose and scope of the processing of your data.

    Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the corporate presence for:

    Our company website is used for advertising purposes, products and competitions.

    In this context, publications about the company's appearance may contain the following contents:

    • Information about products
    • Raffles
    • Advertising

    Every user is free to publish personal data through activities.

    The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a DSGVO.

    The data generated by the company website is not stored in our own systems.


    You can object at any time to the processing of your personal data that we collect in the course of your use of our YouTube corporate presence and assert your data subject rights as stated under IV. of this data protection declaration. To do so, send us an informal email to atmarketing@alexanderthamm.com.Zur. You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:

    YouTube: https://policies.google.com/privacy?gl=DE&hl=de

  27. Use of company presences in job-oriented networks
  28. 1. scope of data processing

    We use the possibility of company presences on professional networks. We maintain a company presence on the following professional networks:

    LinkedIn:

    LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

    On our site, we provide information and offer users the opportunity to communicate.

    The company website is used for applications, information/PR and active sourcing.

    We do not have any information on the processing of your personal data by the companies jointly responsible for the corporate presence. You can find more information on this in the privacy policy of:

    LinkedIn:

    https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

    If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public.

    2. legal basis for the data processing

    The legal basis for the processing of your data in connection with the use of our company website is Art.6 para.1 p.1 lit. f DSGVO.

    3. purpose of the data processing

    Our company website serves to inform users about our services. In doing so, every user is free to publish personal data through activities.

    4. duration of the storage

    We store your activities and personal data published via our corporate website until you revoke your consent. In addition, we comply with the statutory retention periods.

    5. possibility of objection and removal

    You can object at any time to the processing of your personal data that we collect in the course of your use of our company website and assert your data subject rights as stated under IV. of this data protection declaration. To do so, send us an informal email to the email address stated in this data protection declaration.

    You can find more information on objection and removal options here:

    LinkedIn:

    https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

  29. Plugins used
  30. We use plugins for various purposes. The plugins used are listed below:

    Use of Instagram Plugin

    1. scope of the processing of personal data

    We use plugins of the Instagram service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and its representative in the Union Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as: Facebook). The integrated Instagram buttons are used by us to enable a link to our Instagram profile. Likewise, a widget is integrated that enables us to display certain photos and videos from our Instagram profile in our online presence.When you visit a page of ours that contains such a plug-in, your browser establishes a direct connection to a Facebook server. The content of the plug-ins is transmitted directly to your browser and integrated into the online presence. In the process, data is automatically transmitted to Instagram and stored on their servers. This transmitted data includes connection data (such as your IP address, date and time, the URL called up) as well as the browser used and the operating system.
    Your visit to our pages can thus be tracked by Instagram, even if you do not actively use the plug-in functions.If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This enables Instagram to assign the visit to our pages to your user account. If you want to prevent this direct association, you must log out of Instagram before visiting our online presence.
    For more information, please see Instagram's privacy policy:
    https://help.instagram.com/155833707900388

    2. purpose of the data processing

    The use of the Instagram plug-in serves to improve the external presentation of our company.

    3. legal basis for the processing of personal data

    The legal basis for the processing of the users' personal data is, in principle, the user's consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO.

    4. duration of the storage

    Your personal information will be retained for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, for example for tax and accounting purposes.

    5. possibility of revocation and removal

    You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
    You can prevent the collection as well as the processing of your personal data by Instagram by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
    You can find more information about objection and removal options vis-à-vis Instagram at:
    https://help.instagram.com/155833707900388

  31. Integration of plugins via external service providers
  32. 1. description and scope of data processing

    We integrate certain plugins on our website via external service providers in the form of content delivery networks. When you access our website, a connection is established to the servers of the providers we use in order to retrieve content and store it in the cache of the user's browser. Personal data may be stored and analysed in server log files as a result, especially device and browser information (in particular the IP address and operating system). We use the following services:

    • Shopify Buy Button

    2. purpose of the data processing

    The use of the functions of these services serves to deliver and accelerate online applications and content.

    3. legal basis for the data processing

    The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website.

    4. duration of the storage

    Your personal information will be retained for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by law.

    5. possibility of objection and removal

This privacy policy was developed with the support of DataGuard created.

14 Google

14.1 Google reCAPTCHA

This website uses the Google reCAPTCHA service, operated by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: "Google"), which protects the website from spam and abuse. The reCAPTCHA service is intended to prevent abusive activities from being carried out on the website by automated software. This is ensured by checking whether the entries actually come from a natural person. For verification purposes, data such as the address of the page on which the captcha is used, the user's IP address, the user's input behaviour (e.g. answering the reCAPTCHA question, input speed in the form fields, the order in which the input fields are selected, etc.) as well as browser, browser size and resolution, browser plug-ins, date, language setting, the website's display instructions (CSS) and scripts (JavaScript) and the mouse or touch events within the website are collected and processed. If the user of the website is logged into Google, the Google account will also be recognised and assigned. 

Cookies from other Google services such as Gmail, Search and Analytics will also be read by Google in this case. Data that is collected and stored as part of the use of Google reCAPTCHA is sent to Google in encrypted form. Whether the captcha is displayed on the page in the form of a checkbox or by text entry is decided by Google's subsequent evaluation. No personal data is read out or stored from the input fields of the respective form. 

The legal basis for the use of reCAPTCHA is our legitimate interest pursuant to Art. 6 para. 1 UAbs. 1 lit. f) DSGVO, which is to protect our website. You can find more information about the collection and processing of your data by Google and your rights as a data subject in this regard in Google's privacy policy:https://www.google.com/intl/de/policies/privacy/. It is possible that personal data may be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the course of using this Google service. . In this case, Google has concluded corresponding standard contractual clauses that regulate the protection of personal data transferred from the European Union to the USA. You can find more information at:https://policies.google.com/privacy/frameworks  

14.2 Google Tag Manager

Our website uses the Google Tag Manager, a service of Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). This allows us to manage website tags via an interface. The Google Tag Manager tool itself is a cookie-less domain and does not collect any personal data. The Google Tag Manager provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. For more information about the collection and processing of your data by Google, as well as your data subject rights in this regard, please refer to Google's privacy policy at:https://policies.google.com/privacy?hl=de 

It is possible that personal data may be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the course of using this Google service. In this case, Google has concluded corresponding standard contractual clauses that regulate the protection of personal data transferred from the European Union to the USA. You can find more information at:https://policies.google.com/privacy/frameworks 

You can object to the storage of a user profile and information about your visit to our website by Google Tag Manager as well as to the setting of Google Tag Tracking cookies on other websites by clicking on this opt-out link.

14.3 Google Ads

This website uses Google Ads, a service provided by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). We use the conversion tracking function, for which Google Ads sets cookies on your computer if you have reached our website via an advertisement placed by Google. The data collected by the cookie is not user-related and therefore does not serve to identify you personally. The cookies lose their validity after 30 days. The data is collected for the purpose of creating conversion statistics for Google Ads customers. We only receive information about the total number of users who clicked on our ad and were subsequently redirected to a website tagged with a conversion tracking tag. 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can set your browser so that cookies from the domain "googleadservice.com" are generally blocked. The collection of data within the scope of this service only takes place with your express consent. The purpose of the collection is to provide you with targeted advertising. The legal basis for this is your consent in accordance with Art. 6 (1) UAbs. 1 lit. a) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. In addition to us, Google is to be named as the recipient of the data. The data will be deleted as soon as it is no longer required for our recording purposes. Consent is furthermore required by Google in accordance with their policy:https://www.google.com/about/company/user-consent-policy.html. 

For more information about the collection and processing of your data by Google and your data subject rights in this regard, please see Google's privacy policy at:http://www.google.com/policies/privacy/?hl=de. It is possible that personal data may be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the course of using this Google service. In this case, Google has concluded corresponding standard contractual clauses that regulate the protection of personal data transferred from the European Union to the USA. You can find more information at:https://policies.google.com/privacy/frameworks  

You can object to the storage of a user profile and information about your visit to our website by Google Ads as well as to the setting of Google Ads tracking cookies on other websites by clicking on this opt-out link.

15 keenIO 

Our website uses keenIO, a web analytics service provided by Keen.io LLC. (122 East Houston Street San Antonio, TX 78205, USA; hereinafter: Keen.io). Data on the use of our app is transferred to keenIO so that the pages called up in the mobile app are subsequently visible. Only IP addresses are transmitted to Keen.io. The collection within the scope of this service only takes place after you have given your express consent. The legal basis in this respect is Art. 6 para. 1 UAbs. 1 lit. a) DSGVO. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until the revocation remains unaffected. 

If you are interested in counteracting the collection of data and its subsequent processing, you can also object to such collection and processing. However, in such a case, you may be excluded from the full use of our website and our app. The information generated about the use of this app is transmitted to and stored on a Keen.io server in the USA. Keen.io uses this information for the purpose of evaluating the use of the app, compiling reports on app activity, and providing other services related to app and internet usage. Provided that it is required by law or processing of this data by third parties on behalf of Keen.io, there will be a transfer of this information to third parties by Keen.io. Under no circumstances will Keen.io associate your IP address with any other data stored by Keen.io. You can find further information in this regard under the following link:https://keen.io/privacy-policy