Data protection

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

On the one hand, your data is collected when you communicate it to us. This can be, for. E.g. data that you enter in a contact form.

Other data is recorded automatically or with your consent when you visit the website by our IT systems. This is mainly technical data (e.g. internet browser, operating system or time of the page was viewed). This data is collected automatically as soon as you enter this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

Analysis tools and third party tools

When you visit this website, your surfing behavior can be statistically evaluated. This happens primarily with so-called analysis programs.

Detailed information on these analysis programs can be found in the following data protection declaration.

2. Hosting

We are hosting the content of our website at the following provider:

Host Europe

The provider is Host Europe GmbH, Hansestraße 111, 51149, Cologne (hereinafter Host Europe) When you visit our website, Host Europe collects various log files including your IP addresses.

Details can be found in Host Europe's data protection declaration: https://www.hosteurope.de/AGB/Datenschutzerklaerung/.

Host Europe is used on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in our website being displayed as reliably as possible. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para B. for device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

3. General information and mandatory information

Privacy

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

Michael Hille
Heinrich Witte Street 7
49179 Ostercappeln

Phone: + 49 (0) 15773848862
E-mail:

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Retention period

Unless a specific storage period is specified in this data protection declaration, your personal data will remain with us until the purpose for which it was processed no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have any other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, the deletion takes place after these reasons no longer apply.

General information on the legal basis for the data processing on this website

If you have consented to the data processing, we process your personal data on the basis of Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR, if special data categories according to Article 9 Paragraph 1 GDPR are processed. In the event of express consent to the transfer of personal data to third countries, data processing is also based on Article 49 (1) (a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing is also based on Section 25 (1) TTDSG. The consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we process your data on the basis of Article 6 (1) (b) GDPR. Furthermore, we process your data if they are required to fulfill a legal obligation on the basis of Article 6 (1) (c) GDPR. Data processing can also take place on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. The following paragraphs of this data protection declaration provide information on the relevant legal bases in each individual case.

Information on the data transfer to third-party countries that are not secure under data protection law and the transfer to US companies that are not DPF-certified

Among other things, we use tools from companies based in third countries that are not secure under data protection law, as well as US tools whose providers are not certified according to the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. We would like to point out that in third countries with insecure data protection laws, a level of data protection comparable to that of the EU cannot be guaranteed.

We would like to point out that the USA, as a safe third country, generally has a data protection level comparable to that of the EU. Data transfer to the USA is permitted if the recipient is certified under the "EU-US Data Privacy Framework" (DPF) or has suitable additional guarantees. Information on transmissions to third countries including the data recipients can be found in this data protection declaration.

Recipients of personal data

As part of our business activities, we work together with various external bodies. In some cases, it is also necessary to transmit personal data to these external bodies. We only pass on personal data to external bodies if this is necessary to fulfill a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest according to Art. 6 Para. 1 lit. f GDPR in the transfer or if another legal basis allows the transfer of data. When using contract processors, we only pass on personal data of our customers on the basis of a valid contract for order processing. In the case of joint processing, a joint processing contract is concluded.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT, AT ANY TIME, TO CONTRADICTIVE TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS OBTAINED FROM YOUR SPECIFIC SITUATION; THIS APPLIES ALSO TO A PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS ON WHICH A PROCESS IS BASED IS PERMITTED BY THIS PRIVACY POLICY. IF YOU CLAIM ANY DISPUTE, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE MAY PROVIDE IMPERATIVE REASONABLE REASONS FOR PROCESSING THAT PREVENT ITS INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING OF THE FORMATION, EXERCISE OR DEFENSE OF LEGAL ATTRIBUTIONS ( OPPOSITION ACCORDING TO ART 21 ABS 1 DSGVO).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

• If you deny the accuracy of your personal information stored with us, we usually need time to verify this. For the duration of the audit you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data is unlawful, you may request the restriction of data processing instead of deletion.
• If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
• If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.

If you have restricted the processing of your personal data, these data may be - except for their storage - only with your consent or for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest the European Union or a Member State.

SSL and/or TLS encryption

This site uses SSL or TLS encryption for security purposes and to protect the transmission of confidential content, such as orders or requests you send to us as a site operator. An encrypted connection is indicated by the browser's address bar changing from "http: //" to "https: //" and the lock icon in your browser bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.

Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions you want (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) on the basis of Art. 6 Para. 1 lit.f GDPR, unless a different legal basis is given. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing takes place exclusively on the basis of this consent (Art. 6 Paragraph 1 lit. a GDPR and Section 25 Paragraph 1 TTDSG); the consent can be withdrawn at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete-function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Usercentrics

This website uses Usercentrics' consent technology to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter "Usercentrics").

When you enter our website, the following personal data is transferred to Usercentrics:

• Your consent (s) or the revocation of your consent (s)
• Your IP address
• Information about your browser
• Information about your device
• Time of your visit to the website
• Geolocation

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign you the granted consent or its revocation. The data collected in this way will be stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention requirements remain unaffected.

The Usercentrics banner on this website was configured with the help of eRecht24. You can tell by the fact that the eRecht24 logo appears in the banner. In order to display the eRecht24 logo in the banner, a connection to the eRecht24 image server is established. The IP address is also transmitted here, but is only stored in anonymous form in the server logs. The eRecht24 image server is located in Germany with a German provider. The banner itself is provided exclusively by Usercentrics.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Article 6 (1) (c) GDPR.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

• The type and version of browser used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

Registration with Google

Instead of registering directly on this website, you can register with Google. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To register with Google, all you have to do is enter your Google name and password. Google will identify you and confirm your identity to our website.

If you sign in with Google, we may be able to use certain information in your account to complete your profile with us. You decide whether and what information this is as part of your Google security settings, which you can find here: https://myaccount.google.com/security and https://myaccount.google.com/permissions.

The data processing that goes hand in hand with Google registration is based on our legitimate interest in making the registration process as simple as possible for our users (Art. 6 Para. 1 lit. f GDPR). Since the use of the registration function is voluntary and the users themselves can decide on the respective access options, no conflicting overriding rights of the data subjects are evident.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

5. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool with the help of which we can incorporate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not save cookies and does not carry out any independent analyzes. It is only used to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which can also be transferred to the parent company of Google in the United States.

The Google Tag Manager is used on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para B. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as B. Page views, length of stay, operating systems used and origin of the user. This data is assigned to the respective end device of the user. There is no assignment to a user ID.

Furthermore, we can use Google Analytics, among other things. Record your mouse and scroll movements and clicks. Furthermore, Google Analytics uses various modeling approaches to supplement the recorded data sets and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

IP anonymization

Google Analytics IP anonymization is activated. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Google AdSense (not personalized)

This website uses Google AdSense, a service for integrating advertisements. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google AdSense in "non-personalized" mode. In contrast to the personalized mode, the advertisements are therefore not based on your previous user behavior and no user profile is created by you. Instead, so-called “context information” is used when selecting advertising. The selected advertisements then depend, for example, on your location, the content of the website you are on or your current search terms. For more on the differences between personalized and non-personalized targeting with Google AdSense, see: https://support.google.com/adsense/answer/9007336.

Please note that cookies or comparable recognition technologies (e.g. device fingerprinting) can also be used when using Google Adsense in non-personalized mode. According to Google, these are used to combat fraud and abuse.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://adssettings.google.com/authenticated.

More information about Google's advertising technologies can be found here: https://policies.google.com/technologies/ads and https://www.google.de/intl/de/policies/privacy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Outbrain

We have integrated Outbrain on this website. The provider is Outbrain Inc., 39 West 13th Street, 3rd floor, New York, NY 10011, USA (hereinafter “Outbrain”).

When you visit a website on which Outbrain is integrated, Outbrain creates a pseudonymous user profile (user ID) in which it is stored which content you have viewed or read. Further interest-based content or advertising may then be recommended to you on our website or on other websites on which Outbrain is integrated. For this purpose, your device type, your IP address, your browser type, websites visited and articles read, time of access and device ID are stored and summarized in your user ID.

We also use the Outbrain Pixel. When you enter our website, we can use this pixel to determine whether you already have an Outbrain User ID. This allows advertisers from the Outbrain advertising network to measure the effectiveness of their campaigns.

If consent has been obtained, the above will be used. Service exclusively on the basis of Article 6 Paragraph 1 Letter a GDPR and Section 25 TTDSG. Consent can be revoked at any time. If consent has not been obtained, the use of this service is based on Article 6 (1) (f) GDPR; The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

For further information, please see Outbrain's privacy policy at: https://www.outbrain.com/legal/privacy#privacy-policy.

You can also find a list of all cookies used by Outbrain at the following link: https://www.outbrain.com/privacy/cookies/.

If you would like to view or customize your interest profile on Outbrain, click the following link: https://my.outbrain.com/recommendations-settings/home.

6. Online Marketing and Affiliate Programs

Affiliate programs on this website

We participate in affiliate partner programs. In affiliate partner programs, advertisements from one company (advertiser) are placed on websites of other companies in the affiliate partner network (publisher). When you click on one of these affiliate advertisements, you will be redirected to the advertised offer. If you then make a specific transaction (conversion), the publisher will receive compensation for this. In order to calculate this compensation, it is necessary that the affiliate network operator can understand which advertisement you used to come to the respective offer and carry out the predefined transaction. Cookies or comparable recognition technologies (e.g. device fingerprinting) are used for this purpose.

The storage and analysis of the data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the correct calculation of his affiliate compensation. If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit . B. Device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

We participate in the following affiliate programs:

Amazon affiliate program

The provider is Amazon Europe Core S.à.rl Details can be found in Amazon's data protection declaration at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TOWQAA4&status=Active