Privacy policy

Thank you for visiting our website. The protection and security of your personal information when using our website is very important to us, so we would like to tell you about which of your personal data we collect when you visit our website and what purposes it is used for.

This data privacy policy applies to the website of Schönbuch GmbH, which can be accessed under the domain schoenbuch.com, and its various subdomains ("our website").

Who is responsible and how can I contact Schönbuch?

The data controller

responsible for processing personal data within the meaning of the EU General Data Protection Regulation (GDPR) is:

Schönbuch GmbH
Ottelmannshäuser Strasse 1
97631 Bad Königshofen
Germany

Tel: +49 (0)9761 - 3962 – 0
info@schoenbuch.com

What is this data privacy policy about?

This data privacy policy meets the legal requirements for transparency around the processing of personal data.

Personal data is any information relating to an identified or identifiable individual. This can include information such as your name, age, address, telephone number, date of birth, e-mail address, IP address and user behaviour when visiting a website. Information which we cannot relate back to you personally (without disproportionate effort), e.g. anonymised information is not personal data.

The processing (e.g. collection, retrieval, use, storage or transmission) of personal data always requires a legal basis and a defined purpose. Any personal data we store will be deleted as soon as the purpose of the processing has been achieved and there are no further legitimate reasons for continuing to store it. Please find information on the specific storage periods or criteria for storage provided in the information on the individual processing operations below. Irrespective of this, in individual cases we store your personal data to assert, exercise or defend legal claims and where required to do so by statutory retention obligations.

Who gets my data?

The personal data which we process on our website is only passed on to third parties if necessary for the fulfilment of the purposes and is covered in each individual case by the legal basis (e.g. consent or protection of legitimate interests). In addition, in individual cases we pass on personal data to third parties if this serves the establishment, exercise or defence of legal claims. Examples of possible recipients may be law enforcement authorities, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website, who process personal data on our behalf as part of contract data processing in accordance with Article 28 GDPR, these may be recipients of your personal data. Further information on the use of contract data processors and web services can be found in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files sent by us to the browser of your device during your visit to our website and stored there. As an alternative to the use of cookies, information may also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies enable us to carry out various analyses, for example so that we can recognise the browser you are using when you return to our website and to transmit various pieces of information to us (non-essential cookies). With the help of cookies, we can make our website more user-friendly and effective for you, among other things, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and nor can they contain viruses.

This data privacy policy provides information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager of this website.

What are my rights?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), as a data subject, you have the right to:

  • Right of access / information, pursuant to Art. 15 GDPR, about the data stored about you. This must be supplied in meaningful form, explaining the details of the processing, and be accompanied by a copy of your data;
  • Rectification, pursuant to Art. 16 GDPR, of incorrect or incomplete data stored by us;
  • Erasure, pursuant to Art. 17 GDPR, of the data stored by us, insofar as the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • Restriction of processing, pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing of the data is unlawful, we no longer need the data, and you reject its deletion because you need it to assert, exercise or defend legal claims, or you have objected to the processing of your data pursuant to Art. 21 GDPR.
  • Data portability, pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 para. 1(a) GDPR, or on the basis of a contract pursuant to Art. 6 para. 1(b) GDPR, and the data has been processed by us using automated procedures. You will receive your data in a structured, common, machine-readable format, or we will transmit the data directly to another data controller, as far as this is technically feasible.
  • Objection, pursuant to Art. 21 GDPR, to the processing of your personal data, insofar as this is based on Art. 6 para. 1(e)(f) GDPR and there are reasons for this arising from your particular situation, or the objection is against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing are proven or the processing is carried out to assert, exercise or defend legal claims. Insofar as the right to object to individual processing operations does not exist, this is stated there.
  • Withdrawal pursuant to Art. 7 para. 3 GDPR of your consent with effect for the future.
  • Complaint, pursuant to Art. 77 GDPR, to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How, exactly, is my data processed?

Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in what is known as a log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which our website is accessed (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is hosted not by ourselves but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of the GDPR.

Purpose and legal basis

The data is processed to safeguard our overriding legitimate interest in displaying our website and ensuring its security and stability on the basis of Art. 6 para. 1 (f) GDPR. The collection and storage of the data in log files is essential for the operation of the website. There is no right to object to processing due to the exception under Art. 21 para. 1 GDPR. Insofar as the further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 (c) GDPR. There is no legal or contractual obligation to provide the data, but it is technically not possible to access our website without providing the data.

Retention period

The aforementioned data will be stored for the duration of the display of the website.

Contact form

Type and scope of processing

On our website we invite you to contact us via the form provided. The information collected via the mandatory fields in this form is required to process your request. You can also provide additional information voluntarily that you believe is necessary for processing your contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

When you use our contact form, your data is processed for the purpose of communicating and processing your request on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR. If your request relates to an existing contractual relationship with us, the processing of your data for the purpose of fulfilling the contract is based on Art. 6 para. 1(b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Retention period

If you use the contact form, on the basis of your consent, we store the collected data of each request for a period of three years, starting at the completion of your request, or until you revoke your consent.

If you use the contact form in the context of a contractual relationship, we store the collected data of each request for a period of three years from the end of the contractual relationship.

Newsletter

Type and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address and store this information together with the date of your registration and your IP address. You will then receive an e-mail in which you must confirm your registration for the newsletter (double opt-in). If you do not confirm the registration within 28 days, it will automatically expire and the data will not be processed for sending the newsletter.

To send the newsletter, we use a service of the provider MailChimp, which processes your personal data on our behalf in accordance with Art. 28 GDPR.  See below for more information.

Purpose and legal basis

We process your data for the purpose of sending newsletters on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR. You can withdraw your consent at any time by unsubscribing from the newsletter with effect for the future in accordance with Article 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without the provision of your data.

Retention period

Once you have registered for the newsletter, we save your data until you confirm your registration, but longer than that. Once your registration has been successfully confirmed, we store your data until you revoke your consent (unsubscribe from the newsletter).

Ordering in the online shop and registration of a customer account

Type and scope of processing

As part of the order processing, we collect your personal data to register a customer account. You can choose to order as a guest or register a permanent user account. In both cases, the information collected via the mandatory fields during registration is identical and is required for the processing of your order in the online shop. When registering a permanent user account, we also collect a password of your own choosing. In addition, you can voluntarily provide additional information that you believe is necessary for the processing of the order.

Your personal data will only be passed on to third parties (e.g. shipping service providers and freight forwarders) and contract data processors in accordance with Art. 28 GDPR insofar as this is necessary for the processing of the order.

Purpose and legal basis

We process your personal data for the purpose of registering a customer account to fulfil a contract with you in accordance with Art. 6 para. 1(b) GDPR. There is a contractual obligation to provide your data in the mandatory fields, as this information is required to identify you personally and to fulfil the contract on our part. There is no legal obligation to provide the data, but without the provision of this information, you cannot order in our online shop and therefore cannot enter into a contract with us. There is no obligation to provide the additional voluntary information, and you can also place an order in our online shop without disclosing the voluntary information.

The additional processing of your password for the registration of your permanent user account takes place for the purpose of providing a customer account and to display your previous purchases and store your purchase-related data (e.g. billing address, different delivery addresses) on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR. You can withdraw your consent at any time with effect for the future in accordance with Article 7 para. 3 GDPR by deleting your customer account.

Retention period

If you order as a guest, your personal data will be stored until your order has been completed (end of contract). If you register a permanent customer account, we will store your purchase-related data beyond the end of the contract, until the revocation of your consent (deletion of the customer account). In either case, your data will only be stored further if required by statutory retention obligations (e.g. tax and commercial law).

Presence on social media platforms

To provide you with information and offers within social media platform and offer you further ways to contact us and find out about our offers, we maintain so-called fan pages (accounts) as well as channels on the networks mentioned below. In the following, we inform you about which of your data is processed by us or by the respective social media platform process in connection with your access and use of our fan pages/accounts.

Data from you processed by us

If you wish to contact us via a messenger function or a direct message via a social media platform, we usually process the username via which you contact us and, if necessary, store further data provided by you insofar as this is necessary to process/answer your request.

The legal basis for this is Art. 6 (1) 1 f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

(Static) Usage data we receive from the social media platform

We automatically receive statistics regarding our accounts via Insights functionalities. These statistics include, but are not limited to, the total number of page views, likes, page activity and post interactions, reach, videos accessed/viewed, and the proportion of males and females among our fans/followers.

The statistics contain only aggregated data that cannot be related to individual persons. You are not identifiable to us.

What data the social media platforms process about you

To view the contents of our fan pages or accounts, you do not have to be a member of or have a user account with the social media platform concerned.

Please note, however, that when a social media platform is accessed, it also collects and stores data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and uses cookies and similar technologies over which we have no influence. Details can be found in the privacy policy of the respective social media platform (see the corresponding links below).

If you want to interact with the content on our fan pages/accounts, e.g. comment, share or like our posts/contributions and/or contact us via messenger functions, you will need to register with and provide your personal data to the respective social media platform beforehand.

When you use social media platforms, we have no influence on how they process your data. To the best of our knowledge, your data will be stored and processed in particular in connection with the provision of the services of the respective social media platform. Your data will also be used to analyse usage behaviour (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social media platform. It cannot be ruled out that your data will also be stored by the social media platform outside the EU/EEA and passed on to third parties.

Information on aspects such as the exact scope and purposes of the processing of your personal data, the retention period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of social media platform can be found in the privacy policy/cookie policy of the respective social media platform. You will also find information about your rights and options for objection there.

Facebook page

When you visit our Facebook page, Facebook (Meta) collects data such as your IP address and other information that is available on your device in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information on this here: https://facebook.com/help/pages/insights.

We cannot infer anything about individual users based on the statistical information that is transmitted. We only use the information to be able to respond to the interests of our users, and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page only to enable communication and interaction with us. The data we collect usually includes your name, message content, comment content, and the profile information you provide "publicly".

The processing of your personal data for the aforementioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Article 6 para. 1(f) GDPR. If you, as a user, have given your consent to data processing to the respective provider of the social media platform, the legal basis of the processing extends to Art. 6 para. 1(a), Art. 7 GDPR.

Because the actual data processing is carried out by the provider of the social media platform, our access options to your data are limited. Only the provider of the social media platform is authorised to have complete access to your data. For this reason, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, request for deletion, objection, etc.). The most effective way to assert your rights is therefore directly via the respective provider.

Together with Facebook, we are responsible for the personal content of the fan page. Rights of data subjects can be asserted with Meta Platforms Ireland Ltd. as well as with us.

According to the GDPR, the primary responsibility for the processing of Insights data lies with Facebook, and Facebook must fulfil all obligations under the GDPR with regard to the processing of Insights data. Meta Platforms Ireland Ltd. makes the essentials of the Page Insights Addendum available to the data subjects.

We do not make any decisions regarding the processing of Insights data or the storage duration of cookies on user devices.

Further information can be found directly on Facebook (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines for the use of cookies and similar technologies in the context of registration and use, can be found in Facebook's privacy policy/cookie policy:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

Instagram page

When you visit our Instagram page, Instagram (Meta) collects data such as your IP address and other information that is available on your device in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides further information on this under the link below (Note: Clicking on the following link will take you to the website of the social media platform Facebook, also part of the Meta Group, but the information provided via the link also applies to the social media platform Instagram): https://facebook.com/help/pages/insights.

We cannot infer anything about individual users based on the statistical information that is transmitted. We only use the information to be able to respond to the interests of our users, and to continuously improve our online presence and ensure its quality.

We process data collected via the Fanpage exclusively for communication and interaction purposesThe data we collect usually includes your name, message content, comment content, and the profile information you provide "publicly".

The processing of your personal data for the aforementioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Article 6 para. 1 (f) GDPR. If you, as a user, have given your consent to data processing to the respective provider of the social media platform, the legal basis of the processing extends to Art. 6 para. 1 a), Art. 7 GDPR.

Because the actual data processing is carried out by the provider of the social media platform, our access options to your data are limited. Only the provider of the social media platform is authorised to have complete access to your data. For this reason, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The most effective way to assert your rights is therefore directly via the respective provider.

Together with Instagram, we are responsible for the personal content of the fan page. Rights of data subjects can be asserted with Meta Platforms Ireland Ltd. as well as with us.

According to the GDPR, the primary responsibility for the processing of Insights data lies with Instagram, and Instagram must fulfil all obligations under the GDPR with regard to the processing of Insights data. Meta Platforms Ireland Ltd. makes the essentials of the Page Insights Addendum available to the data subjects.

We do not make any decisions regarding the processing of Insights data or the storage duration of cookies on user devices.

Further information can be found directly on Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines for the use of cookies and similar technologies in the context of registration and use, can be found in Instagram’s privacy policy/cookie policy. (Note: Clicking the link below will take you to the website of the social media platform Facebook):
 https://help.instagram.com/519522125107875/?helpref=uf_share

This information can also be viewed in the Help section of Instagram's website, via the following link:
https://help.instagram.com/581066165581870

Cookiebot

Type and scope of processing

We have integrated Cookiebot on our website. Cookiebot is a consent solution of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which allows consent to the storage of cookies to be obtained and documented. Cookiebot uses cookies or other web technologies to recognise users and store your consent or revocation of consent.

Purpose and legal basis

The use of this service is based on the legally required consent to maintain the use of cookies in accordance with Art. 6 para. 1(c) GDPR.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Cybot A/S. Further information can be found in the privacy policy for Cookiebot: https://www.cookiebot.com/de/privacy-policy/.

Cookiebot CDN

Type and scope of processing

We use Cookiebot CDN to properly provide the content of our website. Cookiebot CDN is a service of Cybot A/S. It acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other services of Cybot A/S. You will find a separate section on said services in this Privacy Policy. This section is only about using the CDN.

A CDN uses regionally or internationally distributed servers to help provide the content of our website faster, especially files such as graphics or scripts. When you access this content, you establish a connection to servers of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, and your IP address and, if applicable, browser data such as your user agent are transmitted.  This data is processed exclusively for the purposes indicated above and to maintain the security and functionality of Cookiebot CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimisation of our website, in accordance with Art. 6 para. 1(f) GDPR.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Cybot A/S. Further information can be found in the privacy policy for Cookiebot CDN: https://www.cookiebot.com/de/privacy-policy/.

Facebook Pixel

Type and scope of processing

We use Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called Custom Audiences, i.e. to segment visitor groups to our website, and to determine and then optimise conversion rates. This happens in particular when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.

Purpose and legal basis

We process your data with the help of Facebook Pixel for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to Facebook servers in the USA when using Facebook Pixel, this is done on the basis of your consent in accordance with Art. 49 para. 1(a) GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Meta Platforms Ireland Limited. Further information can be found in the privacy policy of Facebook Pixel: https://www.facebook.com/privacy/explanation.

Google Ads

Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users.

Google Ads collects information about visitor behavior on various websites. This information is used to optimise the relevance of advertising. Google Ads also delivers targeted advertising based on behavioural profiles and geographic location. Your IP address and other identification features, such as your user agent, are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, the provider may ascertain and store your IP address along with other identification features.

In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

We process your data with the help of Google Ads for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to Google servers in the USA when using Google Ads, this is done on the basis of your consent in accordance with Art. 49 para. 1(a) GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. For more information, see the privacy policy for Google Ads: https://policies.google.com/privacy.

Google Analytics

Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our website. This includes, for example, the number of visits to our website, subpages visited and visitors’ length of stay on our website.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

We process data with the help of Google Analytics for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to Google servers in the USA when using Google Analytics, this is done on the basis of your consent in accordance with Art. 49 para. 1(a) GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google DoubleClick

Type and scope of processing

We have integrated components of DoubleClick by Google on our website. DoubleClick is a brand of Google under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with every impression, click or other activity.

Each of these data transmissions triggers a cookie request to the data subject’s browser. If the browser accepts this request, DoubleClick places a cookie in your browser.

DoubleClick uses a cookie ID, which is required to handle the technical procedure. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. Furthermore, it is possible for DoubleClick to record conversions through the cookie ID. Conversions are recorded, for example, if a user has previously been shown a DoubleClick advertisement and subsequently makes a purchase on the advertiser's website using the same Internet browser.

A DoubleClick cookie does not contain any personal data but may contain additional campaign identifiers. A campaign identifier is used to identify campaigns with which you have already been in contact on other websites. As part of this service, Google gains knowledge of data that Google also uses to create commission statements. Among other things, Google can trace that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection provisions of DoubleClick by Google can be found at https://policies.google.com/privacy.

Purpose and legal basis

We process your data with the help of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR. You give your consent via the relevant setting for the use of cookies (cookie banner / Consent Manager). These settings are also where you can withdraw your consent at any time with effect for the future in accordance with Article 7 para. 3 GDPR. The cookie is used, among other things, to place and display user-relevant advertising, and to create reports on advertising campaigns or to improve them. Furthermore, the cookie serves to avoid multiple displays of the same advertisement. Each time you visit one of the individual pages of our website into which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it is possible to visit our website without restriction, but not all functions may be fully available.

Data transfer to the USA

Insofar as personal data is transmitted to Google servers in the USA when using Google Analytics, this is done on the basis of your consent in accordance with Art. 49 para. 1(a) GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. For more information, see the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

Google Maps

Type and scope of processing

We use the map service Google Maps to create driving directions. Google Maps is a service of Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the aforementioned purposes and to maintain the security and functionality of Google Maps.

Purpose and legal basis

The use of Google Maps is based on your consent in accordance with Art. 6 para. 1(a) GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to Google servers in the USA when using Google Maps, this is done on the basis of your consent in accordance with Art. 49 para. 1(a) GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the exact integration of services on our website

This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager based on your consent in accordance with Art. 6 para. 1(a) GDPR and § 25 para. 1 TTDSG

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. For more information, see the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google reCAPTCHA

Type and scope of processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to identify whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the length of the user’s stay on the website and mouse movements in order to distinguish automated queries from human ones. This data is processed exclusively for the aforementioned purposes and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis

The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

Hotjar Behaviour Analytics

Type and scope of processing

We have integrated Hotjar Behavior Analytics on our website. Hotjar Behavior Analytics is a service of Hotjar Ltd. and offers optimisation tools that analyse the behaviour and feedback of users of our website through analysis and feedback tools.

Hotjar Behavior Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.

This information is used, among other things, to compile reports on website activity and to statistically evaluate visitor data. Furthermore, Hotjar Behavior Analytics records clicks, mouse movements and scroll heights to create so-called heat maps and session replays.

In this case, your data will be passed on to the operator of Hotjar Behavior Analytics, Hotjar Ltd., Hotjar Ltd, Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians, STJ 3155, Malta.

Purpose and legal basis

Hotjar Behavior Analytics is used on the basis of your consent in accordance with Art. 6 para. 1(a) GDPR and § 25 para. 1 TTDSG. (German Telecommunications and Telemedia Data Protection Act)

Retention period

The specific storage period of the processed data cannot be influenced by us but is determined by Hotjar Ltd. Further information can be found in the privacy policy for Hotjar Behavior Analytics: https://www.hotjar.com/privacy/.

Microsoft Clarity

Type and scope of processing

We have integrated Microsoft Clarity on our website. Clarity is a service provided by
Microsoft Corporation, One Microsoft Way. Redmond, WA 98052-6399, USA and offers
optimization tools that analyze the behavior and feedback of users of our website through
analysis and feedback tools.

Clarity uses cookies and other browser technologies to evaluate user behavior and recognize
users.

This information is used, among other things, to compile reports on website activity and to
statistically analyze visitor data. Furthermore, Clarity records clicks, mouse movements and
scroll heights in order to create so-called heat maps and session replays.

In this case, your data is passed on to the operator of Clarity, Microsoft Corporation.

Purpose and legal basis

The use of Clarity is based on your consent in accordance with Art. 6 (1) lit. a GDPR and Art.
25 (1) TTDPA.

Data transfer to the USA

Insofar as personal data is transferred to servers in the USA when using Clarity, this is done
on the basis of the EU Commission's adequacy decision on the Transatlantic Data Privacy
Framework pursuant to Art. 45 (1) GDPR. Microsoft Corporation is certified under the
Transatlantic Data Privacy Framework. You can find information here:
https://www.dataprivacyframework.gov/s/participant-search/participant-
detail?id=a2zt0000000KzNaAAK&status=Active

We have also concluded so-called standard data protection clauses with Microsoft
Corporation to ensure that the data is processed in accordance with European data
protection standards. If necessary, we will also ask for your consent in accordance with Art.
49 (1) lit. a GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is
determined by Microsoft Corporation. Further information can be found in the privacy policy
for Clarity: https://privacy.microsoft.com/en-us/privacystatement.

Hotjar CDN

Type and scope of processing

We use Hotjar CDN to properly provide the content of our website. Hotjar CDN is a service of Hotjar Ltd., which acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other services of Hotjar Ltd. You will find a separate section in this Privacy Policy for said services. This section is only about using the CDN.

A CDN uses regionally or internationally distributed servers to help provide the content of our website faster, especially files such as graphics or scripts. When you access this content, you establish a connection to servers of Hotjar Ltd., Hotjar Ltd, Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians, STJ 3155, Malta, and your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the purposes indicated above and to maintain the security and functionality of Hotjar CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in secure and efficient provision and the optimisation of our website in accordance with Art. 6 para. 1(f) GDPR.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Hotjar Ltd. Further information can be found in the privacy policy for Hotjar CDN: https://www.hotjar.com/privacy/.

Instagram CDN

Type and scope of processing

We use Instagram CDN to properly provide the content of our website. Instagram CDN is a service of Meta Platforms Ireland Limited, which acts as a content delivery network (CDN) on our website.

A CDN uses regionally or internationally distributed servers to help provide the content of our website faster, especially files such as graphics or scripts. When you access this content, you establish a connection to servers of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, transmitting your IP address and, if applicable, browser data such as your user agent. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Instagram CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in secure and efficient provision and the optimisation of our website in accordance with Art. 6 para. 1(f) GDPR.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Meta Platforms Ireland Limited. For more information, see the privacy policy for Instagram CDN: https://help.instagram.com/519522125107875.

MailChimp

Type and scope of processing

We have integrated components of the MailChimp service on our website. MailChimp is a service of The Rocket Science Group, LLC and provides marketing automation for businesses.

MailChimp uses cookies to store and transmit data entered into forms, send marketing e-mails and automated messages, and create targeted campaigns.

In addition, MailChimp offers us the possibility to analyse whether the e-mails we send have been opened, how many users have received an e-mail and whether users have unsubscribed from the newsletter after receiving an e-mail.

In this case, your data will be passed on to the operator of MailChimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, United States.

Purpose and legal basis

The use of MailChimp is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG (Telecommunications and Telemedia Data Protection Act).

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by The Rocket Science Group, LLC. Further information can be found in the privacy policy for MailChimp: https://mailchimp.com/legal/privacy/.

Vimeo Videos

Type and scope of processing

We have integrated Vimeo Video on our website. Vimeo Video is a component of the video platform of Vimeo, LLC where users can upload and share content over the Internet and receive detailed statistics.

Vimeo Video allows us to integrate content from the Vimeo Video platform into our website.

Vimeo Video uses cookies and other browser technologies to evaluate user behaviour, recognise users and generate user profiles. This information is used, among other things, to analyse the activity of the listened-to content and to create reports.

When you access this content, you connect to servers of Vimeo, LLC, 555 W 18th St, New York, New York 10011, United States, transmitting your IP address and, if applicable, browser data such as your user agent.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1(a) GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to Google servers in the USA when using Vimeo, this is done on the basis of your consent in accordance with Art. 49 para. 1(a) GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by Vimeo, LLC. Further information can be found in the privacy policy for Vimeo Video: https://vimeo.com/privacy.

YouTube Videos

Type and scope of processing

We have integrated YouTube Video on our website. YouTube Video is a component of YouTube, LLC’s video platform where users can upload and share content via the Internet and receive detailed statistics.

YouTube Video allows us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to evaluate user behaviour, recognise users and generate user profiles. This information is used, among other things, to analyse the activity of the listened-to content and to create reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the user’s profile.

When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, transmitting your IP address and, if applicable, browser data such as your user agent.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1(a) GDPR.

Data transfer to the USA

Insofar as personal data is transmitted to Google servers in the USA when using YouTube, this is done on the basis of your consent in accordance with Art. 49 para. 1(a) GDPR. We would like to point out that data processing in the USA without the existence of an adequacy decision and without suitable guarantees may be associated with special risks, in particular due to possible access rights by secret services and security authorities.

Retention period

The specific retention period of the processed data cannot be influenced by us but is determined by YouTube, LLC. For more information, see the privacy policy for YouTube video: https://policies.google.com/privacy.

Sidebar