We have drafted this privacy policy (version 15.07.2026-113226682) in accordance with the provisions of General Data Protection Regulation (EU) 2016/679 and applicable national laws, to explain which personal data (hereinafter referred to as data) we as controllers – and the data processors commissioned by us (e.g. providers) – process, will process in future, and what lawful options are available to you. The terms used are to be understood in a gender-neutral manner.
In short: We will provide you with comprehensive information about the data we process concerning you.
Privacy policies usually sound very technical and use legal jargon. This privacy policy, on the other hand, is designed to describe the most important things to you as simply and transparently as possible. Where it promotes transparency, technical Terms explained in a user-friendly way, links to further information are provided and Graphics put into practice. We use it to inform people in clear and simple language that, as part of our business activities, we only process personal data when there is a corresponding legal basis for doing so. That is certainly not possible if one provides explanations that are as concise, unclear, and legal-technical as those often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is one piece of information or another that you didn't know yet.
Should any questions remain, we would ask you to contact the responsible party named below or in the legal notice, follow the links provided and look for further information on third-party sites. Our contact details can, of course, also be found in the legal notice.
This privacy policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us (data processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person's name, email address and postal address. The processing of personal data ensures that we can offer and bill for our services and products, whether online or offline. The scope of this privacy policy includes:
In short: The privacy policy applies to all areas in which personal data is processed in a structured manner within the company via the stated channels. Should we enter into legal relationships with you outside of these channels, we will inform you separately where appropriate.
In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can, of course, find this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 read up.
We only process your data if at least one of the following conditions applies:
Other conditions such as the performance of tasks carried out in the public interest and the exercise of official authority, as well as the protection of vital interests, generally do not apply in our case. Should such a legal basis nevertheless be relevant, it will be indicated at the appropriate place.
In addition to the EU regulation, national laws also apply:
If further regional or national laws apply, we will inform you about them in the following sections.
Should you have any questions regarding data protection or the processing of personal data, you will find below the contact details of the controller in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR):
HOLIFIT GmbH
Schlosserstraße 4, 5082 Grödig
Email: hallo@fitness-am-untersberg.at
Phone +43 69911015339
Imprint: https://fitness-am-untersberg.at/impressum/
It is a general criterion for us that we only store personal data for as long as is strictly necessary for the provision of our services and products. This means that we delete personal data as soon as the reason for the data processing no longer applies. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to apply, for example for bookkeeping purposes.
Should you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and provided there is no legal obligation to retain it.
We will inform you further down about the specific duration of the respective data processing, provided we have further information on this.
In accordance with Articles 13 and 14 of the GDPR, we inform you of the following rights to which you are entitled in order to ensure fair and transparent data processing:
In short: You have rights – do not hesitate to contact the responsible body listed above with us!
If you believe that the processing of your data violates data protection law or your data protection claims have been infringed in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/ find. In Germany, there is a data protection officer for each federal state. For further information, you can contact the Federal Commissioner for Data Protection and Freedom of Information turn to. The local data protection authority responsible for our company is:
We only transfer or process data in countries outside the scope of the GDPR (third countries) if you consent to this processing or if there is another legal authorisation. This applies in particular if the processing is required by law or is necessary for the performance of a contractual relationship and in any case only to the extent that this is generally permitted. In most cases, your consent is the most important reason why we have data processed in third countries. The processing of personal data in third countries such as the USA, where many software manufacturers offer services and have their server locations, can mean that personal data is processed and stored in unexpected ways.
We expressly point out that, in the opinion of the European Court of Justice, an adequate level of protection for data transfer to the USA currently only exists if a US company that processes personal data of EU citizens in the USA is an active participant in the EU-US Data Privacy Framework. You can find more information at: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en
Data processing by US services that are not active participants in the EU-US Data Privacy Framework may mean that data is not necessarily processed and stored anonymously. Furthermore, US government authorities may be able to access individual items of data. In addition, it can happen that collected data is linked with data from other services provided by the same provider, provided you have a corresponding user account. Where possible, we try to use server locations within the EU, provided this is offered.
We inform you in more detail about data transmission to third countries in the relevant parts of this privacy policy, should this apply.
To protect personal data, we have implemented both technical and organisational measures. Wherever possible, we encrypt or pseudonymise personal data. By doing so, we make it as difficult as possible, within our capabilities, for third parties to deduce personal information from our data.
Article 25 of the GDPR refers here to “data protection by design and by default”, meaning that security is always considered for both software (e.g. forms) and hardware (e.g. access to the server room) and appropriate measures are put in place. In the following, we will go into specific measures where necessary.
TLS, encryption and HTTPS sound very technical, and they are. We use HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely over the internet so that it cannot be intercepted.
This means that the complete transmission of all data from your browser to our web server is secured – nobody can eavesdrop.
With this, we have introduced an additional layer of security and implement data protection by design (Article 25(1) GDPRBy using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data.
You can recognise the use of this secure data transmission by the small padlock symbol 
top left in the browser, to the left of the web address (e.g. examplepage.com) and the use of the https scheme (instead of http) as part of our web address.
If you would like to know more about encryption, we recommend searching Google for “Hypertext Transfer Protocol Secure wiki” to find good links to further information.
| Communication summary 👥 Affected: Everyone who communicates with us by phone, email or online form 📓 Processed data: e.g. telephone number, name, email address, entered form data. You can find more details on this under the respective type of contact used. 🤝 Purpose: Handling communication with customers, business partners, etc. 📅 Retention period: Duration of the business transaction and statutory regulations ⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (legitimate interests) |
If you contact us and communicate by telephone, email or online form, the processing of personal data may occur.
The data will be processed for the handling and processing of your query and the associated business transaction. The data will be stored for precisely that duration or for as long as required by law.
All of the above processes affect those who contact us via the communication channels provided by us.
When you call us, the call data is stored in pseudonymised form on the respective end device and by the telecommunications provider used. In addition, data such as your name and telephone number may subsequently be sent by email and stored to process your enquiry. The data will be deleted as soon as the business transaction has been concluded and legal requirements permit.
If you communicate with us by email, data may be stored on the respective end device (computer, laptop, smartphone, etc.) and data will be stored on the email server. The data will be deleted as soon as the business transaction has been concluded and legal requirements permit.
When you communicate with us via the online form, data is stored on our web server and, where applicable, forwarded to one of our email addresses. The data will be deleted as soon as the business transaction has been concluded and legal requirements permit.
The processing of the data is based on the following legal bases:
In this section, we would like to explain to you what a data processing agreement is and why it is needed. Because the German word “Auftragsverarbeitungsvertrag” is quite a tongue-twister, we will also often use the acronym DPA here in the text. Like most companies, we do not work alone, but also make use of services provided by other companies or individuals ourselves. By involving various companies or service providers, it may be that we pass on personal data for processing. These partners then act as data processors, with whom we conclude a contract, the so-called data processing agreement (DPA). The most important thing for you to know is that the processing of your personal data takes place exclusively in accordance with our instructions and must be governed by the DPA.
As a company and website owner, we are responsible for all data that we process from you. In addition to the data controllers, there may also be so-called data processors. This includes every company or person that processes personal data on our behalf. More precisely and according to the GDPR definition: any natural or legal person, public authority, agency or other body which processes personal data on our behalf is considered a data processor. Consequently, data processors can be service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.
For a better understanding of the terminology, here is an overview of the three roles under the GDPR:
Affected person (You as a customer or prospective customer) Controller (we as a company and client) data processor (Service providers such as web hosts or cloud providers)
As mentioned above, we have concluded a DPA with our partners who act as data processors. This stipulates, above all else, that the data processor shall process the data to be handled exclusively in accordance with the GDPR. The contract must be concluded in writing, although electronic conclusion of the contract is also deemed to be „in writing“ in this context. Processing of the personal data takes place solely on the basis of the contract. The contract must contain the following:
Furthermore, the contract contains all the processor's obligations. The most important obligations are:
You can see what such a DPA looks like in practice, for example, under https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html Have a look. A sample contract is presented here.
| Cookie summary 👥 Affected parties: Website visitors 🤝 Purpose: depends on the respective cookie. You can find more details below or from the software manufacturer that sets the cookie. 📓 Processed data: Depending on the specific cookie used. Further details can be found below or from the software vendor that sets the cookie. 📅 Storage period: depends on the respective cookie, can vary from hours to years ⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests) |
Our website uses HTTP cookies to store user-specific data.
Below, we explain what cookies are and why they are used so that you can better understand the following privacy policy.
Whenever you surf the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing cannot be denied: cookies are really useful little helpers. Almost all websites use cookies. To be more precise, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, practically the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data from you, such as language or personal page settings. When you visit our site again, your browser transmits the „user-related“ information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are accustomed to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.
The following graphic shows a possible interaction between a web browser, such as Chrome, and the web server. In this process, the web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, while third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be assessed individually, as every cookie stores different data. The expiration time of a cookie also varies from a few minutes to a few years. Cookies are not software programmes and do not contain viruses, Trojans or other „malware“. Nor can cookies access information on your PC.
For example, cookie data can look like this:
Name: _ga
Value: GA1.2.1326744211.152113226682-9
Reference: Segmentation of website visitors
Expiry date: after 2 years
A browser should be able to support these minimum sizes:
The question of which specific cookies we use depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.
You can distinguish between 4 types of cookies:
Strictly necessary cookies
These cookies are necessary to ensure basic website functions. For example, these cookies are needed if a user adds a product to the shopping basket, then continues browsing other pages and only goes to the checkout later. These cookies ensure that the shopping basket is not deleted, even if the user closes their browser window.
Functional cookies
These cookies collect information about user behaviour and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behaviour of the website across different browsers.
Targeted cookies
These cookies ensure improved user-friendliness. For example, entered locations, font sizes or form data are saved.
Advertising cookies
These cookies are also known as targeting cookies. They are used to deliver individually tailored advertising to the user. This can be very convenient, but also very annoying.
Usually, upon visiting a website for the first time, you are asked which of these types of cookies you would like to allow. And, of course, this decision is also stored in a cookie.
If you would like to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Internet Engineering Task Force (IETF) Request for Comments entitled “HTTP State Management Mechanism”.
The purpose ultimately depends on the respective cookie. You can find more details on this further down or from the vendor of the software that sets the cookie.
Cookies are little helpers for many different tasks. It is unfortunately not possible to generalise which data is stored in cookies, but we will inform you about the processed or stored data as part of the following privacy policy.
The storage duration depends on the respective cookie and is specified further down. Some cookies are deleted after less than an hour, while others can remain stored on a computer for several years.
You also have control over the storage duration yourself. You can manually delete all cookies via your browser at any time (see also “Right to object” below). Furthermore, cookies based on consent will be deleted at the latest after you withdraw your consent, whereby the lawfulness of the storage until then remains unaffected.
You decide yourself how and whether you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option to delete cookies, deactivate them or only allow them partially. For example, you can block third-party cookies, but allow all other cookies.
If you want to check which cookies have been stored in your browser, or if you want to change or delete your cookie settings, you can find this in your browser settings:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Managing cookies and website data with Safari
Firefox: Clear cookies to remove data stored on your computer by websites
Internet Explorer: Deleting and managing cookies
Microsoft Edge: Delete and manage cookies
If you fundamentally do not wish to have any cookies, you can configure your browser so that it always informs you when a cookie is about to be set. This allows you to decide whether or not to allow the cookie on a case-by-case basis. The procedure varies depending on the browser. The best approach is to search for instructions on Google using the search term “delete cookies Chrome” or “disable cookies Chrome” in the case of the Chrome browser.
Since 2009, there have been the so-called „cookie directives“. They state that the storing of cookies is a Consent (Article 6(1)(a) GDPR) from you. Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in Section 165(3) of the Telecommunications Act (2021). In Germany, the cookie directives were not implemented as national law. Instead, this directive was largely implemented in Section 15(3) of the Telemedia Act (TMG), which was replaced in May 2024 by the Digital Services Act (DDG).
For strictly necessary cookies, even where there is no consent, there exist legitimate interests (Article 6(1)(f) of the GDPR), which are, in most cases, of a commercial nature. We wish to provide visitors to the website with a pleasant user experience, and certain cookies are often absolutely essential for this.
Insofar as cookies that are not strictly necessary are used, this only happens with your consent. The legal basis in this respect is Art. 6(1)(a) GDPR.
The following sections provide more detailed information on the use of cookies, provided that the software used employs cookies.
| Web Hosting Summary 👥 Affected parties: Website visitors 🤝 Purpose: professional hosting of the website and securing of operations 📓 Data processed: IP address, time of website visit, browser used and other data. Further details can be found below or from the relevant web hosting provider. 📅 Retention period: dependent on the respective provider, but generally 2 weeks ⚖️ Legal basis: Article 6(1)(f) of the GDPR (legitimate interests) |
When you visit websites these days, certain information – including personal data – is automatically generated and stored; this is also the case on this website. This data should be processed as sparingly as possible and only where justified. By ‘website’, we mean the entirety of all web pages on a domain, i.e. everything from the home page right through to the very last subpage (such as this one). By ‘domain’, we mean, for example, example.de or sampleexample.com.
If you want to view a website on a computer, tablet or smartphone, you use a programme called a web browser. You’re probably familiar with the names of a few web browsers: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We refer to them simply as browsers or web browsers.
To display a website, the browser must connect to another computer where the website’s code is stored: the web server. Running a web server is a complex and resource-intensive task, which is why it is usually handled by professional providers. They offer web hosting and thus ensure that website data is stored reliably and without errors. That’s quite a lot of technical terms, but please bear with me – it gets even better!
When your browser on your computer (desktop, laptop, tablet or smartphone) establishes a connection, and during the transfer of data to and from the web server, personal data may be processed. On the one hand, your computer stores data; on the other hand, the web server must also store data for a certain period of time to ensure proper operation.
A picture is worth a thousand words, so the following diagram illustrates the interaction between the browser, the internet and the hosting provider.
The purposes of data processing are:
Even as you are visiting our website right now, our web server – that is, the computer on which this website is hosted – usually automatically stores data such as
As a rule, the data mentioned above is stored for two weeks and then automatically deleted. We do not pass this data on to third parties; however, we cannot rule out the possibility that it may be accessed by the authorities in the event of unlawful conduct.
In short: Your visit is logged by our provider (the company that hosts our website on specialised computers (servers)), but we will not pass on your data without your consent!
The lawfulness of the processing of personal data in the context of web hosting is based on Article 6(1)(f) of the GDPR (protection of legitimate interests), as the use of professional hosting services provided by a provider is necessary to present the company on the internet in a secure and user-friendly manner and, where necessary, to be able to investigate any attacks or claims arising therefrom.
We generally have a contract with the hosting provider for data processing in accordance with Article 28 et seq. of the GDPR, which ensures compliance with data protection regulations and guarantees data security.
| World4You Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Website storage and online accessibility 📓 Data processed: IP address, but above all technical data 📅 Retention period: Log files are deleted after 14 days ⚖️ Legal basis: Article 6(1)(f) of the GDPR (legitimate interests) |
It is quite possible that you have heard of the web hosting provider World4You before. The web host enjoys great popularity, especially in Austria. The service provider is the Austrian company World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria.
The company from the Upper Austrian provincial capital has been active in the web hosting sector since 1998. World4You operates several of its own data centres in Austria and relies on in-house technology. This ensures fail-safe operation and a fast server connection. As you may already have read in our introduction to web hosting, your data is also transmitted to World4You's servers and processed there. This is primarily concerned with technical data such as browser version or operating system, but personal data is also processed in addition via your IP address.
When it comes to a website, we, presumably much like you, value reliability, speed and security. Even if you visit our website in the middle of the night or we already have a high volume of visitors, it has to function flawlessly. When you click on subpages, it shouldn't take forever for the page to load completely. And if problems do occur, there should be a good backup system in place to secure our content and protect all data. To ensure all of this runs to our satisfaction, we naturally need a reliable web host. In World4You, we believe we have found a partner that meets our demands. World4You has its own data centres and therefore a fixed bandwidth, which makes a website quickly accessible. We also value the company's personal support.
World4You may also process your personal data. When you visit our website, our web server automatically stores data. This includes personal data such as your IP address, but above all technical data such as the internet address of the website visited, device information such as browser version, operating system and the URL of the previously visited website. Furthermore, the time when you accessed our website and, where applicable, location data are also recorded. The IP address can be used to increase the security of the website, detect potential errors and also to carry out anonymous statistical analyses. Cookies may also be used for data storage.
The data is stored on World4You's own servers. The exact retention period for the data depends heavily on the type of data and the individual configurations. In principle, World4You stores the data for as long as is necessary to fulfil its obligations. Data that is collected solely for the provision of the website is deleted after the respective session has ended. Data that is stored in so-called log files is deleted after 14 days at the latest. However, it may also happen that data is stored for a longer period, for example to have evidence for potential legal disputes.
You have the right at any time to access, rectify or erase your personal data, and to restrict its processing. You may also withdraw your consent to the processing of your data at any time.
If you do not want these cookies to be set and data to be stored, you can also prevent cookies from being set in your browser. This is because you can manage, disable or delete cookies in your browser. Depending on your browser, the exact process will always vary slightly.
Under the „Cookies“ section, you will find links to the relevant guides for the most popular browsers.
We have a legitimate interest in using World4You in order to be able to provide our online service. The relevant legal basis for this is Article 6(1)(f) of the GDPR (legitimate interests).
You are, of course, also welcome to use this support service if you have any specific questions regarding data protection at World4You. We also recommend reading the website’s privacy policy, which you can find at https://www.world4you.com/de/unternehmen/datenschutzerklaerung.html can be found. The FAQs at https://www.world4you.com/faq/de/dsgvo.html We also have a dedicated GDPR section where you can find lots of useful information.
In accordance with Article 28 of the General Data Protection Regulation (GDPR), we have entered into a data processing agreement (DPA) with World4You (World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria). You can find out exactly what a DPA is and, above all, what must be included in a DPA in our general section „Data Processing Agreement (DPA)“.
This contract is required by law because World4You processes personal data on our behalf. It sets out that World4You may only process data it receives from us in accordance with our instructions and must comply with the GDPR. You can find the link to the Data Processing Agreement (DPA) at https://www.world4you.com/faq/de/dsgvo/faq.stellt-world4you-eine-vereinbarung-zur-auftragsverarbeitung-zur-verfuegung.html.
| Website Builder Systems: Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Optimisation of our service 📓 Data processed: Data such as technical usage information (e.g. browser activity, clickstream activity, session heatmaps), as well as contact details, IP address or your geographical location. Further details can be found later in this privacy policy and in the privacy policies of the service providers. 📅 Retention period: depends on the provider ⚖️ Legal basis: Article 6(1)(f) of the GDPR (legitimate interests), Article 6(1)(a) of the GDPR (consent) |
We use a website builder for our website. Website builders are a specific type of content management system (CMS). A website builder enables website operators to create a website very easily and without any programming knowledge. In many cases, web hosting providers also offer website builders. The use of a website builder system may also involve the collection, storage and processing of your personal data. In this privacy notice, we provide you with general information about data processing carried out by website builder systems. Further details can be found in the provider’s privacy policy.
The biggest advantage of a modular system is its ease of use. We want to offer you a clear, simple and well-organised website that we can easily manage and maintain ourselves – without any external support. Modular systems now offer many useful features that we can use even without any programming knowledge. This allows us to design our website exactly as we wish and ensure you have an informative and enjoyable experience whilst visiting our site.
Exactly which data is stored naturally depends on the website builder system used. Each provider processes and collects different data from website visitors. However, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider and the date of your visit to the website is usually collected. Furthermore, tracking data (e.g. browser activity, clickstream activity, session heatmaps, etc.) may also be processed. In addition, personal data may also be collected and stored. This usually consists of contact details such as your email address, telephone number (if you have provided it), IP address and geographical location data. You can find out exactly which data is stored in the provider’s privacy policy.
We provide further information on the duration of data processing below in relation to the website builder system used, provided we have further details on this. You will find detailed information on this in the provider’s privacy policy. Generally speaking, we only process personal data for as long as is strictly necessary to provide our services and products. The provider may store your data in accordance with its own policies, over which we have no control.
You always have the right to information, rectification and erasure of your personal data. If you have any questions, you can also contact the administrators of the website builder system used at any time. Contact details can be found either in our privacy policy or on the website of the relevant provider.
You can delete, disable or manage the cookies that providers use for their functions in your browser. The way this works varies depending on which browser you use. Please note, however, that this may mean that not all functions will work as usual.
We have a legitimate interest in using a website builder system to optimise our online service and present it to you in an efficient and user-friendly manner. The relevant legal basis for this is Article 6(1)(f) of the GDPR (legitimate interests). However, we will only use the website builder if you have given your consent.
Where the processing of data is not strictly necessary for the operation of the website, the data will only be processed on the basis of your consent. This applies in particular to tracking activities. The legal basis in this respect is Article 6(1)(a) of the GDPR.
In this privacy policy, we have provided you with the most important general information regarding data processing. If you would like more detailed information on this subject, you will find further details – where available – in the following section or in the provider’s privacy policy.
| WordPress.com Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Optimisation of our service 📓 Data processed: Data such as technical usage information (e.g. browser activity, clickstream activity, session heatmaps), as well as contact details, your IP address and your geographical location. Further details can be found later in this privacy policy. 📅 Retention period: It depends primarily on the type of data stored and the specific settings. ⚖️ Legal basis: Article 6(1)(a) of the GDPR (consent), Article 6(1)(f) of the GDPR (legitimate interests) |
We use the well-known content management system WordPress.com for our website. The service provider is the American company Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
The company was founded in 2003 and, in a relatively short space of time, developed into one of the best-known content management systems (CMS) in the world. A CMS is a piece of software that helps us design our website and present content in an attractive and organised way. This content can include text, audio and video.
Through the use of WordPress, personal data relating to you may also be collected, stored and processed. As a rule, the data stored is mainly technical in nature, such as operating system, browser, screen resolution or hosting provider. However, personal data such as IP address, geographical data or contact details may also be processed.
We have many strengths, but actual programming isn’t one of our core competencies.
Nevertheless, we want a high-performance and attractive website that we can manage and maintain ourselves. A website builder or content management system such as WordPress makes exactly that possible. With WordPress, we don’t need to be programming experts to be able to offer you a beautiful website. Thanks to WordPress, we can manage our website quickly and easily, even without any prior technical knowledge. Should any technical issues arise or should we have specific requirements for our website, we still have our specialists on hand who are well versed in HTML, PHP, CSS and the like.
Thanks to the intuitive usability and comprehensive features of WordPress, we can design our web presence according to our wishes and offer you a great user experience.
Non-personal data includes, for example, technical usage information such as browser activity, clickstream activity, session heatmaps and data relating to your computer, operating system, browser, screen resolution, language and keyboard settings, internet service provider and the date of the page visit.
In addition, personal data is also collected. This is primarily contact data (e-mail address or telephone number, if you provide them), IP address or your geographical location.
WordPress can also use cookies to collect data. Data about your behaviour on our website is often collected within these. For example, it can record which subpages you particularly like viewing, how long you spend on individual pages, when you leave a page again (bounce rate) or what preferences (e.g. language selection) you have made. Based on this data, WordPress can also better adapt its own marketing measures to your interests and user behaviour. Consequently, the next time you visit our website, it will be displayed to you just as you set it up beforehand.
WordPress may also use technologies such as pixel tags (web beacons) to clearly identify you as a user, for example, and potentially be able to offer interest-based advertising.
How long the data is stored depends on various factors. Above all, it depends on the type of data stored and the specific settings of the website. In principle, data is deleted in WordPress when it is no longer required for its own purposes. There are, of course, exceptions, particularly when legal obligations dictate longer retention of the data. Web server logs containing your IP address and technical data are deleted by WordPress or Automattic after 30 days. Automattic uses the data for this length of time to analyse traffic on its own websites (for example, all WordPress sites) and to resolve potential issues. Deleted content on WordPress websites is also kept in the trash for 30 days to enable recovery, after which it may remain in backups and caches until these are deleted. The data is stored on Automattic's American servers.
You have the right and the ability to access your personal data at any time and to object to its use and processing. You can also lodge a complaint with a state supervisory authority at any time.
In your browser you also have the option to manage, delete or disable cookies individually. Please note, however, that disabled or deleted cookies may have a negative impact on the functionality of our WordPress site. Depending on which browser you use, managing cookies works a little differently. Under the „Cookies“ section you will find the relevant links to the instructions for the most popular browsers.
If you have consented to the use of WordPress, the legal basis for the corresponding data processing is this consent. Pursuant to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur during collection by WordPress.
We also have a legitimate interest in using WordPress to optimise our online service and present it attractively to you. The relevant legal basis for this is Article 6(1)(f) of the GDPR (legitimate interests). However, we only use WordPress insofar as you have given your consent.
WordPress or Automattic processes your data in the USA, among other places. Automattic is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information about this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
In addition, Automattic uses standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCC) are template documents provided by the European Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Automattic undertakes to maintain the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision by the European Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
For more details on the privacy policy and what data is processed in what way by WordPress, please visit https://automattic.com/privacy/.
| Social Media Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Presentation and optimisation of our services, contact with visitors, prospective clients and others, advertising 📓 Processed data: Data such as phone numbers, email addresses, contact details, user behaviour data, information about your device and your IP address. You can find more details on this in the respective social media tool being used. 📅 Retention period: dependent on the social media platforms used ⚖️ Legal basis: Article 6(1)(a) of the GDPR (consent), Article 6(1)(f) of the GDPR (legitimate interests) |
In addition to our website, we are also active on various social media platforms. In doing so, we may process user data so that we can target users who are interested in us via social networks. Furthermore, elements of a social media platform may also be embedded directly into our website. This is the case, for example, when you click on a so-called social media button on our website and are redirected directly to our social media presence. The term ‘social media’ refers to websites and apps through which registered members can produce content, share content publicly or within specific groups, and network with other members.
For years, social media platforms have been the place where people communicate and connect online. With our social media presence, we can introduce interested parties to our products and services. The social media elements integrated into our website help you to switch to our social media content quickly and without complications.
The data stored and processed as a result of your use of a social media channel is primarily intended to enable web analytics. The aim of this analysis is to enable the development of more precise and personalised marketing and advertising strategies. Depending on your behaviour on a social media platform, the analysed data can be used to draw relevant conclusions about your interests and to create so-called user profiles. This also enables the platforms to present you with personalised adverts. In most cases, cookies are placed in your browser for this purpose, which store data on your usage behaviour.
We generally assume that we remain responsible under data protection law, even when we use services provided by a social media platform. However, the Court of Justice of the European Union has ruled that, in certain cases, the operator of the social media platform, together with us, may be joint controllers within the meaning of Art. 26 GDPR. Where this is the case, we will indicate this separately and work on the basis of a corresponding agreement. The essentials of that agreement are then set out further below in relation to the affected platform.
Please note that when you use social media platforms or our embedded features, your data may also be processed outside the European Union, as many social media channels, such as Facebook or Twitter, are US-based companies. As a result, you may find it more difficult to exercise or enforce your rights in relation to your personal data.
Exactly which data is stored and processed depends on the specific social media platform provider. However, this usually includes data such as telephone numbers, email addresses, details you enter into a contact form, user data such as which buttons you click, who you ‘like’ or follow, when you visited which pages, information about your device and your IP address. Most of this data is stored in cookies. In particular, if you have a profile on the social media platform you are visiting and are logged in, data may be linked to your profile.
All data collected via a social media platform is also stored on the providers’ servers. Consequently, only the providers have access to the data and can provide you with the relevant information or make any changes.
If you want to know exactly what data is stored and processed by the social media providers and how you can object to data processing, you should read the company's respective privacy policy carefully. If you also have questions regarding data storage and data processing or wish to assert corresponding rights, we recommend that you contact the provider directly.
We will inform you about the duration of the data processing further down, provided we have further information on this. For example, the social media platform Facebook stores data until it is no longer required for its own purposes. However, customer data that is matched with its own user data is deleted within two days. Generally, we only process personal data for as long as is strictly necessary for the provision of our services and products. If required by law, such as in the case of accounting, this retention period may also be exceeded.
You also have the right and the option to withdraw your consent to the use of cookies or third-party providers, such as embedded social media elements, at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling or deleting cookies in your browser.
As social media tools may use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.
If you have consented to your data being processed and stored by integrated social media elements, this consent shall serve as the legal basis for the data processing. (Art. 6(1)(a) UK GDPR). In principle, provided consent has been given, your data will also be processed on the basis of our legitimate interest (Article 6(1)(f) of the GDPR) stored and processed in fast and effective communication with you or other customers and business partners. Nevertheless, we only use these tools insofar as you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you read our privacy text regarding cookies carefully and view the privacy policy or cookie guidelines of the respective service provider.
You can find information on specific social media platforms – where available – in the following sections.
| Facebook Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Optimisation of our service 📓 Data processed: Data such as customer data, data on user behaviour, information about your device and your IP address. You can find more details on this further down in the privacy policy. 📅 Retention period: until the data is no longer useful for Facebook’s purposes ⚖️ Legal basis: Article 6(1)(a) of the GDPR (consent), Article 6(1)(f) of the GDPR (legitimate interests) |
We use selected tools from Facebook on our website. Facebook is a social media network belonging to Meta Platforms Inc., or for the European region, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With the help of these tools, we can offer you and people who are interested in our products and services the best possible experience.
Where data relating to you is collected and transmitted via our embedded Facebook elements or via our Facebook page (fan page), both we and Facebook Ireland Ltd. are responsible for this. Facebook bears sole responsibility for the further processing of this data. Our joint obligations have also been set out in a publicly available agreement at https://www.facebook.com/legal/controller_addendum anchored. This states, for example, that we must clearly inform you about the use of Facebook tools on our site. Furthermore, we are also responsible for ensuring that the tools are integrated into our website in a data-protection-compliant manner. Facebook, on the other hand, is responsible for the data security of Facebook products, for example. If you have any questions regarding data collection and data processing by Facebook, you can contact the company directly. If you direct the question to us, we are obliged to forward it to Facebook.
Below we provide an overview of the various Facebook tools, which data is sent to Facebook and how you can delete this data.
Alongside many other products, Facebook also offers what are known as “Facebook Business Tools”. This is Facebook's official term. However, since the term is hardly known, we have decided to simply call them Facebook tools. These include, among others:
Through these tools, Facebook is expanding its services and has the ability to obtain information about user activities outside of Facebook.
We only want to show our services and products to people who are genuinely interested in them. We can reach precisely these people through adverts (Facebook Ads). However, in order to show users relevant adverts, Facebook needs information about people’s preferences and needs. Information about user behaviour (and contact details) on our website is therefore made available to the company. This enables Facebook to collect better user data and show relevant adverts about our products and services to interested people. These tools thus enable tailored advertising campaigns on Facebook.
Facebook refers to data about your behaviour on our website as „event data“. This data is also used for measurement and analytics services. This enables Facebook, on our behalf, to generate „campaign reports“ on the effectiveness of our advertising campaigns. Furthermore, analytics give us a better insight into how you use our services, website or products. We use some of these tools to optimise your user experience on our website. For example, you can use the social plug-ins to share content from our site directly on Facebook.
By using individual Facebook tools, personal data (customer data) can be sent to Facebook. Depending on the tools used, customer data such as name, address, telephone number and IP address can be transmitted.
Facebook uses this information to match the data with the data it holds about you itself (if you are a Facebook member). Before customer data is transmitted to Facebook, a process known as „hashing“ takes place. This means that a data set of any size is transformed into a string of characters. This also serves to encrypt data.
In addition to contact details, „event data“ is also transmitted. „Event data“ refers to the information we collect about you on our website. For example, which subpages you visit or which products you purchase from us. Facebook does not share the information it receives with third parties (such as advertisers), unless the company has explicit authorisation or is legally obliged to do so. „Event data“ may also be linked to contact details. This enables Facebook to provide better personalised advertising. Following the aforementioned matching process, Facebook deletes the contact details.
In order to deliver optimised adverts, Facebook only uses the event data if it has been aggregated with other data (collected by Facebook in other ways). Facebook also uses this event data for security, protection, development and research purposes. Much of this data is transmitted to Facebook via cookies. Cookies are small text files used to store data or information in browsers. Depending on the tools used and whether you are a Facebook member, different numbers of cookies are stored in your browser. We provide more detailed information about individual Facebook cookies in the descriptions of the various Facebook tools. You can also find general information about the use of Facebook cookies at https://www.facebook.com/policies/cookies.
As a general rule, Facebook stores data until it is no longer required for its own services and Facebook products. Facebook has servers distributed all around the world where its data is stored. However, customer data is deleted within 48 hours after it has been matched with its own user data.
In accordance with the General Data Protection Regulation, you have the right to access, rectify, port and erase your data.
A complete deletion of the data only takes place if you completely delete your Facebook account. And this is how deleting your Facebook account works:
1) Click on ‘Settings’ on the right-hand side of Facebook.
2) Then click on „Your Facebook information“ in the left-hand column.
3) Now click “Deactivation and Deletion”.
4) Now select „Delete account“ and then click „Continue and delete account“
5) Now enter your password, click „Next“ and then „Delete account“
The storage of data that Facebook receives via our page takes place, amongst other things, via cookies (e.g. in the case of social plugins). You can disable, delete or manage individual or all cookies in your browser. Depending on the browser you use, this works in different ways. You will find the relevant links to the respective instructions for the most well-known browsers under the „Cookies“ section.
If you generally do not want to have any cookies, you can set up your browser so that it always informs you when a cookie is to be set. This allows you to decide for each individual cookie whether you want to allow it or not.
If you have consented to your data being processed and stored by integrated Facebook tools, this consent serves as the legal basis for the data processing. (Art. 6(1)(a) UK GDPR). In principle, your data is also processed on the basis of our legitimate interest (Article 6(1)(f) of the GDPR) stored and processed for the purposes of ensuring prompt and effective communication with you or other customers and business partners. However, we only use these tools where you have given your consent. Most social media platforms also set cookies in your browser to store data. We therefore recommend that you read our privacy policy on cookies carefully and consult Facebook’s privacy policy or cookie policy.
Facebook also processes data from you in the USA, amongst other places. Facebook or Meta Platforms is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information about this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
In addition, Facebook uses what are known as standard contractual clauses (Article 46(2) and (3) of the GDPR). Standard Contractual Clauses (SCCs) are model clauses provided by the European Commission and are designed to ensure that your data continues to comply with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Facebook undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision by the European Commission. You can find the decision and the relevant standard contractual clauses here, amongst other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Facebook Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing.
We hope we have provided you with a clearer understanding of the key information regarding the use and processing of data by Facebook tools. If you would like to find out more about how Facebook uses your data, we recommend that you read the privacy policy at https://www.facebook.com/privacy/policy/.
| Instagram Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Optimisation of our service 📓 Data processed: Data such as user behaviour data, information about your device and your IP address. You can find more details on this further down in the privacy policy. 📅 Retention period: until Instagram no longer requires the data for its own purposes ⚖️ Legal basis: Article 6(1)(a) of the GDPR (consent), Article 6(1)(f) of the GDPR (legitimate interests) |
We have integrated Instagram features into our website. Instagram is a social media platform operated by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Meta Platforms Inc. since 2012 and is one of the Facebook products. The inclusion of Instagram content on our website is known as ‘embedding’. This enables us to display content such as buttons, photos or videos from Instagram directly on our website. When you visit pages on our website that have an Instagram feature integrated, data is transmitted to, stored by and processed by Instagram. Instagram uses the same systems and technologies as Facebook. Your data is therefore processed across all Facebook companies.
In the following, we would like to give you a more detailed insight into why Instagram collects data, what kind of data it collects, and how you can largely control how your data is processed. As Instagram is part of Meta Platforms Inc., we draw our information from both the Instagram Terms of Service and the Meta Privacy Policy itself.
Instagram is one of the best-known social media networks in the world. Instagram combines the benefits of a blog with those of audiovisual platforms such as YouTube or Vimeo. On „Insta“ (as many users colloquially refer to the platform), you can upload photos and short videos, edit them using various filters, and share them on other social media platforms. And if you don’t want to be active yourself, you can simply follow other interesting users.
Instagram is the social media platform that has really taken off in recent years. And, of course, we’ve responded to this boom too. We want you to feel as comfortable as possible on our website. That’s why presenting our content in a varied way is a matter of course for us. Thanks to the embedded Instagram features, we can enrich our content with helpful, funny or exciting posts from the world of Instagram. As Instagram is a subsidiary of Facebook, the data collected may also be used for personalised advertising on Facebook. This ensures that our adverts are shown only to people who are genuinely interested in our products or services.
Instagram also uses the collected data for measurement and analytics purposes. We receive aggregated statistics and thus gain more insight into your preferences and interests. It is important to mention that these reports do not personally identify you.
If you come across one of our pages that has Instagram features (such as Instagram images or plug-ins) built into it, your browser automatically connects to Instagram's servers. In the process, data is sent to Instagram, stored and processed. This happens regardless of whether you have an Instagram account or not. This includes information about our website, your computer, purchases made, advertisements you see and how you use our services. Furthermore, the date and time of your interaction with Instagram are also stored. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.
Facebook differentiates between customer data and event data. We assume that this is also the case with Instagram. Customer data includes, for example, name, address, telephone number and IP address. This customer data is only transmitted to Instagram once it has been „hashed“. Hashing means that a data record is converted into a character string. This makes it possible to encrypt contact data. In addition, the aforementioned „event data“ is also transmitted. By „event data“, Facebook – and consequently also Instagram – understands data about your user behaviour. It can also happen that contact data is combined with event data. The collected contact data is matched with the data that Instagram already has about you.
The collected data is transmitted to Facebook via small text files (cookies), which are usually placed in your browser. Depending on the Instagram features used and whether you have an Instagram account yourself, varying amounts of data are stored.
We assume that data processing works the same way on Instagram as it does on Facebook. This means that if you have an Instagram account or www.instagram.com visited, Instagram will have set at least one cookie. If that is the case, your browser uses the cookie to send information to Instagram as soon as you interact with an Instagram feature. At the latest after 90 days (following reconciliation), this data is deleted or anonymised again. Although we have looked into Instagram's data processing in great detail, we cannot say with absolute certainty precisely what data Instagram collects and stores.
Below, we show you cookies that are set in your browser at the very least when you click on an Instagram feature (such as a button or an Insta picture). In our test, we assume that you do not have an Instagram account. If you are logged in to Instagram, significantly more cookies will, of course, be set in your browser.
These cookies were used in our test:
Name: csrftoken
Value: “”
Reference: This cookie is very likely set for security reasons to prevent request forgery. However, we were not able to find out any more specific details.
Expiry date: after a year
Name: average
Value: “”
Reference: Instagram sets this cookie to optimise its services and offerings on and off Instagram. The cookie establishes a unique user ID.
Expiry date: after the end of the meeting
Name: fbsr_113226682124024
Value: not applicable
Reference: This cookie stores the log-in request for users of the Instagram app.
Expiry date: after the end of the meeting
Name: rur
Value: ATN
Reference: This is an Instagram cookie that ensures functionality on Instagram.
Expiry date: after the end of the meeting
Name: urlgen
Value: “{”194.96.75.33”: 1901}:1iEtYv:Y833k2_UjKvXgYe113226682”
Reference: This cookie is used for Instagram's marketing purposes.
Expiry date: after the end of the meeting
Note: We cannot guarantee complete accuracy here. Which cookies are set in an individual case depends on the embedded features and your use of Instagram.
Instagram shares the information it receives with Facebook companies, with external partners, and with people you connect with worldwide. Data processing is carried out in compliance with its own data policy. Your data is distributed across Facebook servers all over the world, partly for security reasons, among others. Most of these servers are located in the USA.
Thanks to the General Data Protection Regulation, you have the right to access, portability, rectification and erasure of your data. You can manage your data in your Instagram settings. If you want to completely delete your data on Instagram, you must permanently delete your Instagram account.
Here is how to delete your Instagram account:
First, open the Instagram app. Go down to your profile page and click on „Help“. Now you will come to the company's website. On the website, click on „Managing Your Account“ and then on „Delete Your Account“.
If you delete your account entirely, Instagram deletes posts such as your photos and status updates. Information that other people have shared about you does not belong to your account and is consequently not deleted.
As mentioned above, Instagram primarily stores your data via cookies. You can manage, disable or delete these cookies in your browser. Depending on your browser, the management process works a little differently. Under the „Cookies“ section, you will find the relevant links to the instructions for the most popular browsers.
You can also generally configure your browser so that you are always informed when a cookie is to be set. You can then decide on a case-by-case basis whether or not to allow the cookie.
If you have consented to your data being processed and stored by integrated social media elements, this consent shall serve as the legal basis for the data processing. (Art. 6(1)(a) UK GDPR). In principle, your data is also processed on the basis of our legitimate interest (Article 6(1)(f) of the GDPR) stored and processed for the purpose of fast and effective communication with you or other customers and business partners. At the same time, we only use the integrated social media elements if you have given your consent. Most social media platforms also set cookies in your browser in order to store data. We therefore recommend that you read our privacy text regarding cookies carefully and review the privacy policy or cookie guidelines of the respective service provider.
Instagram also processes data from you in the USA, amongst other places. Instagram or Meta Platforms is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information about this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Additionally, Instagram uses so-called standard contractual clauses (= Art. 46 para. 2 and 3 GDPR). Standard contractual clauses (SCCs) are template models provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the standard contractual clauses, Instagram undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
We have tried to bring you closer to the most important information about data processing by Instagram. On https://privacycenter.instagram.com/policy/ can you look into Instagram's data policies in more detail.
| Online Marketing Privacy Policy Summary 👥 Affected parties: Website visitors 🤝 Purpose: Evaluation of visitor information to optimise the website. 📓 Processed data: access statistics, which contain data such as access locations, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. Personal data such as name or email address may also be processed. Further details can be found with the respective online marketing tool being used. 📅 Retention period: dependent on the online marketing tools used ⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests) |
Online marketing refers to all measures carried out online to achieve marketing goals such as increasing brand awareness or closing a sale. Furthermore, our online marketing measures aim to make people aware of our website. In order to be able to show our offering to many interested people, we therefore engage in online marketing. This mostly involves online advertising, content marketing or search engine optimisation. So that we can use online marketing efficiently and in a targeted manner, personal data is also stored and processed. On the one hand, this data helps us to show our content only to those people who are actually interested in it and, on the other hand, we can measure the advertising success of our online marketing measures.
We want to show our website to everyone who is interested in what we have to offer. We are aware that this is not possible without deliberately implemented measures. That is why we do online marketing. There are various tools that make our work on our online marketing measures easier and, in addition, constantly provide suggestions for improvement based on data. This allows us to target our campaigns more precisely at our target audience. The ultimate purpose of these online marketing tools is therefore to optimise our offering.
To ensure that our online marketing works and the success of the measures can be measured, user profiles are created and data is stored, for example, in cookies (which are small text files). With the help of this data, we can not only display traditional advertising, but also present our content directly on our website in the way that suits you best. There are various third-party tools that offer these functions and accordingly also collect and store data from you. For example, the mentioned cookies store which pages you have visited on our website, how long you viewed these pages, which links or buttons you click, or which website you came to us from. In addition, technical information may also be stored. Such as your IP address, which browser you use, which device you are using to visit our website, or the time you accessed our website and when you left it again. If you have consented to us also being able to determine your location, we can also store and process this.
Your IP address is stored in pseudonymised (i.e. shortened) form. Unique data that directly identifies you as a person, such as name, address or email address, is also stored only in pseudonymised form as part of the advertising and online marketing procedures. We are therefore unable to identify you as a person; we only have the pseudonymised information stored in the user profiles.
These cookies may also be used, analysed and utilised for advertising purposes on other websites that use the same advertising tools. The data may then also be stored on the servers of the advertising tool providers.
In exceptional cases, unambiguous data (names, email addresses, etc.) can also be stored in the user profiles. This storage occurs, for example, if you are a member of a social media channel that we use for our online marketing measures and the network connects previously entered data with the user profile.
For all the advertising tools we use that store your data on their servers, we only ever receive aggregated information and never data that makes you recognisable as an individual. The data simply shows how well the advertising measures we have put in place have worked. For example, we can see which measures prompted you or other users to visit our website and purchase a service or product there. These analyses allow us to improve our advertising offering in future and tailor it even more precisely to the needs and wishes of interested parties.
We will inform you further down about the duration of the data processing, provided we have further information on this. In general, we only process personal data for as long as is strictly necessary for the provision of our services and products. Data stored in cookies are stored for varying lengths of time. Some cookies are deleted as soon as you leave the website, while others may be stored in your browser for several years. You will generally find precise information about the individual cookies used by each provider in their respective privacy policies.
You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling or deleting cookies in your browser. The lawfulness of the processing carried out until the withdrawal remains unaffected.
Since online marketing tools generally may use cookies, we also recommend our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.
If you have consented to the use of third-party providers, the legal basis for the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (Consent) sets out the legal basis for the processing of personal data, as can occur during collection by online marketing tools.
We also have a legitimate interest in measuring online marketing measures in an anonymised form in order to use the data obtained to optimise our website and our measures. The corresponding legal basis for this is Art. 6(1)(f) GDPR (Legitimate interests). Nevertheless, we only use these tools provided you have given your consent.
Information on special online marketing tools can be found in the following sections, where available.
| Cookie Consent Management Platform Summary 👥 Affected: Website visitors 🤝 Purpose: Obtaining and managing consent for specific cookies and thus the use of certain tools 📓 Processed data: Data for managing the set cookie preferences such as IP address, time of consent, type of consent, individual consents. Further details can be found with the respective tool used. 📅 Retention period: Depends on the tool used, you must be prepared for periods of several years ⚖️ Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests) |
We use a consent management platform (CMP) software on our website, which makes the correct and secure handling of the scripts and cookies used easier for both us and you. The software automatically generates a cookie pop-up, scans and controls all scripts and cookies, provides you with the cookie consent required under data protection law, and helps both us and you to keep track of all cookies. With most cookie consent management tools, all existing cookies are identified and categorised. You, as a website visitor, then decide for yourself whether and which scripts and cookies you allow or do not allow. The following graphic illustrates the relationship between the browser, web server and CMP.
Our aim is to offer you the best possible transparency in the field of data protection. We are also legally obliged to do so. We want to inform you as well as possible about all tools and all cookies that can store and process your data. It is also your right to decide for yourself which cookies you accept and which you do not. To grant you this right, we first need to know exactly which cookies have actually ended up on our website. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we know about all cookies and can provide you with GDPR-compliant information about them. You can then accept or reject cookies via the consent system.
As part of our cookie management tool, you can manage every single cookie yourself and have complete control over the storage and processing of your data. The declaration of your consent is stored so that we do not have to ask you every time you visit our website and so that we can also prove your consent if required by law. This is stored either in an opt-in cookie or on a server. The storage period for your cookie consent varies depending on the provider of the cookie management tool. This data (such as a pseudonymous user ID, time of consent, detailed information on the cookie categories or tools, browser, device information) is usually stored for up to two years.
We will inform you about the duration of data processing further down, provided we have further information on this. In general, we only process personal data for as long as is strictly necessary for the provision of our services and products. Data stored in cookies are stored for varying lengths of time. Some cookies are deleted as soon as you leave the website, while others may be stored in your browser for several years. The exact duration of data processing depends on the tool used; in most cases, you should expect a storage period of several years. You will generally find exact information about the duration of data processing in the respective privacy policies of the individual providers.
You also have the right and the option to withdraw your consent to the use of cookies at any time. This can be done either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection by cookies by managing, disabling or deleting cookies in your browser.
Information on special cookie management tools can be found in the following sections, if available.
If you consent to cookies, personal data will be processed and stored via these cookies. If we through your Consent (Article 6(1)(a) GDPR) are permitted to use cookies, this consent simultaneously serves as the legal basis for the use of cookies or the processing of your data. In order to be able to manage cookie consent and to enable you to give consent, cookie consent management platform software is used. The use of this software enables us to operate the website in an efficient and legally compliant manner, which constitutes a legitimate interest (Article 6(1)(f) GDPR).
We use Borlabs Cookie on our website, which is a tool used, amongst other things, to store your cookie consent. The service provider is the German company Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany.
You can find out more about the data processed through the use of Borlabs Cookie in the privacy policy at https://de.borlabs.io/datenschutz/.
| External online platforms privacy policy summary 👥 Data subjects: Website visitors and visitors to the external online platforms 🤝 Purpose: Presentation and optimisation of our service, contact with visitors and prospective clients 📓 Processed data: Data such as phone numbers, email addresses, contact details, user behaviour data, information about your device and your IP address. You can find more details on the platform currently in use. 📅 Retention period: depending on the platforms used ⚖️ Legal basis: Article 6(1)(a) of the GDPR (consent), Article 6(1)(f) of the GDPR (legitimate interests) |
To be able to offer our services or products outside of our website as well, we also use external platforms. These are mostly online marketplaces such as Amazon or eBay. Alongside our responsibility for data protection, the data protection provisions of the external platforms we use also apply. This is specifically the case when our products are purchased via the platform, i.e., when there is a payment transaction. Furthermore, most platforms also use your data to optimise their own marketing activities. For example, the platform can use collected data to tailor advertising precisely to the interests of customers and website visitors.
In addition to our website, we also want to offer our products and services on other platforms in order to introduce them to more customers. External online marketplaces such as Amazon, eBay, or Digistore24 offer large sales websites that present our products to people who may not be familiar with our website. It can also happen that embedded elements on our site lead to an external online platform. Data processed and stored by the online platform used serves the company on the one hand to log the payment transaction and on the other hand to be able to carry out web analytics.
The aim of these analyses is to be able to develop more precise and personal marketing and advertising strategies. Depending on your behaviour on a platform, appropriate conclusions can be drawn about your interests using the evaluated data, and so-called user profiles can be created. This also makes it possible for the platforms to present you with tailored advertisements or products. For this purpose, cookies are usually placed in your browser to store data on your usage behaviour.
Please note that when using the platforms or our embedded elements, your data may also be processed outside the European Union, as online platforms such as Amazon or eBay are American companies. As a result, you may no longer be able to claim or enforce your rights regarding your personal data as easily.
Which data exactly is stored and processed depends on the respective external platform. However, it is usually data such as telephone numbers, email addresses, data that you enter into a contact form, user data such as which buttons you click, when you visited which pages, information about your device, and your IP address. Very often, most of this data is stored in cookies. If you have your own profile on an external platform and are also logged in there, data can be linked to the profile. The data collected is stored on the servers of the platforms used and processed there. You can find out how an external platform specifically stores, manages, and processes data in the respective privacy policy. If you have questions about data storage and data processing or wish to assert corresponding rights, we recommend that you contact the platform directly.
We will inform you about the duration of the data processing further down, provided we have further information on this. For example, Amazon stores data until it is no longer required for its own purposes. In general, we only process personal data for as long as is strictly necessary for the provision of our services and products.
You also have the right and the option to withdraw your consent to the use of cookies at any time. This works either via our cookie management tool or via opt-out functions on the respective external platform. Furthermore, you can prevent data collection by cookies by managing, disabling or deleting cookies in your browser.
As cookies may be used, we also recommend reading our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective external platforms.
If you have consented to your data being processed and stored by external platforms, this applies Consent as the legal basis for data processing (Art. 6(1)(a) UK GDPR). In principle, if consent has been given, your data will also be processed on the basis of legitimate interest (Article 6(1)(f) GDPR) interested in fast and good communication with you or other customers and business partners, and are stored and processed accordingly. If we have integrated elements of external platforms on our website, we nonetheless only use them insofar as you have given your consent.
Information regarding specific external platforms can be found – where available – in the following sections.
We always endeavour to make our privacy policy as clear and understandable as possible. However, this is not always entirely straightforward, particularly when it comes to technical and legal topics. It often makes sense to use legal terms (such as personal data) or specific technical expressions (such as cookies, IP address). However, we do not want to use these without explanation. Below you will find an alphabetical list of important terms used which we may not have addressed sufficiently in the previous privacy policy. If these terms have been taken from the GDPR and are definitions, we will also cite the GDPR texts here and add our own explanations where appropriate.
Definitions pursuant to Article 4 of the GDPR
For the purposes of this Regulation, the following definition applies:
„data processor“ a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Explanation: As a company and website owner, we are responsible for all data that we process from you. In addition to the data controllers, there may also be so-called data processors. This includes any company or person that processes personal data on our behalf. Consequently, data processors can include service providers such as tax advisors, hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.
Definitions pursuant to Article 4 of the GDPR
For the purposes of this Regulation, the following definition applies:
„Consent“ any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by a statement or other clear affirmative action, by which the data subject indicates that they consent to the processing of personal data relating to them;
Explanation: As a rule, such consent on websites is given via a cookie consent tool. You are surely familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to or consent to data processing. You can usually also make individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data of yours may be processed either. In principle, consent can of course also be given in writing, i.e. not via a tool.
Definitions pursuant to Article 4 of the GDPR
For the purposes of this Regulation, the following definition applies:
„personal data“ any information relating to an identified or identifiable natural person (hereinafter referred to as „data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Explanation: Personal data is therefore all data that can identify you as a person. This is generally data such as:
According to the European Court of Justice (ECJ), your IP address to the personal data. IT experts can use your IP address to determine at least the approximate location of your device and consequently you as the subscriber. Therefore, storing an IP address also requires a legal basis under the GDPR. There are also so-called „special categories“ of personal data, which also require special protection. These include:
Definitions pursuant to Article 4 of the GDPR
For the purposes of this Regulation, the following definition applies:
„Profiling“ any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
Explanation: Profiling involves gathering various information about a person in order to learn more about them. On the web, profiling is frequently used for advertising purposes or credit checks. For example, web and advertising analytics programs collect data on your behaviour and interests on a website. This results in a specific user profile, which can be used to target advertising at a specific audience.
Definitions pursuant to Article 4 of the GDPR
For the purposes of this Regulation, the following definition applies:
„Controller“ the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Explanation: In our case, we are responsible for the processing of your personal data and are consequently the “data controller”. If we pass on collected data to other service providers for processing, they are “data processors”. For this purpose, a “data processing agreement (DPA)” must be signed.
Definitions pursuant to Article 4 of the GDPR
For the purposes of this Regulation, the following definition applies:
„Processing“ any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Note: When we refer to processing in our privacy policy, we mean any kind of data processing. As mentioned above in the original GDPR statement, this includes not only the collection, but also the storage and processing of data.
All texts are protected by copyright.
Source: Privacy Policy created with the data protection generator for Austria by AdSimple
You are currently viewing placeholder content from Vimeo. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing placeholder content from YouTube. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing placeholder content from Instagram. To access the actual content, please click the button below. Please note that this will involve transferring data to third-party providers.
Further informationYou are currently viewing placeholder content from TrustIndex. To access the actual content, please click the button below. Please note that this will involve transferring data to third-party providers.
Further informationYou are currently viewing placeholder content from reCAPTCHA. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information