Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the topic of data protection can be found in our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in this website’s imprint.

How do we collect your data?

Your data is collected partly by you providing it to us. This can be data you enter, for example, into a contact form.

Other data is collected automatically or after your consent when visiting the website through our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data collection happens automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

This website is primarily used only for participation purposes within our Escape Game series.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Additionally, you have the right under certain circumstances to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time at the address provided in the imprint for this and any other questions regarding data protection.

Analytics Tools and Third-Party Tools

Your browsing behavior may be statistically analyzed when visiting this website. This is mainly done with cookies and so-called analytics programs.

Detailed information about these analytics programs can be found in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The use of the host occurs for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing a secure, fast, and efficient delivery of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

Conclusion of a contract on data processing on behalf

To ensure data protection-compliant processing, we have concluded a contract on data processing on behalf with our host.

Content Delivery Network

Our website uses a so-called Content Delivery Network (CDN) from the company Cloudflare. A CDN is a network of powerful servers that cache content at various locations around the world. Essentially, a CDN has two main tasks: on one hand, it aims to deliver content in the shortest possible time, and on the other hand, it reduces the load on the web host by distributing the data traffic. CDNs transmit two types of content: static and dynamic content. Static content is delivered to all website visitors in the same form, such as video content from streaming services or code frameworks (e.g., Javascript, jQuery). Dynamic content is initially customized for the user and only generated at the moment of the request. This includes content provided via web applications, email, or online shops that is personalized. To enable this, information about the website visitor must first be transmitted to the CDN. The legal basis for using a CDN and transmitting your data to it is Art. 6 Para. 1 Sentence 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for a technically flawless and fast presentation of our website and to relieve our IT infrastructure. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details provided in the imprint for this purpose.

CloudFlare

Our pages use functions from CloudFlare. The provider is CloudFlare, Inc., 665 3rd St. #200, San Francisco, CA 94107, USA. CloudFlare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed through the CloudFlare network. This allows CloudFlare to analyze the traffic between users and our websites, for example, to detect and prevent attacks on our services. Additionally, CloudFlare may store cookies on your device for optimization and analysis purposes. This serves to protect our overriding legitimate interests in the optimal marketing of our offer according to Art. 6 para. 1 sentence 1 lit. b GDPR.

We have concluded a corresponding agreement on commissioned data processing with Cloudflare based on the GDPR. Cloudflare is a certified participant in the EU-US Privacy Shield Framework. Cloudflare has committed to handling all personal data contained within the member states of the European Union (EU) in accordance with the applicable principles of the Privacy Shield Framework. For more information about the Privacy Shield Framework, please refer to the Privacy Shield List of the U.S. Department of Commerce at https://www.privacyshield.gov. Cloudflare collects statistical data about visits to this website. The access data includes: name of the retrieved webpage, file, date and time of access, data volume transferred, message about successful retrieval, browser type along with version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider. Cloudflare uses the log data for statistical evaluations for the purpose of operation, security, and optimization of the offer.

Here you will find information about the data collected there and about Security & Privacy at CloudFlare.

3. General Information and Mandatory Notices

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can personally identify you. This privacy policy explains which data we collect and how we use it. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. A completely secure protection of data against access by third parties is not possible.

Note on the responsible party

The responsible party for data processing on this website is:

b-ceed GmbH
Grondahlsmühle 6-8
53881 Euskirchen

Phone: +49 (0) 2251 929 3300
Email: info@b-ceed.de

The responsible party is the natural or legal person who alone or jointly with others decides the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke any consent you have given at any time. A simple notification by email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases as well as to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE SPECIFIC LEGAL BASIS FOR THE PROCESSING IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. This complaint right is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically based on your consent or to fulfill a contract, either for yourself or a third party, in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Information, Deletion and Correction

Under the applicable legal provisions, you have the right at any time to receive free information about your stored personal data, their origin and recipients, and the purpose of data processing, as well as, if applicable, the right to correct or delete this data. You can contact us anytime at the address provided in the legal notice for this and further questions regarding personal data.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address indicated in the legal notice for this purpose. The right to restrict processing applies in the following cases:

• Wenn Sie die Richtigkeit Ihrer bei uns gespeicherten personenbezogenen Daten bestreiten, benötigen wir in der Regel Zeit, um dies zu überprüfen. Für die Dauer der Prüfung haben Sie das Recht, die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen.
• Wenn die Verarbeitung Ihrer personenbezogenen Daten unrechtmäßig geschah/geschieht, können Sie statt der Löschung die Einschränkung der Datenverarbeitung verlangen.
• Wenn wir Ihre personenbezogenen Daten nicht mehr benötigen, Sie sie jedoch zur Ausübung, Verteidigung oder Geltendmachung von Rechtsansprüchen benötigen, haben Sie das Recht, statt der Löschung die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen.
• Wenn Sie einen Widerspruch nach Art. 21 Abs. 1 DSGVO eingelegt haben, muss eine Abwägung zwischen Ihren und unseren Interessen vorgenommen werden. Solange noch nicht feststeht, wessen Interessen überwiegen, haben Sie das Recht, die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

Objection to Advertising Emails

The use of contact details published as part of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

4. Data Collection on this Website

Cookies

Our websites use so-called “cookies.” Cookies are small text files and do not cause any harm to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after you leave the site. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These allow us or you to use certain services of the third party (e.g., cookies for processing payment services).

Cookies serve various purposes. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to analyze user behavior or to display advertising.

Cookies that are required for carrying out the electronic communication process (necessary cookies) or for providing certain functions you have requested (functional cookies, e.g., for the shopping cart function) or for optimizing the website (e.g., cookies for measuring web traffic) are stored based on Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to provide their services free of technical errors and in an optimized manner. If consent for storing cookies has been requested, the storage of the respective cookies takes place exclusively based on this consent (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time.

You can configure your browser to notify you about the setting of cookies and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for certain cases or in general, and to activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

If cookies from third parties or for analytical purposes are used, we will inform you about this separately within the scope of this privacy policy and, if necessary, request your consent.

Cookie Consent with CCM19 Cookie Consent Manager

Our website uses the cookie consent technology from CCM19 Cookie Consent Manager to obtain your consent for storing certain cookies on your device and to document this in compliance with data protection regulations. The provider of this technology is Papoo Software & Media GmbH, Auguststraße 4, 53229 Bonn Website: https://www.ccm19.de/ (hereinafter referred to as “Cookie Consent Manager Provider”).

When you access our website, a connection is made to the servers of the Cookie Consent Manager Provider to retrieve your consents and other declarations regarding cookie usage. Afterwards, the Cookie Consent Manager Provider stores a cookie in your browser to associate your given consents or their revocation. The collected data is stored until you request deletion from us, delete the Cookie Consent Manager Provider cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected.

The use of the Cookie Consent Manager Provider is intended to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Data Processing Agreement

We have concluded a data processing agreement with the Cookie Consent Manager Provider. This is a legally required contract under data protection law that ensures the Cookie Consent Manager Provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Server Log Files

The provider of the site automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browsertyp und Browserversion
• verwendetes Betriebssystem
• Referrer URL
• Hostname des zugreifenden Rechners
• Uhrzeit der Serveranfrage
• IP-Adresse (verschlüsselt)

A combination of this data with other data sources is not carried out.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of their website – for this purpose, the server log files must be recorded.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form including the contact information you provide there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effective handling of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this was requested.

The data you enter in the contact form remains with us until you request its deletion, revoke your consent to storage, or the purpose for the data storage no longer applies (e.g., after the completion of your inquiry). Mandatory legal provisions – especially retention periods – remain unaffected.

Inquiry via Email, Telephone or Fax

If you contact us by email, phone, or fax, your inquiry, including all personal data arising from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling requests addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if such consent has been obtained.

The data you send to us via contact inquiries will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been completed). Mandatory legal provisions – especially statutory retention periods – remain unaffected.

5. Social Media

Social Media Plugins with Shariff

Plugins from social media platforms (e.g., Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr) are used on this website.

You can usually recognize the plugins by the respective social media logos. To ensure data protection on this website, we only use these plugins together with the so-called “Shariff” solution. This application prevents the plugins integrated on this website from transmitting data to the respective provider as soon as the page is accessed.

Only when you activate the respective plugin by clicking its corresponding button will a direct connection to the provider’s server be established (consent). As soon as you activate the plugin, the respective provider receives the information that you visited this website with your IP address. If you are simultaneously logged into your respective social media account (e.g. Facebook), the provider can associate the visit to this website with your user account.

Activating the plugin constitutes consent within the meaning of Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time with future effect.

Facebook Plugins (Like & Share Button)

This website includes plugins from the social network Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

You can identify the Facebook plugins by the Facebook logo or the “Like Button” (“Gefällt mir”) on this website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit this website, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thus receives the information that you have visited this website with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website on your Facebook profile. This allows Facebook to associate the visit to this website with your user account. Please note that as the provider of the pages, we do not receive any information about the content of the data transmitted or its use by Facebook. For more information, please refer to Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.

If you do not want Facebook to be able to associate the visit to this website with your Facebook user account, please log out of your Facebook account.

The use of Facebook plugins is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the greatest possible visibility on social media. If appropriate consent has been requested, processing takes place exclusively based on Art. 6(1)(a) GDPR; consent can be revoked at any time.

Twitter Plugin

This website includes features of the Twitter service. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter in the process. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. More information can be found in Twitter’s privacy policy at: https://twitter.com/de/privacy.

The use of the Twitter plugin is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the widest possible visibility in social media. If a corresponding consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR; consent can be revoked at any time.

You can change your privacy settings on Twitter in the account settings at https://twitter.com/account/settings.

LinkedIn Plugin

This website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time a page of this website containing LinkedIn functions is accessed, a connection is made to LinkedIn servers. LinkedIn is informed that you have visited this website with your IP address. If you click the “Recommend Button” from LinkedIn and are logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account. We point out that as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by LinkedIn.

The use of the LinkedIn plugin is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in as much visibility as possible in social media. If a corresponding consent has been obtained, the processing takes place solely on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

Further information can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

XING Plugin

This website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Each time one of our pages containing XING functions is accessed, a connection is established to XING servers. To our knowledge, no personal data is stored. In particular, no IP addresses are stored nor is user behavior analyzed.

The storage and analysis of data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. If the appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent can be revoked at any time.

Further information about data protection and the XING Share Button can be found in XING’s privacy policy at: https://www.xing.com/app/share?op=data_protection.

Pinterest Plugin

On this website, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).

When you visit a page containing such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to Pinterest’s servers in the USA. These log data may include your IP address, the addresses of visited websites that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your usage of Pinterest, as well as cookies.

The storage and analysis of data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. If the appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent can be revoked at any time.

For more information about the purpose, scope, and further processing and use of data by Pinterest, as well as your related rights and options for protecting your privacy, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy.

6. Analytics Tools and Advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies.” These are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analytics tool are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If a corresponding consent has been obtained (e.g., consent to store cookies), processing takes place exclusively based on Article 6(1)(a) GDPR; the consent can be revoked at any time.

IP Anonymization

We have activated IP anonymization on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by adjusting the settings in your browser software; however, please note that you may not be able to use all the features of this website fully in this case. Additionally, you can prevent the collection of data related to your use of the website generated by the cookie (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to Data Collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that stops the collection of your data during future visits to this website: Disable Google Analytics.

More information about handling user data in Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Contract

We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Demographic Features in Google Analytics

This website uses the “demographic features” function of Google Analytics. This allows reports to be generated that provide information about the age, gender, and interests of visitors. These data come from interest-based advertising by Google as well as visitor data from third parties. These data cannot be assigned to any specific person. You can disable this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to Data Collection.”

Storage Duration

Data stored by Google on a user and event level, linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. For more details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de

Facebook Pixel

This website uses the Facebook visitor action pixel for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data may also be transferred to the USA and other third countries.

This allows the behavior of page visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. As a result, the effectiveness of Facebook ads can be analyzed for statistical and market research purposes and future advertising measures can be optimized.

The collected data is anonymous to us as the operator of this website; we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile and enabling Facebook to use the data for its own advertising purposes according to the Facebook Data Use Policy. This enables Facebook to display advertisements on Facebook pages as well as outside of Facebook. This use of data cannot be influenced by us as the website operator.

The use of Facebook Pixel is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g., consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

In Facebook’s privacy policy, you can find further information on protecting your privacy: https://de-de.facebook.com/about/privacy/.

You can also disable the remarketing feature “Custom Audiences” in the ad settings area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. For this, you need to be logged in to Facebook.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

7. Newsletter

Newsletter Data

If you wish to subscribe to the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively to send the requested information and do not share it with third parties.

The processing of the data entered into the newsletter registration form is carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke the consent you gave for storing the data, the email address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing carried out prior to the revocation remains unaffected.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter or by the newsletter service provider and will be deleted from the newsletter distribution list after cancellation of the newsletter. Data stored for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data in the blacklist is used only for this purpose and is not combined with other data. This serves both your interests and our interest in complying with the legal requirements for sending newsletters (legitimate interest according to Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.

8. Plugins and Tools

YouTube with extended data protection

This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode prevents YouTube from storing information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video or not.

As soon as you start a YouTube video on this website, a connection is made to YouTube’s servers. During this process, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your device. These cookies allow YouTube to obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts. The cookies remain on your device until you delete them.

Additional data processing operations may be triggered after starting a YouTube video, over which we have no control.

The use of YouTube serves the purpose of an attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts

This site uses so-called Web Fonts provided by Google for a uniform display of fonts. When you visit a page, your browser loads the necessary Web Fonts into its browser cache to correctly display texts and fonts.

For this purpose, the browser you use must connect to Google’s servers. This allows Google to become aware that this website was accessed via your IP address. The use of Google WebFonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the consistent display of fonts on their website. If a corresponding consent has been requested (e.g. consent to store cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

If your browser does not support web fonts, a standard font from your computer will be used.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the Google Maps service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the USA and stored there. The operator of this site has no influence on this data transmission.

The use of Google Maps is based on the interest of providing an appealing presentation of our online offers and making the locations we specify on the website easy to find. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If the corresponding consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

More information about how user data is handled can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is intended to verify whether the data entry on this website (e.g., in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the visitor enters the website. To perform the analysis, reCAPTCHA evaluates different information (e.g., IP address, visitor’s time spent on the website, or mouse movements made by the user). The data collected during the analysis is transmitted to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings against abusive automated spying and SPAM. If the corresponding consent has been requested (e.g. consent for the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be withdrawn at any time.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

9. eCommerce and Payment Providers

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only to the extent necessary for establishing, shaping, or modifying the legal relationship (master data). This is based on Art. 6 para. 1 lit. b GDPR, which permits processing of data for the fulfillment of a contract or pre-contractual measures. Personal data regarding the use of this website (usage data) are only collected, processed, and used to the extent necessary to enable the user to use the service or to bill for it.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transmission when concluding contracts for services and digital content

We only transmit personal data to third parties when this is necessary for the processing of the contract, for example to the credit institution responsible for payment processing.

Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your explicit consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.

PayPal

On this website, we offer payment via PayPal among other options. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing to fulfill a contract). You have the option to withdraw your consent to data processing at any time. A withdrawal does not affect the legality of data processing carried out in the past.

10. Own services

Handling of applicant data

We offer you the opportunity to apply with us (e.g., by email, mail, or via an online application form). Below, we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data is carried out in accordance with applicable data protection laws and all other legal requirements, and that your data is treated with strict confidentiality.

Scope and Purpose of Data Collection

If you submit an application to us, we process your associated personal data (e.g., contact and communication details, application documents, notes made during interview processes, etc.) to the extent necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation), and – if you have given consent – Art. 6 para. 1 lit. a GDPR. Consent can be withdrawn at any time. Your personal data is only shared within our company with individuals involved in processing your application.

If the application is successful, the data you submitted will be stored in our data processing systems on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.

Data Retention Period

If we are unable to make you a job offer, you decline a job offer, or you withdraw your application, we reserve the right to retain the data you have submitted based on our legitimate interests (Art. 6 Para. 1 lit. f GDPR) for up to 6 months from the conclusion of the application process (rejection or withdrawal of the application). After that, the data will be deleted and any physical application documents will be destroyed. The retention serves primarily as evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period (e.g., due to a threatened or ongoing legal dispute), deletion will only occur once the purpose for further retention no longer applies.

Longer retention may also take place if you have given corresponding consent (Art. 6 Para. 1 lit. a GDPR) or if legal retention obligations prevent deletion.

Inclusion in the Applicant Pool

If we are unable to make you a job offer, there may be the possibility to include you in our applicant pool. In the case of inclusion, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Inclusion in the applicant pool is done exclusively on the basis of your explicit consent (Art. 6 Para. 1 lit. a GDPR). Giving consent is voluntary and is not related to the current application process. The data subject may revoke their consent at any time. In this case, the data in the applicant pool will be irrevocably deleted, provided there are no legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after consent is given.