Data protection
1. Data protection at a glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy listed below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information about the responsible party” in this privacy policy.
How do we collect your data?
Your data is collected, firstly, by you providing it to us. This may include data that you enter into a contact form.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data can be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data is also processed for contract offers, orders, or other inquiries.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time for the future. Additionally, you have the right to request restriction of processing of your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the competent supervisory authority.
For this and for any further questions regarding data protection, you can contact us at any time.
Analytics tools and third-party tools
When you visit this website, your browsing behavior may be statistically evaluated. This is mainly done with analysis programs.
Detailed information about these analysis programs can be found in the following privacy policy.
2. Hosting
We host the content of our website with the following provider:
Alfahosting
The provider is Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale) (hereinafter “Alfahosting”). When you visit our website, Alfahosting collects various log files, including your IP addresses.
For details, please refer to Alfahosting’s privacy policy: https://alfahosting.de/datenschutz/.
The use of Alfahosting is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. If corresponding consent has been requested, processing is carried out solely on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., for device fingerprinting) as defined by the TDDDG. Consent can be revoked at any time.
Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) for the use of the service mentioned above. This is a contract required by data protection law to ensure that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General notes and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is any data that can personally identify you. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmission over the internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.
Note on the responsible body
The party responsible for data processing on this website is:
Frenvi GmbH
Phanindra Gopala Krishna
Julius-Hatry-Str. 1
68163 Mannheim
Phone: +49 17687278366
Email: info@frenvi.de
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage period
Unless a more specific storage period has been stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, deletion occurs after these reasons no longer apply.
General information on the legal basis of data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, if special categories of data under Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g., via device fingerprinting), data processing is also based on § 25(1) TDDDG. Consent can be revoked at any time.
If your data is required for contract performance or for pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. If your data is required to fulfil a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The applicable legal basis in each individual case is explained in the following paragraphs of this privacy policy.
Note on data transfer to countries outside the EU with insufficient data protection and to US companies not certified under the DPF
We use tools from companies located in countries outside the EU with insufficient data protection levels as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. We point out that such countries may not guarantee data protection levels comparable to those of the EU.
We note that the USA, as a safe third country, generally offers a level of data protection comparable to that of the EU. Data transfer to the USA is permitted when the recipient is certified under the DPF or has suitable additional safeguards. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
Recipients of personal data
In the course of our business activities, we work with various external parties. In some cases, the transfer of personal data to these parties is necessary. We only transfer personal data when necessary for contract performance, when required by law (e.g., to tax authorities), when we have a legitimate interest under Art. 6(1)(f) GDPR, or when another legal basis permits the transfer. When using processors, we only transfer personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may revoke your previously granted consent at any time. The legality of data processing carried out before the revocation remains unaffected.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
THE APPLICABLE LEGAL BASIS FOR EACH PROCESSING OPERATION CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING RELATED TO DIRECT MARKETING.
IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).
Right to lodge a complaint with the supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to receive data that we process automatically based on your consent or to fulfil a contract in a common, machine-readable format. If you request direct transfer to another controller, this is done only if technically feasible.
Right of access, rectification, and deletion
Within the scope of the applicable legal provisions, you have the right at any time to access your stored personal data free of charge, including its origin, recipients, and purpose of processing, as well as—if applicable—a right to rectification or deletion. For this or any further questions about personal data, you may contact us at any time.
Right to restriction of processing
You have the right to request the restriction of processing your personal data. You may contact us at any time regarding this. The right applies in the following cases:
• If you dispute the accuracy of your stored personal data, we need time to verify it. During the verification period, you have the right to request the restriction of processing.
• If the processing of your personal data was or is unlawful, you may request restriction instead of deletion.
• If we no longer need your personal data but you need it to assert, defend, or exercise legal claims, you have the right to request restriction instead of deletion.
• If you have objected under Art. 21(1) GDPR, an assessment must be made between your and our interests. Until it is determined whose interests prevail, you have the right to restrict processing.
If you restrict processing, your personal data may only be processed—with the exception of storage—with your consent or to assert, exercise, or defend legal claims, to protect the rights of another person, or for reasons of important public interest of the EU or a member state.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and the lock symbol in your browser.
When SSL or TLS encryption is activated, the data you transmit cannot be read by third parties.
Objection to promotional emails
We hereby object to the use of contact data published as part of the legal notice obligation for sending unsolicited advertising or informational materials. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
4. Datenerfassung auf dieser Website
Real Cookie Banner
Unsere Website nutzt die Consent-Technologie von Real Cookie Banner, um Ihre Einwilligung zur Speicherung bestimmter Cookies auf Ihrem Endgerät oder zum Einsatz bestimmter Technologien einzuholen und diese datenschutzkonform zu dokumentieren. Anbieter dieser Technologie ist devowl.io GmbH, Tannet 12, 94539 Grafling (im Folgenden „Real Cookie Banner“).
Real Cookie Banner ist lokal auf unseren Servern installiert, sodass keine Verbindung zu den Servern des Anbieters von Real Cookie Banner hergestellt wird. Real Cookie Banner speichert einen Cookie in Ihrem Browser, um Ihnen die erteilten Einwilligungen bzw. deren Widerruf zuordnen zu können. Die so erfassten Daten werden gespeichert, bis Sie uns zur Löschung auffordern, den Real Cookie Banner-Cookie selbst löschen oder der Zweck für die Datenspeicherung entfällt. Zwingende gesetzliche Aufbewahrungspflichten bleiben unberührt.
Der Einsatz von Real Cookie Banner erfolgt, um die gesetzlich vorgeschriebenen Einwilligungen für den Einsatz von Cookies einzuholen. Rechtsgrundlage hierfür ist Art. 6 Abs. 1 lit. c DSGVO.
Server-Log-Dateien
Der Provider der Seiten erhebt und speichert automatisch Informationen in so genannten Server-Log-Dateien, die Ihr Browser automatisch an uns übermittelt. Dies sind:
- Browsertyp und Browserversion
- verwendetes Betriebssystem
- Referrer URL
- Hostname des zugreifenden Rechners
- Uhrzeit der Serveranfrage
- IP-Adresse
Eine Zusammenführung dieser Daten mit anderen Datenquellen wird nicht vorgenommen.
Die Erfassung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an der technisch fehlerfreien Darstellung und der Optimierung seiner Website – hierzu müssen die Server-Log-Files erfasst werden.
Kontaktformular
Wenn Sie uns per Kontaktformular Anfragen zukommen lassen, werden Ihre Angaben aus dem Anfrageformular inklusive der von Ihnen dort angegebenen Kontaktdaten zwecks Bearbeitung der Anfrage und für den Fall von Anschlussfragen bei uns gespeichert. Diese Daten geben wir nicht ohne Ihre Einwilligung weiter.
Die Verarbeitung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO, sofern Ihre Anfrage mit der Erfüllung eines Vertrags zusammenhängt oder zur Durchführung vorvertraglicher Maßnahmen erforderlich ist. In allen übrigen Fällen beruht die Verarbeitung auf unserem berechtigten Interesse an der effektiven Bearbeitung der an uns gerichteten Anfragen (Art. 6 Abs. 1 lit. f DSGVO) oder auf Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO) sofern diese abgefragt wurde; die Einwilligung ist jederzeit widerrufbar.
Die von Ihnen im Kontaktformular eingegebenen Daten verbleiben bei uns, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt (z. B. nach abgeschlossener Bearbeitung Ihrer Anfrage). Zwingende gesetzliche Bestimmungen – insbesondere Aufbewahrungsfristen – bleiben unberührt.
Anfrage per E-Mail, Telefon oder Telefax
Wenn Sie uns per E-Mail, Telefon oder Telefax kontaktieren, wird Ihre Anfrage inklusive aller daraus hervorgehenden personenbezogenen Daten (Name, Anfrage) zum Zwecke der Bearbeitung Ihres Anliegens bei uns gespeichert und verarbeitet. Diese Daten geben wir nicht ohne Ihre Einwilligung weiter.
Die Verarbeitung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO, sofern Ihre Anfrage mit der Erfüllung eines Vertrags zusammenhängt oder zur Durchführung vorvertraglicher Maßnahmen erforderlich ist. In allen übrigen Fällen beruht die Verarbeitung auf unserem berechtigten Interesse an der effektiven Bearbeitung der an uns gerichteten Anfragen (Art. 6 Abs. 1 lit. f DSGVO) oder auf Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO) sofern diese abgefragt wurde; die Einwilligung ist jederzeit widerrufbar.
Die von Ihnen an uns per Kontaktanfragen übersandten Daten verbleiben bei uns, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt (z. B. nach abgeschlossener Bearbeitung Ihres Anliegens). Zwingende gesetzliche Bestimmungen – insbesondere gesetzliche Aufbewahrungsfristen – bleiben unberührt.
Zoho CRM
Wir nutzen Zoho CRM auf dieser Website. Anbieter ist Zoho Corporation Pvt. Ltd., Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, Indien (nachfolgend „Zoho CRM“).
Zoho CRM ermöglicht es uns unter anderem, bestehende und potenzielle Kunden sowie Kundenkontakte zu verwalten und Vertriebs- und Kommunikationsprozesse zu organisieren. Der Einsatz des CRM-Systems ermöglicht uns ferner die Analyse und Optimierung unserer kundenbezogenen Prozesse. Die Kundendaten werden auf den Servern von Zoho CRM gespeichert. Details zu den Funktionen von Zoho CRM finden Sie hier: https://www.zoho.com/de/crm/help/getting-started/key-features.html.
Die Verwendung von Zoho CRM erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer möglichst effizienten Kundenverwaltung und Kundenkommunikation. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TDDDG umfasst. Die Einwilligung ist jederzeit widerrufbar.
Die Datenübertragung in Drittstaaten außerhalb der Europäischen Union wird auf die Standardvertragsklauseln der EU-Kommission gestützt.
Details entnehmen Sie der Datenschutzerklärung von Zoho CRM: https://www.zoho.com/privacy.html und https://www.zoho.com/gdpr.html.
Auftragsverarbeitung
Wir haben einen Vertrag über Auftragsverarbeitung (AVV) zur Nutzung des oben genannten Dienstes geschlossen. Hierbei handelt es sich um einen datenschutzrechtlich vorgeschriebenen Vertrag, der gewährleistet, dass dieser die personenbezogenen Daten unserer Websitebesucher nur nach unseren Weisungen und unter Einhaltung der DSGVO verarbeitet.
Kommentarfunktion auf dieser Website
Für die Kommentarfunktion auf dieser Seite werden neben Ihrem Kommentar auch Angaben zum Zeitpunkt der Erstellung des Kommentars, Ihre E-Mail-Adresse und, wenn Sie nicht anonym posten, der von Ihnen gewählte Nutzername gespeichert.
Speicherung der IP-Adresse
Unsere Kommentarfunktion speichert die IP-Adressen der Nutzer, die Kommentare verfassen. Da wir Kommentare auf dieser Website nicht vor der Freischaltung prüfen, benötigen wir diese Daten, um im Falle von Rechtsverletzungen wie Beleidigungen oder Propaganda gegen den Verfasser vorgehen zu können.
Abonnieren von Kommentaren
Als Nutzer der Seite können Sie nach einer Anmeldung Kommentare abonnieren. Sie erhalten eine Bestätigungsemail, um zu prüfen, ob Sie der Inhaber der angegebenen E-Mail-Adresse sind. Sie können diese Funktion jederzeit über einen Link in den Info-Mails abbestellen. Die im Rahmen des Abonnierens von Kommentaren eingegebenen Daten werden in diesem Fall gelöscht; wenn Sie diese Daten für andere Zwecke und an anderer Stelle (z. B. Newsletterbestellung) an uns übermittelt haben, verbleiben diese Daten jedoch bei uns.
Speicherdauer der Kommentare
Die Kommentare und die damit verbundenen Daten werden gespeichert und verbleiben auf dieser Website, bis der kommentierte Inhalt vollständig gelöscht wurde oder die Kommentare aus rechtlichen Gründen gelöscht werden müssen (z. B. beleidigende Kommentare).
Rechtsgrundlage
Die Speicherung der Kommentare erfolgt auf Grundlage Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO). Sie können eine von Ihnen erteilte Einwilligung jederzeit widerrufen. Dazu reicht eine formlose Mitteilung per E-Mail an uns. Die Rechtmäßigkeit der bereits erfolgten Datenverarbeitungsvorgänge bleibt vom Widerruf unberührt.
Gravatar
Wir haben Gravatar auf dieser Website eingebunden. Anbieter ist die Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA (nachfolgend Gravatar).
Gravatar ist ein Tool, das es ermöglicht, persönliche Bilder (Avatare) für die Nutzer unserer Website bereitzustellen. Die Avatare dienen als visuelle Repräsentationen der Nutzer und werden überall dort angezeigt, wo ein Nutzer mit der Plattform interagiert (z. B. in Foren oder Chats). Wenn ein Nutzer mit der Plattform interagiert, wird sein Avatar basierend auf der mit seiner E-Mail-Adresse verknüpften Auswahl angezeigt. Dies verleiht der Online-Präsenz der Nutzer eine persönliche Note und erleichtert die Identifizierung, da das gewählte Bild den Nutzern zugeordnet wird, wenn sie online aktiv sind.
Wenn Sie auf unserer Website kommentieren bzw. interagieren und dabei Gravatar aktiviert ist, wird der Hash der E-Mail-Adresse des Nutzers, der Gravatar nutzt (wird als ID genutzt) von Gravatar verarbeitet.
Die Verwendung von Gravatar erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer ansprechenden Darstellung seiner Foren. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TDDDG. Die Einwilligung ist jederzeit widerrufbar.
Weitere Details entnehmen Sie der Datenschutzerklärung des Anbieters unter https://automattic.com/privacy/.
Das Unternehmen verfügt über eine Zertifizierung nach dem „EU-US Data Privacy Framework“ (DPF). Der DPF ist ein Übereinkommen zwischen der Europäischen Union und den USA, der die Einhaltung europäischer Datenschutzstandards bei Datenverarbeitungen in den USA gewährleisten soll. Jedes nach dem DPF zertifizierte Unternehmen verpflichtet sich, diese Datenschutzstandards einzuhalten. Weitere Informationen hierzu erhalten Sie vom Anbieter unter folgendem Link: https://www.dataprivacyframework.gov/participant/4709.
Auftragsverarbeitung
Wir haben einen Vertrag über Auftragsverarbeitung (AVV) zur Nutzung des oben genannten Dienstes geschlossen. Hierbei handelt es sich um einen datenschutzrechtlich vorgeschriebenen Vertrag, der gewährleistet, dass dieser die personenbezogenen Daten unserer Websitebesucher nur nach unseren Weisungen und unter Einhaltung der DSGVO verarbeitet.
5. Social media
This website includes elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Facebook, the data collected may also be transferred to the USA and other third countries.
An overview of Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook thereby receives information that you visited this website with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website to your Facebook profile. Facebook may then assign the visit to your account. Please note that we, as the provider of the website, do not have knowledge of the content of the transmitted data or its use by Facebook. More information can be found in Facebook’s privacy policy: https://de-de.facebook.com/privacy/explanation.
Use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.
To the extent personal data is collected on our website and transferred to Facebook using this tool, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited to the collection and transfer of data to Facebook. Processing by Facebook after transfer is not part of our joint responsibility. Our joint obligations are set out in a joint processing agreement: https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing privacy information and ensuring the secure implementation of Facebook tools on our website. Facebook is responsible for the data security of its products. Data subjects can assert their rights (e.g., access requests) directly with Facebook. If you assert your rights with us, we are required to forward them to Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381, https://www.facebook.com/policy.php.
The company is certified under the EU-US Data Privacy Framework (DPF), an agreement between the EU and the USA to ensure compliance with European data protection standards. Certified companies commit to uphold these standards. More information: https://www.dataprivacyframework.gov/participant/4452.
X (formerly Twitter)
This website includes functions of the service X (formerly Twitter). These functions are provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For data processing of persons living outside the USA, the responsible office is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
When the social media element is active, a direct connection is established between your device and the X server. X (formerly Twitter) receives information about your visit to this website. Using X and the “Re-Tweet” or “Repost” function links the websites you visit to your X account and makes them known to other users. We do not have knowledge of the content of the transmitted data or its use by X. More information: https://x.com/de/privacy.
Use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the EU standard contractual clauses. Details: https://gdpr.x.com/en/controller-to-controller-transfers.html.
You can change your privacy settings in X in your account settings: https://x.com/settings/account.
The company is certified under the EU-US Data Privacy Framework (DPF). More information: https://www.dataprivacyframework.gov/participant/2710.
This website includes Instagram functions, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When the element is active, a direct connection is established between your device and the Instagram server. Instagram receives information about your visit.
If you are logged into Instagram, clicking the Instagram button links the website content to your Instagram profile. Instagram may then assign the visit to your account. We do not have knowledge of the transmitted data or its use.
Use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.
Data collected and transmitted to Facebook or Instagram using this tool is jointly controlled by us and Meta Platforms Ireland Limited (Art. 26 GDPR). Joint responsibility is limited to data collection and transfer; processing by Facebook/Instagram afterward is not part of our responsibility. More details: https://www.facebook.com/legal/controller_addendum.
Data transfer to the USA is based on the EU standard contractual clauses. Details: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/, https://de-de.facebook.com/help/566994660333381.
Instagram is certified under the EU-US Data Privacy Framework (DPF). More info: https://www.dataprivacyframework.gov/participant/4452.
This website uses LinkedIn elements. Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each time a page containing LinkedIn elements is loaded, a connection is made to LinkedIn servers. LinkedIn is informed that you visited the website with your IP address. If you click the LinkedIn “Recommend” button while logged in, LinkedIn can link the visit to your account. We do not have knowledge of the transmitted data or its use.
Use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the EU standard contractual clauses. Details: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de
LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy.
LinkedIn is certified under the EU-US Data Privacy Framework (DPF). More info: https://www.dataprivacyframework.gov/participant/5448.
6. Analytics tools and advertising
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking, analytics tools, and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It is used solely to manage and deploy the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on the website. If consent is requested, processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, as far as consent covers cookie storage or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.
The company is certified under the EU-US Data Privacy Framework (DPF), an agreement between the EU and the USA to ensure compliance with European data protection standards. Each certified company commits to these standards. More information: https://www.dataprivacyframework.gov/participant/5780.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze the behavior of website visitors. The operator receives various usage data, such as page views, time spent, operating systems used, and user origin. This data is summarized in a user ID and associated with the visitor’s device.
Additionally, Google Analytics can track mouse movements, scrolling, and clicks. Google Analytics also uses modeling techniques to supplement datasets and applies machine-learning technologies in the analysis.
Google Analytics uses technologies that allow users to be re-identified for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Information collected by Google about your use of this website is usually transferred to a Google server in the USA and stored there.
Use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the EU standard contractual clauses. Details: https://privacy.google.com/businesses/controllerterms/mccs/.
Google is certified under the EU-US Data Privacy Framework (DPF). More info: https://www.dataprivacyframework.gov/participant/5780.
IP Anonymization
IP anonymization in Google Analytics is enabled. This means your IP address is shortened by Google within the EU or other states of the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. Google uses this information on behalf of the website operator to evaluate website usage, create reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser to Google is not merged with other Google data.
Browser Plugin
You can prevent data collection and processing by Google by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=de.
More information about how Google Analytics handles user data: https://support.google.com/analytics/answer/6004245?hl=de.
Google Signals
We use Google Signals. When you visit our website, Google Analytics collects data such as your location, search history, YouTube history, and demographic data (visitor data). This data may be used via Google Signals for personalized advertising. If you have a Google account, the data may be linked to your Google account and used for personalized advertising messages. Data is also used to create anonymized statistics on user behavior.
Data Processing Agreement
We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
7. Newsletter
Newsletter Data
If you wish to subscribe to the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the provided email address and consent to receive the newsletter. No further data is collected, or only voluntarily. For the administration of the newsletter, we use newsletter service providers described below.
Zoho Campaigns
This website uses Zoho Campaigns to send newsletters. The provider is Zoho Corporation Pvt. Ltd., Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (“Zoho Campaigns”).
Zoho Campaigns is a service that allows the organization and analysis of newsletter sending. The data you provide for newsletter subscription is stored on Zoho Campaigns’ servers.
Data Analysis via Zoho Campaigns
With Zoho Campaigns, we can analyze our newsletter campaigns. For example, we can see whether a newsletter was opened and which links were clicked. This allows us to determine which links were most frequently clicked.
We can also see whether certain predefined actions were performed after opening or clicking the newsletter (conversion rate), e.g., whether you made a purchase after clicking the newsletter. If you do not want Zoho Campaigns to perform this analysis, you must unsubscribe from the newsletter. Each newsletter contains a link for this purpose.
Zoho Campaigns also allows us to categorize newsletter recipients (clustering) by age, gender, location, etc., to better tailor newsletters to specific target groups. Again, if you do not want this analysis, you must unsubscribe using the link provided in each newsletter.
More information about Zoho Campaigns features: https://www.zoho.com/campaigns/features.html.
Zoho Campaigns privacy policy: https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html.
Legal Basis
Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time for the future.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details: https://www.zoho.com/privacy.html.
Storage Duration
The data you provide for newsletter subscription will be stored by us until you unsubscribe from the newsletter or until the newsletter service provider deletes it after your unsubscription or purpose expiration. We reserve the right to delete or block email addresses from our newsletter list at our discretion under our legitimate interest (Art. 6(1)(f) GDPR). Data stored for other purposes is not affected.
After your unsubscription, your email address may be stored in a blacklist by us or the newsletter service provider if necessary to prevent future mailings. Data in the blacklist is used solely for this purpose and is not combined with other data. This protects both your interests and our interest in compliance with legal requirements when sending newsletters (legitimate interest under Art. 6(1)(f) GDPR). The blacklist storage is indefinite, but you may object if your interests override our legitimate interest.
Data Processing Agreement
We have concluded a data processing agreement (DPA) for using the above service. This legally required agreement ensures that the service processes personal data of our website visitors only under our instructions and in compliance with GDPR.
8. Plugins und Tools
YouTube with Enhanced Privacy
This website embeds videos from YouTube. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page with embedded YouTube content, a connection is established to YouTube’s servers. The YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in enhanced privacy mode. Videos played in this mode are not used by YouTube for personalizing your browsing experience. Ads displayed in enhanced privacy mode are also not personalized. In this mode, no cookies are set; however, local storage elements may be stored in your browser. These can contain personal data and be used for user recognition. Details on enhanced privacy mode: https://support.google.com/youtube/answer/171780.
Additional data processing may occur when you activate a YouTube video, which is beyond our control.
Use of YouTube is based on the legitimate interest of presenting our online content attractively (Art. 6(1)(f) GDPR). If consent is requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.
More information about YouTube privacy: https://policies.google.com/privacy?hl=de.
The company is certified under the EU-US Data Privacy Framework (DPF). This framework ensures compliance with EU data protection standards in the USA. Every DPF-certified company commits to maintaining these standards. More info: https://www.dataprivacyframework.gov/participant/5780.
Google Maps
This website uses the Google Maps service. Provider: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to display maps on our website.
To use Google Maps features, your IP address must be stored. This information is generally transferred to and stored on a Google server in the USA. The website operator has no influence on this data transfer. When Google Maps is activated, Google may also use Google Fonts to ensure uniform font display. Your browser loads these web fonts into its cache to display text correctly.
Use of Google Maps is based on the legitimate interest of presenting our online content attractively and making locations we provide easily findable (Art. 6(1)(f) GDPR). If consent is requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details:
More information about Google’s handling of user data: https://policies.google.com/privacy?hl=de.
Google Maps is also covered by the EU-US Data Privacy Framework (DPF). Certified companies commit to complying with EU data protection standards. More info: https://www.dataprivacyframework.gov/participant/5780.
9. eCommerce and Payment Providers
Processing of customer and contract data
We collect, process, and use personal customer and contract data to establish, define the content of, and modify our contractual relationships. We collect, process, and use personal data relating to the use of this website (usage data) only to the extent necessary to enable the user to access the service or for billing purposes. The legal basis for this is Article 6(1)(b) GDPR.
The collected customer data will be deleted after completion of the order or termination of the business relationship and expiry of any applicable statutory retention periods. Statutory retention periods remain unaffected.
10. Audio and video conferences
Data processing
We use online conferencing tools, among other methods, to communicate with our customers. The specific tools we use are listed below. When you communicate with us via video or audio conference over the internet, your personal data will be collected and processed by us and the provider of the respective conferencing tool.
The conference tools collect all data that you provide/use to access the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, the start and end times of your participation, the number of participants, and other “contextual information” related to the communication process (metadata).
Furthermore, the tool provider processes all technical data necessary for handling online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
If content is exchanged, uploaded, or otherwise made available within the tool, it will also be stored on the tool provider’s servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.
Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the respective provider’s company policy. Further information on data processing by the conference tools can be found in the privacy policies of the respective tools, which we have listed below this text.
Purpose and legal basis
The conference tools are used to communicate with prospective or existing business partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of these tools serves to generally simplify and expedite communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Where consent has been requested, the use of the relevant tools is based on this consent; this consent can be revoked at any time with effect for the future.
Storage duration
The data we collect directly via video and conferencing tools will be deleted from our systems as soon as you request its deletion, withdraw your consent to its storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no control over how long your data is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
Conference tools used
We use the following conference tools:
Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details regarding data processing can be found in the Microsoft Teams privacy statement: https://privacy.microsoft.com/de-de/privacystatement .
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/6474 .
Order processing
We have concluded a data processing agreement (DPA) for the use of the aforementioned service. This is a legally required contract under data protection law, which ensures that the service provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Zoho Meeting
We use Zoho Meeting. The provider of this service is Zoho Corporation GmbH, Trinkhausstraße 7, 40213 Düsseldorf, Germany. However, the provider’s parent company is located outside the EU.
We have chosen the EU as our server location, so your data processed via Zoho Meeting is generally processed on EU servers. However, it is not impossible that data may be processed in the USA, India, Australia, or Canada.
Zoho Meeting records the IP address. Yes, IP anonymization has been enabled in Zoho Meeting.
Data transfers to third countries are based on the EU Commission’s standard contractual clauses. Details can be found here : https://www.zoho.com/privacy.html
Order processing
We have concluded a data processing agreement (DPA) for the use of the aforementioned service. This is a legally required contract under data protection law, which ensures that the service provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.