Pri­va­cy Pol­i­cy

1. An overview of data pro­tec­tion

Gen­er­al infor­ma­tion

The fol­low­ing infor­ma­tion will pro­vide you with an easy to nav­i­gate overview of what will hap­pen with your per­son­al data when you vis­it this web­site. The term “per­son­al data” com­pris­es all data that can be used to per­son­al­ly iden­ti­fy you. For detailed infor­ma­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Dec­la­ra­tion, which we have includ­ed beneath this copy.

Data record­ing on this web­site

Who is the respon­si­ble par­ty for the record­ing of data on this web­site (i.e., the “con­troller”)?

The data on this web­site is processed by the oper­a­tor of the web­site, whose con­tact infor­ma­tion is avail­able under sec­tion “Infor­ma­tion about the respon­si­ble par­ty (referred to as the “con­troller” in the GDPR)” in this Pri­va­cy Pol­i­cy.

How do we record your data?

We col­lect your data as a result of your shar­ing of your data with us. This may, for instance be infor­ma­tion you enter into our con­tact form.

Oth­er data shall be record­ed by our IT sys­tems auto­mat­i­cal­ly or after you con­sent to its record­ing dur­ing your web­site vis­it. This data com­pris­es pri­mar­i­ly tech­ni­cal infor­ma­tion (e.g., web brows­er, oper­at­ing sys­tem, or time the site was accessed). This infor­ma­tion is record­ed auto­mat­i­cal­ly when you access this web­site.

What are the pur­pos­es we use your data for?

A por­tion of the infor­ma­tion is gen­er­at­ed to guar­an­tee the error free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user pat­terns.

What rights do you have as far as your infor­ma­tion is con­cerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents, and pur­pos­es of your archived per­son­al data at any time with­out hav­ing to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or erad­i­cat­ed. If you have con­sent­ed to data pro­cess­ing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­cess­ing. More­over, you have the right to demand that the pro­cess­ing of your data be restrict­ed under cer­tain cir­cum­stances. Fur­ther­more, you have the right to log a com­plaint with the com­pe­tent super­vis­ing agency.

Please do not hes­i­tate to con­tact us at any time if you have ques­tions about this or any oth­er data pro­tec­tion relat­ed issues.

Analy­sis tools and tools pro­vid­ed by third par­ties

There is a pos­si­bil­i­ty that your brows­ing pat­terns will be sta­tis­ti­cal­ly ana­lyzed when your vis­it this web­site. Such analy­ses are per­formed pri­mar­i­ly with what we refer to as analy­sis pro­grams.

For detailed infor­ma­tion about these analy­sis pro­grams please con­sult our Data Pro­tec­tion Dec­la­ra­tion below.

2. Host­ing

We are host­ing the con­tent of our web­site at the fol­low­ing provider:

IONOS

The provider is the IONOS SE, Elgen­dor­fer Str. 57, 56410 Montabaur, Ger­many (here­inafter referred to as: IONOS). When­ev­er you vis­it our web­site, IONOS records var­i­ous log­files along with your IP address­es. For details, please con­sult the data pri­va­cy pol­i­cy of IONOS: https://www.ionos.de/terms-gtc/terms-privacy.

We use IONOS on the basis of Art. 6 (1)(f) GDPR. Our com­pa­ny has a legit­i­mate inter­est in pre­sent­ing a web­site that is as depend­able as pos­si­ble. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

Data pro­cess­ing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

3. Gen­er­al infor­ma­tion and manda­to­ry infor­ma­tion

Data pro­tec­tion

The oper­a­tors of this web­site and its pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. Hence, we han­dle your per­son­al data as con­fi­den­tial infor­ma­tion and in com­pli­ance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this Data Pro­tec­tion Dec­la­ra­tion.

When­ev­er you use this web­site, a vari­ety of per­son­al infor­ma­tion will be col­lect­ed. Per­son­al data com­pris­es data that can be used to per­son­al­ly iden­ti­fy you. This Data Pro­tec­tion Dec­la­ra­tion explains which data we col­lect as well as the pur­pos­es we use this data for. It also explains how, and for which pur­pose the infor­ma­tion is col­lect­ed.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­tions) may be prone to secu­ri­ty gaps. It is not pos­si­ble to com­plete­ly pro­tect data against third-par­ty access.

Infor­ma­tion about the respon­si­ble par­ty (referred to as the “con­troller” in the GDPR)

The data pro­cess­ing con­troller on this web­site is:

Frauen­heldin­nen e.V.
Post­fach 100915
50449 Köln

E‑mail: kontakt@frauenheldinnen.de

The con­troller is the nat­ur­al per­son or legal enti­ty that sin­gle-hand­ed­ly or joint­ly with oth­ers makes deci­sions as to the pur­pos­es of and resources for the pro­cess­ing of per­son­al data (e.g., names, e‑mail address­es, etc.).

Stor­age dura­tion

Unless a more spe­cif­ic stor­age peri­od has been spec­i­fied in this pri­va­cy pol­i­cy, your per­son­al data will remain with us until the pur­pose for which it was col­lect­ed no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be delet­ed, unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these rea­sons cease to apply.

Gen­er­al infor­ma­tion on the legal basis for the data pro­cess­ing on this web­site

If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cat­e­gories of data are processed accord­ing to Art. 9 (1) DSGVO. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cess­ing is also based on Art. 49 (1)(a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or to the access to infor­ma­tion in your end device (e.g., via device fin­ger­print­ing), the data pro­cess­ing is addi­tion­al­ly based on § 25 (1) TTDSG. The con­sent can be revoked at any time. If your data is required for the ful­fill­ment of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is required for the ful­fill­ment of a legal oblig­a­tion, we process it on the basis of Art. 6(1)© GDPR. Fur­ther­more, the data pro­cess­ing may be car­ried out on the basis of our legit­i­mate inter­est accord­ing to Art. 6(1)(f) GDPR. Infor­ma­tion on the rel­e­vant legal basis in each indi­vid­ual case is pro­vid­ed in the fol­low­ing para­graphs of this pri­va­cy pol­i­cy.

Infor­ma­tion on the data trans­fer to third-par­ty coun­tries that are not secure under data pro­tec­tion law and the trans­fer to US com­pa­nies that are not DPF-cer­ti­fied

We use, among oth­er tech­nolo­gies, tools from com­pa­nies locat­ed in third-par­ty coun­tries that are not safe under data pro­tec­tion law, as well as US tools whose providers are not cer­ti­fied under the EU-US Data Pri­va­cy Frame­work (DPF). If these tools are enabled, your per­son­al data may be trans­ferred to and processed in these coun­tries. We would like you to note that no lev­el of data pro­tec­tion com­pa­ra­ble to that in the EU can be guar­an­teed in third coun­tries that are inse­cure in terms of data pro­tec­tion law.

We would like to point out that the US, as a secure third-par­ty coun­try, gen­er­al­ly has a lev­el of data pro­tec­tion com­pa­ra­ble to that of the EU. Data trans­fer to the US is there­fore per­mit­ted if the recip­i­ent is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF) or has appro­pri­ate addi­tion­al assur­ances. Infor­ma­tion on trans­fers to third-par­ty coun­tries, includ­ing the data recip­i­ents, can be found in this Pri­va­cy Pol­i­cy.

Recip­i­ents of per­son­al data

In the scope of our busi­ness activ­i­ties, we coop­er­ate with var­i­ous exter­nal par­ties. In some cas­es, this also requires the trans­fer of per­son­al data to these exter­nal par­ties. We only dis­close per­son­al data to exter­nal par­ties if this is required as part of the ful­fill­ment of a con­tract, if we are legal­ly oblig­at­ed to do so (e.g., dis­clo­sure of data to tax author­i­ties), if we have a legit­i­mate inter­est in the dis­clo­sure pur­suant to Art. 6 (1)(f) GDPR, or if anoth­er legal basis per­mits the dis­clo­sure of this data. When using proces­sors, we only dis­close per­son­al data of our cus­tomers on the basis of a valid con­tract on data pro­cess­ing. In the case of joint pro­cess­ing, a joint pro­cess­ing agree­ment is con­clud­ed.

Revo­ca­tion of your con­sent to the pro­cess­ing of data

A wide range of data pro­cess­ing trans­ac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already giv­en us. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revo­ca­tion.

Right to object to the col­lec­tion of data in spe­cial cas­es; right to object to direct adver­tis­ing (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a com­plaint with the com­pe­tent super­vi­so­ry agency

In the event of vio­la­tions of the GDPR, data sub­jects are enti­tled to log a com­plaint with a super­vi­so­ry agency, in par­tic­u­lar in the mem­ber state where they usu­al­ly main­tain their domi­cile, place of work or at the place where the alleged vio­la­tion occurred. The right to log a com­plaint is in effect regard­less of any oth­er admin­is­tra­tive or court pro­ceed­ings avail­able as legal recours­es.

Right to data porta­bil­i­ty

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you should demand the direct trans­fer of the data to anoth­er con­troller, this will be done only if it is tech­ni­cal­ly fea­si­ble.

Infor­ma­tion about, rec­ti­fi­ca­tion and erad­i­ca­tion of data

With­in the scope of the applic­a­ble statu­to­ry pro­vi­sions, you have the right to demand infor­ma­tion about your archived per­son­al data, their source and recip­i­ents as well as the pur­pose of the pro­cess­ing of your data at any time. You may also have a right to have your data rec­ti­fied or erad­i­cat­ed. If you have ques­tions about this sub­ject mat­ter or any oth­er ques­tions about per­son­al data, please do not hes­i­tate to con­tact us at any time.

Right to demand pro­cess­ing restric­tions

You have the right to demand the impo­si­tion of restric­tions as far as the pro­cess­ing of your per­son­al data is con­cerned. To do so, you may con­tact us at any time. The right to demand restric­tion of pro­cess­ing applies in the fol­low­ing cas­es:

• In the event that you should dis­pute the cor­rect­ness of your data archived by us, we will usu­al­ly need some time to ver­i­fy this claim. Dur­ing the time that this inves­ti­ga­tion is ongo­ing, you have the right to demand that we restrict the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data was/is con­duct­ed in an unlaw­ful man­ner, you have the option to demand the restric­tion of the pro­cess­ing of your data instead of demand­ing the erad­i­ca­tion of this data.
• If we do not need your per­son­al data any longer and you need it to exer­cise, defend or claim legal enti­tle­ments, you have the right to demand the restric­tion of the pro­cess­ing of your per­son­al data instead of its erad­i­ca­tion.
• If you have raised an objec­tion pur­suant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each oth­er. As long as it has not been deter­mined whose inter­ests pre­vail, you have the right to demand a restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, these data – with the excep­tion of their archiv­ing – may be processed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­tle­ments or to pro­tect the rights of oth­er nat­ur­al per­sons or legal enti­ties or for impor­tant pub­lic inter­est rea­sons cit­ed by the Euro­pean Union or a mem­ber state of the EU.

SSL and/or TLS encryp­tion

For secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as pur­chase orders or inquiries you sub­mit to us as the web­site oper­a­tor, this web­site uses either an SSL or a TLS encryp­tion pro­gram. You can rec­og­nize an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from “http://” to “https://” and also by the appear­ance of the lock icon in the brows­er line.

If the SSL or TLS encryp­tion is acti­vat­ed, data you trans­mit to us can­not be read by third par­ties.

Encrypt­ed pay­ment trans­ac­tions on this web­site

If you are under an oblig­a­tion to share your pay­ment infor­ma­tion (e.g. account num­ber if you give us the author­i­ty to deb­it your bank account) with us after you have entered into a fee-based con­tract with us, this infor­ma­tion is required to process pay­ments.

Pay­ment trans­ac­tions using com­mon modes of pay­ing (Visa/MasterCard, deb­it to your bank account) are processed exclu­sive­ly via encrypt­ed SSL or TLS con­nec­tions. You can rec­og­nize an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from “http://” to “https://” and also by the appear­ance of the lock icon in the brows­er line.

If the com­mu­ni­ca­tion with us is encrypt­ed, third par­ties will not be able to read the pay­ment infor­ma­tion you share with us.

4. Record­ing of data on this web­site

Cook­ies

Our web­sites and pages use what the indus­try refers to as “cook­ies.” Cook­ies are small data pack­ages that do not cause any dam­age to your device. They are either stored tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or they are per­ma­nent­ly archived on your device (per­ma­nent cook­ies). Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed once you ter­mi­nate your vis­it. Per­ma­nent cook­ies remain archived on your device until you active­ly delete them, or they are auto­mat­i­cal­ly erad­i­cat­ed by your web brows­er.

Cook­ies can be issued by us (first-par­ty cook­ies) or by third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices of third-par­ty com­pa­nies into web­sites (e.g., cook­ies for han­dling pay­ment ser­vices).

Cook­ies have a vari­ety of func­tions. Many cook­ies are tech­ni­cal­ly essen­tial since cer­tain web­site func­tions would not work in the absence of these cook­ies (e.g., the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies may be used to ana­lyze user behav­ior or for pro­mo­tion­al pur­pos­es.

Cook­ies, which are required for the per­for­mance of elec­tron­ic com­mu­ni­ca­tion trans­ac­tions, for the pro­vi­sion of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are nec­es­sary for the opti­miza­tion (required cook­ies) of the web­site (e.g., cook­ies that pro­vide mea­sur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fer­ent legal basis is cit­ed. The oper­a­tor of the web­site has a legit­i­mate inter­est in the stor­age of required cook­ies to ensure the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of the operator’s ser­vices. If your con­sent to the stor­age of the cook­ies and sim­i­lar recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing occurs exclu­sive­ly on the basis of the con­sent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this con­sent may be revoked at any time.

You have the option to set up your brows­er in such a man­ner that you will be noti­fied any time cook­ies are placed and to per­mit the accep­tance of cook­ies only in spe­cif­ic cas­es. You may also exclude the accep­tance of cook­ies in cer­tain cas­es or in gen­er­al or acti­vate the delete-func­tion for the auto­mat­ic erad­i­ca­tion of cook­ies when the brows­er clos­es. If cook­ies are deac­ti­vat­ed, the func­tions of this web­site may be lim­it­ed.

Which cook­ies and ser­vices are used on this web­site can be found in this pri­va­cy pol­i­cy.

Con­sent with Com­pli­anz

Our web­site uses Complianz’s con­sent tech­nol­o­gy to obtain your con­sent to store cer­tain cook­ies on your device or for the use of cer­tain tech­nolo­gies and to doc­u­ment this con­sent in a man­ner com­pli­ant with data pro­tec­tion reg­u­la­tions. The provider of this tech­nol­o­gy is Com­pli­anz B.V., Kalmar­weg 14–5, 9723 JG Gronin­gen, the Nether­lands (here­inafter “Com­pli­anz”).

Com­pli­anz is host­ed on our servers, so no con­nec­tion to the servers of the provider of Com­pli­anz is estab­lished. Com­pli­anz stores a cook­ie in your brows­er in order to be able to allo­cate the con­sents grant­ed to you or their revo­ca­tion. The data col­lect­ed in this way is stored until you request us to delete it, delete the Com­pli­anz cook­ie your­self or until the pur­pose for stor­ing the data no longer applies. Manda­to­ry legal stor­age oblig­a­tions remain unaf­fect­ed.

Com­pli­anz serves to obtain the legal­ly required con­sent for the use of cook­ies. The legal basis for this is Art. 6(1)© GDPR.

Con­tact form

If you sub­mit inquiries to us via our con­tact form, the infor­ma­tion pro­vid­ed in the con­tact form as well as any con­tact infor­ma­tion pro­vid­ed there­in will be stored by us in order to han­dle your inquiry and in the event that we have fur­ther ques­tions. We will not share this infor­ma­tion with­out your con­sent.

The pro­cess­ing of these data is based on Art. 6(1)(b) GDPR, if your request is relat­ed to the exe­cu­tion of a con­tract or if it is nec­es­sary to car­ry out pre-con­trac­tu­al mea­sures. In all oth­er cas­es the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been request­ed; the con­sent can be revoked at any time.

The infor­ma­tion you have entered into the con­tact form shall remain with us until you ask us to erad­i­cate the data, revoke your con­sent to the archiv­ing of data or if the pur­pose for which the infor­ma­tion is being archived no longer exists (e.g., after we have con­clud­ed our response to your inquiry). This shall be with­out prej­u­dice to any manda­to­ry legal pro­vi­sions, in par­tic­u­lar reten­tion peri­ods.

Request by e‑mail, tele­phone, or fax

If you con­tact us by e‑mail, tele­phone or fax, your request, includ­ing all result­ing per­son­al data (name, request) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass these data on with­out your con­sent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is relat­ed to the ful­fill­ment of a con­tract or is required for the per­for­mance of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the data are processed on the basis of our legit­i­mate inter­est in the effec­tive han­dling of inquiries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtained; the con­sent can be revoked at any time.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age laps­es (e.g. after com­ple­tion of your request). Manda­to­ry statu­to­ry pro­vi­sions — in par­tic­u­lar statu­to­ry reten­tion peri­ods — remain unaf­fect­ed.

Reg­is­tra­tion on this web­site

You have the option to reg­is­ter on this web­site to be able to use addi­tion­al web­site func­tions. We shall use the data you enter only for the pur­pose of using the respec­tive offer or ser­vice you have reg­is­tered for. The required infor­ma­tion we request at the time of reg­is­tra­tion must be entered in full. Oth­er­wise, we shall reject the reg­is­tra­tion.

To noti­fy you of any impor­tant changes to the scope of our port­fo­lio or in the event of tech­ni­cal mod­i­fi­ca­tions, we shall use the e‑mail address pro­vid­ed dur­ing the reg­is­tra­tion process.

We shall process the data entered dur­ing the reg­is­tra­tion process on the basis of your con­sent (Art. 6(1)(a) GDPR).

The data record­ed dur­ing the reg­is­tra­tion process shall be stored by us as long as you are reg­is­tered on this web­site. Sub­se­quent­ly, such data shall be delet­ed. This shall be with­out prej­u­dice to manda­to­ry statu­to­ry reten­tion oblig­a­tions.

5. Social media

Social media ele­ments with Shar­iff

We do use ele­ments of social media net­works on this web­site and its pages (e.g. Face­book, X, Insta­gram, Pin­ter­est, XING, LinkedIn, Tum­blr).

As a rule, you will be able to rec­og­nize these social media ele­ments because of the respec­tive social media logos that appear. To war­rant the pro­tec­tion of data on this web­site, we use these ele­ments only in com­bi­na­tion with the so-called “Shar­iff” solu­tion. This appli­ca­tion pre­vents the social media ele­ments that have been inte­grat­ed into this web­site from trans­fer­ring per­son­al data to the respec­tive provider as soon as you enter our web­site.

A direct con­nec­tion to the provider’s serv­er shall not be estab­lished until you have acti­vat­ed the respec­tive social media ele­ment by click­ing on the affil­i­at­ed but­ton (which indi­cates your con­sent). As soon as you acti­vate the social media ele­ment, the respec­tive provider receives the infor­ma­tion that you have vis­it­ed this web­site with your IP address. If you are simul­ta­ne­ous­ly logged into your respec­tive social media account (e.g. Face­book), the respec­tive provider will be able to allo­cate your vis­it to this web­site to your user account.

The acti­va­tion of the plug-in con­sti­tutes a dec­la­ra­tion of con­sent as defined in Art. 6(1)(a) GDPR and und § 25 (1) TTDSG. You have the option to revoke this con­sent at any time, which shall affect all future trans­ac­tions.

This ser­vice is used to obtain the con­sent to the use of cer­tain tech­nolo­gies required by law. The legal basis for this is Art. 6(1)© GDPR.

6. Analy­sis tools and adver­tis­ing

Mato­mo

This web­site uses the open-source web analy­sis ser­vice Mato­mo.

Through Mato­mo, we are able to col­lect and ana­lyze data on the use of our web­site-by-web­site vis­i­tors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addi­tion, we col­lect var­i­ous log files (e.g. IP address, refer­rer, brows­er, and oper­at­ing sys­tem used) and can mea­sure whether our web­site vis­i­tors per­form cer­tain actions (e.g. clicks, pur­chas­es, etc.).

The use of this analy­sis tool is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the analy­sis of user pat­terns, in order to opti­mize the operator’s web offer­ings and adver­tis­ing. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

IP anonymiza­tion

For analy­sis with Mato­mo we use IP anonymiza­tion. Your IP address is short­ened before the analy­sis, so that it is no longer clear­ly assign­a­ble to you.

Analy­sis with­out cook­ies

We have con­fig­ured Mato­mo in such a way that Mato­mo will not store cook­ies in your brows­er.

Host­ing

We host Mato­mo exclu­sive­ly on our own servers so that all analy­sis data remains with us and is not passed on.

IONOS Web Ana­lyt­ics

This web­site uses IONOS Web­An­a­lyt­ics analy­sis ser­vices. The provider of these ser­vices is 1&1 IONOS SE, Elgen­dor­fer Straße 57, 56410 Montabaur, Ger­many. In con­junc­tion with the per­for­mance of analy­ses by IONOS, it is pos­si­ble to e.g., ana­lyze the num­ber of vis­i­tors and their behav­ior pat­terns dur­ing vis­its (e.g., num­ber of pages accessed, dura­tion of their vis­its to the web­site, per­cent­age of abort­ed vis­its), vis­i­tor ori­gins (i.e., from which site does the vis­i­tor arrive at our site), vis­i­tor loca­tions as well as tech­ni­cal data (brows­er and ses­sion of oper­at­ing sys­tem used). For these pur­pos­es, IONOS archives in par­tic­u­lar the fol­low­ing data:

• Refer­rer (pre­vi­ous­ly vis­it­ed web­site)
• Accessed page on the web­site or file
• Brows­er type and brows­er ver­sion
• Used oper­at­ing sys­tem
• Type of device used
• Web­site access time
• Anonymized IP address (used only to deter­mine the access loca­tion)

Accord­ing to IONOS, the data record­ed are com­plete­ly anonymized so they can­not be tracked back to indi­vid­u­als. IONOS Web­An­a­lyt­ics does not archive cook­ies.

The data are stored and ana­lyzed pur­suant to Art. 6(1)(f) GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in the sta­tis­ti­cal analy­sis of user pat­terns to opti­mize both, the operator’s web pre­sen­ta­tion as well as the operator’s pro­mo­tion­al activ­i­ties. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

For more infor­ma­tion affil­i­at­ed with the record­ing and pro­cess­ing of data by IONOS Web­An­a­lyt­ics, please click on the fol­low­ing link of the data pol­i­cy dec­la­ra­tion: https://www.ionos.de/terms-gtc/datenschutzerklaerung/.

Data pro­cess­ing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

7. Newslet­ter

Newslet­ter data

If you would like to receive the newslet­ter offered on the web­site, we require an e‑mail address from you as well as infor­ma­tion that allows us to ver­i­fy that you are the own­er of the e‑mail address pro­vid­ed and that you agree to receive the newslet­ter. Fur­ther data is not col­lect­ed or only on a vol­un­tary basis. For the han­dling of the newslet­ter, we use newslet­ter ser­vice providers, which are described below.

GetRe­sponse

This web­site uses GetRe­sponse for the send­ing of newslet­ters. The provider is the GetRe­sponse Sp. z o.o., which main­tains its reg­is­tered busi­ness domi­cile in Gdan­sk, Poland ul. Arkon­s­ka 6, A3, 80–387 Gdan­sk, Poland, web­site: https://www.getresponse.de (here­inafter referred to as “GetRe­sponse”).

GetRe­sponse ser­vices can, among oth­er things, be used to orga­nize and ana­lyze the send­ing of newslet­ters. The data you enter for the pur­pose of sub­scrib­ing to the newslet­ter are archived on GetResponse’s servers. GetRe­sponse uses servers in the US, so your newslet­ter data may be trans­ferred to the US. The US is con­sid­ered a non-secure third coun­try under data pro­tec­tion law.

Data analy­sis by GetRe­sponse

Send­ing newslet­ters with GetRe­sponse enables us to ana­lyze the user pat­terns of our newslet­ter sub­scribers. Among oth­er things, we can ana­lyze how many recip­i­ents have opened their newslet­ter mes­sages and how often they have clicked which link. With the assis­tance of a tool called Con­ver­sion Track­ing, it is also pos­si­ble to deter­mine whether, after click­ing on a link in a newslet­ter, the sub­scriber car­ries out a pre­de­fined action (e.g., pur­chase of a prod­uct, shar­ing of infor­ma­tion on social net­works, can­cel­la­tion of the sub­scrip­tion). More­over, we can also track when a newslet­ter mes­sage was opened. This allows us to deliv­er newslet­ter e‑mails at times the newslet­ter sub­scriber is like­ly going to be the most active. We can even take the time zone the sub­scriber lives in into account. GetRe­sponse also offers us the option to divide newslet­ter recip­i­ents into groups based on their inter­ests. This allows us to send our newslet­ter sub­scribers con­tent that is the most com­pat­i­ble with their respec­tive inter­ests.

For more infor­ma­tion about GetResponse’s fea­tures and ser­vices, please vis­it: https://www.getresponse.de/email-marketing/funktionen/e‑mail-marketing.

Legal basis

The data is processed based on your con­sent (Art. 6(1)(a) GDPR). You may revoke any con­sent you have giv­en at any time by unsub­scrib­ing from the newslet­ter. This shall be with­out prej­u­dice to the law­ful­ness of any data pro­cess­ing trans­ac­tions that have tak­en place pri­or to your revo­ca­tion.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.getresponse.com/de/legal/standard-contractual-clauses.

Stor­age peri­od

The data deposit­ed with us for the pur­pose of sub­scrib­ing to the newslet­ter will be stored by us until you unsub­scribe from the newslet­ter or the newslet­ter ser­vice provider and delet­ed from the newslet­ter dis­tri­b­u­tion list after you unsub­scribe from the newslet­ter. Data stored for oth­er pur­pos­es with us remain unaf­fect­ed.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your e‑mail address may be stored by us or the newslet­ter ser­vice provider in a black­list, if such action is nec­es­sary to pre­vent future mail­ings. The data from the black­list is used only for this pur­pose and not merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6(1)(f) GDPR). The stor­age in the black­list is indef­i­nite. You may object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

For more details, please con­sult the Data Pro­tec­tion Reg­u­la­tions of GetRe­sponse at: https://www.getresponse.de/email-marketing/legal/datenschutz.html.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000CkBeAAK&status=Active

Data pro­cess­ing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

8. Plug-ins and Tools

YouTube with expand­ed data pro­tec­tion inte­gra­tion

Our web­site embeds videos of the web­site YouTube. The web­site oper­a­tor is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

We use YouTube in the expand­ed data pro­tec­tion mode. Accord­ing to YouTube, this mode ensures that YouTube does not store any infor­ma­tion about vis­i­tors to this web­site before they watch the video. Nev­er­the­less, this does not nec­es­sar­i­ly mean that the shar­ing of data with YouTube part­ners can be ruled out as a result of the expand­ed data pro­tec­tion mode. For instance, regard­less of whether you are watch­ing a video, YouTube will always estab­lish a con­nec­tion with the Google Mar­ket­ing Net­work.

As soon as you start to play a YouTube video on this web­site, a con­nec­tion to YouTube’s servers will be estab­lished. As a result, the YouTube serv­er will be noti­fied, which of our pages you have vis­it­ed. If you are logged into your YouTube account while you vis­it our site, you enable YouTube to direct­ly allo­cate your brows­ing pat­terns to your per­son­al pro­file. You have the option to pre­vent this by log­ging out of your YouTube account.

Fur­ther­more, after you have start­ed to play a video, YouTube will be able to place var­i­ous cook­ies on your device or com­pa­ra­ble tech­nolo­gies for recog­ni­tion (e.g. device fin­ger­print­ing). In this way YouTube will be able to obtain infor­ma­tion about this website’s vis­i­tors. Among oth­er things, this infor­ma­tion will be used to gen­er­ate video sta­tis­tics with the aim of improv­ing the user friend­li­ness of the site and to pre­vent attempts to com­mit fraud.

Under cer­tain cir­cum­stances, addi­tion­al data pro­cess­ing trans­ac­tions may be trig­gered after you have start­ed to play a YouTube video, which are beyond our con­trol.

The use of YouTube is based on our inter­est in pre­sent­ing our online con­tent in an appeal­ing man­ner. Pur­suant to Art. 6(1)(f) GDPR, this is a legit­i­mate inter­est. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

For more infor­ma­tion on how YouTube han­dles user data, please con­sult the YouTube Data Pri­va­cy Pol­i­cy under: https://policies.google.com/privacy?hl=en.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Fonts (local embed­ding)

This web­site uses so-called Google Fonts pro­vid­ed by Google to ensure the uni­form use of fonts on this site. These Google fonts are local­ly installed so that a con­nec­tion to Google’s servers will not be estab­lished in con­junc­tion with this appli­ca­tion.

For more infor­ma­tion on Google Fonts, please fol­low this link: https://developers.google.com/fonts/faq and con­sult Google’s Data Pri­va­cy Dec­la­ra­tion under: https://policies.google.com/privacy?hl=en.

Font Awe­some (local embed­ding)

This web­site uses Font Awe­some to ensure the uni­form use of fonts on this site. Font Awe­some is local­ly installed so that a con­nec­tion to Fonti­cons, Inc.’s servers will not be estab­lished in con­junc­tion with this appli­ca­tion.

For more infor­ma­tion on Font Awe­some, please and con­sult the Data Pri­va­cy Dec­la­ra­tion for Font Awe­some under: https://fontawesome.com/privacy.

CleanTalk

This web­site uses the anti-spam plu­g­ins of CleanTalk. The provider is CleanTalk Inc, 711 S Car­son Street, Suite 4, Car­son City, NV, 89701, USA (here­inafter referred to as “CleanTalk”).

The pur­pose of using CleanTalk is to pro­tect our web­site against spam activ­i­ties (such as unso­licit­ed ads, mes­sages, or com­ments). To achieve this, CleanTalk records a vari­ety of per­son­al data, such as the IP address, email address, nick­name of the senders of mes­sages, infor­ma­tion about the tech­nol­o­gy of JavaScript in the sender’s brows­er and any text copy entered.

This infor­ma­tion will be trans­ferred to a CleanTalk serv­er in the EU and will be archived there.

For secu­ri­ty rea­sons and to fend off spam, your data will be processed by the CleanTalk Cloud Ser­vice and will be archived for a max­i­mum of 31 days in log files. Once this peri­od ends, the data will be delet­ed entire­ly.

Our com­pa­ny uses CleanTalk on the basis of Art. 6 (1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in pro­tect­ing the operator’s web­site from spam activ­i­ties as effec­tive­ly as pos­si­ble. If per­ti­nent con­sent has been request­ed from you, pro­cess­ing will occur exclu­sive­ly on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG if the con­sent includes the archiv­ing of cook­ies or access to infor­ma­tion the user’s device as defined in the TTDSG. Such con­sent may be revoked at any time.

The data trans­fer to the Unit­ed States is based on the stan­dard con­tract claus­es of the EU Com­mis­sions. For details, please vis­it: https://cleantalk.org/my/session?back_url=profile#scc_agreement.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt00000008SzYAAU&status=Active

Data pro­cess­ing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

iThemes Secu­ri­ty

We have inte­grat­ed iThemes Secu­ri­ty into this web­site. The provider is iThemes Media LLC, 1720 South Kel­ly Avenue Edmond, OK 73013, USA (here­inafter referred to as “iThemes Secu­ri­ty”).

iThemes Secu­ri­ty pro­tects our web­site against unde­sir­able access or mali­cious cyber-attacks. For this pur­pose, iThemes Secu­ri­ty records, among oth­er things, your IP address, the time, and source of login attempts and log files (e.g., the uti­lized brows­er). iThemes Secu­ri­ty is installed local­ly on our servers.

iThemes Secu­ri­ty trans­mits IP address­es of recur­ring attack­ers to a cen­tral data­base of iThemes in the US (Net­work Brute Force Pro­tec­tion) to pre­vent such attacks in the future.

The use of iThemes Secu­ri­ty is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in pro­tect­ing its web­site opti­mal­ly against cyber-attacks. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

9. eCom­merce and pay­ment ser­vice providers

Pro­cess­ing of Cus­tomer and Con­tract Data

We col­lect, process, and use per­son­al cus­tomer and con­tract data for the estab­lish­ment, con­tent arrange­ment and mod­i­fi­ca­tion of our con­trac­tu­al rela­tion­ships. Data with per­son­al ref­er­ences to the use of this web­site (usage data) will be col­lect­ed, processed, and used only if this is nec­es­sary to enable the user to use our ser­vices or required for billing pur­pos­es. The legal basis for these process­es is Art. 6(1)(b) GDPR.

The col­lect­ed cus­tomer data shall be delet­ed upon com­ple­tion of the order or ter­mi­na­tion of the busi­ness rela­tion­ship and upon expi­ra­tion of any exist­ing statu­to­ry archiv­ing peri­ods. This shall be with­out prej­u­dice to any statu­to­ry archiv­ing peri­ods.

Data trans­fer upon clos­ing of con­tracts for online stores, retail­ers, and the ship­ment of mer­chan­dise

When­ev­er you order mer­chan­dise from us, we will share your per­son­al data with the trans­porta­tion com­pa­ny entrust­ed with the deliv­ery as well as the pay­ment ser­vice com­mis­sioned to han­dle the pay­ment trans­ac­tions. Only the data these respec­tive ser­vice providers require to meet their oblig­a­tions will be shared. The legal basis for this shar­ing is Art. 6 (1)(b) GDPR, which per­mits the pro­cess­ing of data for the ful­fill­ment of con­trac­tu­al or pre-con­trac­tu­al oblig­a­tions. If you give us your respec­tive con­sent pur­suant to Art. 6 (1)(a) GDPR, we will share your email address with the trans­porta­tion com­pa­ny entrust­ed with the deliv­ery so that this com­pa­ny can noti­fy you on the ship­ping sta­tus for your order via email. You have the option to revoke your con­sent at any time.

Data trans­fer upon clos­ing of con­tracts for ser­vices and dig­i­tal con­tent

We share per­son­al data with third par­ties only if this is nec­es­sary in con­junc­tion with the han­dling of the con­tract; for instance, with the finan­cial insti­tu­tion tasked with the pro­cess­ing of pay­ments.

Any fur­ther trans­fer of data shall not occur or shall only occur if you have express­ly con­sent­ed to the trans­fer. Any shar­ing of your data with third par­ties in the absence of your express con­sent, for instance for adver­tis­ing pur­pos­es, shall not occur.

The basis for the pro­cess­ing of data is Art. 6(1)(b) GDPR, which per­mits the pro­cess­ing of data for the ful­fil­ment of a con­tract or for pre-con­trac­tu­al actions.

Pay­ment ser­vices

We inte­grate pay­ment ser­vices of third-par­ty com­pa­nies on our web­site. When you make a pur­chase from us, your pay­ment data (e.g. name, pay­ment amount, bank account details, cred­it card num­ber) are processed by the pay­ment ser­vice provider for the pur­pose of pay­ment pro­cess­ing. For these trans­ac­tions, the respec­tive con­trac­tu­al and data pro­tec­tion pro­vi­sions of the respec­tive providers apply. The use of the pay­ment ser­vice providers is based on Art. 6(1)(b) GDPR (con­tract pro­cess­ing) and in the inter­est of a smooth, con­ve­nient, and secure pay­ment trans­ac­tion (Art. 6(1)(f) GDPR). Inso­far as your con­sent is request­ed for cer­tain actions, Art. 6(1)(a) GDPR is the legal basis for data pro­cess­ing; con­sent may be revoked at any time for the future.

We use the fol­low­ing pay­ment ser­vices / pay­ment ser­vice providers with­in the scope of this web­site:

Pay­Pal

The provider of this pay­ment ser­vice is Pay­Pal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boule­vard Roy­al, L‑2449 Lux­em­bourg (here­inafter “Pay­Pal”).

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details can be found in PayPal’s pri­va­cy pol­i­cy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Apple Pay

The pay­ment ser­vice provider is Apple Inc, Infi­nite Loop, Cuper­ti­no, CA 95014, USA. The Apple pri­va­cy pol­i­cy can be found at: https://www.apple.com/legal/privacy/de-ww/.

Google Pay

The provider is Google Ire­land Lim­it­ed, Gor­don House, Bar­row Street, Dublin 4, Ire­land. You can find Google’s pri­va­cy pol­i­cy here: https://policies.google.com/privacy.

Stripe

The provider for cus­tomers with­in the EU is Stripe Pay­ments Europe, Ltd,1 Grand Canal Street Low­er, Grand Canal Dock, Dublin, Ire­land (here­inafter “Stripe”).

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.

Details can be found in Stripe’s Pri­va­cy Pol­i­cy at the fol­low­ing link: https://stripe.com/de/privacy.