Skip to content
Contact us

Privacy Policy

last updated on 08-Jan 2024

Table of Contents

Introduction and Overview
Scope
Legal Basis
Contact Information of the Responsible Party
Duration of Storage
Rights According to the General Data Protection Regulation
Security of Data Processing
Communication
Cookies
Web Hosting Introduction
Website Builder Systems Introduction
Web Analytics Introduction
Email Marketing Introduction
Blogs and Publishing Media Introduction
Conclusion

Introduction and Overview We have written this privacy policy (version 08.01.2024-312694542) to explain to you in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (hereinafter referred to as "data") we, as the responsible party - and the processors commissioned by us (e.g., providers) - process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral. In short: We inform you comprehensively about data that we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, on the other hand, aims to describe the most important things as simply and transparently as possible. Where beneficial for transparency, technical terms are explained in a reader-friendly way, links to further information are provided, and graphics are used. We thereby inform in clear and simple language that we only process personal data in the context of our business activities when there is a corresponding legal basis. This is certainly not possible when giving as brief, unclear, and technical explanations as is standard on the internet when it comes to privacy. I hope you find the following explanations interesting and informative, and perhaps there is information here that you did not already know. If you still have questions, we ask you to follow the links provided below or in the imprint, view further information on third-party sites, or simply contact us. Our contact information can, of course, also be found in the imprint.

Scope This privacy policy applies to all personal data processed by us, both in the context of providing our services and in particular on our websites, in mobile applications, and within external online presences, such as our social media profiles (collectively referred to as "online services").

Legal Basis In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, which allow us to process personal data. As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can, of course, read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex%3A32016R0679.

We process your data only if at least one of the following conditions applies:

Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be storing your data from a contact form. Contract (Article 6(1)(b) GDPR): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we enter into a purchase contract with you, we need personal information in advance. Legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to retain invoices for accounting purposes. These usually contain personal data. Legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests, which do not restrict your fundamental rights, we reserve the right to process personal data. We need to process certain data to operate our website securely and efficiently. This processing is, therefore, a legitimate interest. Further conditions such as the performance of tasks carried out in the public interest or in the exercise of official authority and the protection of vital interests do not typically apply to us. If such a legal basis should be relevant, it will be indicated in the appropriate place.

In addition to EU regulations, national laws also apply:

In Austria, this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), abbreviated DSG. In Germany, the Federal Data Protection Act, abbreviated BDSG, applies. If further regional or national laws are applicable, we will inform you in the following sections.

Contact Information of the Responsible Party If you have any questions about data protection or the processing of personal data, you can find the contact details of the responsible person or office below: Theuss Consulting Nicola Theuss Isareckstr. 28, 81673 Munich

Email: info@theuss-consulting.com
Legal Notice: https://www.theuss-consulting.com/legal-notice

Duration of Storage Our general criterion is that we store personal data only as long as it is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obligated to store certain data even after the original purpose has ceased, for example, for accounting purposes.

If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and to the extent that there is no obligation to store it.

We will provide you with more specific information about the duration of the respective data processing further down, if we have further information on this.

Rights According to the General Data Protection Regulation According to Articles 13 and 14 of the GDPR, we inform you about the following rights that you have to ensure fair and transparent processing of data:

According to Article 15 of the GDPR, you have the right to know whether we process data from you. If this is the case, you have the right to receive a copy of the data and to learn the following information: the purpose for which we process the data; the categories, i.e., the types of data that are processed; who receives this data and if the data is transferred to third countries, how security is guaranteed; how long the data is stored; the existence of the right to rectification, deletion, or restriction of processing and the right to object to processing; that you can complain to a supervisory authority (links to these authorities can be found further below); the origin of the data if we did not collect it from you; whether profiling takes place, i.e., whether data is automatically evaluated to arrive at a personal profile of you. According to Article 16 of the GDPR, you have the right to rectification of data, which means that we must correct data if you find errors. According to Article 17 of the GDPR, you have the right to erasure (“right to be forgotten”), which means that you can demand the deletion of your data. According to Article 18 of the GDPR, you have the right to restrict processing, which means that we may only store the data but not use it further. According to Article 20 of the GDPR, you have the right to data portability, which means that we will provide you with your data in a common format upon request. According to Article 21 of the GDPR, you have the right to object, which leads to a change in processing after enforcement. If the processing of your data is based on Article 6(1)(e) (public interest, exercise of public authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection. If data is used for direct advertising, you can object to this type of data processing at any time. We may not use your data for direct marketing after that. If data is used for profiling, you can object to this type of data processing at any time. We may not use your data for profiling after that. Under certain circumstances, you have the right according to Article 22 of the GDPR not to be subject to a decision based solely on automated processing (including profiling). According to Article 77 of the GDPR, you have the right to complain. This means that you can always contact the data protection authority if you believe that the processing of personal data concerning you violates the GDPR. In short: You have rights – do not hesitate to contact the responsible party listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the Data Protection Authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Bavarian Data Protection Authority State Commissioner for Data Protection: Prof. Dr. Thomas Petri Address: Wagmüllerstr. 18, 80538 Munich Phone: 089/21 26 72-0 Email: poststelle@datenschutz-bayern.de Website: https://www.datenschutz-bayern.de/

Security of Data Processing To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. This makes it as difficult as possible for third parties to infer personal information from our data.

Article 25 of the GDPR speaks of "data protection by design and by default" and means that one should always think of security when it comes to software (e.g., forms) and hardware (e.g., access to the server room) and take appropriate measures. Below, we will address specific measures if necessary.

TLS encryption with https
TLS, encryption, and https may sound very technical, and they are. We use HTTPS (Hypertext Transfer Protocol Secure stands for "secure hypertext transfer protocol") to transmit data securely over the internet.
This means that the complete transmission of all data from your browser to our web server is secured – no one can "listen in".
Thus, we have introduced an additional layer of security and meet the data protection requirements through technology design (Article 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure internet data transmission, we can ensure the protection of confidential data.
You can recognize the use of this data transmission security by the small padlock symbol
on the top left in the browser, to the left of the internet address (e.g., examplepage.com) and the use of the https scheme (instead of http) as part of our internet address.
If you want to know more about encryption, we recommend the Google search for "Hypertext Transfer Protocol Secure wiki" to get good links to further information.

Communication
Communication Summary
👥 Affected: Everyone who communicates with us by phone, email, or online form
📓 Processed Data: e.g., phone number, name, email address, form data entered. More details can be found for each contact type used
🤝 Purpose: Processing communication with customers, business partners, etc.
📅 Storage Duration: Duration of the business case and legal requirements
⚖️ Legal Bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (legitimate interests)

When you contact us and communicate by phone, email, or online form, personal data may be processed.
The data is processed for the handling and processing of your question and the related business transaction. The data is stored for as long as it is necessary or as prescribed by law.

Affected Persons
All those who seek contact with us through the communication channels we provide are affected.

Phone
When you call us, the call data is pseudonymized and stored on the respective end device and at the telecommunication provider used. In addition, data such as name and phone number may be sent by email afterward and stored for inquiry response. The data is deleted as soon as the business case is closed and legal requirements allow.

Email
When you communicate with us via email, data may be stored on the respective end device (computer, laptop, smartphone,...) and there is data storage on the email server. The data is deleted as soon as the business case is closed and legal requirements allow.

Online Forms
When you communicate with us using an online form, data is stored on our web server and may be forwarded to an email address of ours. The data is deleted as soon as the business case is closed and legal requirements allow.

Legal Bases
Data processing is based on the following legal bases:
• Art. 6(1)(a) GDPR (Consent): You give us consent to store your data and continue to use it for purposes related to the business case;
• Art. 6(1)(b) GDPR (Contract): There is a need to fulfill a contract with you or a processor such as the phone provider, or we need to process the data for pre-contractual activities, such as preparing an offer;
• Art. 6(1)(f) GDPR (Legitimate Interests): We want to operate customer inquiries and business communication in a professional framework. Certain technical facilities such as email programs, exchange servers, and mobile operators are necessary to operate communication efficiently.

Cookies
Cookies Summary
👥 Affected: Visitors to the website
🤝 Purpose: Depending on the particular cookie. More details can be found below or from the software manufacturer that sets the cookie.
📓 Processed Data: Depending on the cookie used. More details can be found below or from the software manufacturer that sets the cookie.
📅 Storage Duration: Varies from cookie to cookie, ranging from hours to years
⚖️ Legal Bases: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What are cookies?
Our website uses HTTP cookies to store user-specific data.
In the following, we explain what cookies are and why they are used so that you can better understand the following privacy policy.

Whenever you surf the internet, you are using a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing is clear: cookies are genuinely useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other uses. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically placed in the cookie folder, the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must be specified.
Cookies store certain user data about you, such as language or personal page settings. When you revisit our page, your browser sends the "user-related" information back to our page. Thanks to the cookies, our website knows who you are and offers you your usual default settings. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser, such as Chrome, and the web server. The web browser requests a website and receives a cookie from the server, which the browser uses again when another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be evaluated individually since each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a couple of years. Cookies are no software programs and do not contain viruses, trojans, or other "pests". Cookies also cannot access information on your PC.
For example, cookie data might look like this:
Name: _ga
Value: GA1.2.1326744211.152312694542-9
Purpose: Differentiation of website visitors
Expiration Date: after 2 years

These minimum sizes should be supported by a browser:
• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total

What types of cookies are there?
The question of which cookies we specifically use depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the various types of HTTP cookies.

There are 4 types of cookies: Essential Cookies These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user puts a product into the shopping cart, then continues to surf on other pages and later goes to the checkout. Thus, the shopping cart is not deleted even if the user closes his browser window. Functional Cookies These cookies collect info about the user's behavior and whether the user gets any error messages. Also, these cookies measure the loading time and the behavior of the website on different browsers. Target-Oriented Cookies These cookies ensure better usability. For example, entered locations, font sizes, or form data are stored. Advertising Cookies These cookies are also called targeting cookies. They serve to deliver individually adapted advertising to the user. This can be very practical, but also very annoying. Usually, you will be asked for your cookie preference on your first visit to a website. And of course, this decision is also stored in a cookie.

If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Purpose of processing via cookies The purpose ultimately depends on the respective cookie. More details can be found below or from the software manufacturer that sets the cookie. What data is processed? Cookies are little helpers for many different tasks. Which data is stored in cookies cannot be generalized, but we will inform you about the processed or stored data within the scope of the following privacy policy.

Duration of cookie storage The storage duration depends on the respective cookie and is specified further below. Some cookies are deleted after less than one hour, others can be stored on a computer for several years. You also have influence on the storage duration. You can manually delete all cookies at any time via your browser settings (see also "Right to object"). Furthermore, cookies based on consent are deleted at the latest after the consent is revoked, whereby the legality of the storage remains unaffected until then.

Right to object – how can I delete cookies?
How and whether you want to use cookies is up to you. Regardless of which service or website the cookies come from, you always have the option to delete cookies, only partially allow them or disable them. For example, you can block third-party cookies but allow all other cookies.
If you want to find out which cookies have been stored in your browser when you change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome
Safari: Managing cookies and website data with Safari
Firefox: Deleting cookies to remove data that websites have placed on your computer
Internet Explorer: Delete and manage cookies
Microsoft Edge: Deleting and managing cookies
If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. This way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google with the search term "Delete Chrome cookies" or "Disable Chrome cookies" in the case of a Chrome browser.

Legal basis Since 2009, there have been the so-called "cookie guidelines". It states that storing cookies requires your consent (Article 6(1)(a) GDPR). However, there are still very different reactions to these guidelines within the EU countries. In Austria, however, the implementation of this directive was done in § 96 Abs. 3 of the Telecommunications Act (TKG). In Germany, the cookie guidelines were not implemented as national law. Instead, the implementation of this directive was largely done in § 15 Abs.3 of the Telemedia Act (TMG). For strictly necessary cookies, even if there is no consent, there are legitimate interests (Article 6(1)(f) GDPR), which are mostly of an economic nature in most cases. We want to offer visitors to the website a pleasant user experience, and for this, certain cookies are often absolutely necessary. As far as non-essential cookies are used, this only happens in the case of your consent. The legal basis is thus Art. 6(1)(a) GDPR. In the following sections, you will be informed in more detail about the use of cookies, provided that software used employs cookies.

Webhosting Introduction Webhosting Summary 👥 Affected: Visitors to the website 🤝 Purpose: Professional hosting of the website and safeguarding of operations 📓 Processed Data: IP address, time of the website visit, used browser, and other data. More details can be found below or from the respective web hosting provider. 📅 Storage Duration: Depending on the respective provider, but usually 2 weeks ⚖️ Legal Bases: Art. 6(1)(f) GDPR (Legitimate Interests)

What is web hosting? When you visit websites today, certain information – including personal data – is automatically created and stored, just as on this website. This data should be processed as sparingly as possible and only with justification. By website, we mean the entirety of all web pages on a domain, i.e., everything from the homepage (homepage) to the very last subpage (like this one). By domain, we mean, for example, example.de or sampleexample.com. If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We say browser or web browser shortly. To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complicated and expensive task, which is why it is usually taken over by professional providers, the providers. They offer web hosting and thus ensure reliable and error-free storage of website data. A whole lot of technical terms, but please stay tuned, it gets even better! When connecting the browser on your computer (desktop, laptop, tablet, or smartphone) and during data transfer to and from the web server, personal data may be processed. On the one hand, your computer stores data; on the other hand, the web server must also store data for some time to ensure proper operation. A picture is worth a thousand words, so the following graphic illustrates the interaction between browser, the Internet, and the hosting provider.

Why do we process personal data? The purposes of data processing are: 1. Professional hosting of the website and safeguarding of operations 2. To maintain operational and IT security 3. Anonymous evaluation of access behavior to improve our offer and, if necessary, for prosecution or pursuit of claims

What data is processed? Even as you visit our website now, our web server, the computer where this webpage is stored, usually automatically stores data such as • the complete Internet address (URL) of the accessed web page • Browser and browser version (e.g., Chrome 87) • The operating system used (e.g., Windows 10) • The address (URL) of the previously visited page (Referrer URL) (e.g., https://www.examplequellsite.de/vondabinichgekommen/) • The hostname and IP address of the device from which access is made (e.g., COMPUTERNAME and 194.23.43.121) • Date and time • in files, the so-called web server log files

How long is the data stored?
Usually, the above data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot exclude that this data will be viewed by authorities in the event of unlawful behavior.

In short: Your visit is logged by our provider (company that lets our website run on special computers (servers)), but we do not pass on your data without consent!

Legal basis
The lawfulness of the processing of personal data in the context of web hosting results from Art. 6(1)(f) GDPR (safeguarding legitimate interests), because the use of professional hosting with a provider is necessary to present the company securely and user-friendly on the Internet and to be able to pursue attacks and claims arising from it, if necessary.
There is usually a contract for order processing according to Art. 28 f. GDPR between us and the hosting provider, which ensures compliance with data protection and guarantees data security.

Website Construction System Introduction
Website Construction System Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Optimization of our service
📓 Processed Data: Data such as technical usage information such as browser activity, clickstream activity, session heatmaps, and contact details, IP address, or your geographical location. More details can be found below in this privacy policy and in the privacy policy of the providers.
📅 Storage Duration: Depends on the provider
⚖️ Legal Bases: Art. 6(1)(f) GDPR (Legitimate Interests), Art. 6(1)(a) GDPR (Consent)

What are website construction systems?
We use a website construction system for our website. Construction systems are special forms of a content management system (CMS). With a construction system, website operators can easily create a website without programming knowledge. In many cases, web hosts also offer construction systems. Using a construction system can also collect, store and process personal data from you. In this privacy policy text, we provide you with general information about data processing by construction systems. You can find more detailed information in the privacy policies of the provider.

Why do we use website construction systems for our website?
The biggest advantage of a construction system is its ease of use. We want to offer you a clear, simple, and well-structured website that we can operate and maintain without external support. A construction system now offers many helpful functions that we can apply without programming knowledge. This allows us to design our web presence according to our wishes and offer you an informative and pleasant time on our website.

What data is stored by a construction system?
Which data is stored depends, of course, on the used website construction system. Every provider processes and collects different data of the website visitor. But, as a rule, technical usage information such as operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your website visit is collected. In addition, tracking data (e.g., browser activity, clickstream activity, session heatmaps, etc.) can also be processed. In addition, personal data may also be collected and stored. These are usually contact details such as email address, telephone number (if you have provided them), IP address, and geographical location data. You can find out exactly which data is stored in the privacy policy of the provider.

How long and where is the data stored?
We inform you about the duration of data processing further below in connection with the used website construction system, if we have further information about it. In the provider's privacy policy, you will find detailed information about this. Generally, we process personal data only as long as it is absolutely necessary for the provision of our services and products. It may be that the provider stores data according to their own specifications, over which we have no influence.

Right to object
You always have the right to information, correction, and deletion of your personal data. If you have any questions, you can also contact the person responsible for the used website construction system at any time. Contact details can be found either in our privacy policy or on the website of the respective provider.
Cookies used by the provider for their functions can be deleted, disabled, or managed in your browser. Depending on which browser you use, this works in different ways. Please note, however, that then not all functions may work as usual.

Legal basis
We have a legitimate interest in using a website construction system to optimize our online service and present it efficiently and appealingly to you. The corresponding legal basis is Art. 6(1)(f) GDPR (Legitimate Interests). However, we only use the construction system if you have given consent.
Insofar as the processing of data is not absolutely necessary for the operation of the website, the data is processed only on the basis of your consent. This particularly concerns tracking activities. The legal basis is thus Art. 6(1)(a) GDPR.

With this privacy policy, we have brought you the most important general information about data processing. If you want to learn more about this, you can find further information - if available - in the following section or in the privacy policy of the provider.

Web Analytics Introduction
Web Analytics Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the web offer.
📓 Processed Data: Access statistics, which contain data such as locations of access, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details can be found with the respective Web Analytics tool used.
📅 Storage Duration: Depending on the used web analytics tool
⚖️ Legal Bases: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What is Web Analytics?
We use software on our website to evaluate the behavior of website visitors, called Web Analytics or web analysis. Data is collected, which the respective analytic tool provider (also called tracking tool) stores, manages, and processes. With the help of the data, analyses of user behavior on our website are created and made available to us as website operators. In addition, most tools offer various test possibilities. For example, we can test which offers or content are best received by our visitors. For this, we show you two different offers for a limited period. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such test procedures, as well as for other analytics procedures, user profiles can also be created, and the data can be stored in cookies.

Why do we do Web Analytics?
With our website, we have a clear goal in mind: we want to offer the best web offer in our industry. To achieve this goal, we want to offer the best and most interesting offer on the one hand and ensure that you feel completely comfortable on our website on the other hand. With the help of web analytics tools, we can take a closer look at the behavior of our website visitors and then improve our web offer for you and us accordingly. For example, we can find out the average age of our visitors, where they come from, when our website is most visited, or which content or products are particularly popular. All this information helps us to optimize the website and thus best adapt it to your needs, interests, and wishes.

What data is processed?
What data is stored exactly depends, of course, on the used analysis tools. But generally, for example, which content you view on our website, which buttons or links you click on, when you call up a page, which browser you use, with which device (PC, tablet, smartphone, etc.) you visit the website, or which computer system you use. If you have agreed that location data may also be collected, this may also be processed by the web analytics tool provider.

Your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually pseudonymized (i.e., stored in an unrecognizable and shortened form). For the purpose of tests, web analysis, and web optimization, basically no direct data such as your name, age, address, or email address are stored. All these data are pseudonymized if they are collected so that you cannot be identified as a person.

The following example shows schematically the functioning of Google Analytics as an example for client-based web tracking with JavaScript code.

How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, other cookies can store data for several years.

Duration of data processing
We inform you about the duration of data processing further below, as far as we have further information about it. Generally, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If, for example, it is prescribed by law, such as in the case of accounting, this storage duration can also be exceeded.

Right to object
You also always have the right and the possibility to revoke your consent to the use of cookies or third-party providers. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent the collection of data by cookies by managing, disabling, or deleting cookies in your browser.

Legal basis
The use of web analytics requires your consent, which we have obtained with our cookie popup. This consent represents according to Art. 6(1)(a) GDPR (Consent) the legal basis for the processing of personal data, as it may occur in the collection by web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus technically and economically improving our offer. With the help of web analytics, we recognize website errors, can identify attacks, and improve the economy. The legal basis for this is Art. 6(1)(f) GDPR (Legitimate Interests). However, we only use the tools if you have given consent.
As web analytics tools use cookies, we recommend that you also read our general privacy policy on cookies. To find out exactly which data is stored and processed by you, you should read the privacy statements of the respective tools.

Information about specific web analytics tools, if available, can be found – if available – in the following sections.

Google Analytics Privacy Policy
Google Analytics Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Evaluation of visitor information to optimize the web offer.
📓 Processed Data: Access statistics, which contain data such as locations of access, device data, access duration and time, navigation behavior, and click behavior. More details can be found below in this privacy policy.
📅 Storage Duration: Individually adjustable, Google Analytics 4 data is stored by default for 14 months
⚖️ Legal Bases: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What is Google Analytics?
We use the analysis tracking tool Google Analytics in the version Google Analytics 4 (GA4) of the American company Google Inc. on our website. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. By combining various technologies such as cookies, device IDs, and login information, you as a user can be identified across different devices. This allows your actions to be analyzed across platforms.
For example, if you click on a link, this event is stored in a cookie and sent to Google Analytics. With the help of the reports we receive from Google Analytics, we can better adapt our website and our service to your wishes. In the following, we will go into more detail about the tracking tool and especially inform you about which data is processed and how you can prevent this.

Google Analytics is a tracking tool that serves to analyze the traffic of our website. The basis of these measurements and analyses is a pseudonymous user identification number. This number does not contain any personal data such as name or address but serves to assign events to an end device. GA4 uses an event-based model that captures detailed information about user interactions such as page views, clicks, scrolling, conversion events. In addition, various machine learning functions have been built into GA4 to better understand user behavior and certain trends. GA4 relies on modeling with the help of machine learning functions. This means that based on the collected data, missing data can also be extrapolated to optimize the analysis and also to be able to make forecasts.

For Google Analytics to work in principle, a tracking code is built into the code of our website. When you visit our website, this code records various events that you perform on our website. With the event-based data model of GA4, we as website operators can define specific events and track them to obtain analyses of user interactions. Thus, in addition to general information such as clicks or page views, specific events that are important to our business can also be tracked. Such special events can be, for example, submitting a contact form or purchasing a product.

Once you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we get reports about your user behavior. This can include, among other things, the following reports:
• Audience reports: Through audience reports, we get to know our users better and know more precisely who is interested in our service.
• Display reports: Display reports allow us to analyze and improve our online advertising more easily.
• Acquisition reports: Acquisition reports give us helpful information on how we can inspire more people for our service.
• Behavior reports: Here we learn how you interact with our website. We can trace which path you take on our site and which links you click.
• Conversion reports: Conversion is called a process in which you perform a desired action due to a marketing message. For example, if you become a buyer or newsletter subscriber from a mere website visitor. With the help of these reports, we learn more about how our marketing measures are received by you. This is how we want to increase our conversion rate.
• Real-time reports: Here we always find out immediately what is happening on our website. For example, we see how many users are reading this text right now.

In addition to the above-mentioned analysis reports, Google Analytics 4, among other things, also offers the following functions:
• Event-based data model: This model captures very specific events that can occur on our website. For example, playing a video, purchasing a product, or signing up for our newsletter.

• Advanced analysis functions: With these functions, we can better understand your behavior on our website or certain general trends. For example, we can segment user groups, make comparative analyses of target groups, or trace your path or route on our website. • Predictive modeling: Based on collected data, missing data can be extrapolated using machine learning, predicting future events and trends. This can help us develop better marketing strategies. • Cross-platform analysis: Data collection and analysis are possible both from websites and from apps. This gives us the opportunity to analyze user behavior across platforms, provided you have consented to data processing.

Why do we use Google Analytics on our website? Our goal with this website is clear: We want to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal.

The statistically evaluated data show us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is found by interested people on Google more easily. On the other hand, the data helps us to better understand you as a visitor. Thus, we know very precisely what we need to improve on our website to offer you the best possible service. The data also serves us to carry out our advertising and marketing measures individually and cost-effectively. After all, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics? Google Analytics creates a random, unique ID with a tracking code that is associated with your browser cookie. So Google Analytics recognizes you as a new user and you are assigned a User ID. When you visit our site again, you will be recognized as a "returning" user. All collected data is stored together with this User ID. This is how it is possible to evaluate pseudonymous user profiles. To analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is the default. Depending on the used property, data is stored differently. Identifiers such as cookies, app instance IDs, user IDs, or about user-defined event parameters measure your interactions across platforms, provided you have consented. Interactions are all types of actions that you perform on our website. If you also use other Google systems (such as a Google Account), data generated by Google Analytics can be linked with third-party cookies. Google does not pass on any Google Analytics data unless we as website operators approve it. Exceptions may occur if it is legally required. According to Google, no IP addresses are logged or stored in Google Analytics 4. However, Google uses the IP address data for deriving location data and then deletes them immediately. Thus, all IP addresses collected from users in the EU are deleted before the data is stored in a data center or on a server. Since Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies than previous versions (like Google Universal Analytics). Nevertheless, there are some specific cookies that GA4 uses. These include, for example: Name: _ga Value: 2.1326744211.152312694542-5 Purpose: analytics.js uses the cookie _ga by default to store the User ID. Basically, it serves to distinguish website visitors. Expiration Date: after 2 years Name: _gid Value: 2.1687193234.152312694542-1 Purpose: The cookie also serves to distinguish website visitors Expiration Date: after 24 hours Name: gat_gtag_UA<property-id> Value: 1 Purpose: Used to lower the request rate. When Google Analytics is provided through the Google Tag Manager, this cookie is named dc_gtm<property-id>. Expiration Date: after 1 minute Note: This list cannot claim to be complete, as Google also changes the choice of its cookies from time to time. The goal of GA4 is also to improve privacy. Therefore, the tool offers some options for controlling data collection. For example, we can set the storage duration ourselves and also control data collection. Here we show you an overview of the most important types of data collected by Google Analytics: Heatmaps: Google creates so-called heatmaps. Heatmaps show exactly which areas you click on. So we get information about where you are "on the road" on our site. Session duration: Google calls the time you spend on our site without leaving the page the session duration. If you have been inactive for 20 minutes, the session automatically ends. Bounce rate (eng. bounce rate): A bounce is when you only view one page on our website and then leave our website again. Account creation: If you create an account on our website or make an order, Google Analytics collects this data.

Location: IP addresses are not logged or stored in Google Analytics. However, just before the deletion of the IP address, derivations for location data are used. Technical information: Technical information includes, among other things, your browser type, your Internet provider, or your screen resolution. Source of origin: Google Analytics or us, of course, is also interested in which website or which advertising you came to our site. Other data include contact details, any ratings, playing media (e.g., if you play a video via our site), sharing content via social media, or adding to your favorites. The enumeration does not claim to be complete and serves only as a general orientation of data storage by Google Analytics.

How long and where is the data stored? Google has its servers spread all over the world. Here you can read exactly where the Google data centers are located: https://www.google.com/about/datacenters/locations/?hl=de Your data is distributed on different physical data carriers. This has the advantage that the data can be retrieved faster and is better protected from manipulation. In every Google data center, there are appropriate emergency programs for your data. For example, if the hardware at Google fails or natural disasters paralyze servers, the risk of service interruption at Google remains low.

The retention period of the data depends on the properties used. The storage duration is always set individually for each property. Google Analytics offers us four options for controlling the storage duration: • 2 months: This is the shortest storage duration. • 14 months: by default, data is stored in GA4 for 14 months. • 26 months: Data can also be stored for 26 months. • Data is only deleted when we delete it manually In addition, there is also the option that data is only deleted when you no longer visit our website within the period we have chosen. In this case, the retention period is reset each time you visit our website within the set period. When the specified period has expired, the data is deleted once a month. This retention period applies to your data associated with cookies, user recognition, and advertising IDs (e.g., cookies of the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is a fusion of individual data into a larger unit.

How can I delete my data or prevent data storage? According to the data protection law of the European Union, you have the right to obtain information about your data, to update it, to delete it or to restrict it. With the help of the browser add-on to deactivate Google Analytics JavaScript (analytics.js, gtag.js) you prevent Google Analytics 4 from using your data. You can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de. Please note that by this add-on only the data collection by Google Analytics is disabled.

If you generally want to deactivate, delete or manage cookies, you can find the corresponding links to the instructions of the most famous browsers under the section "Cookies".

Legal basis The use of Google Analytics requires your consent, which we have obtained with our cookie popup. This consent represents according to Art. 6(1)(a) GDPR (Consent) the legal basis for the processing of personal data, as it may occur in the collection by web analytics tools. In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus technically and economically improving our offer. With the help of Google Analytics, we recognize website errors, can identify attacks, and improve the economy. The legal basis for this is Art. 6(1)(f) GDPR (Legitimate Interests). However, we only use Google Analytics if you have given consent. Google processes data from you, among others, also in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure data transfer of personal data of EU citizens to the USA. More information about this can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en. In addition, Google uses so-called standard contractual clauses (= Art. 46. Abs. 2 and 3 GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are model templates provided by the EU Commission and are intended to ensure that your data also meets the European data protection standards when transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the standard contractual clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other things, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de You can find the Google Ads data processing terms, which refer to the standard contractual clauses, at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we have been able to provide you with the most important information about data processing by Google Analytics. If you want to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de. If you want to learn more about data processing, please use the Google privacy policy at https://policies.google.com/privacy?hl=de.

Email Marketing Introduction Email Marketing Summary 👥 Affected: Newsletter subscribers 🤝 Purpose: Direct advertising by email, notification of system-relevant events 📓 Processed Data: Entered data during registration but at least the email address. More details can be found with the respective email marketing tool used. 📅 Storage Duration: Duration of the existence of the subscription ⚖️ Legal Bases: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (legitimate interests)

What is email marketing? To keep you always up to date, we also use the possibility of email marketing. Thereby, if you have agreed to receive our emails or newsletter, data from you will also be processed and stored. Email marketing is a part of online marketing. Thereby news or general information about a company, products, or services are sent by email to a specific group of people interested in it. If you want to participate in our email marketing (usually via newsletter), you usually only need to register with your email address. For this, you fill out an online form and send it off. However, it can also happen that we ask you for your salutation and your name so that we can address you personally.

In principle, the registration for newsletters works with the help of the so-called "double opt-in procedure". After you have registered for our newsletter on our website, you will receive an email through which you confirm the newsletter registration. This ensures that you own the email address and that no one has signed up with a foreign email address. We or a notification tool used by us logs each individual registration. This is necessary so that we can prove that the registration process is legally correct. Typically, the time of registration, the time of confirmation, and your IP address are stored. In addition, it is also logged if you make changes to your stored data.

Why do we use email marketing? Of course, we want to stay in touch with you and always present to you the most important news about our company. For this, we use, among other things, email marketing – often simply called "newsletter" – as an essential part of our online marketing. Provided you have agreed to this or it is legally permitted, we send you newsletters, system emails, or other notifications by email. If we use a service provider that offers a professional dispatch tool for our email marketing, we do this to offer you fast and secure newsletters. The purpose of our email marketing is generally to inform you about new offers and also to come closer to our corporate goals.

What data is processed? If you become a subscriber to our newsletter via our website, you confirm by email the membership in an email list. In addition to the IP address and email address, your salutation, your name, your address, and your phone number can also be stored. However, only if you agree to this data storage. The marked data is necessary so that you can participate in the offered service. The provision is voluntary, but if you do not provide the data, you will not be able to use the service. In addition, information about your device or your preferred content on our website can also be stored. More about data storage when you visit a website can be found in the section "Automatic data storage". We record your declaration of consent so that we can always prove that it complies with our laws.

Duration of data processing If you unsubscribe your email address from our email/newsletter distribution list, we may store your address for up to three years based on our legitimate interests to prove your prior consent. Data may only be processed if we have to defend ourselves against any claims. If you confirm that you have given us the consent to the newsletter registration, you can make an individual deletion request at any time. If you permanently object to the consent, we reserve the right to store your email address in a block list. As long as you have voluntarily subscribed to our newsletter, we will of course also keep your email address.

Right to object You have the option to cancel your newsletter subscription at any time. For this, you only need to revoke your consent to the newsletter registration. This usually only takes a few seconds or one or two clicks. Most of the time, you will find a link directly at the end of each email to cancel the newsletter subscription. If the link in the newsletter really cannot be found, please contact us by mail, and we will immediately cancel your newsletter subscription.

Legal basis
The sending of our newsletter is based on your consent (Article 6(1)(a) GDPR). That means we may only send you a newsletter if you have actively registered for it beforehand. If necessary, we may also send you advertising messages, provided you have become our customer and have not objected to the use of your email address for direct advertising.

Information on specific email marketing services and how they process personal data can be found – if available – in the following sections.

Blogs and Publishing Media Introduction
Blogs and Publishing Media Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Presentation and optimization of our service as well as communication between website visitors, security measures, and administration
📓 Processed Data: Data such as contact details, IP address, and published content.
More details can be found with the tools used.
📅 Storage Duration: Depending on the tools used
⚖️ Legal Bases: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests), Art. 6(1) S. 1 lit. b. GDPR (Contract)

What are blogs and publishing media?
We use various online communication tools on our website that we can use to communicate with you and you can also communicate with us. In doing so, data from you may also be stored and processed by us. This may be necessary so that we can represent content appropriately, communication works and security is increased. In our privacy text, we generally address which data from you can be processed. Exact information on data processing always depends on the tools and functions used. In the privacy notices of the individual providers, you will find exact information about data processing.

Why do we use blogs and publishing media?
Our biggest concern with our website is to offer you interesting and exciting content and at the same time, your opinions and content are important to us. Therefore, we want to create a good interactive exchange between us and you. With various blogs and publication possibilities, we can achieve exactly that. For example, you can comment on our content, comment on other comments, or even write posts yourself in some cases.

What data is processed?
What data is processed always depends on the communication functions we use. Very often, the IP address, username, and published content are stored. This is primarily done to provide security protection, prevent spam, and take action against unlawful content. For data storage, cookies can also be used. These are small text files that are stored with information in your browser. More about the data collected and stored can be found in our individual sections and in the privacy policy of the respective provider.

Duration of data processing
We inform you about the duration of data processing further below, as far as we have further information about it. For example, post and comment functions store data until you revoke the data storage. Generally, personal data is only stored as long as it is absolutely necessary for the provision of our services.

Right to object
You also always have the right and the possibility to revoke your consent to the use of cookies or third-party providers of communication tools. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent the collection of data by cookies by managing, disabling, or deleting cookies in your browser.

Since publication media can also use cookies, we recommend you also read our general privacy policy on cookies. To find out exactly which data is stored and processed by you, you should read the privacy statements of the respective tools.

Legal basis
We mainly use communication tools based on our legitimate interests (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers, business partners, and visitors. Insofar as the use serves the execution of contractual relations or their initiation, the legal basis is also Art. 6(1) S. 1 lit. b. GDPR.
Certain processing, especially the use of cookies and the use of comment or messaging functions, requires your consent. If and as far as you have consented that data from you may be processed and stored by integrated publication media, this consent is the legal basis of data processing (Art. 6(1)(a) GDPR). Most of the communication functions we use set cookies in your browser to store data. Therefore, we recommend that you read our privacy policy on cookies carefully and look at the privacy policy or cookie policy of the respective service provider.

Information on specific tools can be found – if available – in the following sections.

Blog Posts and Comment Functions Privacy Policy
There are various online communication tools that we can use on our website. For example, we use blog posts and comment functions. This way, you have the opportunity to comment on content or write posts yourself. If you use this function, your IP address can be stored for security reasons. This protects us from unlawful content such as insults, unauthorized advertising, or prohibited political propaganda. To recognize whether comments are spam, we can also store and process user information based on our legitimate interests. If we start a survey, we also store your IP address for the duration of the survey so that we can ensure that all participants really only vote once. Cookies can also be used for storage purposes. These are small text files that are stored with information in your browser. All data that we store from you (such as content or information about your person) remain stored until you object.

Closing Words
Congratulations! If you read these lines, you have really "fought" through our entire privacy policy or at least scrolled down to here. As you can see from the scope of our privacy policy, we take the protection of your personal data anything but lightly.
It is important to us to inform you as best as possible about the processing of personal data. We also want to not only tell you which data is processed but also bring you closer to the reasons for using various software programs. Privacy statements usually sound very technical and legal. Since most of you are neither web developers nor lawyers, we also wanted to go a different way linguistically and explain the facts in simple and clear language. Of course, this is not always possible due to the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy.
If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible office. We wish you a great time and hope to welcome you back to our website soon.
All texts are copyrighted.
Source: Created with the Datenschutz Generator by AdSimple