The following information provides a simple overview of what happens to your personal data when you visit this website.
happens when you visit this website. Personal data is all data with which you can be
can be personally identified. Detailed information on the subject of data protection can be found
our privacy policy listed below this text.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details
can be found in the section “Information on the controller” in this privacy policy.
On the one hand, your data is collected when you provide it to us. This may, for example, be
data that you enter in a contact form.
Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the
of the page view). This data is collected automatically as soon as you enter this website.
I use the service https://app.kreativ.management to provide my services to my customers and have included a contact form on this website that is directly linked to this service. Personal data is therefore transmitted via the form.
The service https://app.kreativ.management offers the possibility to create master data of the customers supported, a calendar management, a task/to-do list, a mailbox for communication as well as the possibility to create offers and invoices for services directly via the service. This service is offered by Hochzeit.Management GmbH, with which the website owner has a user agreement and an order processing agreement – which is required under data protection law. The service will be hosted by Hochzeit.Management GmbH exclusively on servers located in the EU. Specifically, the data is stored in Linz (Upper Austria).
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.
You have the right to receive information free of charge at any time about the origin, recipient and purpose of your
stored personal data. You also have the right to request the rectification or
deletion of this data. If you have given your consent to data processing,
you can revoke this consent at any time for the future. You also have the right, under
to request the restriction of the processing of your personal data under certain circumstances.
You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time if you have further questions on the subject of data protection.
Analysis tools and tools from third-party providers
When you visit this website, your surfing behavior may be statistically evaluated. This is mainly done
mainly with so-called analysis programs.
Detailed information on these analysis programs can be found in the following
privacy policy.
We host our website at RAIDBOXES. The provider is RAIDBOXES GmbH, Hafenstr. 32, 48151 Münster, Germany (hereinafter RAIDBOXES). When you visit our website, RAIDBOXES collects various log files including your IP addresses.
Details can be found in the RAIDBOXES privacy policy: https://raidboxes.io/datenschutzerklaerung/.
RAIDBOXES is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. for device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Order processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which guarantees that the provider will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected.
Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how
and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website is
Anne Siemer
Ramdohrstr. 49
28205 Bremen
Phone: 015787035922
E-mail: mail@annesiemer.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the
the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
decides.
Storage duration
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain
your personal data with us until the purpose for data processing no longer applies. If you assert a
legitimate request for deletion or revoke your consent to data processing,
your data will be deleted, unless we have other legally permissible reasons for storing your personal data
personal data (e.g. retention periods under tax or commercial law); in the latter
the latter case, the deletion will take place after these reasons no longer apply.
If you have given your consent to data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of data under Article 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally carried out based on Section 25(1) TTDSG. Consent may be revoked at any time. If your data is required for contract fulfillment or pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if required to fulfill a legal obligation based on Article 6(1)(c) GDPR. Data processing may also be carried out based on our legitimate interest under Article 6(1)(f) GDPR. The specific legal bases applicable in each case are provided in the following sections of this privacy policy.
Notice Regarding Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other countries outside the EU that do not provide an equivalent level of data protection. When these tools are active, your personal data may be transferred to and processed in these third countries. We note that these countries may not guarantee a level of data protection comparable to the EU. For example, U.S. companies are required to provide personal data to security authorities without the possibility of legal recourse for the affected individuals. As a result, it cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data on U.S. servers for surveillance purposes. We have no control over these processing activities.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent at any time. The legality of the data processing carried out before the revocation remains unaffected.
Right to Object to Data Collection in Specific Cases and Against Direct Marketing (Article 21 GDPR)
IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the location of the alleged violation. This right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to receive the data we process automatically based on your consent or for contract fulfillment in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will only be done to the extent technically feasible.
If you have given your consent to data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of data under Article 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally carried out based on Section 25(1) TTDSG. Consent may be revoked at any time. If your data is required for contract fulfillment or pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if required to fulfill a legal obligation based on Article 6(1)(c) GDPR. Data processing may also be carried out based on our legitimate interest under Article 6(1)(f) GDPR. The specific legal bases applicable in each case are provided in the following sections of this privacy policy.
Notice Regarding Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other countries outside the EU that do not provide an equivalent level of data protection. When these tools are active, your personal data may be transferred to and processed in these third countries. We note that these countries may not guarantee a level of data protection comparable to the EU. For example, U.S. companies are required to provide personal data to security authorities without the possibility of legal recourse for the affected individuals. As a result, it cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data on U.S. servers for surveillance purposes. We have no control over these processing activities.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent at any time. The legality of the data processing carried out before the revocation remains unaffected.
Right to Object to Data Collection in Specific Cases and Against Direct Marketing (Article 21 GDPR)
IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the location of the alleged violation. This right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to receive the data we process automatically based on your consent or for contract fulfillment in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will only be done to the extent technically feasible.
Right to Access, Rectification, and Deletion
Within the limits of applicable legal provisions, you have the right to request information about your stored personal data, its origin, recipients, and the purpose of data processing at any time, free of charge. You may also have the right to request correction or deletion of this data. For further information or inquiries regarding personal data, you can contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of processing your personal data. You can contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:
If you contest the accuracy of your personal data stored by us, we generally need time to verify this. During the verification period, you have the right to request the restriction of processing your personal data.
If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing instead of deletion.
If you have objected pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. Until it is determined whose interests prevail, you have the right to request the restriction of processing your personal data.
If processing is restricted, your data may only be processed – apart from storage – with your consent, for the assertion, exercise, or defense of legal claims, for the protection of another natural or legal person’s rights, or for important public interest reasons of the European Union or a member state.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries or orders, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and the padlock symbol in your browser bar. When SSL/TLS encryption is activated, the data you transmit cannot be read by third parties.
Objection to Promotional Emails
We hereby object to the use of contact details published within the framework of legal notice requirements for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.
4. Data Collection on This Website
Cookies
Our website uses so-called “cookies.” Cookies are small data packets that do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them manually or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party providers (third-party cookies). Third-party cookies enable the integration of specific services provided by third-party companies within websites (e.g., cookies for processing payment services).
Cookies serve different functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., shopping cart functionality or video display). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies that are necessary for electronic communication processes, the provision of certain functions you request (e.g., shopping cart functionality), or website optimization (e.g., cookies to measure web traffic) are stored based on Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent for storing cookies and similar recognition technologies has been requested, processing is based solely on this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); consent can be revoked at any time.
You can configure your browser to notify you when cookies are set and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted. You can find information about which cookies and services are used on this website in this privacy policy.
To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and related consents, we use the consent tool “Real Cookie Banner.” Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal basis for processing personal data in this context is Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is in managing the cookies and similar technologies used and the related consents.
Providing personal data is neither legally nor contractually required for entering into a contract. You are not obligated to provide personal data. However, if you do not provide personal data, we cannot manage your consents.
Contact Form
If you submit inquiries via our contact form, your details from the inquiry form, including the contact information you provide, will be stored by us for processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
Processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if obtained. Consent can be revoked at any time.
The data you enter in the contact form remains with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after processing your inquiry). Mandatory legal provisions—particularly retention periods—remain unaffected.
Contact Form
If you submit inquiries via our contact form, your details from the inquiry form, including the contact information you provide, will be stored by us for processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
Processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if obtained. Consent can be revoked at any time.
The data you enter in the contact form remains with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after processing your inquiry). Mandatory legal provisions—particularly retention periods—remain unaffected.
Inquiries via Email, Phone, or Fax
If you contact us via email, phone, or fax, your inquiry, including any personal data (name, inquiry details) provided, will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
Processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if obtained. Consent can be revoked at any time.
The data sent to us via inquiries remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after processing your inquiry). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.
Communication via WhatsApp
We use the instant messaging service WhatsApp for communication with our customers and other third parties. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Communication occurs via end-to-end encryption (peer-to-peer), which prevents WhatsApp or third parties from accessing communication content. However, WhatsApp does receive metadata related to the communication process (e.g., sender, recipient, and timestamp). Additionally, WhatsApp states that it shares users’ personal data with its U.S.-based parent company, Facebook. For more details on data processing, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/#privacy-policy.
The use of WhatsApp is based on our legitimate interest in communicating as quickly and effectively as possible with customers, interested parties, and other business and contract partners (Art. 6(1)(f) GDPR). If consent has been obtained, processing is based solely on that consent, which can be revoked at any time with future effect.
Messages exchanged on WhatsApp remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after processing your inquiry). Mandatory legal provisions—particularly retention periods—remain unaffected.
We use the “WhatsApp Business” version.
Data transfer to the U.S. is based on the European Commission’s standard contractual clauses. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.
We have configured our WhatsApp accounts to prevent automatic data synchronization with the address book of the devices used.
We have entered into a data processing agreement (DPA) with the provider mentioned above.
Use of Chatbots
We use chatbots to communicate with you. Chatbots can respond to your inquiries and other inputs without human assistance. To do so, they analyze not only your inputs but also additional data to provide relevant responses (e.g., names, email addresses, and other contact details, customer numbers and other identifiers, orders, and chat histories). Furthermore, chatbots may collect your IP address, log files, location data, and other metadata. These data are stored on the servers of the chatbot provider.
Based on the collected data, user profiles can be created. Additionally, the data may be used to display interest-based advertisements, provided that the necessary legal requirements (particularly consent) are met. For this purpose, chatbots may be linked with analytics and advertising tools.
The collected data may also be used to improve our chatbots and their response behavior (machine learning).
The data you provide during communication will remain with us or the chatbot provider until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—especially retention periods—remain unaffected.
The legal basis for using chatbots is Art. 6(1)(b) GDPR if the chatbot is used for contract initiation or contract fulfillment. If explicit consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TTDSG. Consent can be revoked at any time. In all other cases, chatbot usage is based on our legitimate interest in efficient customer communication (Art. 6(1)(f) GDPR).
Comment Function on This Website
When using the comment function on this site, in addition to your comment, details such as the timestamp of its creation and, if you do not post anonymously, the username you choose will be stored.
Storage of IP Addresses
Our comment function stores the IP addresses of users who post comments. Since we do not pre-moderate comments on this website, we need this data to take action against the author in case of legal violations such as insults or propaganda.
Retention Period for Comments
Comments and the associated data are stored and remain on this website until the commented content is fully deleted or the comments must be removed for legal reasons (e.g., offensive comments).
Legal Basis
The storage of comments is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time with a simple email notification to us. The legality of data processing carried out prior to the revocation remains unaffected.
5. Social Media
This website integrates elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries.
An overview of Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=en_US.
If the social media element is active, a direct connection is established between your device and the Facebook server. As a result, Facebook receives information that you have visited this website using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We point out that, as the provider of this website, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook’s privacy policy: https://www.facebook.com/privacy/explanation.
If consent (Consent) has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent can be revoked at any time. If no consent has been obtained, the service is used based on our legitimate interest in achieving the broadest possible visibility in social media.
If personal data is collected on our website using the described tool and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). This joint responsibility is strictly limited to the collection of data and its transmission to Facebook. Any further processing by Facebook after transmission is not part of our joint responsibility. The obligations that apply to both parties have been set out in a joint processing agreement. The agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy notices when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the security of Facebook products. Data subject rights (e.g., requests for information) concerning data processed by Facebook can be asserted directly with Facebook. If you submit a request to us, we are obligated to forward it to Facebook.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://www.facebook.com/help/566994660333381, and https://www.facebook.com/policy.php.
This website integrates functions of the Instagram service. These functions are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We point out that, as the provider of this website, we have no knowledge of the content of the transmitted data or its use by Instagram.
If consent (Consent) has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent can be revoked at any time. If no consent has been obtained, the service is used based on our legitimate interest in achieving the broadest possible visibility in social media.
If personal data is collected on our website using the described tool and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). This joint responsibility is strictly limited to the collection of data and its transmission to Facebook or Instagram. Any further processing by Facebook or Instagram after transmission is not part of our joint responsibility.
The obligations that apply to both parties have been set out in a joint processing agreement. The agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy notices when using the Facebook or Instagram tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the security of Facebook and Instagram products. Data subject rights (e.g., requests for information) concerning data processed by Facebook or Instagram can be asserted directly with Facebook. If you submit a request to us, we are obligated to forward it to Facebook.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875, and https://www.facebook.com/help/566994660333381.
For more information, please refer to Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.
This website uses elements of the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When you access a page containing such an element, your browser establishes a direct connection to Pinterest’s servers. This social media element transmits log data to Pinterest’s server in the USA. This log data may include your IP address, the address of the visited websites that also contain Pinterest functions, the type and settings of your browser, the date and time of the request, your use of Pinterest, and cookies.
If consent (Consent) has been obtained, the use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent can be revoked at any time. If no consent has been obtained, the service is used based on our legitimate interest in achieving the broadest possible visibility in social media.
For more information on the purpose, scope, further processing, and use of data by Pinterest, as well as your rights and options for protecting your privacy, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/en/privacy-policy.
6. Newsletter Newsletter Data
If you would like to subscribe to the newsletter offered on our website, we require an email address from you, along with information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not share it with third parties.
The processing of the data entered into the newsletter subscription form is based solely on your consent (Art. 6(1)(a) GDPR). You may revoke your consent to the storage of data, your email address, and its use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter. The legality of any data processing operations carried out before revocation remains unaffected.
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest under Art. 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.
After unsubscribing from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider if necessary to prevent future mailings. The data from the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.
7. Plugins and Tools
Vimeo without Tracking (Do-Not-Track)
This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages with embedded Vimeo videos, a connection to Vimeo’s servers is established. In the process, Vimeo is informed about which of our pages you have visited. Additionally, Vimeo receives your IP address. However, we have configured Vimeo in a way that it does not track your user activity and does not set cookies.
The use of Vimeo is in the interest of an appealing presentation of our online content. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses and, according to Vimeo, on “legitimate business interests.” Details can be found here: https://vimeo.com/privacy.
For more information on the handling of user data, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy.
This site uses Google Fonts for uniform font representation. The Google Fonts are installed locally. There is no connection to Google servers.
For more information on Google Fonts, visit https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It serves only to manage and deploy the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a fast and uncomplicated integration and management of various tools on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s device (e.g., device fingerprinting) within the meaning of TTDSG. Consent can be revoked at any time.
This website uses Matomo, an open-source, self-hosted software to collect anonymous usage data for this website.
Matomo collects visitor behavior data to identify problems such as pages not found, search engine issues, or unpopular pages. Once the data (e.g., the number of visitors seeing error pages or just one page, etc.) is processed, Matomo generates reports for website operators to improve the site’s structure and content.
Matomo processes the following data:
Cookies
Anonymized IP addresses (last 2 bytes removed, e.g., 198.51.0.0 instead of 198.51.100.54)
Pseudonymized location (based on anonymized IP address)
Date and time
Title and URL of the visited page
Referring URL (if allowed)
Screen resolution
Local time
Clicked and downloaded files
External links
Page load time
Country, region, city (low accuracy based on IP address)
Browser’s main language
Browser user agent
Form interactions (but not content)
Server Logs
When you use this website, the request is recorded by the website’s host. This log includes your IP address, which indirectly identifies you through your internet provider. Recording this data is legally required and necessary for security purposes. There is no opt-out option, but the data is never used for any other purposes.
The data processing is based on the principle of legitimate interest.
Processing this data helps us understand what works on our site and what doesn’t. For example, it allows us to see whether content is well-received or how we can improve the website structure. Our team benefits from these insights and can respond accordingly. As a result, you benefit from a continuously improving website.
Without this data, we wouldn’t be able to provide our service. Your data is used exclusively to enhance website usability.
If you believe that the way we process your data with Matomo violates the law, you have the right to file a complaint with the data protection authority.
Since Matomo collects data based on legitimate interest, you can exercise the following rights:
Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
The tracking opt-out feature requires cookies to be enabled.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter specific search terms on Google (keyword targeting). Additionally, targeted advertisements can be displayed based on the user data available at Google (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively analyze this data by examining, for example, which search terms triggered the display of our advertisements and how many ads led to corresponding clicks.
The use of Google Ads is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the most effective marketing of its services and products.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google Conversion Tracking, Google and we can recognize whether users have performed certain actions. For example, we can analyze which buttons on our website were clicked and how often, as well as which products were viewed or purchased most frequently. This information is used to generate conversion statistics. We learn the total number of users who clicked on our advertisements and what actions they performed. We do not receive any information that allows us to personally identify users. Google itself uses cookies or similar recognition technologies for identification.
The use of Google Conversion Tracking is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and advertising. If consent has been requested, processing is based exclusively on Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TTDSG. Consent can be revoked at any time.
More information about Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Facebook Pixel
This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries.
This tool allows tracking of website visitors’ behavior after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables the evaluation of Facebook ads’ effectiveness for statistical and market research purposes and helps optimize future advertising measures.
The data collected is anonymous to us as the website operator, meaning we cannot draw conclusions about users’ identities. However, Facebook stores and processes this data, making a connection to the respective user profile possible. Facebook may use this data for its own advertising purposes in accordance with Facebook’s Data Usage Policy. This allows Facebook to display advertisements both on Facebook and outside of Facebook. We as website operators have no control over this data usage.
The use of Facebook Pixel is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If consent has been requested, processing is based exclusively on Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381.
If personal data is collected on our website using this tool and transmitted to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). This joint responsibility is limited solely to the collection of data and its transfer to Facebook. Any processing by Facebook after transmission is not part of the joint responsibility. Our mutual obligations have been set out in an agreement on joint processing. The wording of this agreement can be found here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the privacy-compliant implementation of the tool on our website. Facebook is responsible for the security of Facebook products. Data subject rights (e.g., requests for information) regarding data processed by Facebook can be exercised directly with Facebook. If you exercise your data subject rights with us, we are obliged to forward them to Facebook.
For more information on protecting your privacy, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
You can also disable the “Custom Audiences” remarketing function in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do this.
If you do not have a Facebook account, you can opt out of Facebook-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/en/preference-management/.
Data Processing
For communication with our customers, we use various online conferencing tools. The specific tools we use are listed below. If you communicate with us via video or audio conference over the internet, your personal data will be collected and processed by us and the respective provider of the conferencing tool.
These tools collect all the data you provide or use for their operation (such as your email address and/or phone number). Additionally, the tools process the duration of the conference, the start and end time of your participation, the number of participants, and other “contextual information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all technical data required for conducting online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
If content is shared, uploaded, or otherwise provided within the tool, it is also stored on the tool provider’s servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.
Please note that we do not have full control over the data processing activities of the tools used. Our options are largely determined by the policies of the respective provider. For more details on how conferencing tools process data, please refer to the privacy policies of the respective tools, which we have listed below.
Purpose and Legal Basis
The conferencing tools are used to communicate with prospective or existing contract partners or to offer specific services to our customers (Article 6(1)(b) GDPR). Additionally, the use of these tools serves to simplify and accelerate communication with us and our company (legitimate interest under Article 6(1)(f) GDPR). If consent has been requested, the use of the respective tools is based on this consent, which can be revoked at any time with future effect.
Storage Duration
The data collected directly by us through video and conferencing tools will be deleted from our systems as soon as you request deletion, revoke your consent for storage, or the purpose for data retention ceases to exist. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no control over the storage duration of your data that is processed by the operators of the conferencing tools for their own purposes. For details, please refer directly to the respective tool providers.
Use of Cal.com for Online Appointments
We use the tool Cal.com to schedule and conduct online appointments. “Cal.com” is a service provided by Cal.com, Inc.
When using Cal.com, various types of data are processed. The extent of data processing depends on the information you provide when booking an appointment.
The following personal data is processed:
If the booked appointment takes place via a third-party platform (e.g., Zoom, Google Meet, or Microsoft Teams), additional data processing will be carried out by the respective provider. The data protection regulations of the respective service provider apply in these cases.
We use Cal.com to ensure efficient and user-friendly appointment scheduling for our customers. Data processing is based on Art. 6 (1) lit. b GDPR (fulfillment of a contract or pre-contractual measures) and on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in efficient and structured appointment management.
For more details on how Cal.com processes data, please refer to their privacy policy:
https://cal.com/privacy
Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Further details can be found in Cal.com’s privacy policy.
Data Processing Agreement
We have entered into a Data Processing Agreement (DPA) with the provider mentioned above. This is a legally required contract that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.