Why do we use etracker on our website?
We utilize this software tool to enhance the quality of our website and offerings. Our goal is to provide you with the best possible service. We want you to feel comfortable on our site and receive exactly what you expect. To achieve this, we aim to tailor our offerings as closely as possible to your needs and preferences.

The data also helps us conduct our online marketing and advertising efforts more cost-effectively and individually. Naturally, we want to display our offerings only to people who are genuinely interested.

What data is stored by etracker?

To enable tracking, a JavaScript code is embedded in the website. etracker operates on pixel technology.

By default, etracker does not use cookies or tracking technologies on a website, as this is implemented in a cookie-less mode through Privacy-by-Design. In this case, only strictly necessary cookies are set. However, if you actively consent to the use of cookies, etracker will also use cookies.

The following data is stored and processed upon visiting the website:

• Your pseudonymized IP address
• Technical information about your browser, operating system, and device
• Location information (up to city level)
• The accessed URL, including page title and optional information about the page content
• Referrer website (the site from which you accessed our site)
• The following page (the site you click on afterward)
• Time spent on our site (session duration)
• Interactions on the site, such as clicks, search terms, downloads, videos, or purchased products

This data comes from web server information and the data transmitted by your browser during webpage access. Unlike other technologies, etracker does not read or store data on your device. The data is neither used for other purposes nor shared with third parties.

Cookies used by etracker do not contain information that can identify you as a person. Data like IP addresses, device data, and domain data are encrypted or truncated, ensuring that individual identification is impossible for both us and etracker.

If cookies are enabled, the following may be set:

• Name: GS3_v
  Value: 146480958122693978-9
  Purpose: Set by the etracker Optimizer Webservice.
  Expiration: 1 year

• Name: _et_coid
  Value: e9cc2b3efbf7807c6157e8b151baa2f3122693978-1
  Purpose: Used for cookie recognition, set only upon cookie activation.
  Expiration: 3 years

• Name: pll_language
  Value: de
  Purpose: Stores the preset language.
  Expiration: 1 year

Note: This list represents a selection of potential cookies and may not be exhaustive. For a full list of cookies, refer to etracker's documentation.

How long and where is the data stored?

The data is stored on servers located in Hamburg, Germany. The system administration also operates from Hamburg, ensuring that all data is exclusively stored on German servers. Data is retained until our contract with etracker expires, after which it is permanently deleted.

How can I delete or prevent data storage?

You have the right to access, correct, delete, or restrict the processing of your personal data at any time. You can also withdraw your consent to data processing at any time.

If you wish to disable, delete, or manage cookies generally, refer to the "Cookies" section on our website for links to guides for popular browsers.

Legal basis

The use of etracker requires your consent, obtained via our cookie popup. This consent serves as the legal basis for processing personal data per Article 6(1)(a) of the GDPR.

Additionally, we have a legitimate interest in analyzing visitor behavior to improve our offerings technically and economically. etracker helps us identify website errors, detect attacks, and enhance efficiency. This aligns with Article 6(1)(f) of the GDPR (legitimate interests). However, we use etracker only if you provide consent.

For further details about etracker, visit their privacy policy.

Data Processing Agreement (DPA) with etracker

In accordance with Article 28 of the GDPR, we have signed a Data Processing Agreement (DPA) with etracker. This agreement clarifies that etracker processes data on our behalf only as instructed and complies with the GDPR. The DPA can be found here.

How Can I Delete My Data or Prevent Data Storage?

You have the right to request access to your data, have it deleted, corrected, or restricted. Additionally, you can disable, delete, or manage cookies in your browser at any time.

For general instructions on how to disable, delete, or manage cookies, refer to the “Cookies” section, which includes links to guides for the most popular browsers.

Legal Basis

The use of Google Site Kit requires your consent, which we obtain via our cookie popup. This consent serves as the legal basis under Article 6(1)(a) GDPR for processing personal data collected through web analytics tools.

In addition to consent, we have a legitimate interest in analyzing website visitor behavior to improve our services both technically and economically. Google Site Kit helps us identify website errors, detect attacks, and enhance efficiency. The legal basis for this is Article 6(1)(f) GDPR (legitimate interests). However, Google Site Kit is only used when you have provided consent.

Google processes your data, potentially including in the United States. Google is a participant in the EU-US Data Privacy Framework, ensuring the safe transfer of EU citizens’ data to the U.S. Learn more at EU Data Privacy Framework.

Additionally, Google employs Standard Contractual Clauses (SCCs) as per Articles 46(2) and 46(3) GDPR. These EU-approved templates ensure your data meets European data protection standards even when transferred to third countries like the U.S. Learn more about SCCs at EUR-Lex Decision 2021/914.

The Google Ads Data Processing Terms, which reference these SCCs, can be accessed at Google Ads Data Processing Terms.

For further information on Google’s data processing, refer to Google’s Privacy Policy.

Email Marketing Introduction

Email Marketing Summary

• Affected parties: Newsletter subscribers
• Purpose: Direct marketing via email, notifications of system-relevant events
• Processed data: Registration data, at minimum the email address.
• Storage duration: As long as the subscription exists.
• Legal basis: Article 6(1)(a) GDPR (consent), Article 6(1)(f) GDPR (legitimate interests).

What is Email Marketing?

Email marketing allows us to keep you informed about our company, products, and services. If you’ve consented to receive our emails, we process and store your data. To subscribe, typically only your email address is required, though we may request additional details such as your name for personalized communication.

Subscriptions are managed through a “double opt-in” process, ensuring that the email address provided belongs to you. Subscription data, including timestamps, IP address, and any updates, is recorded to maintain a legally compliant process.

Why Do We Use Email Marketing?

We aim to maintain communication and keep you updated about our latest news and offers. Email marketing (or “newsletters”) is a key aspect of our online marketing strategy. With your consent, we send you relevant and engaging content about our business, services, and products. Our newsletters may also inform you about updates or special promotions.

To deliver secure and efficient email communications, we may use professional third-party email marketing tools. These tools ensure timely and reliable service while aligning with our goals to share updates and improve our business outcomes.

What Data Is Processed?

If you subscribe to our newsletter via our website, you confirm your subscription to an email list through a verification email. In addition to your IP address and email address, other data such as your title, name, address, and phone number may also be stored, but only if you have given your explicit consent to such data storage. Mandatory fields marked as required are necessary to access the offered service. Providing this information is voluntary, but not providing it may prevent you from using the service. Additional data, such as information about your device or your preferences on our website, may also be stored. More details on data storage when visiting a website can be found in the "Automatic Data Storage" section. Your consent declaration is recorded to ensure compliance with legal requirements.

Duration of Data Processing

If you unsubscribe from our email/newsletter list, we may retain your email address for up to three years based on our legitimate interests to provide evidence of your initial consent. This data will only be processed if needed to defend against potential claims.

However, if you confirm your consent for the newsletter subscription, you may request individual data deletion at any time. If you permanently object to the use of your data, we reserve the right to add your email address to a suppression list. As long as you voluntarily remain subscribed to our newsletter, we will retain your email address.

Right to Object

You can unsubscribe from our newsletter at any time by withdrawing your consent. This process usually takes only a few seconds or a click or two. Typically, a link to cancel your subscription is provided at the bottom of each email. If the link cannot be found, please contact us via email, and we will promptly cancel your subscription.

Legal Basis

The sending of our newsletter is based on your consent (Article 6(1)(a) GDPR). This means we are only allowed to send newsletters if you have actively subscribed. Additionally, we may send you promotional emails if you are a customer and have not objected to the use of your email address for direct marketing.

Details on specific email marketing services and how they process personal data are provided in the following sections if applicable.

Messenger & Communication Introduction

Messenger & Communication Privacy Policy Summary:

• Affected parties: Website visitors
• Purpose: To handle inquiries and general communication between us and you
• Processed data: Includes name, address, email address, phone number, general content data, and potentially your IP address.
• Storage duration: Varies based on the messenger and communication tools used.
• Legal basis: Article 6(1)(a) GDPR (consent), Article 6(1)(f) GDPR (legitimate interests), Article 6(1)(b) GDPR (contractual or pre-contractual obligations).

What Are Messenger & Communication Tools?

Our website offers various tools for communication, including messenger/chat functions, online/contact forms, email, and phone. These tools process and store your data to respond to your inquiries and any follow-up actions.

In addition to traditional communication channels like email or phone, we use chat and messenger tools. The most commonly used messenger is WhatsApp, but several specialized website messaging providers exist. End-to-end encryption is often employed, ensuring message content is not visible to providers. However, technical data such as device information and location settings may still be processed and stored.

Why Do We Use Messenger & Communication Tools?

Communication options are essential to provide you with the best possible service. Practical messenger and communication tools enable you to choose the method that suits you best. However, certain questions, such as contractual issues, may not be handled through chat or messenger for security reasons. In such cases, email or phone communication is recommended.

Even when using third-party platforms, we typically remain the primary data controller. However, in some cases, such as social media platforms, shared responsibility under Article 26 GDPR may apply. This shared responsibility will be explicitly highlighted if applicable.

Please note that using integrated features may involve data processing outside the EU, as many providers (e.g., WhatsApp) are American companies. This could make enforcing your rights regarding personal data more challenging.

What Data Is Processed?

The specific data processed depends on the provider of the messenger or communication tool. This usually includes:

• Name
• Address
• Phone number
• Email address
• Content entered in contact forms
• Device information and IP address

Data collected through messenger tools is also stored on the providers' servers. For detailed information on specific providers, consult their privacy policies.

How Long Is Data Stored?

The duration of data processing and storage depends on the tools used. Generally, personal data is processed only as long as necessary for providing our services. Data stored in cookies may have varying durations, ranging from being deleted immediately upon leaving the site to being retained for several years. Review the provider's privacy policy for specific storage durations.

Right to Object

You can withdraw your consent to data processing via cookies or third-party providers at any time. This can be done using our cookie management tool or other opt-out options. Managing cookies in your browser (enabling, disabling, or deleting) can also prevent data collection. For more information, refer to the "Consent" section of this document.

If messenger and communication functions involve cookies, see our general privacy policy on cookies for further information.

Legal Basis

Data processing through messenger and communication tools is based on your consent (Article 6(1)(a) GDPR). If the data is processed for pre-contractual or contractual obligations, the legal basis is Article 6(1)(b) GDPR. If no consent is given, we may rely on our legitimate interest (Article 6(1)(f) GDPR) in efficient and effective communication with you and other stakeholders.

Facebook Messenger Privacy Policy

We use the instant messaging service Facebook Messenger on our website. The service provider is the American company Meta Platforms Inc., and for Europe, the responsible entity is Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

What Is Facebook Messenger?

Facebook Messenger is a chat messaging feature developed by Facebook that allows users to send and receive text messages, voice and video calls, photos, and other media files with other Facebook users. When using Facebook Messenger, personal data such as your phone number, chat messages, sent photos, videos, profile data, address, and location are processed and stored on Facebook servers.

Why Do We Use Facebook Messenger?

We aim to stay in touch with you in the most convenient way, and services like Facebook Messenger are highly effective for this purpose. The platform remains one of the most popular social media networks, offering practical and seamless communication.

How Secure Is Data Transfer via Facebook Messenger?

Facebook processes your data, including in the U.S. Meta Platforms actively participates in the EU-U.S. Data Privacy Framework, ensuring secure and lawful data transfers of personal data from EU citizens to the U.S. For more information, visit:
EU-U.S. Data Privacy Framework Document.

Facebook also uses Standard Contractual Clauses (SCC) in accordance with Article 46(2) and (3) of the GDPR. SCCs are EU Commission-approved templates ensuring your data adheres to European data protection standards when transferred to third countries (e.g., the U.S.). Through the EU-U.S. Data Privacy Framework and SCCs, Facebook commits to maintaining the European level of data protection even when storing and managing your data in the U.S. Learn more here:
EU SCC Decision Document.

You can find Facebook's data processing terms, which reference the SCCs, here:
Facebook Data Processing Terms.

Additional information on how Facebook processes data is available in its Privacy Policy:
Facebook Privacy Policy.

Facebook Messenger Data Processing Agreement (DPA)

In compliance with Article 28 of the GDPR, we have entered into a Data Processing Agreement (DPA) with Facebook. This agreement is mandatory as Facebook processes personal data on our behalf. It ensures that Facebook only processes data according to our instructions and complies with GDPR requirements. The DPA with Facebook can be accessed here:
Facebook DPA Terms.

Social Media Overview

Social Media Privacy Policy Summary:

• Affected Parties: Website visitors
• Purpose: Showcase and optimize our services, connect with visitors and prospects, and advertise
• Processed Data: Includes phone numbers, email addresses, user behavior data, device information, and IP addresses.
  Details for each social media tool are provided below.
• Storage Duration: Varies by social media platform
• Legal Basis: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What Is Social Media?

Social media platforms allow registered users to create content, exchange it publicly or within specific groups, and network with other members. We are active on various social media platforms to connect with interested users and promote our products and services. Social media elements embedded on our website, such as "social buttons," enable you to switch directly to our social media presence.

Why Do We Use Social Media?

Social media platforms are central to online communication and interaction. They allow us to showcase our offerings, engage with users, and conduct targeted marketing and advertising. The data collected from your usage helps us refine our strategies based on user behavior and interests, often through web analytics and cookies.

While we remain responsible for data processing when using social media tools, joint responsibility with the platform providers may apply under Article 26 GDPR. Where this occurs, we will notify you and outline the agreement in relevant sections.

What Data Is Processed?

The data processed varies by platform but often includes phone numbers, email addresses, user activity (e.g., likes, follows, interactions), and device information. If you are logged into your social media account, this data may be linked to your profile.

To understand how your data is stored, processed, and how you can object to this, refer to the privacy policies of the respective platforms.

Data Processing Duration

The duration of data storage depends on the specific platform. For example, Facebook retains data until it is no longer needed. Other platforms may delete data, such as matched customer data, within two days. Generally, we only process personal data as long as it is necessary for providing our services unless extended retention is required by law (e.g., for accounting).

Right to Object

You may withdraw your consent for the use of cookies or third-party tools, such as embedded social media elements, at any time. This can be done via our cookie management tool or browser settings. For details on social media-related cookies, refer to our general privacy policy on cookies.

Legal Basis

The processing of your data is based on your consent under Article 6(1)(a) GDPR. In some cases, it may also be based on our legitimate interest under Article 6(1)(f) GDPR in efficient communication and user engagement. Many platforms use cookies to store and process data. For detailed information, refer to the privacy policies and cookie guidelines of the respective platforms.

For specific details about individual platforms, refer to the following sections of this policy.

Facebook Privacy Policy

Facebook Privacy Policy Summary
Affected Individuals: Website visitors
Purpose: Optimization of our services
Processed Data: Information such as customer data, user behavior, device details, and IP address.
More details can be found in the privacy policy below.
Retention Period: Until the data is no longer useful for Facebook’s purposes
Legal Basis: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What Are Facebook Tools?

On our website, we use select tools from Facebook. Facebook is a social media network operated by Meta Platforms Inc., or in Europe by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These tools enable us to provide the best possible offerings to you and others interested in our products and services.

When data is collected through our embedded Facebook elements or our Facebook Page (Fanpage), both we and Facebook Ireland Ltd. share responsibility. However, Facebook solely assumes responsibility for subsequent data processing. Our mutual obligations are outlined in a public agreement at Facebook's Controller Addendum, stating, for instance, that we must inform you clearly about the use of Facebook tools on our site. Additionally, we are responsible for integrating the tools securely into our website, while Facebook ensures data security within its products.

For questions about Facebook’s data collection and processing, you can contact Facebook directly. Should questions be addressed to us, we are obligated to forward them to Facebook.

Below, we provide an overview of the various Facebook tools, the data transmitted to Facebook, and how you can delete it.

Why Do We Use Facebook Tools on Our Website?

We aim to present our services and products to people genuinely interested in them. With Facebook Ads, we can reach precisely these individuals. To deliver relevant ads, Facebook needs data about user preferences and behaviors. This information allows Facebook to show ads tailored to users' interests.

What Data Is Stored by Facebook Tools?

Using specific Facebook tools may result in personal data, such as names, addresses, phone numbers, and IP addresses, being transmitted to Facebook. These details are hashed before being sent to Facebook for encryption purposes.

Additionally, Facebook collects "Event Data," such as your activity on our website (e.g., pages visited or products purchased). This data is not shared with third parties unless authorized or legally required.

Cookies play a significant role in data collection. Depending on the tools used and whether you are a Facebook member, various cookies may be set in your browser. Detailed information about Facebook cookies can be found here.

How Long and Where Is the Data Stored?

Facebook retains data only as long as it is necessary for its services and products. Data servers are distributed globally, but customer data is deleted within 48 hours after matching it with Facebook user data.

How Can I Delete My Data or Prevent Data Storage?

According to the General Data Protection Regulation (GDPR), you have the right to access, rectify, transfer, and delete your data.

Steps to Completely Delete Your Facebook Account:

1. Open Facebook and click on Settings in the top-right menu.
2. In the left-hand column, select Your Facebook Information.
3. Click on Deactivation and Deletion.
4. Choose Delete Account, then click Continue to Account Deletion.
5. Enter your password, click Continue, and confirm with Delete Account.

Managing Cookies:

Data collected via our site often involves cookies (e.g., from social plugins). You can manage or delete cookies in your browser settings. Depending on the browser you use, the process differs:

• Disable, delete, or manage individual/all cookies.
• Configure your browser to notify you before setting a cookie, enabling you to allow or deny each one.

For detailed instructions, consult the browser-specific cookie management guides.

Legal Basis for Data Processing

If you consent to the use of embedded Facebook tools, this consent serves as the legal basis under Article 6(1)(a) GDPR. Additionally, data may be stored based on our legitimate interests (Article 6(1)(f) GDPR) in ensuring effective communication with users and business partners. However, we only use these tools with your consent.

Many social media platforms, including Facebook, set cookies to store data. We recommend reviewing our cookie privacy policy and Facebook’s privacy or cookie policies:

• Facebook Privacy Policy
• Facebook Cookie Policy

Data Processing Outside the EU

Facebook processes data in the U.S., among other countries. Facebook/Meta is part of the EU-US Data Privacy Framework, ensuring proper and secure data transfer from EU citizens to the U.S. More details can be found here.

Additionally, Facebook uses Standard Contractual Clauses (SCCs) as outlined in Article 46(2) and (3) GDPR. These ensure compliance with European data protection standards even when data is stored or processed in third countries.

• EU SCC Implementation Decision
• Facebook Data Processing Terms

Using Facebook Login

Our site offers Facebook Login for convenient registration. When you log in with your Facebook credentials, data such as user behavior is transmitted to Facebook and may involve the use of cookies, such as:

• Name: fr
  • Purpose: Enables optimal functioning of social plugins.
  • Expiration: 3 months.
• Name: datr
  • Purpose: Identifies login activity and protects users.
  • Expiration: 2 years.
• Name: _js_datr
  • Purpose: Session tracking even without a Facebook account or while logged out.
  • Expiration: Session-based.

For further details on cookies, consult Facebook’s cookie policy.

The Facebook Login streamlines the registration process while allowing us to better tailor our offerings and advertising to your interests. For additional public data shared by Facebook, review their privacy guidelines.

• Your Profile Picture
• Email Address
• Friend Lists
• Button Interactions (e.g., "Like" Button)
• Date of Birth
• Language
• Place of Residence

In return, we provide Facebook with information about your activities on our website. This includes details about your device, the pages you visit on our site, and products you purchase.

By using Facebook Login, you consent to the processing of your data. You may revoke this consent at any time. For more information on Facebook’s data processing practices, please refer to Facebook’s Privacy Policy.

If you are logged in to Facebook, you can adjust your ad preferences directly under Facebook Ad Preferences.

Facebook Social Plugins Privacy Policy

Our website incorporates social plugins from Meta Platforms Inc. These are identifiable by Facebook’s logo, such as the "Like" button (thumbs-up icon) or a "Facebook Plugin" label. Each plugin has a unique function, with the most popular being the "Like" and "Share" buttons.

Facebook offers the following social plugins:

• Save Button
• Like, Share, Send, and Quote Buttons
• Page Plugin
• Comments Plugin
• Messenger Plugin
• Embedded Posts and Video Player
• Groups Plugin

For detailed usage of these plugins, visit Facebook’s Developer Page.

When visiting our site, if you are logged in to Facebook or have previously visited Facebook, at least one cookie is set in your browser. Your browser sends information via these cookies to Facebook when you visit our site or interact with the social plugins.

Collected Data

Facebook states that the following data is typically processed within 90 days and then deleted or anonymized:

• Your IP address
• The website you visited
• Date and time of your visit
• Browser details

To minimize data collection, log out of Facebook during your visit to our website. If you are not logged in or do not have a Facebook account, fewer cookies are sent, but data such as your IP address or visited pages might still be transmitted to Facebook.

For more details on Facebook’s use of cookies and data, please visit Facebook's Privacy Policy.

Cookies Example

• Name: dpr
  • Purpose: Ensures social plugins function correctly.
  • Expiration: End of session.
• Name: fr
  • Purpose: Enables plugins to work properly.
  • Expiration: 3 months.

Even non-Facebook users might encounter these cookies when interacting with social plugins.

Flickr Privacy Policy

We also use the Flickr platform, provided by Flickr Inc., based in the U.S. Note that data processing in the U.S. currently lacks the European Court of Justice’s guarantee of an adequate data protection level.

Legal Basis

To ensure compliance, Flickr relies on Standard Contractual Clauses (SCCs) as approved by the EU Commission (Article 46(2) and (3) GDPR). These clauses ensure data processed outside the EU maintains the same level of protection. For more details on SCCs, visit EU SCC Decision.

For Flickr's privacy practices, consult their Privacy Policy.

Gravatar Privacy Policy
Summary

• Affected Parties: Website visitors
• Purpose: Optimization of our services
• Data Processed: Including your encrypted email address, IP address, and the URL of our server
• Retention Period: Data is generally deleted when no longer needed for the provider’s services
• Legal Basis: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What is Gravatar?
Our website incorporates the Gravatar plugin by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). Gravatar, often pre-activated on WordPress websites, enables displaying user avatars (profile pictures) with posts or comments if the associated email address is registered on www.gravatar.com.

This function transmits data to Gravatar (Automattic Inc.), which is stored and processed there. Below, we explain what data is transmitted, how Gravatar uses it, and how you can manage or block data storage.

Gravatar stands for "Globally Recognized Avatar," a globally accessible profile picture tied to an email address. When users provide an email address registered with Gravatar, the associated avatar is automatically displayed with posts or comments.

Why Do We Use Gravatar?
Gravatar adds a personal touch to user interactions, helping commenters appear more recognizable and authentic online. By enabling this feature, we aim to enhance user experience and foster a more engaging, personalized community.

What Data is Stored by Gravatar?
When you submit a comment requiring an email address, WordPress checks if this address is linked to a Gravatar. To do so, it transmits your encrypted email address, IP address, and our server URL to Gravatar.

If a match is found, the associated avatar is displayed alongside the comment. For registered Gravatar users, additional data—such as browser type, unique device identifiers, preferred language, date/time of access, operating system, and mobile network information—may be transmitted, stored, and processed by Gravatar to improve services and gather usage insights.

Cookies Used by Gravatar:

• Name: gravatar
  • Purpose: Not specified in detail
  • Expiration: After 50 years
• Name: is-logged-in
  • Purpose: Indicates whether the user is logged in with a registered email
  • Expiration: After 50 years

Data Retention and Storage
Gravatar (Automattic) retains data only as long as needed for its services or as legally required. Logs like IP addresses, browser details, and operating systems are typically deleted after 30 days. Data may be stored on U.S.-based servers.

How to Delete or Prevent Data Storage

• Users can delete their Gravatar accounts or registered email addresses directly via the Gravatar website.
• To prevent data transmission to Gravatar, use an email address not registered with Gravatar when commenting.
• Manage or disable cookies via browser settings. Note that disabling cookies might limit comment functionality.

Legal Basis
Gravatar processes your data under GDPR Article 6(1)(a) (Consent) and Article 6(1)(f) (Legitimate Interests). Data processing in the U.S. follows the EU-US Data Privacy Framework, ensuring compliance with EU data protection standards.

For further details, consult:

• Automattic’s Privacy Policy
• General Gravatar information: Gravatar Overview

Instagram Privacy Policy

Summary of Instagram Privacy Policy

• Affected Parties: Website visitors
• Purpose: To optimize our service offerings
• Processed Data: Data related to user behavior, device information, and IP addresses (more details are provided below).
• Retention Period: Until Instagram no longer requires the data for its purposes
• Legal Basis: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What is Instagram?

Our website integrates features of Instagram, a social media platform owned by Instagram LLC (1601 Willow Rd, Menlo Park, CA 94025, USA). Instagram has been a subsidiary of Meta Platforms Inc. (formerly Facebook, Inc.) since 2012. Embedding Instagram features allows us to display content such as buttons, photos, or videos directly on our website. Whenever you visit a page with an embedded Instagram feature, data is transmitted, stored, and processed by Instagram.

Since Instagram operates using the same systems and technology as Facebook, the data collected may be shared and processed across the Facebook family of companies.

Below, we explain why Instagram collects data, what data it collects, and how you can manage or limit this data processing. Information is sourced from both Instagram and Meta's data policies.

Why Do We Use Instagram on Our Website?

Instagram has become a major social media platform in recent years, and we want to reflect this trend by integrating Instagram content on our website. This allows us to enrich our offerings with engaging, fun, or informative Instagram posts, enhancing your experience. Additionally, Instagram data helps us target relevant audiences with personalized advertising, particularly on Facebook platforms.

Instagram also uses the collected data for analytics, providing us with anonymized reports to understand user interests and preferences better.

What Data is Stored by Instagram?

When you access pages on our website with Instagram features, your browser connects to Instagram’s servers, transmitting data regardless of whether you have an Instagram account. Data collected may include:

• Information about the webpage you accessed
• Details about your device
• Purchases and ad interactions
• Your usage behavior

If you are logged into Instagram, the platform stores additional personal information. Facebook (and therefore Instagram) categorizes data into Customer Data (e.g., name, address, phone number, IP address) and Event Data (user behavior data). Customer Data is hashed before transmission, while Event Data is matched with Instagram's existing data about you.

Instagram also uses cookies to collect and process this data. Depending on the features and whether you have an Instagram account, the volume and type of data collected may vary.

Example Cookies Set by Instagram:

• csrftoken: Likely used for security purposes to prevent cross-site request forgery.
  • Expiration: 1 year
• mid: Creates a unique user ID for optimizing Instagram services.
  • Expiration: End of session
• fbsr_...: Stores login requests for Instagram app users.
  • Expiration: End of session
• rur: Ensures Instagram functionality.
  • Expiration: End of session
• urlgen: Used for Instagram marketing purposes.
  • Expiration: End of session

How Long and Where Are Data Stored?

Instagram shares data with Facebook companies and third-party partners globally. Most data is stored on Meta's servers, primarily located in the USA.

How Can I Delete or Prevent Data Storage?

Under GDPR, you have the right to access, transfer, correct, or delete your data. You can manage your data directly in Instagram’s settings. To delete all data, you must permanently delete your Instagram account.

Steps to delete an Instagram account:

1. Open the Instagram app.
2. Navigate to your profile, scroll down, and click "Help Center."
3. On the website, go to "Manage Your Account" and select "Delete Your Account."

Note: Content shared by others about you is not deleted when you delete your account.

You can also manage cookies in your browser settings to prevent data collection.

Legal Basis

Data processing through Instagram relies on your consent (Article 6(1)(a) GDPR) or Meta's legitimate interests (Article 6(1)(f) GDPR) in effective communication. Meta complies with the EU-US Data Privacy Framework to ensure secure data transfers. For more information, refer to:

• Instagram Privacy Center
• EU-US Data Privacy Framework
• Standard Contractual Clauses

Pinterest Privacy Policy

Summary of Pinterest Privacy Policy

• Affected Parties: Website visitors
• Purpose: Optimization of our services
• Processed Data: Data such as user behavior, device information, IP address, and search terms.
• More details are provided below in the privacy policy.
• Storage Duration: Until Pinterest no longer needs the data for its purposes
• Legal Basis: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What is Pinterest?

We use buttons and widgets from the social media platform Pinterest, operated by Pinterest Inc., located at 808 Brannan Street, San Francisco, CA 94103, USA. For the European region, Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) is responsible for data protection matters.

Pinterest is a social network specializing in graphic representations and photographs. The name comes from the words "pin" and "interest." Users can share various hobbies and interests on Pinterest and view profiles with images either openly or in defined groups.

Why Do We Use Pinterest?

Pinterest has been around for several years and continues to be one of the most visited and appreciated social media platforms. It is especially suited for our industry as it is primarily known for beautiful and interesting images. Therefore, we are also active on Pinterest, aiming to showcase our content beyond our website. The data collected can also be used for advertising purposes so that we can display targeted ads to people interested in our services and products.

What Data Does Pinterest Process?

Pinterest may store so-called log data, including information about your browser, IP address, the address of our website, activities performed on it (e.g., clicking the save or pin button), search histories, date and time of requests, and cookie and device data. If you interact with an embedded Pinterest function, cookies may also be set in your browser to store various data. Typically, the aforementioned log data, default language settings, and clickstream data are stored in cookies. Clickstream data refers to Pinterest's information about your website behavior.

If you have a Pinterest account and are logged in, the data collected from our page may be linked to your account and used for advertising purposes. If you interact with Pinterest's embedded functions, you are usually redirected to the Pinterest site. Below is a sample of cookies that may be set in your browser:

• Name: _auth
  Value: 0
  Purpose: This cookie is used for authentication, such as storing your "username."
  Expiration: After one year

• Name: _pinterest_referrer
  Value: 1
  Purpose: This cookie stores the fact that you arrived at Pinterest via our website, storing the URL.
  Expiration: At session end

• Name: _pinterest_sess
  Value: …9HRHZvVE0rQlUxdG89
  Purpose: This cookie helps with Pinterest login and includes user IDs, authentication tokens, and timestamps.
  Expiration: After one year

• Name: _routing_id
  Value: “8d850ddd-4fb8-499c-961c-77efae9d4065122693978-8”
  Purpose: This cookie contains a value used to identify a specific routing target.
  Expiration: After one day

• Name: cm_sub
  Value: denied
  Purpose: This cookie stores a user ID and a timestamp.
  Expiration: After one year

• Name: csrftoken
  Value: 9e49145c82a93d34fd933b0fd8446165122693978-1
  Purpose: Likely used for security reasons to prevent request forgery, though further details are unclear.
  Expiration: After one year

• Name: sessionFunnelEventLogged
  Value: 1
  Purpose: No further details available.
  Expiration: After one day

How Long and Where Are the Data Stored?

Pinterest generally stores collected data until it is no longer needed for the company's purposes. Once data retention is no longer necessary to comply with legal requirements, the data will either be deleted or anonymized so that it is no longer identifiable. Data may also be stored on servers in the United States.

Right to Object

You have the right to withdraw your consent for the use of cookies or third-party providers like Pinterest at any time. This can be done through our cookie management tool or other opt-out features. For example, you can prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Since embedded Pinterest elements may use cookies, we recommend reviewing our general cookie privacy statement. To understand which data is stored and processed, please read the privacy policies of the respective tools.

Legal Basis

If you consent to the processing and storage of your data through embedded social media elements, this consent serves as the legal basis for the data processing (Article 6(1)(a) GDPR). Your data may also be stored and processed based on our legitimate interest (Article 6(1)(f) GDPR) in effective and efficient communication with you or other customers and partners. We only use the tool if you have granted consent. Most social media platforms also set cookies in your browser to store data. We recommend reading our cookie privacy statement and reviewing the privacy policy or cookie guidelines of the respective service provider.

Pinterest processes data in the United States. Please note that, according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the U.S., which may pose risks to the legality and security of data processing.

For data processing with recipients in third countries (outside the European Union, Iceland, Liechtenstein, Norway—especially the U.S.) or data transfer to these countries, Pinterest uses Standard Contractual Clauses (Article 46(2) and (3) GDPR). These clauses are templates provided by the EU Commission to ensure that your data complies with European data protection standards even when transferred and stored in third countries like the U.S. Pinterest commits to ensuring that European privacy standards are maintained when processing your data, even if the data is stored, processed, and managed in the U.S. These clauses are based on an EU Commission implementation decision. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

For more information on Pinterest's Standard Contractual Clauses, visit https://policy.pinterest.com/de/privacy-policy#section-residents-of-the-eea.

We have tried to provide you with the most important information about data processing by Pinterest. You can read more about Pinterest’s data policies at https://policy.pinterest.com/de/privacy-policy.

Snapchat Privacy Policy

Summary of Snapchat Privacy Policy

• Affected Parties: Website visitors
• Purpose: Optimization of our services
• Processed Data: Data such as user behavior, device information, and IP address
• More details can be found below in the privacy policy.
• Retention Period: Depends on the type of data
• Legal Bases: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What is Snapchat?
We use integrations of the messaging and social media service Snapchat on our website. The service provider is the American company Snap Inc., 2772 Donald Douglas Loop N, Santa Monica (HQ), CA, USA.

Snapchat allows users to create "Snaps," short images or videos, and share them with friends or followers. Snapchat is particularly popular among younger people. These "Snaps" are deleted after a limited time, unlike other social media tools. Depending on the user's preferences, this time can be set anywhere from a few seconds to 24 hours. Snapchat also offers features like group chats, video calls, and a "Discover" section for media companies.

Why do we use Snapchat on our website?
We have integrated Snapchat features on our website to highlight Snapchat content and offer you the opportunity to follow us on Snapchat. This allows us to stay in contact with you beyond our website presence. By integrating Snapchat content, we also provide visitors who are not on Snapchat a glimpse into the Snapchat world. Thus, we view the integration as part of our overall offering on the website.

What data is processed by Snapchat?
When you view or interact with Snapchat content on our website, Snapchat can collect information about your user behavior and device. This may include data such as your IP address, browser type, operating system, location, language settings, and other technical information. Snapchat may also use cookies and similar technologies to gather information and personalize your user experience.

If you have or create a Snapchat account, additional information may be collected and processed. In this case, you voluntarily provide data such as your name, username, email address, phone number, and date of birth. If you make a purchase within the app, you must also provide payment details. All this information is processed by Snapchat if you provide it. If you actively use the service with your account, all information sent through Snapchat, such as chats, messages, images, and videos, will be processed.

How long and where is the data stored?
Snapchat stores different data for varying periods, and Snapchat servers are distributed worldwide in different regions. This means your data may also be processed in the USA. As mentioned above, the retention period of "Snaps" can be partially selected in the settings. Most messages sent through the service are automatically deleted from the servers once they are received or expired. However, some data is stored for much longer. This includes account information such as name, phone number, or email address. The retention period of location data depends on its accuracy and which Snapchat service is being used.

You can find a good overview of the retention periods of various Snapchat data at Snapchat Help.

How can I delete my data or prevent data storage?
If you have a Snapchat account, you can directly manage your privacy settings on Snapchat and determine the retention period for various contents. For example, in your Snapchat account settings, you can set whether "Snaps" are deleted after a few seconds or only after 24 hours. Additionally, you can request that Snapchat delete your personal data. However, the Snapchat privacy policy states that while most data will be deleted, there may be legal reasons preventing data deletion, and some data may still be stored.

Moreover, you can manage and disable cookies that Snapchat may set in your web browser to limit data collection. This is also possible without a Snapchat account. However, please note that this may affect the functionality of our website.

Legal Basis
If you have consented to the processing and storage of your data by Snapchat, this consent serves as the legal basis for data processing (Article 6(1)(a) GDPR). Generally, your data is also stored and processed based on our legitimate interest (Article 6(1)(f) GDPR) in maintaining effective and prompt communication with you or other customers and business partners. We only use the embedded Snapchat features to the extent you have granted consent. Snapchat may also set cookies in your browser to store data. Therefore, we recommend reading our cookie privacy text carefully and reviewing the privacy policy or cookie guidelines of the respective service provider.

Snap processes data from you, including in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may involve various risks regarding the legality and security of data processing.

As the basis for data processing by recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, particularly in the USA) or data transfer to those countries, Snap uses so-called Standard Contractual Clauses (Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission to ensure that your data complies with European data protection standards when transferred to third countries (such as the USA) and stored there. By using these clauses, Snap commits to maintaining European data protection levels when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementation decision by the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: EUR-Lex.

For more information on Snap’s Standard Contractual Clauses, please visit Snap Terms.

For more information on the data processed by Snapchat, please refer to the Privacy Policy at Snapchat Privacy Policy.

TikTok Privacy Policy

TikTok Privacy Policy Summary

• Affected Parties: Website visitors
• Purpose: Optimization of our service
• Processed Data: Data such as your IP address, browser data, and the date and time of your page visit may be stored.
• Storage Duration: Varies depending on settings.
• Legal Basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate Interests)

What is TikTok?

We use TikTok integration on our website. The service provider is the Chinese company Beijing Bytedance Technology Ltd. For the European region, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, is responsible. TikTok is a popular social media platform, especially among young people, where users can create, share, and view short video clips.

In this privacy policy, we inform you about the data processed by TikTok, how long the data is stored, and how you can manage your privacy settings.

Why do we use TikTok on our website?

We have integrated TikTok into our website so that you can watch TikTok videos and interact with them if you wish. TikTok is especially known for funny and creative content, and we don't want to withhold such content from you. After all, we also enjoy watching creative TikTok videos ourselves.

What data is processed by TikTok?

When you watch TikTok videos on our website or interact with them, TikTok may collect information about your usage behavior and your device. This can include data such as your IP address, browser type, operating system, location, and other technical details. TikTok may also use cookies and similar technologies to collect information and personalize your user experience.

If you have a TikTok account, additional information may also be collected and processed, such as user details (name, date of birth, email address) and data about your interactions with other TikTok users.

How long and where is the data stored?

The storage duration and locations of the data collected by TikTok may vary significantly and are subject to TikTok’s privacy policies. TikTok may also store data on servers in the USA and other countries. The storage duration generally depends on legal requirements and internal policies. However, we have not yet been able to obtain precise information on how long data is stored. We will, of course, notify you as soon as we have more details.

How can I delete my data or prevent data storage?

If you have a TikTok account, you can manage your privacy settings directly on TikTok. You can specify which information can be shared and which cannot. Additionally, you can manage and disable cookies in your web browser to limit data collection. This is also possible without a TikTok account. Please note that this may affect the functionality of our website and your TikTok experience.

Legal Basis

If you have consented to the processing and storage of your data by TikTok, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). In general, your data is also processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in maintaining fast and effective communication with you or other customers and business partners. We use the embedded social media elements only if you have provided consent. TikTok may also set cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy notice regarding cookies and review the privacy policy or cookie guidelines of the respective service provider.

TikTok processes data in the USA as well. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may pose various risks to the legality and security of the data processing.

For data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, specifically the USA), TikTok uses Standard Contractual Clauses (Art. 46 para. 2 and 3 GDPR). These clauses are model templates provided by the EU Commission and are intended to ensure that your data meets European data protection standards even if transferred and stored in third countries (e.g., the USA). By agreeing to these clauses, TikTok commits to maintaining the European level of data protection even if data is stored, processed, and managed in the USA. These clauses are based on an EU Commission Implementing Decision. You can find the decision and the corresponding Standard Contractual Clauses here: EU Standard Contractual Clauses.

For more information about TikTok's privacy policy and data collection, visit the TikTok website: TikTok Privacy Policy and TikTok General Information.

---

Blogs and Publication Media Privacy Policy

Blogs and Publication Media Privacy Policy Summary

• Affected Parties: Website visitors
• Purpose: Display and optimization of our service, communication between website visitors, security measures, and management
• Processed Data: Data such as contact information, IP addresses, and published content.
• Storage Duration: Depends on the tools used
• Legal Basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate Interests), Art. 6 para. 1 S. 1 lit. b GDPR (Contract)

What are Blogs and Publication Media?

We use blogs or other communication tools on our website that allow communication both ways: between us and you, and vice versa. Data may also be stored and processed by us for this purpose. This may be necessary to display content, facilitate communication, and enhance security. In our privacy text, we explain generally what data might be processed. Exact details depend on the tools and functions used. You will find precise information on data processing in the privacy notices of individual providers.

Why do we use Blogs and Publication Media?

Our main goal with our website is to offer you interesting and exciting content, and we value your opinions and content as well. We aim to create good interactive communication between us and you. Through various blogs and publication options, we can achieve this. For example, you can comment on our content, respond to other comments, or, in some cases, write your own posts.

What data is processed?

The data processed depends on the communication functions we use. Commonly, the IP address, username, and the published content are stored. This is primarily done to ensure security, prevent spam, and address unlawful content. Cookies may also be used for data storage. These are small text files stored in your browser with information. More details about the collected and stored data can be found in the relevant sections of our privacy statement and the privacy policy of the respective provider.

Duration of Data Processing

We will inform you about the duration of data processing below, if we have further information on it. For example, post and comment functions store data until you withdraw consent for data storage. In general, personal data is only stored as long as necessary to provide our services.

Right to Object

You have the right at any time to withdraw your consent to the use of cookies or third-party communication tools. This can be done via our cookie management tool or other opt-out functions. You can also prevent data collection by managing, disabling, or deleting cookies in your browser.

As publication media may also use cookies, we recommend reading our general privacy statement about cookies. To learn which data is stored and processed, you should read the privacy policies of the respective tools.

Legal Basis

We use communication tools primarily based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in maintaining fast and effective communication with you or other customers, business partners, and visitors. If the tools are used for the execution or initiation of contractual relationships, the legal basis is also Art. 6 para. 1 S. 1 lit. b GDPR.

Certain processes, particularly the use of cookies and the use of comment or messaging functions, require your consent. If and to the extent you have consented to the processing and storage of your data by embedded publication media, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Most of the communication functions we use set cookies in your browser to store data. Therefore, we recommend reading our privacy text about cookies carefully and reviewing the privacy policy or cookie guidelines of the respective service provider.

Information about specific tools can be found in the following sections, if available.

Blog Posts and Comment Functions Privacy Policy

There are various online communication tools that we use on our website. For example, we use blog posts and comment functions. This gives you the opportunity to comment on or write posts. If you use this function, your IP address may be stored for security reasons. This helps us protect ourselves from illegal content, such as insults, unauthorized advertising, or prohibited political propaganda. To identify whether comments are spam, we may also store and process user data based on our legitimate interest. If we conduct a survey, we also store your IP address for the duration of the survey to ensure that all participants vote only once. Cookies may also be used for the purpose of storing data. All data we store from you (such as content or information about your person) remains stored until you object.

Online Marketing Privacy Policy Introduction

Online Marketing Privacy Policy Summary

• Affected parties: Website visitors
• Purpose: Evaluation of visitor information to optimize the web offering.
• Processed data: Access statistics, including data such as access locations, device data, duration and time of access, navigation behavior, click behavior, and IP addresses. Personal data such as name or email address may also be processed. More details can be found in the online marketing tool used.
• Storage duration: Depends on the online marketing tools used
• Legal bases: Art. 6 (1) (a) GDPR (Consent), Art. 6 (1) (f) GDPR (Legitimate Interests)

What is Online Marketing?

Online marketing refers to all measures carried out online to achieve marketing goals, such as increasing brand awareness or making a business deal. Our online marketing efforts aim to make people aware of our website. In order to show our offering to as many interested people as possible, we engage in online marketing. This usually involves online advertising, content marketing, or search engine optimization. To use online marketing efficiently and purposefully, personal data is also stored and processed. The data helps us show our content only to those who are truly interested and allows us to measure the success of our online marketing efforts.

Why Do We Use Online Marketing Tools?

We want to show our website to everyone who is interested in our offering. We are aware that this is not possible without consciously implemented measures, which is why we engage in online marketing. There are various tools that help us with our online marketing efforts and provide improvement suggestions based on data. This allows us to better target our campaigns to our target audience. The goal of these online marketing tools is ultimately to optimize our offering.

What Data is Processed?

For our online marketing to work and to measure the success of measures, user profiles are created, and data is stored, for example, in cookies (small text files). Using this data, we can not only place traditional ads but also directly adjust our website content to present it in a way that is preferred by you. Various third-party tools offer these functions and collect and store data from you. Cookies may store which pages you visited on our website, how long you viewed those pages, which links or buttons you clicked, or from which website you came to ours. Technical information may also be stored, such as your IP address, the browser you use, the device from which you visit our website, and the time when you accessed and left our website. If you have agreed that we can also determine your location, we may also store and process this data.

Your IP address is stored in a pseudonymized form (i.e., shortened). Identifiable data, such as name, address, or email address, is also stored in pseudonymized form within the context of advertising and online marketing procedures. Thus, we cannot identify you as a person, but we only store the pseudonymized data in the user profiles.

Cookies may also be used on other websites that work with the same advertising tools, analyzed, and used for advertising purposes. The data may also be stored on the servers of the advertising tool providers.

In exceptional cases, identifiable data (such as name, email address, etc.) may be stored in user profiles. This occurs if you are a member of a social media channel that we use for our online marketing measures, and the network links previously entered data with the user profile.

For all advertising tools we use that store your data on their servers, we always receive only aggregated information and never data that identifies you as an individual. The data only shows how well the advertising measures performed. For example, we can see which actions led you or other users to visit our website and purchase a product or service. Based on these analyses, we can improve our advertising offerings in the future and better tailor them to the needs and wishes of interested parties.

Data Processing Duration

We will inform you about the duration of data processing further below, if we have more information on that. Generally, we process personal data only as long as it is necessary to provide our services and products. Data stored in cookies is stored for varying lengths of time. Some cookies are deleted once you leave the website, while others can be stored in your browser for several years. You can find detailed information about the cookies used by each provider in their respective privacy policies.

Right to Object

You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. This can be done either through our cookie management tool or other opt-out functions. For example, you can prevent data collection by cookies by managing, deactivating, or deleting cookies in your browser. The lawfulness of processing until withdrawal remains unaffected.

Since online marketing tools generally use cookies, we also recommend reading our general cookie privacy policy. To learn exactly which data is stored and processed, you should read the privacy policies of the respective tools.

Legal Basis

If you have given consent for third-party providers to be used, the legal basis for the respective data processing is your consent. This consent constitutes the legal basis for processing personal data, as it occurs when using online marketing tools, according to Art. 6 (1) (a) GDPR (Consent).

Additionally, we have a legitimate interest in measuring online marketing measures in anonymized form to optimize our offering and actions based on the data. The corresponding legal basis is Art. 6 (1) (f) GDPR (Legitimate Interests). We only use the tools as long as you have given consent.

Facebook Custom Audiences Privacy Policy

We use Facebook Custom Audiences on our website, a server-side event tracking tool. The service provider is the American company Meta Platforms Inc. For the European region, Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is responsible.

Facebook processes data from you, including in the USA. Facebook (Meta Platforms) is an active participant in the EU-US Data Privacy Framework, which regulates the proper and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Additionally, Facebook uses so-called Standard Contractual Clauses (Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are meant to ensure that your data still complies with European data protection standards when transferred and stored in third countries (such as the USA). Facebook is committed to complying with European data protection standards during the processing of your relevant data, even if the data is stored, processed, and managed in the USA. You can find the decision and the relevant Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

The Facebook data processing terms that refer to the Standard Contractual Clauses can be found at https://www.facebook.com/legal/terms/dataprocessing.

More about the data processed through the use of Facebook Custom Audiences can be found in their privacy policy at https://www.facebook.com/about/privacy.

Google AdMob Privacy Policy

We use Google AdMob on our website, a mobile advertising tool. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes data from you, including in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the proper and secure transfer of personal data of EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Additionally, Google uses Standard Contractual Clauses (Art. 46 (2) and (3) GDPR). These clauses are templates provided by the EU Commission to ensure that your data complies with European data protection standards when transferred and stored in third countries (such as the USA). Google is committed to adhering to European data protection standards in the processing of your data. You can find the decision and relevant Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

The data processing terms for Google advertising products (Google Ads Controller-Controller Data Protection Terms), which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

More about the data processed through the use of Google AdMob can be found in their privacy policy at https://policies.google.com/privacy?hl=de.

Google Marketing Platform (formerly DoubleClick) Privacy Policy

We use Google Marketing Platform products on our website. These include various marketing tools such as Data Studio, Surveys, Campaign Manager 360, Display & Video 360, and Search Ads 360. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes your data, including in the USA. Google is an active participant in the EU-US Data Privacy Framework, which ensures the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Additionally, Google uses so-called Standard Contractual Clauses (Art. 46, Para. 2 and 3 of the GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission to ensure that your data complies with European data protection standards, even when transferred and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google commits to adhering to the European data protection level when processing your relevant data, even when the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the relevant Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found at: https://business.safety.google/intl/de/adsprocessorterms/.

For more information about the data processed through Google Marketing Platform products, you can refer to the Privacy Policy at: https://policies.google.com/privacy?hl=en.

HubSpot Privacy Policy

We use HubSpot on our website, a tool for digital marketing. The service provider is the American company HubSpot, Inc., 25 First Street, 2nd Floor Cambridge, MA, USA. The company also has an office in Ireland at 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.

HubSpot processes your data, including in the USA. HubSpot is an active participant in the EU-US Data Privacy Framework, which ensures the correct and secure transfer of personal data of EU citizens to the USA. More information can be found at: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Furthermore, HubSpot uses so-called Standard Contractual Clauses (Art. 46, Para. 2 and 3 of the GDPR). Standard Contractual Clauses (SCC) are model templates provided by the EU Commission to ensure that your data complies with European data protection standards, even when transferred and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, HubSpot commits to adhering to the European data protection level when processing your relevant data, even when the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the relevant Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Data Processing Agreement (DPA) that corresponds to the Standard Contractual Clauses can be found at: https://legal.hubspot.com/dpa.

For more information about the data processed through HubSpot, you can refer to the Privacy Policy at: https://legal.hubspot.com/de/privacy-policy.

HubSpot Data Processing Agreement (DPA)

We have concluded a Data Processing Agreement (DPA) with HubSpot in accordance with Article 28 of the General Data Protection Regulation (GDPR). You can read more about what a DPA is and what it contains in our general section “Data Processing Agreement (DPA).”

This agreement is legally required because HubSpot processes personal data on our behalf. It clarifies that HubSpot may only process the data they receive from us based on our instructions and must comply with the GDPR. The link to the Data Processing Agreement (DPA) can be found at: https://legal.hubspot.com/dpa.

LinkedIn Insight-Tag Privacy Policy

LinkedIn Insight-Tag Privacy Policy Summary

Affected Parties: Visitors to the website
Purpose: Analysis of visitor information to optimize the web offering
Processed Data: Access statistics, including data such as location of access, device data, access duration, time, navigation behavior, click behavior, and IP addresses. More details are available below and in LinkedIn's privacy policy.
Retention Period: Direct identifiers through LinkedIn Insight-Tag are removed within seven days
Legal Bases: Art. 6 Para. 1 (a) GDPR (Consent), Art. 6 Para. 1 (f) GDPR (Legitimate Interests)

What is LinkedIn Insight-Tag?

We use the LinkedIn Insight-Tag conversion tracking tool on our website. The service provider is the American company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For data protection aspects in the European Economic Area (EEA), the EU, and Switzerland, the responsible company is LinkedIn Ireland Unlimited (Wilton Place, Dublin 2, Ireland).

By embedding the tracking tool, data can be sent, stored, and processed by LinkedIn. In this privacy policy, we aim to inform you about what data is involved, how the network uses this data, and how you can manage or prevent the data storage.

LinkedIn is the largest social network for business contacts. Unlike Facebook, which focuses on social interaction, LinkedIn focuses solely on building business relationships. Companies can showcase their services and products on the platform and build business connections. Many people also use LinkedIn for job searches or to find suitable employees for their company. In Germany alone, the network has over 11 million members. In Austria, it has approximately 1.3 million members.

The LinkedIn conversion tracking tool is a small JavaScript code embedded on our website. This function helps us better tailor our advertising offer to your interests and needs. We aim to ensure that our advertising campaigns reach only those people who are interested in our offerings. With the LinkedIn Insight-Tag, we can collect detailed information about your website behavior if you are a LinkedIn member. This helps us understand which keywords, ads, ad groups, and campaigns on LinkedIn lead to desired customer actions. We can see how many customers interact with our ads on a device and then complete a conversion. This data allows us to calculate our return on investment, measure the success of individual advertising efforts, and optimize our online marketing measures. Additionally, we can use the data to make our website more attractive to you and further personalize our advertising offers to your needs.

What data is stored by LinkedIn Insight-Tag?

As mentioned above, we have embedded a conversion tracking tag or code snippet on our website to better analyze certain user actions. When you click on one of our LinkedIn ads, a cookie may be stored on your computer (typically in the browser) or mobile device. LinkedIn processes data using a combination of cookies and server-side functions.

Once you complete an action on the website, LinkedIn recognizes the cookie and stores your action as a "conversion." As long as you are browsing our website, both we and LinkedIn can identify that you came to our site through our LinkedIn ad. The cookie is read, and the conversion data is sent back to LinkedIn. It is also possible that additional cookies are used to measure conversions.

Along with your IP address, other information such as URL, referrer URL, device and browser properties, and timestamps are stored. The IP address is considered personal data and is anonymized or hashed by LinkedIn.

You may be wondering, what exactly are conversions? A conversion occurs when you go from being a purely interested website visitor to an engaged visitor. This happens when you click on our ad and then take another action, such as visiting our website or purchasing a product. Using LinkedIn's conversion tracking tool, we capture what happens after a user clicks on our LinkedIn ad. For example, we can see whether products are purchased, services are used, or if you sign up for our newsletter.

Additionally, demographic data you provide in your LinkedIn profile may be processed. This includes information about your profession, geographical location, industry, or company.

We receive statistical reports from LinkedIn, which show, for example, the total number of users who clicked on our ad and which campaigns performed well.

How long and where is the data stored?

In general, LinkedIn retains your personal data for as long as it deems necessary to provide its services. However, LinkedIn will delete your personal data once you delete your account. In certain exceptional cases, LinkedIn may retain some data in aggregated and anonymized form even after account deletion.

Direct identifiers through LinkedIn Insight-Tag are removed within seven days to pseudonymize the data. The resulting pseudonymized data is deleted within 180 days.

The data is stored on various servers in the United States and likely also in Europe.

How can I delete my data or prevent data storage?

You have the right to access and delete your personal data at any time.

You can opt out of LinkedIn's conversion tracking. If you disable the cookie for Google conversion tracking via your browser or do not consent to data processing via the Consent Manager (pop-up), you block conversion tracking. In this case, you will not be included in the tracking statistics. You can change your cookie settings in your browser at any time. The procedure varies slightly by browser. Under the "Cookies" section, you'll find links to guides for the most common browsers.

You can also manage, modify, and delete your data in your LinkedIn account. Additionally, you can request a copy of your personal data from LinkedIn.

To access your LinkedIn account data:

1. Click on your profile icon in LinkedIn and choose "Settings & Privacy."
2. Go to the "Privacy" section and click "Change" under "How LinkedIn Uses Your Data."
3. You can quickly download selected data about your web activity and account history.

Legal Basis

If you have consented to the use of LinkedIn Insight-Tag, the legal basis for the corresponding data processing is your consent. According to Art. 6 (1) (a) GDPR (Consent), this consent serves as the legal basis for processing personal data that may be collected through the LinkedIn Insight-Tag.

Additionally, we have a legitimate interest in using LinkedIn Insight-Tag to optimize our online services and marketing efforts. The legal basis for this is Art. 6 (1) (f) GDPR (Legitimate Interests). However, we only use LinkedIn Insight-Tag to the extent that you have granted consent.

LinkedIn processes your data, including in the United States. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the United States. This may involve various risks for the legality and security of data processing.

As a basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, particularly in the United States) or for data transfers to such countries, LinkedIn uses Standard Contractual Clauses (SCC) under Art. 46 (2) and (3) GDPR. These clauses are model templates provided by the European Commission and are intended to ensure that your data remains in compliance with European data protection standards, even when transferred and stored in third countries (such as the United States). LinkedIn commits to complying with European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the U.S. These clauses are based on an implementation decision by the European Commission. You can find the decision and the relevant SCCs here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

For more information on LinkedIn's Standard Contractual Clauses, visit https://de.linkedin.com/legal/l/dpa or https://www.linkedin.com/legal/l/eu-sccs.

More information about LinkedIn Insight-Tag can be found at https://www.linkedin.com/help/linkedin/answer/a427660. More details about the data processed through the use of LinkedIn Insight-Tag are available in LinkedIn's Privacy Policy at https://de.linkedin.com/legal/privacy-policy.

PayPal Marketing Solutions Privacy Policy

PayPal Marketing Solutions Privacy Policy Summary

• Affected: Website visitors
• Purpose: Optimizing our services
• Processed data: Information such as IP address, registration and contact details, identification and signature data, payment information, etc. More details are provided below in this privacy policy.
• Storage duration: Data is stored for as long as necessary to fulfill obligations and purposes.
• Legal basis: Art. 6 (1) (a) GDPR (Consent), Art. 6 (1) (f) GDPR (Legitimate Interests)

What is PayPal Marketing Solutions?

We use PayPal Marketing Solutions on our website. The service provider is PayPal Inc. The European entity responsible for this service is PayPal Europe (S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg).

PayPal Marketing Solutions allows us to conduct targeted marketing campaigns to better promote our services or products. Founded in 1998, PayPal is one of the largest and most well-known online payment service providers globally, with over 325 million active customers. PayPal Marketing Solutions is an additional service offered by the company beyond payment processing.

Why do we use PayPal Marketing Solutions on our website?

We use PayPal Marketing Solutions to provide you with the best possible service and user experience (UX) on our website. This also means delivering content and advertisements that truly interest you. PayPal Marketing Solutions enables us to tailor ads and other content to your preferences and interests. This helps us deliver better content and achieve our business goals more effectively and efficiently.

What data is processed by PayPal Marketing Solutions?

PayPal distinguishes various categories of personal data processed through the service. These include registration and contact details, identification and signature data, payment information, imported contact information, data from your profile, device data like your IP address, location data, and derived data. Derived data refers to information derived from transactions or other data, such as purchasing habits, behavioral patterns, creditworthiness, or personal preferences.

Additionally, PayPal and its partners use tracking technologies such as cookies, pixel tags, web beacons, and widgets to recognize you as a user, customize content, and conduct analyses for interest-based advertising.

How long and where are the data stored?
In principle, PayPal stores data for as long as necessary to fulfill its obligations and within the scope of the intended purpose. Personal data necessary for the customer relationship will be stored for up to 10 years after the relationship ends. If PayPal is subject to a legal obligation, the retention period for personal data follows the applicable law (e.g., insolvency law). PayPal also stores personal data as long as necessary if retention is advisable in relation to legal disputes.

Since PayPal is a global company, it has data centers worldwide where your data may be stored. This means your data may also be stored outside your country and outside the scope of the GDPR on PayPal servers.

How can I delete my data or prevent data storage?
You have the right to access, correct, delete, or restrict the processing of your personal data at any time. You can also withdraw your consent for data processing at any time.

If you want to deactivate, delete, or manage cookies in general, you can find the relevant links to instructions for the most common browsers under the "Cookies" section.

Legal Basis
The use of PayPal Marketing Solutions requires your consent, which we obtain through our cookie pop-up. According to Article 6 (1) (a) GDPR (Consent), this consent serves as the legal basis for the processing of personal data, as may occur with the collection by PayPal Marketing Solutions.

In addition to consent, we also have a legitimate interest in analyzing website visitor behavior and improving our services both technically and economically. The legal basis for this is Article 6 (1) (f) GDPR (Legitimate Interests). We use PayPal Marketing Solutions only to the extent that you have granted consent.

PayPal processes your data, including in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This could involve various risks regarding the lawfulness and security of data processing.

As a basis for data processing with recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, particularly in the USA), or for data transfer to these countries, PayPal uses Standard Contractual Clauses (Article 46, Paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission to ensure that your data continues to meet European data protection standards when transferred and stored in third countries (e.g., the USA). With these clauses, PayPal commits to ensuring the European level of data protection when processing relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementation decision by the EU Commission. You can find the decision and the corresponding SCCs here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

For more information about the Standard Contractual Clauses at PayPal and the data processed by PayPal Marketing Solutions, refer to the Privacy Policy at https://www.paypal.com/webapps/mpp/ua/privacy-full.

---

Affiliate Programs Introduction
Affiliate Programs Privacy Policy Summary
Affected Parties: Website visitors
Purpose: Economic success and optimization of our services
Processed Data: Access statistics, including location data, device data, access duration and time, navigation behavior, click behavior, and IP addresses. Personal data such as name or email address may also be processed.
Retention Period: Personal data is generally stored by affiliate programs until it is no longer needed.
Legal Basis: Article 6 (1) (a) GDPR (Consent), Article 6 (1) (f) GDPR (Legitimate Interests)

What are Affiliate Programs?
We use affiliate programs from various providers on our website. When using an affiliate program, your data may be transferred, stored, and processed by the respective affiliate program provider. This privacy notice provides a general overview of data processing by affiliate programs and explains how you can stop or withdraw consent for data transmission.

Each affiliate program (also known as an affiliate marketing program) is based on the principle of commission-based mediation. On our website, a link or an advertisement with a link is placed. If you click on it and purchase a product or service through this link, we receive a commission (advertising cost reimbursement).

Why do we use affiliate programs on our website?
Our goal is to provide you with a pleasant experience with many helpful contents. We invest considerable time and effort into developing our website. With affiliate programs, we can be compensated for our work. Every affiliate link is of course relevant to our topic and shows offers that you might be interested in.

Which data is processed?
To track whether you clicked on one of our affiliate links, the affiliate program provider must be informed that it was you who followed the link from our website. Correct attribution of affiliate program links to actions (such as a purchase, conversion, impression, etc.) is necessary for commission billing to work.

For this attribution, a value may be appended to a link (in the URL) or information stored in cookies. This typically stores data like the referring page, the time of the click, a reference to our website, the offer concerned, and a user ID.

When you interact with products and services from an affiliate program, the provider will also collect data about you. The exact data stored depends on the individual providers. For example, the Amazon affiliate program distinguishes between active and automatic information. Active information includes name, email address, phone number, age, payment information, or location. Automatically stored information may include user behavior, IP address, device information, and the URL.

Data Retention Duration
We will inform you about the data retention duration below if we have further information. In general, personal data is processed only as long as necessary to provide the services and products. Data stored in cookies may be stored for varying lengths of time. Some cookies are deleted immediately after leaving the website, while others may remain in your browser for several years unless actively deleted. The exact duration depends on the provider, and most providers should store data for several years. You can usually find more information about the duration of data processing in the respective privacy policies of the providers.

Right to Object
You have the right to access, correct, or delete your personal data at any time. You can also contact the affiliate program provider's responsible party if you have questions. Contact information can be found in our specific privacy policy or on the provider's website.

Cookies used by providers for their functions can be deleted, deactivated, or managed in your browser. Depending on the browser you use, this process differs.

Legal Basis
If you have consented to the use of affiliate programs, the legal basis for processing your data is your consent. According to Article 6 (1) (a) GDPR (Consent), this consent is the legal basis for processing personal data, as it may occur during data collection through an affiliate program.

Additionally, we have a legitimate interest in using affiliate programs to optimize our online service and marketing measures. The legal basis for this is Article 6 (1) (f) GDPR (Legitimate Interests). We will use the affiliate program only if you have granted consent.

Information about specific affiliate programs will be provided in the following sections, if available.

Amazon Affiliate Program Privacy Policy

Summary of the Amazon Affiliate Program Privacy Policy
Affected individuals: Visitors to the website
Purpose: Economic success and optimization of our services.
Processed data: Access statistics, including data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. Personal data such as name or email address may also be processed.
Retention period: Personal data is stored by Amazon until it is no longer needed.
Legal basis: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What is the Amazon Affiliate Program?
We use the Amazon Affiliate Program, provided by Amazon.com, Inc. The responsible entities for the purposes of this privacy policy are Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l., Amazon Media EU S.à.r.l., all based at 5, Rue Plaetis, L-2338 Luxembourg, and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich. Amazon Deutschland Services GmbH, Marcel-Breuer-Str. 12, 80807 Munich, acts as the data processor. By using this Amazon Affiliate Program, your data may be transferred, stored, and processed by Amazon.

In this privacy policy, we inform you about what data is processed, why we use the program, and how you can manage or stop the data transfer.

The Amazon Affiliate Program is an affiliate marketing program by the online retailer Amazon.de. Like any affiliate program, the Amazon Affiliate Program is based on the principle of referral commissions. Amazon or we place advertisements or partner links on our website, and if you click on them and purchase a product via Amazon, we receive a commission (advertising reimbursement).

Why do we use the Amazon Affiliate Program on our website?
Our goal is to provide you with a pleasant experience and valuable content. We put a lot of work and energy into developing our website. With the help of the Amazon Affiliate Program, we can also be compensated for our work. Each partner link to Amazon is relevant to our topic and shows offers that may interest you.

What data is collected through the Amazon Affiliate Program?
Once you interact with Amazon products and services, Amazon collects data from you. Amazon differentiates between information you actively provide and information automatically collected and stored. “Active information” includes your name, email address, phone number, age, payment information, and location. “Automatic information” is primarily collected via cookies, such as user behavior, IP address, device information (browser type, location, operating systems), or URL. Amazon also stores the clickstream, which refers to the sequence of pages you visit before reaching a product. To track the origin of a purchase, Amazon places cookies in your browser. This allows Amazon to recognize that you clicked on an advertisement or partner link from our website.

If you have an Amazon account and are logged in while browsing our website, the collected data can be associated with your account. You can prevent this by logging out of your Amazon account before browsing our website.

Here are examples of cookies that will be set in your browser when you click on an Amazon link on our website:

• Name: uid
  Value: 3230928052675285215122693978-9
  Purpose: This cookie stores a unique user ID and collects information about your website activity.
  Expiration: After 2 months

• Name: ad-id
  Value: AyDaInRV1k-Lk59xSnp7h5o
  Purpose: This cookie is provided by amazon-adsystem.com for various advertising purposes.
  Expiration: After 8 months

• Name: uuid2
  Value: 8965834524520213028122693978-2
  Purpose: This cookie enables targeted and interest-based advertising via the AppNexus platform. It collects and stores anonymous data about which ads you clicked on and which pages you visited.
  Expiration: After 3 months

• Name: session-id
  Value: 262-0272718-2582202122693978-1
  Purpose: This cookie stores a unique user ID assigned by the server during a website visit (session). When you visit the same page again, the information stored is retrieved.
  Expiration: After 15 years

• Name: APID
  Value: UP9801199c-4bee-11ea-931d-02e8e13f0574
  Purpose: This cookie stores information on how you use a website and which ads you viewed before visiting the website.
  Expiration: After 1 year

• Name: session-id-time
  Value: tb:s-STNY7ZS65H5335FZEVPE|1581329862486&t:1581329864300&adb:adblk_no
  Purpose: This cookie captures the time you spend on a webpage with a unique cookie ID.
  Expiration: After 2 years

• Name: csm-hit
  Value: 2082754801l
  Purpose: We cannot retrieve exact information about this cookie.
  Expiration: After 15 years

Note: This list shows sample cookies and is not comprehensive.

Amazon uses the collected data to better target ads to users' interests.

How long and where is the data stored?
Amazon stores personal data for as long as necessary for Amazon’s business services or as required by legal obligations. Since Amazon is headquartered in the U.S., the collected data is also stored on U.S. servers.

How can I delete my data or prevent data storage?
You have the right to access and delete your personal data at any time. If you have an Amazon account, you can manage or delete much of the collected data within your account.

Another option for managing data processing and storage according to your preferences is through your browser. You can manage, disable, or delete cookies there. This process varies depending on the browser you use. Under the "Cookies" section, you will find links to guides for the most popular browsers.

Legal basis
If you have consented to the use of the Amazon Affiliate Program, the legal basis for processing your data is this consent. According to Article 6(1)(a) GDPR (Consent), this consent serves as the legal basis for the processing of personal data that may be collected by the Amazon Affiliate Program.

Additionally, we have a legitimate interest in using the Amazon Affiliate Program to optimize our online service and marketing activities. The corresponding legal basis is Article 6(1)(f) GDPR (Legitimate Interests). We use the Amazon Affiliate Program only to the extent you have given consent.

Amazon processes your data, including in the U.S. Amazon is an active participant in the EU-U.S. Data Privacy Framework, which governs the correct and secure transfer of personal data from EU citizens to the U.S. More information on this can be found at EU Commission.

Furthermore, Amazon uses Standard Contractual Clauses (Article 46(2) and 3 GDPR). These are model clauses provided by the European Commission to ensure that your data continues to meet European data protection standards, even when transferred and stored in third countries (e.g., the U.S.). By adhering to the EU-U.S. Data Privacy Framework and Standard Contractual Clauses, Amazon commits to maintaining the European level of data protection even when data is stored, processed, and managed in the U.S. These clauses are based on an implementation decision by the EU Commission. You can find the decision and corresponding Standard Contractual Clauses here: EUR-Lex.

The Amazon Data Processing Agreement (AWS GDPR DATA PROCESSING), which corresponds to the Standard Contractual Clauses, can be found at AWS GDPR DPA.

We hope we have provided you with the key information regarding data transfer through the use of the Amazon Affiliate Program. For more information, please visit Amazon Help.

Security & Anti-Spam Privacy Policy

Summary

• Affected parties: Website visitors
• Purpose: Cybersecurity
• Processed data: Data such as your IP address, name, or technical data like browser version
• Storage duration: Data is usually stored until no longer required for service provision
• Legal basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate interests)

What is Security & Anti-Spam Software?

Security & Anti-Spam software helps protect both you and us from various spam or phishing emails and other potential cyberattacks. Spam refers to unsolicited advertising emails sent in bulk. These are also known as "data waste" and can lead to additional costs. Phishing emails, on the other hand, are designed to trick recipients with fake messages or websites to steal personal data. Anti-Spam software typically blocks unwanted spam or malicious emails that might introduce viruses into our system. We also use general firewall and security systems to protect our computers from unauthorized network attacks.

Why Do We Use Security & Anti-Spam Software?

We place great emphasis on security on our website. It's not just about our safety but primarily yours. Cyber threats are now a regular part of IT and internet life. Hackers often attempt to steal personal data from IT systems through cyberattacks. Therefore, an effective defense system is absolutely necessary. A security system monitors all incoming and outgoing connections to our network or computer. In addition to standardized security systems on our computers, we also use external security services to increase our protection against cyberattacks. Unauthorized data traffic is better blocked, helping us defend against cybercrime.

What Data is Processed by Security & Anti-Spam Software?

The exact data collected and stored depends on the specific service used. However, we always strive to use services that collect minimal data and store only what is necessary to provide the service. Generally, the service may store data such as name, address, IP address, email address, and technical information like browser type or browser version. Performance and log data may also be collected to identify incoming threats. These data are processed within the service and in accordance with applicable laws, including the GDPR for US providers (through Standard Contractual Clauses). Some security services may collaborate with third parties who can store and/or process data under the provider's instructions, following privacy policies and additional security measures. Data is often stored through cookies.

Duration of Data Processing

We will provide more information about data processing duration below if available. For example, security programs store data until you or we revoke the data storage. In general, personal data is only stored as long as necessary to provide the services. In many cases, we lack precise information from providers on the storage duration.

Right to Object

You have the right to withdraw your consent for the use of cookies or third-party security software at any time. This can be done via our cookie management tool or other opt-out functions. For instance, you can prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Since security services may also use cookies, we recommend reading our general cookie privacy statement. To learn more about the specific data stored and processed, you should refer to the privacy policies of the respective tools.

Legal Basis

We primarily use security services based on our legitimate interests (Art. 6(1)(f) GDPR) in having a robust system against various cyberattacks.

Certain processing, especially the use of cookies and security functions, requires your consent. If you have consented to the processing and storage of data by integrated security services, this consent serves as the legal basis for the data processing (Art. 6(1)(a) GDPR). Most of the services we use set cookies in your browser to store data, so we recommend reading our cookie privacy statement and the privacy policy or cookie guidelines of the respective service provider.

---

Google reCAPTCHA Privacy Policy

Summary

• Affected parties: Website visitors
• Purpose: Optimize our service and protect against cyberattacks
• Processed data: Data such as IP address, browser information, operating system, limited location, and usage data
• Storage duration: Depends on the stored data
• Legal basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate interests)

What is reCAPTCHA?

Our primary goal is to secure and protect our website for both you and us. To ensure this, we use Google reCAPTCHA from Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. With reCAPTCHA, we can verify that you are indeed a human and not a robot or other spam software. Spam refers to any unwanted electronic communication that is sent without solicitation. While traditional CAPTCHAs required users to solve text or image puzzles for verification, reCAPTCHA usually just asks you to check a box confirming you are not a bot. The new Invisible reCAPTCHA doesn't even require checking the box.

reCAPTCHA is a free CAPTCHA service from Google that protects websites from spam software and misuse by non-human visitors. This service is often used when you fill out forms online. CAPTCHA is a type of automatic Turing test designed to ensure that a task on the internet is being performed by a human, not a bot. Traditional CAPTCHAs present small tasks that are easy for humans to solve but difficult for machines. With reCAPTCHA, you don't actively solve puzzles; instead, it uses advanced risk techniques to differentiate humans from bots. It uses a JavaScript element embedded in the website source code, running in the background and analyzing your user behavior. From these actions, the software calculates a CAPTCHA score, which Google uses to determine the likelihood of you being human even before you enter the CAPTCHA. reCAPTCHA is used whenever bots might manipulate or misuse actions like registrations or surveys.