Privacy policy

Table of contents

• Intro­duc­tion and over­view
• Area of appli­ca­ti­on
• Legal basis
• Cont­act details of the per­son respon­si­ble
• Sto­rage dura­ti­on
• Rights under the Gene­ral Data Pro­tec­tion Regu­la­ti­on
• Secu­ri­ty of data pro­ces­sing
• Com­mu­ni­ca­ti­on
• Coo­kies
• Web­hos­ting intro­duc­tion
• Web­site modu­lar sys­tems Intro­duc­tion
• Web Ana­ly­tics Intro­duc­tion
• Email mar­ke­ting intro­duc­tion
• Secu­ri­ty & Anti-Spam
• Audio & Video Intro­duc­tion
• Online map ser­vices Intro­duc­tion

Introduction and overview

We have drawn up this pri­va­cy poli­cy (ver­si­on 26.03.2025–112970128) in order to pro­vi­de you with infor­ma­ti­on in accordance with the requi­re­ments of the Gene­ral Data Pro­tec­tion Regu­la­ti­on (EU) 2016/679 and appli­ca­ble natio­nal laws, which per­so­nal data (data for short) we as the con­trol­ler – and the pro­ces­sors com­mis­sio­ned by us (e.g. pro­vi­ders) – pro­cess, will pro­cess in the future and what lawful opti­ons you have. The terms used are to be unders­tood as gender-neutral.
In short: We pro­vi­de you with com­pre­hen­si­ve infor­ma­ti­on about the data we pro­cess about you.

Data pro­tec­tion decla­ra­ti­ons usual­ly sound very tech­ni­cal and use legal jar­gon. This pri­va­cy poli­cy, on the other hand, is inten­ded to descri­be the most important things to you as sim­ply and trans­par­ent­ly as pos­si­ble. As far as it is con­du­ci­ve to trans­pa­ren­cy, tech­ni­cal Terms explai­ned in a reader-friendly waylinks to fur­ther infor­ma­ti­on and Gra­phics for use. We use it to inform you in clear and simp­le lan­guage that we only pro­cess per­so­nal data as part of our busi­ness acti­vi­ties if the­re is a cor­re­spon­ding legal basis. This is cer­tain­ly not pos­si­ble if we pro­vi­de expl­ana­ti­ons that are as con­cise, unclear and legal-technical as pos­si­ble, as is often stan­dard on the Inter­net when it comes to data pro­tec­tion. I hope you find the fol­lo­wing expl­ana­ti­ons inte­res­t­ing and infor­ma­ti­ve and per­haps the­re is one or two pie­ces of infor­ma­ti­on that you did not yet know.
If you still have any ques­ti­ons, plea­se cont­act the respon­si­ble body named below or in the legal noti­ce, fol­low the links pro­vi­ded and view fur­ther infor­ma­ti­on on third-party web­sites. Our cont­act details can of cour­se also be found in the legal noti­ce.

Area of application

This pri­va­cy poli­cy appli­es to all per­so­nal data pro­ces­sed by our com­pa­ny and to all per­so­nal data pro­ces­sed by com­pa­nies com­mis­sio­ned by us (pro­ces­sors). By per­so­nal data, we mean infor­ma­ti­on within the mea­ning of Art. 4 No. 1 GDPR, such as a person’s name, email address and pos­tal address. The pro­ces­sing of per­so­nal data ensu­res that we can offer and invoice our ser­vices and pro­ducts, whe­ther online or off­line. The scope of this pri­va­cy poli­cy includes

• all online pre­sen­ces (web­sites, online shops) that we ope­ra­te
• Social media pre­sence and e‑mail com­mu­ni­ca­ti­on
• Mobi­le apps for smart­phones and other devices

In short: The pri­va­cy poli­cy appli­es to all are­as in which per­so­nal data is pro­ces­sed in the com­pa­ny in a struc­tu­red man­ner via the chan­nels men­tio­ned. If we enter into legal rela­ti­onships with you out­side of the­se chan­nels, we will inform you sepa­ra­te­ly if neces­sa­ry.

Legal basis

In the fol­lo­wing pri­va­cy poli­cy, we pro­vi­de you with trans­pa­rent infor­ma­ti­on on the legal prin­ci­ples and regu­la­ti­ons, i.e. the legal basis of the Gene­ral Data Pro­tec­tion Regu­la­ti­on, which enable us to pro­cess per­so­nal data.
As far as EU law is con­cer­ned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of cour­se access this EU Gene­ral Data Pro­tec­tion Regu­la­ti­on online on EUR-Lex, the access point to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 read more.

We only pro­cess your data if at least one of the fol­lo­wing con­di­ti­ons appli­es:

1. Con­sent (Artic­le 6(1)(a) GDPR): You have given us your con­sent to pro­cess data for a spe­ci­fic pur­po­se. An exam­p­le would be the sto­rage of the data you ente­red in a cont­act form.
2. Con­tract (Artic­le 6(1)(b) GDPR): In order to ful­fil a con­tract or pre-contractual obli­ga­ti­ons with you, we pro­cess your data. For exam­p­le, if we con­clude a purcha­se con­tract with you, we requi­re per­so­nal infor­ma­ti­on in advan­ce.
3. Legal obli­ga­ti­on (Artic­le 6(1)© GDPR): If we are sub­ject to a legal obli­ga­ti­on, we pro­cess your data. For exam­p­le, we are legal­ly obli­ged to keep invoices for accoun­ting pur­po­ses. The­se usual­ly con­tain per­so­nal data.
4. Legi­ti­ma­te inte­rests (Artic­le 6(1)(f) GDPR): In the case of legi­ti­ma­te inte­rests that do not rest­rict your fun­da­men­tal rights, we reser­ve the right to pro­cess per­so­nal data. For exam­p­le, we need to pro­cess cer­tain data in order to ope­ra­te our web­site secu­re­ly and effi­ci­ent­ly. This pro­ces­sing is the­r­e­fo­re a legi­ti­ma­te inte­rest.

Other con­di­ti­ons such as the ful­film­ent of recor­ding in the public inte­rest and the exer­cise of offi­ci­al aut­ho­ri­ty as well as the pro­tec­tion of vital inte­rests do not gene­ral­ly ari­se for us. If such a legal basis is rele­vant, it will be indi­ca­ted at the appro­pria­te point.

In addi­ti­on to the EU regu­la­ti­on, natio­nal laws also app­ly:

• In Aus­tria this is the Fede­ral Act on the Pro­tec­tion of Indi­vi­du­als with regard to the Pro­ces­sing of Per­so­nal Data (Data Pro­tec­tion Act), in short DSG.
• In Ger­ma­ny this appli­es Fede­ral Data Pro­tec­tion Act, short BDSG.

If other regio­nal or natio­nal laws app­ly, we will inform you of this in the fol­lo­wing sec­tions.

Contact details of the person responsible

If you have any ques­ti­ons about data pro­tec­tion or the pro­ces­sing of per­so­nal data, you will find below the cont­act details of the con­trol­ler in accordance with Artic­le 4(7) of the EU Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR):
REPRECT GmbH
Unte­re Haupt­stra­ße 8
3650 Pöggstall

e‑mail: office@reprect.at

Imprint: https://www.reprect.at/impressum/

Storage duration

It is a gene­ral cri­ter­ion for us that we only store per­so­nal data for as long as is abso­lut­e­ly neces­sa­ry for the pro­vi­si­on of our ser­vices and pro­ducts. This means that we dele­te per­so­nal data as soon as the reason for the data pro­ces­sing no lon­ger exists. In some cases, we are legal­ly obli­ged to store cer­tain data even after the ori­gi­nal pur­po­se has cea­sed to exist, for exam­p­le for accoun­ting pur­po­ses.

If you wish your data to be dele­ted or revo­ke your con­sent to data pro­ces­sing, the data will be dele­ted as quick­ly as pos­si­ble and inso­far as the­re is no obli­ga­ti­on to store it.

We will inform you below about the spe­ci­fic dura­ti­on of the respec­ti­ve data pro­ces­sing if we have fur­ther infor­ma­ti­on on this.

Rights under the General Data Protection Regulation

In accordance with Artic­les 13 and 14 GDPR, we inform you of the fol­lo­wing rights to which you are entit­led in order to ensu­re fair and trans­pa­rent pro­ces­sing of data:

• Accor­ding to Artic­le 15 GDPR, you have a right to infor­ma­ti­on about whe­ther we pro­cess your data. If this is the case, you have the right to recei­ve a copy of the data and the fol­lo­wing infor­ma­ti­on:
  • the pur­po­se for which we car­ry out the pro­ces­sing;
  • the cate­go­ries, i.e. the types of data that are pro­ces­sed;
  • who recei­ves this data and, if the data is trans­fer­red to third count­ries, how secu­ri­ty can be gua­ran­teed;
  • how long the data will be stored;
  • the exis­tence of the right to rec­ti­fi­ca­ti­on, era­su­re or rest­ric­tion of pro­ces­sing and the right to object to pro­ces­sing;
  • that you can lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty (links to the­se aut­ho­ri­ties can be found below);
  • the ori­gin of the data if we have not coll­ec­ted it from you;
  • whe­ther pro­fil­ing is car­ri­ed out, i.e. whe­ther data is auto­ma­ti­cal­ly ana­ly­sed in order to crea­te a per­so­nal pro­fi­le of you.
• Accor­ding to Artic­le 16 GDPR, you have a right to rec­ti­fi­ca­ti­on of data, which means that we must cor­rect data if you find errors.
• Accor­ding to Artic­le 17 GDPR, you have the right to era­su­re („right to be for­got­ten”), which spe­ci­fi­cal­ly means that you may request the era­su­re of your data.
• Accor­ding to Artic­le 18 GDPR, you have the right to rest­ric­tion of pro­ces­sing, which means that we may only store the data but not use it any fur­ther.
• Accor­ding to Artic­le 20 GDPR, you have the right to data por­ta­bi­li­ty, which means that we will pro­vi­de you with your data in a com­mon­ly used for­mat upon request.
• Accor­ding to Artic­le 21 GDPR, you have the right to object, which will result in a chan­ge in the pro­ces­sing after enforce­ment.
  • If the pro­ces­sing of your data is based on Artic­le 6(1)(e) (public inte­rest, exer­cise of offi­ci­al aut­ho­ri­ty) or Artic­le 6(1)(f) (legi­ti­ma­te inte­rest), you can object to the pro­ces­sing. We will then check as quick­ly as pos­si­ble whe­ther we can legal­ly honour this objec­tion.
  • If data is used for direct mar­ke­ting pur­po­ses, you can object to this type of data pro­ces­sing at any time. We may then no lon­ger use your data for direct mar­ke­ting.
  • If data is used for pro­fil­ing pur­po­ses, you can object to this type of data pro­ces­sing at any time. We may then no lon­ger use your data for pro­fil­ing.
• Under Artic­le 22 GDPR, you may have the right not to be sub­ject to a decis­i­on based sole­ly on auto­ma­ted pro­ces­sing (e.g. pro­fil­ing).
• Accor­ding to Artic­le 77 GDPR, you have the right to lodge a com­plaint. This means that you can lodge a com­plaint with the data pro­tec­tion aut­ho­ri­ty at any time if you belie­ve that the pro­ces­sing of your per­so­nal data is in breach of the GDPR.

In short: You have rights – do not hesi­ta­te to cont­act the respon­si­ble body lis­ted abo­ve!

If you belie­ve that the pro­ces­sing of your data vio­la­tes data pro­tec­tion law or that your data pro­tec­tion rights have been vio­la­ted in any other way, you can lodge a com­plaint with the super­vi­so­ry aut­ho­ri­ty. For Aus­tria, this is the data pro­tec­tion aut­ho­ri­ty, who­se web­site you can find at https://www.dsb.gv.at/ find. In Ger­ma­ny, the­re is a data pro­tec­tion offi­cer for each fede­ral sta­te. For more infor­ma­ti­on, you can cont­act the Fede­ral Com­mis­sio­ner for Data Pro­tec­tion and Free­dom of Infor­ma­ti­on (BfDI) cont­act. The fol­lo­wing local data pro­tec­tion aut­ho­ri­ty is respon­si­ble for our com­pa­ny:

Austria Data Protection Authority

Mana­ger: Dr Mat­thi­as Schmidl
Address: Barich­gas­se 40–42, 1030 Vien­na
Tele­pho­ne no: +43 1 52 152–0
E‑mail address: dsb@dsb.gv.at
Web­site: https://www.dsb.gv.at/

Security of data processing

We have imple­men­ted both tech­ni­cal and orga­ni­sa­tio­nal mea­su­res to pro­tect per­so­nal data. Whe­re pos­si­ble, we encrypt or pseud­ony­mi­se per­so­nal data. This makes it as dif­fi­cult as pos­si­ble for third par­ties to infer per­so­nal infor­ma­ti­on from our data.

Art. 25 GDPR speaks here of „data pro­tec­tion by design and by default” and thus means that both soft­ware (e.g. forms) and hard­ware (e.g. access to the ser­ver room) should always be desi­gned with secu­ri­ty in mind and appro­pria­te mea­su­res should be taken. If neces­sa­ry, we will go into more detail on spe­ci­fic mea­su­res below.

TLS encryption with https

TLS, encryp­ti­on and https sound very tech­ni­cal – and they are. We use HTTPS (the Hyper­text Trans­fer Pro­to­col Secu­re stands for „secu­re hyper­text trans­fer pro­to­col”) to trans­mit data tap-proof on the Inter­net.
This means that the com­ple­te trans­mis­si­on of all data from your brow­ser to our web ser­ver is secu­red – nobo­dy can „lis­ten in”.

We have thus intro­du­ced an addi­tio­nal lay­er of secu­ri­ty and ful­fil data pro­tec­tion through tech­no­lo­gy design (Artic­le 25(1) GDPR). By using TLS (Trans­port Lay­er Secu­ri­ty), an encryp­ti­on pro­to­col for secu­re data trans­mis­si­on on the Inter­net, we can ensu­re the pro­tec­tion of con­fi­den­ti­al data.
You can reco­g­ni­se the use of this data trans­mis­si­on pro­tec­tion by the small lock sym­bol at the top left of the brow­ser, to the left of the Inter­net address (e.g. examplepage.com) and the use of the https sche­me (ins­tead of http) as part of our Inter­net address.
If you want to know more about encryp­ti­on, we recom­mend a Goog­le search for „Hyper­text Trans­fer Pro­to­col Secu­re wiki” to get good links to fur­ther infor­ma­ti­on.

Communication

Com­mu­ni­ca­ti­on Sum­ma­ry 👥 Data sub­jects: Anyo­ne who com­mu­ni­ca­tes with us by pho­ne, email or online form 📓 Pro­ces­sed data: e.g. tele­pho­ne num­ber, name, email address, form data ente­red. You can find more details on this in the respec­ti­ve cont­act type used 🤝 Pur­po­se: Hand­ling com­mu­ni­ca­ti­on with cus­to­mers, busi­ness part­ners, etc. 📅 Sto­rage peri­od: Dura­ti­on of the busi­ness case and the sta­tu­to­ry pro­vi­si­ons ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. b GDPR (con­tract), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

If you cont­act us and com­mu­ni­ca­te with us by tele­pho­ne, e‑mail or online form, per­so­nal data may be pro­ces­sed.

The data is pro­ces­sed for the hand­ling and pro­ces­sing of your enquiry and the asso­cia­ted busi­ness tran­sac­tion. The data will be stored for as long as requi­red by law.

Persons concerned

All tho­se who seek cont­act with us via the com­mu­ni­ca­ti­on chan­nels pro­vi­ded by us are affec­ted by the afo­re­men­tio­ned pro­ces­ses.

Telephone

When you call us, the call data is stored pseud­ony­mi­sed on the respec­ti­ve end device and with the tele­com­mu­ni­ca­ti­ons pro­vi­der used. In addi­ti­on, data such as your name and tele­pho­ne num­ber may sub­se­quent­ly be sent by e‑mail and stored for the pur­po­se of respon­ding to your enquiry. The data is dele­ted as soon as the busi­ness tran­sac­tion has been com­ple­ted and legal requi­re­ments per­mit.

e‑mail

If you com­mu­ni­ca­te with us by e‑mail, data may be stored on the respec­ti­ve end device (com­pu­ter, lap­top, smart­phone, etc.) and data may be stored on the e‑mail ser­ver. The data will be dele­ted as soon as the busi­ness tran­sac­tion has been com­ple­ted and legal requi­re­ments per­mit.

Online forms

If you com­mu­ni­ca­te with us using an online form, data is stored on our web ser­ver and may be for­ward­ed to one of our e‑mail addres­ses. The data will be dele­ted as soon as the busi­ness tran­sac­tion has been com­ple­ted and legal requi­re­ments per­mit.

Legal basis

The pro­ces­sing of the data is based on the fol­lo­wing legal bases:

• Art. 6 para. 1 lit. a GDPR (con­sent): You give us your con­sent to store your data and to use it for pur­po­ses rela­ting to the busi­ness tran­sac­tion;
• Art. 6 para. 1 lit. b GDPR (con­tract): It is neces­sa­ry for the ful­film­ent of a con­tract with you or a pro­ces­sor, such as the tele­pho­ne pro­vi­der, or we need to pro­cess the data for pre-contractual acti­vi­ties, such as the pre­pa­ra­ti­on of an offer;
• Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests): We want to hand­le cus­to­mer enqui­ries and busi­ness com­mu­ni­ca­ti­on in a pro­fes­sio­nal man­ner. This requi­res cer­tain tech­ni­cal faci­li­ties such as email pro­gram­mes, exch­an­ge ser­vers and mobi­le net­work ope­ra­tors in order to ope­ra­te com­mu­ni­ca­ti­on effi­ci­ent­ly.

Cookies

Coo­kies sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: depen­ding on the respec­ti­ve coo­kie. You can find more details on this below or from the manu­fac­tu­rer of the soft­ware that sets the coo­kie. 📓 Pro­ces­sed data: Depen­ding on the coo­kie used. You can find more details on this below or from the manu­fac­tu­rer of the soft­ware that sets the coo­kie. 📅 Sto­rage dura­ti­on: depends on the respec­ti­ve coo­kie, can vary from hours to years ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit.f GDPR (legi­ti­ma­te inte­rests)

What are cookies?

Our web­site uses HTTP coo­kies to store user-specific data.
Below we explain what coo­kies are and why they are used so that you can bet­ter under­stand the fol­lo­wing pri­va­cy poli­cy.

When­ever you surf the inter­net, you use a brow­ser. Well-known brow­sers include Chro­me, Safa­ri, Fire­fox, Inter­net Explo­rer and Micro­soft Edge. Most web­sites store small text files in your brow­ser. The­se files are cal­led coo­kies.

One thing can­not be denied: Coo­kies are real­ly useful litt­le hel­pers. Almost all web­sites use coo­kies. More pre­cis­e­ly, they are HTTP coo­kies, as the­re are also other coo­kies for other are­as of appli­ca­ti­on. HTTP coo­kies are small files that are stored on your com­pu­ter by our web­site. The­se coo­kie files are auto­ma­ti­cal­ly stored in the coo­kie fol­der, the „brain” of your brow­ser, so to speak. A coo­kie con­sists of a name and a value. When defi­ning a coo­kie, one or more attri­bu­tes must also be spe­ci­fied.

Coo­kies store cer­tain user data about you, such as lan­guage or per­so­nal page set­tings. When you visit our site again, your brow­ser trans­mits the „user-related” infor­ma­ti­on back to our site. Thanks to coo­kies, our web­site knows who you are and offers you the set­tings you are used to. In some brow­sers, each coo­kie has its own file; in others, such as Fire­fox, all coo­kies are stored in a sin­gle file.

The fol­lo­wing gra­phic shows a pos­si­ble inter­ac­tion bet­ween a web brow­ser such as Chro­me and the web ser­ver. The web brow­ser requests a web­site and recei­ves a coo­kie back from the ser­ver, which the brow­ser uses again as soon as ano­ther page is reques­ted.

The­re are both first-party coo­kies and third-party coo­kies. First-party coo­kies are crea­ted direct­ly by our web­site, third-party coo­kies are crea­ted by part­ner web­sites (e.g. Goog­le Ana­ly­tics). Each coo­kie must be eva­lua­ted indi­vi­du­al­ly, as each coo­kie stores dif­fe­rent data. The expiry time of a coo­kie also varies from a few minu­tes to a few years. Coo­kies are not soft­ware pro­gram­mes and do not con­tain viru­s­es, Tro­jans or other „mal­wa­re”. Coo­kies also can­not access infor­ma­ti­on on your PC.

Coo­kie data, for exam­p­le, can look like this:

Name: _ga
Value: GA1.2.1326744211.152112970128–9
Inten­ded use: Dif­fe­ren­tia­ti­on of web­site visi­tors
Expiry date: after 2 years

A brow­ser should be able to sup­port the­se mini­mum sizes:

• At least 4096 bytes per coo­kie
• At least 50 coo­kies per domain
• At least 3000 coo­kies in total

What types of cookies are there?

The ques­ti­on of which coo­kies we use in par­ti­cu­lar depends on the ser­vices used and is cla­ri­fied in the fol­lo­wing sec­tions of the pri­va­cy poli­cy. At this point, we would like to brief­ly explain the dif­fe­rent types of HTTP coo­kies.

A distinc­tion can be made bet­ween 4 types of coo­kies:

Essen­ti­al coo­kies
The­se coo­kies are neces­sa­ry to ensu­re basic web­site func­tions. For exam­p­le, the­se coo­kies are nee­ded when a user places a pro­duct in the shop­ping bas­ket, then con­ti­nues sur­fing on other pages and only goes to the check­out later. The­se coo­kies ensu­re that the shop­ping bas­ket is not dele­ted even if the user clo­ses their brow­ser win­dow.

Pur­po­seful coo­kies
The­se coo­kies coll­ect infor­ma­ti­on about user beha­viour and whe­ther the user recei­ves any error mes­sa­ges. The­se coo­kies are also used to mea­su­re the loa­ding time and the beha­viour of the web­site with dif­fe­rent brow­sers.

Target-orientated coo­kies
The­se coo­kies ensu­re bet­ter user-friendliness. For exam­p­le, ente­red loca­ti­ons, font sizes or form data are saved.

Adver­ti­sing coo­kies
The­se coo­kies are also known as tar­ge­ting coo­kies. They are used to deli­ver cus­to­mi­sed adver­ti­sing to the user. This can be very prac­ti­cal, but also very annoy­ing.

When you visit a web­site for the first time, you are usual­ly asked which of the­se coo­kie types you would like to allow. And of cour­se this decis­i­on is also stored in a coo­kie.

If you would like to know more about coo­kies and are not afraid of tech­ni­cal docu­men­ta­ti­on, we recom­mend https://datatracker.ietf.org/doc/html/rfc6265the Request for Comm­ents of the Inter­net Engi­nee­ring Task Force (IETF) cal­led „HTTP Sta­te Manage­ment Mecha­nism”.

Purpose of processing via cookies

The pur­po­se ulti­m­ate­ly depends on the coo­kie in ques­ti­on. You can find more details on this below or from the manu­fac­tu­rer of the soft­ware that sets the coo­kie.

What data is processed?

Coo­kies are litt­le hel­pers for many dif­fe­rent tasks. Unfort­u­na­te­ly, it is not pos­si­ble to gene­ra­li­se which data is stored in coo­kies, but we will inform you about the pro­ces­sed or stored data in the fol­lo­wing pri­va­cy poli­cy.

Storage duration of cookies

The sto­rage peri­od depends on the coo­kie in ques­ti­on and is spe­ci­fied below. Some coo­kies are dele­ted after less than an hour, others can remain stored on a com­pu­ter for seve­ral years.

You can also influence the sto­rage peri­od yours­elf. You can dele­te all coo­kies manu­al­ly at any time via your brow­ser (see also „Right to object” below). Fur­ther­mo­re, coo­kies that are based on con­sent will be dele­ted at the latest after you with­draw your con­sent, wher­eby the lega­li­ty of the sto­rage until then remains unaf­fec­ted.

Right to object – how can I delete cookies?

You deci­de how and whe­ther you want to use coo­kies. Regard­less of which ser­vice or web­site the coo­kies ori­gi­na­te from, you always have the opti­on of dele­ting, deac­ti­vat­ing or only par­ti­al­ly allo­wing coo­kies. For exam­p­le, you can block third-party coo­kies but allow all other coo­kies.

If you want to find out which coo­kies have been stored in your brow­ser, if you want to chan­ge or dele­te coo­kie set­tings, you can find this in your brow­ser set­tings:

Chro­me: Dele­te, acti­va­te and mana­ge coo­kies in Chro­me

Safa­ri: Mana­ging coo­kies and web­site data with Safa­ri

Fire­fox: Dele­te coo­kies to remo­ve data that web­sites have stored on your com­pu­ter

Inter­net Explo­rer: Dele­ting and mana­ging coo­kies

Micro­soft Edge: Dele­ting and mana­ging coo­kies

If you gene­ral­ly do not want to have coo­kies, you can set up your brow­ser so that it always informs you when a coo­kie is to be set. You can then deci­de for each indi­vi­du­al coo­kie whe­ther or not to allow it. The pro­ce­du­re dif­fers depen­ding on the brow­ser. It is best to search for the ins­truc­tions in Goog­le using the search term „dele­te coo­kies Chro­me” or „deac­ti­va­te coo­kies Chro­me” in the case of a Chro­me brow­ser.

Legal basis

The so-called „coo­kie gui­de­lines” have been in place sin­ce 2009. This sti­pu­la­tes that the sto­rage of coo­kies is a Con­sent (Artic­le 6(1)(a) GDPR) from you. Howe­ver, the­re are still very dif­fe­rent reac­tions to the­se direc­ti­ves within the EU count­ries. In Aus­tria, howe­ver, this direc­ti­ve was imple­men­ted in Sec­tion 165 (3) of the Tele­com­mu­ni­ca­ti­ons Act (2021). In Ger­ma­ny, the coo­kie direc­ti­ves have not been imple­men­ted as natio­nal law. Ins­tead, this direc­ti­ve was lar­ge­ly imple­men­ted in Sec­tion 15 (3) of the Tele­me­dia Act (TMG), which has been repla­ced by the Digi­tal Ser­vices Act (DDG) sin­ce May 2024.

For strict­ly neces­sa­ry coo­kies, even if no con­sent has been given, the­re are legi­ti­ma­te inte­rests (Artic­le 6(1)(f) GDPR), which in most cases are of an eco­no­mic natu­re. We want to pro­vi­de visi­tors to the web­site with a plea­sant user expe­ri­ence and cer­tain coo­kies are often abso­lut­e­ly neces­sa­ry for this.

If coo­kies that are not abso­lut­e­ly neces­sa­ry are used, this will only be done with your con­sent. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.

In the fol­lo­wing sec­tions, you will be infor­med in more detail about the use of coo­kies if the soft­ware used uti­li­ses coo­kies.

Webhosting introduction

Web hos­ting sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: pro­fes­sio­nal hos­ting of the web­site and secu­ring its ope­ra­ti­on 📓 Pro­ces­sed data: IP address, time of web­site visit, brow­ser used and other data. You can find more details on this below or from the web hos­ting pro­vi­der used. 📅 Sto­rage peri­od: depends on the respec­ti­ve pro­vi­der, but usual­ly 2 weeks ⚖️ Legal basis: Art. 6 para. 1 lit.f GDPR (legi­ti­ma­te inte­rests)

What is web hosting?

When you visit web­sites the­se days, cer­tain infor­ma­ti­on – inclu­ding per­so­nal data – is auto­ma­ti­cal­ly gene­ra­ted and stored, inclu­ding on this web­site. This data should be pro­ces­sed as spa­rin­gly as pos­si­ble and only with jus­ti­fi­ca­ti­on. By web­site, by the way, we mean the enti­re­ty of all web pages on a domain, i.e. ever­y­thing from the start page (home­page) to the very last sub­page (like this one). By domain we mean, for exam­p­le, example.de or example.com.

If you want to view a web­site on a com­pu­ter, tablet or smart­phone, you use a pro­gram­me cal­led a web brow­ser. You pro­ba­b­ly know a few web brow­sers by name: Goog­le Chro­me, Micro­soft Edge, Mozil­la Fire­fox and Apple Safa­ri. We call them brow­sers or web brow­sers for short.

In order to dis­play the web­site, the brow­ser must con­nect to ano­ther com­pu­ter whe­re the web­site code is stored: the web ser­ver. Ope­ra­ting a web ser­ver is a com­pli­ca­ted and time-consuming task, which is why this is usual­ly done by pro­fes­sio­nal pro­vi­ders. The­se pro­vi­ders offer web hos­ting and thus ensu­re relia­ble and error-free sto­rage of web­site data. A lot of tech­ni­cal terms, but plea­se stay tun­ed, it will get even bet­ter!

When the brow­ser on your com­pu­ter (desk­top, lap­top, tablet or smart­phone) con­nects and during data trans­fer to and from the web ser­ver, per­so­nal data may be pro­ces­sed. On the one hand, your com­pu­ter stores data; on the other hand, the web ser­ver must also store data for a cer­tain peri­od of time to ensu­re pro­per ope­ra­ti­on.

A pic­tu­re is worth a thousand words, so the fol­lo­wing gra­phic illus­tra­tes the inter­ac­tion bet­ween the brow­ser, the Inter­net and the hos­ting pro­vi­der.

Why do we process personal data?

The pur­po­ses of data pro­ces­sing are:

1. Pro­fes­sio­nal web­site hos­ting and ope­ra­tio­nal secu­ri­ty
2. to main­tain ope­ra­tio­nal and IT secu­ri­ty
3. Anony­mous eva­lua­ti­on of access beha­viour to impro­ve our offer and, if neces­sa­ry, for cri­mi­nal pro­se­cu­ti­on or pro­se­cu­ti­on of claims

What data is processed?

Even while you are curr­ent­ly visi­ting our web­site, our web ser­ver, i.e. the com­pu­ter on which this web­site is stored, usual­ly auto­ma­ti­cal­ly saves data such as

• the com­ple­te Inter­net address (URL) of the web­site acces­sed
• Brow­ser and brow­ser ver­si­on (e.g. Chro­me 87)
• the ope­ra­ting sys­tem used (e.g. Win­dows 10)
• the address (URL) of the pre­vious­ly visi­ted page (refer­rer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen/)
• the host name and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
• Date and time
• in files, the so-called web ser­ver log files

How long is data stored?

As a rule, the above-mentioned data is stored for a fort­night and then auto­ma­ti­cal­ly dele­ted. We do not pass this data on, but we can­not rule out the pos­si­bi­li­ty of this data being view­ed by the aut­ho­ri­ties in the event of unlawful beha­viour.

In short: Your visit is log­ged by our pro­vi­der (com­pa­ny that runs our web­site on spe­cial com­pu­ters (ser­vers)), but we do not pass on your data wit­hout your con­sent!

Legal basis

The lawful­ness of the pro­ces­sing of per­so­nal data in the con­text of web hos­ting results from Art. 6 para. 1 lit. f GDPR (pro­tec­tion of legi­ti­ma­te inte­rests), becau­se the use of pro­fes­sio­nal hos­ting with a pro­vi­der is neces­sa­ry in order to pre­sent the com­pa­ny secu­re­ly and user-friendly on the Inter­net and to be able to pur­sue attacks and claims from this if neces­sa­ry.

As a rule, the­re is a con­tract bet­ween us and the hos­ting pro­vi­der for order pro­ces­sing in accordance with Art. 28 f. GDPR, which ensu­res com­pli­ance with data pro­tec­tion and gua­ran­tees data secu­ri­ty.

Website modular systems Introduction

Web­site buil­der sys­tems Pri­va­cy poli­cy sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Opti­mi­sa­ti­on of our ser­vice per­for­mance 📓 Pro­ces­sed data: Data such as tech­ni­cal usa­ge infor­ma­ti­on such as brow­ser acti­vi­ty, click­stream acti­vi­ty, ses­si­on heat­maps and cont­act details, IP address or your geo­gra­phi­cal loca­ti­on. You can find more details on this below in this pri­va­cy poli­cy and in the pro­vi­ders’ pri­va­cy poli­ci­es. 📅 Sto­rage dura­ti­on: depends on the pro­vi­der ⚖️ Legal basis: Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests), Art. 6 para. 1 lit. a GDPR (con­sent)

What are website builder systems?

We use a modu­lar web­site sys­tem for our web­site. Modu­lar sys­tems are spe­cial forms of a con­tent manage­ment sys­tem (CMS). With a modu­lar sys­tem, web­site ope­ra­tors can crea­te a web­site very easi­ly and wit­hout pro­gramming know­ledge. In many cases, web hos­ters also offer modu­lar sys­tems. By using a modu­lar sys­tem, your per­so­nal data can also be coll­ec­ted, stored and pro­ces­sed. In this data pro­tec­tion text, we pro­vi­de you with gene­ral infor­ma­ti­on about data pro­ces­sing by modu­lar sys­tems. You can find more detail­ed infor­ma­ti­on in the provider’s data pro­tec­tion decla­ra­ti­ons.

Why do we use website builder systems for our website?

The big­gest advan­ta­ge of a modu­lar sys­tem is its ease of use. We want to offer you a clear, simp­le and well-organised web­site that we can easi­ly ope­ra­te and main­tain our­sel­ves – wit­hout exter­nal sup­port. A modu­lar sys­tem now offers many hel­pful func­tions that we can use even wit­hout pro­gramming know­ledge. This allows us to cus­to­mi­se our web pre­sence and offer you an infor­ma­ti­ve and enjoya­ble time on our web­site.

What data is stored by a modular system?

Exact­ly which data is stored depends of cour­se on the web­site buil­der sys­tem used. Each pro­vi­der pro­ces­ses and coll­ects dif­fe­rent data from the web­site visi­tor. As a rule, howe­ver, tech­ni­cal usa­ge infor­ma­ti­on such as ope­ra­ting sys­tem, brow­ser, screen reso­lu­ti­on, lan­guage and key­board set­tings, hos­ting pro­vi­der and the date of your web­site visit are coll­ec­ted. Track­ing data (e.g. brow­ser acti­vi­ty, click­stream acti­vi­ty, ses­si­on heat­maps, etc.) may also be pro­ces­sed. Per­so­nal data may also be coll­ec­ted and stored. This usual­ly invol­ves cont­act data such as email address, tele­pho­ne num­ber (if you have pro­vi­ded this), IP address and geo­gra­phi­cal loca­ti­on data. You can find out exact­ly what data is stored in the provider’s pri­va­cy poli­cy.

How long and where is the data stored?

We will inform you about the dura­ti­on of data pro­ces­sing below in con­nec­tion with the web­site buil­ding block sys­tem used, if we have fur­ther infor­ma­ti­on on this. You can find detail­ed infor­ma­ti­on about this in the provider’s pri­va­cy poli­cy. In gene­ral, we only pro­cess per­so­nal data for as long as is abso­lut­e­ly neces­sa­ry for the pro­vi­si­on of our ser­vices and pro­ducts. The pro­vi­der may store your data accor­ding to its own spe­ci­fi­ca­ti­ons, over which we have no influence.

Right of objection

You always have the right to infor­ma­ti­on, cor­rec­tion and dele­ti­on of your per­so­nal data. If you have any ques­ti­ons, you can also cont­act the per­son respon­si­ble for the web­site buil­der sys­tem used at any time. Cont­act details can be found eit­her in our pri­va­cy poli­cy or on the web­site of the rele­vant pro­vi­der.

You can dele­te, deac­ti­va­te or mana­ge coo­kies that pro­vi­ders use for their func­tions in your brow­ser. Depen­ding on which brow­ser you use, this works in dif­fe­rent ways. Plea­se note, howe­ver, that not all func­tions may then work as usu­al.

Legal basis

We have a legi­ti­ma­te inte­rest in using a web­site buil­der sys­tem to opti­mi­se our online ser­vice and pre­sent it to you in an effi­ci­ent and user-friendly man­ner. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests). Nevert­hel­ess, we only use the modu­lar sys­tem if you have given your con­sent.

Inso­far as the pro­ces­sing of data is not abso­lut­e­ly neces­sa­ry for the ope­ra­ti­on of the web­site, the data will only be pro­ces­sed on the basis of your con­sent. This appli­es in par­ti­cu­lar to track­ing acti­vi­ties. The legal basis in this respect is Art. 6 para. 1 lit. a GDPR.

In this pri­va­cy poli­cy, we have pro­vi­ded you with the most important gene­ral infor­ma­ti­on about data pro­ces­sing. If you would like more detail­ed infor­ma­ti­on in this regard, you will find fur­ther infor­ma­ti­on – if available – in the fol­lo­wing sec­tion or in the provider’s pri­va­cy poli­cy.

WordPress.com privacy policy

WordPress.com Pri­va­cy Poli­cy Sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Opti­mi­sa­ti­on of our ser­vice per­for­mance 📓 Pro­ces­sed data: Data such as tech­ni­cal usa­ge infor­ma­ti­on such as brow­ser acti­vi­ty, click­stream acti­vi­ty, ses­si­on heat­maps and cont­act details, IP address or your geo­gra­phi­cal loca­ti­on. You can find more details below in this pri­va­cy poli­cy. 📅 Sto­rage dura­ti­on: It main­ly depends on the type of data stored and the spe­ci­fic set­tings. ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What is WordPress?

We use the well-known con­tent manage­ment sys­tem WordPress.com for our web­site. The ser­vice pro­vi­der is the Ame­ri­can com­pa­ny Auto­mat­tic Inc, 60 29th Street #343, San Fran­cis­co, CA 94110, USA.

The com­pa­ny saw the light of day in 2003 and deve­lo­ped into one of the most well-known con­tent manage­ment sys­tems (CMS) in the world in a rela­tively short space of time. A CMS is soft­ware that helps us to design our web­site and pre­sent con­tent in an attrac­ti­ve and orga­nis­ed way. The con­tent can be text, audio and video.
By using Word­Press, your per­so­nal data may also be coll­ec­ted, stored and pro­ces­sed. As a rule, main­ly tech­ni­cal data such as ope­ra­ting sys­tem, brow­ser, screen reso­lu­ti­on or hos­ting pro­vi­der are stored. Howe­ver, per­so­nal data such as IP address, geo­gra­phi­cal data or cont­act details may also be pro­ces­sed.

Why do we use WordPress on our website?

We have many strengths, but real pro­gramming is not one of our core com­pe­ten­ces.

Nevert­hel­ess, we want to have a powerful and attrac­ti­ve web­site that we can also mana­ge and main­tain our­sel­ves. With a modu­lar web­site sys­tem or a con­tent manage­ment sys­tem such as Word­Press, we can do just that. With Word­Press, we don’t have to be ace pro­gramm­ers to offer you a beau­tiful web­site. Thanks to Word­Press, we can ope­ra­te our web­site quick­ly and easi­ly even wit­hout pri­or tech­ni­cal know­ledge. If tech­ni­cal pro­blems occur or we have spe­cial requests for our web­site, the­re are always our spe­cia­lists who feel at home in HTML, PHP, CSS and the like.

Thanks to the ease of use and com­pre­hen­si­ve func­tions of Word­Press, we can design our web­site accor­ding to our wis­hes and offer you a good user expe­ri­ence.

What data is processed by WordPress?

Non-personal data includes tech­ni­cal usa­ge infor­ma­ti­on such as brow­ser acti­vi­ty, click­stream acti­vi­ty, ses­si­on heat­maps and data about your com­pu­ter, ope­ra­ting sys­tem, brow­ser, screen reso­lu­ti­on, lan­guage and key­board set­tings, inter­net pro­vi­der and date of the page visit.

Per­so­nal data is also coll­ec­ted. The­se are pri­ma­ri­ly cont­act data (e‑mail address or tele­pho­ne num­ber, if you pro­vi­de the­se), IP address or your geo­gra­phi­cal loca­ti­on.

Word­Press can also use coo­kies to coll­ect data. This often records data about your beha­viour on our web­site. For exam­p­le, it can record which sub­pages you par­ti­cu­lar­ly like to view, how long you spend on indi­vi­du­al pages, when you lea­ve a page (boun­ce rate) or which default set­tings (e.g. lan­guage sel­ec­tion) you have made. Based on this data, Word­Press can also bet­ter adapt its own mar­ke­ting mea­su­res to your inte­rests and user beha­viour. The next time you visit our web­site, you will the­r­e­fo­re be shown our web­site as you have pre­vious­ly set it.

Word­Press may also use tech­no­lo­gies such as pixel tags (web bea­cons), for exam­p­le to cle­ar­ly iden­ti­fy you as a user and pos­si­bly offer interest-based adver­ti­sing.

How long and where is the data stored?

How long the data is stored depends on various fac­tors. So it main­ly depends on the type of data stored and the spe­ci­fic set­tings of the web­site. In prin­ci­ple, Word­Press dele­tes the data when it is no lon­ger nee­ded for its own pur­po­ses. The­re are of cour­se excep­ti­ons, espe­ci­al­ly if legal obli­ga­ti­ons requi­re the data to be stored for lon­ger. Web ser­ver logs con­tai­ning your IP address and tech­ni­cal data are dele­ted by Word­Press or Auto­mat­tic after 30 days. Auto­mat­tic uses the data for this peri­od to ana­ly­se the traf­fic on its own web­sites (e.g. all Word­Press pages) and to rec­ti­fy any pro­blems. Dele­ted con­tent on Word­Press web­sites is also stored in the recy­cle bin for 30 days to enable reco­very, after which it may remain in back­ups and caches until it is dele­ted. The data is stored on Automattic’s Ame­ri­can ser­vers.

How can I delete my data or prevent data storage?

You have the right and oppor­tu­ni­ty to access your per­so­nal data at any time and to object to its use and pro­ces­sing. You can also lodge a com­plaint with a sta­te super­vi­so­ry aut­ho­ri­ty at any time.

In your brow­ser, you also have the opti­on of indi­vi­du­al­ly mana­ging, dele­ting or deac­ti­vat­ing coo­kies. Plea­se note, howe­ver, that deac­ti­va­ted or dele­ted coo­kies may have a nega­ti­ve impact on the func­tions of our Word­Press site. Depen­ding on which brow­ser you use, the manage­ment of coo­kies works slight­ly dif­fer­ent­ly. In the „Coo­kies” sec­tion, you will find the rele­vant links to the ins­truc­tions for the most popu­lar brow­sers.

Legal basis

If you have con­sen­ted to the use of Word­Press, the legal basis for the cor­re­spon­ding data pro­ces­sing is this con­sent. Accor­ding to Art. 6 para. 1 lit. a GDPR (con­sent), this con­sent con­sti­tu­tes the legal basis for the pro­ces­sing of per­so­nal data, as may occur when Word­Press coll­ects data.

We also have a legi­ti­ma­te inte­rest in using Word­Press to opti­mi­se our online ser­vice and pre­sent it to you in an attrac­ti­ve man­ner. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests). Nevert­hel­ess, we only use Word­Press if you have given your con­sent.

Word­Press or Auto­mat­tic pro­ces­ses your data in the USA, among other places. Auto­mat­tic is an acti­ve par­ti­ci­pant in the EU-US Data Pri­va­cy Frame­work, which regu­la­tes the cor­rect and secu­re trans­fer of per­so­nal data from EU citi­zens to the USA. You can find more infor­ma­ti­on on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Auto­mat­tic also uses so-called stan­dard con­trac­tu­al clau­ses (= Art. 46 (2) and (3) GDPR). Stan­dard Con­trac­tu­al Clau­ses (SCCs) are tem­pla­tes pro­vi­ded by the EU Com­mis­si­on and are inten­ded to ensu­re that your data com­pli­es with Euro­pean data pro­tec­tion stan­dards even if it is trans­fer­red to third count­ries (such as the USA) and stored the­re. Through the EU-US Data Pri­va­cy Frame­work and the stan­dard con­trac­tu­al clau­ses, Auto­mat­tic under­ta­kes to com­ply with the Euro­pean level of data pro­tec­tion when pro­ces­sing your rele­vant data, even if the data is stored, pro­ces­sed and mana­ged in the USA. The­se clau­ses are based on an imple­men­ting decis­i­on of the EU Com­mis­si­on. You can find the decis­i­on and the cor­re­spon­ding stan­dard con­trac­tu­al clau­ses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You can find more details on the pri­va­cy poli­cy and which data is pro­ces­sed by Word­Press and in what way at https://automattic.com/privacy/.

Web Analytics Introduction

Web Ana­ly­tics pri­va­cy poli­cy sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Eva­lua­ti­on of visi­tor infor­ma­ti­on to opti­mi­se the web­site. 📓 Pro­ces­sed data: Access sta­tis­tics con­tai­ning data such as access loca­ti­ons, device data, access dura­ti­on and time, navi­ga­ti­on beha­viour, click beha­viour and IP addres­ses. You can find more details on this in the web ana­ly­tics tool used. 📅 Sto­rage dura­ti­on: depen­ding on the web ana­ly­tics tool used ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What is web analytics?

We use soft­ware on our web­site to eva­lua­te the beha­viour of web­site visi­tors, known as web ana­ly­tics or web ana­ly­sis for short. This invol­ves coll­ec­ting data that the respec­ti­ve ana­ly­tics tool pro­vi­der (also known as a track­ing tool) stores, mana­ges and pro­ces­ses. The data is used to crea­te ana­ly­ses of user beha­viour on our web­site and made available to us as the web­site ope­ra­tor. In addi­ti­on, most tools offer various test opti­ons. For exam­p­le, we can test which offers or con­tent are best recei­ved by our visi­tors. To do this, we show you two dif­fe­rent offers for a limi­t­ed peri­od of time. After the test (known as an A/B test), we know which pro­duct or con­tent our web­site visi­tors find more inte­res­t­ing. For such test pro­ce­du­res, as well as for other ana­ly­tics pro­ce­du­res, user pro­files can also be crea­ted and the data stored in coo­kies.

Why do we use web analytics?

With our web­site, we have a clear goal in mind: we want to deli­ver the best web offe­ring on the mar­ket for our indus­try. In order to achie­ve this goal, we want to offer the best and most inte­res­t­ing ran­ge of ser­vices on the one hand and ensu­re that you feel com­ple­te­ly at ease on our web­site on the other. With the help of web ana­ly­sis tools, we can take a clo­ser look at the beha­viour of our web­site visi­tors and then impro­ve our web­site accor­din­gly for you and for us. For exam­p­le, we can reco­g­ni­se the avera­ge age of our visi­tors, whe­re they come from, when our web­site is visi­ted the most or which con­tent or pro­ducts are par­ti­cu­lar­ly popu­lar. All this infor­ma­ti­on helps us to opti­mi­se the web­site and thus adapt it to your needs, inte­rests and wis­hes.

What data is processed?

Exact­ly which data is stored depends, of cour­se, on the ana­ly­sis tools used. As a rule, howe­ver, the con­tent you view on our web­site, which but­tons or links you click on, when you access a page, which brow­ser you use, which device (PC, tablet, smart­phone, etc.) you use to visit the web­site or which com­pu­ter sys­tem you use are stored, for exam­p­le. If you have agreed that loca­ti­on data may also be coll­ec­ted, this may also be pro­ces­sed by the web ana­ly­sis tool pro­vi­der.

Your IP address is also stored. Accor­ding to the Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR), IP addres­ses are per­so­nal data. Howe­ver, your IP address is usual­ly stored pseud­ony­mi­sed (i.e. in an unre­co­g­nisable and shor­ten­ed form). For the pur­po­ses of test­ing, web ana­ly­sis and web opti­mi­sa­ti­on, no direct data such as your name, age, address or email address is stored. All this data, if coll­ec­ted, is stored in pseud­ony­mi­sed form. This means that you can­not be iden­ti­fied as a per­son.

The fol­lo­wing exam­p­le shows sche­ma­ti­cal­ly how Goog­le Ana­ly­tics works as an exam­p­le of client-based web track­ing with Java Script code.

How long the respec­ti­ve data is stored always depends on the pro­vi­der. Some coo­kies only store data for a few minu­tes or until you lea­ve the web­site, while other coo­kies can store data for seve­ral years.

Duration of data processing

We will inform you about the dura­ti­on of data pro­ces­sing below if we have fur­ther infor­ma­ti­on on this. In gene­ral, we only pro­cess per­so­nal data for as long as is abso­lut­e­ly neces­sa­ry for the pro­vi­si­on of our ser­vices and pro­ducts. If requi­red by law, for exam­p­le in the case of accoun­ting, this sto­rage peri­od may also be excee­ded.

Right of objection

You also have the right and the opti­on to with­draw your con­sent to the use of coo­kies or third-party pro­vi­ders at any time. This works eit­her via our coo­kie manage­ment tool or via other opt-out func­tions. For exam­p­le, you can also pre­vent data coll­ec­tion by coo­kies by mana­ging, deac­ti­vat­ing or dele­ting coo­kies in your brow­ser.

Legal basis

The use of web ana­ly­tics requi­res your con­sent, which we have obtai­ned with our coo­kie pop-up. Accor­ding to Art. 6 para. 1 lit. a GDPR (con­sent) repres­ents the legal basis for the pro­ces­sing of per­so­nal data as it may occur when coll­ec­ted by web ana­ly­tics tools.

In addi­ti­on to con­sent, we have a legi­ti­ma­te inte­rest in ana­ly­sing the beha­viour of web­site visi­tors in order to impro­ve our web­site tech­ni­cal­ly and eco­no­mic­al­ly. With the help of web ana­ly­tics, we reco­g­ni­se errors on the web­site, can iden­ti­fy attacks and impro­ve effi­ci­en­cy. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests). Nevert­hel­ess, we only use the tools if you have given your con­sent.

As web ana­ly­tics tools use coo­kies, we recom­mend that you also read our gene­ral pri­va­cy poli­cy on coo­kies. To find out exact­ly which of your data is stored and pro­ces­sed, you should read the pri­va­cy poli­ci­es of the respec­ti­ve tools.

Infor­ma­ti­on on spe­cial web ana­ly­tics tools, if available, can be found in the fol­lo­wing sec­tions.

Email marketing introduction

Email mar­ke­ting sum­ma­ry 👥 Affec­ted par­ties: News­let­ter sub­scri­bers 🤝 Pur­po­se: Direct adver­ti­sing by e‑mail, noti­fi­ca­ti­on of system-relevant events 📓 Pro­ces­sed data: Data ente­red during regis­tra­ti­on, but at least the email address. You can find more details on this in the email mar­ke­ting tool used. 📅 Sto­rage peri­od: Dura­ti­on of the exis­tence of the sub­scrip­ti­on ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What is email marketing?

In order to keep you up to date, we also use the opti­on of e‑mail mar­ke­ting. If you have con­sen­ted to recei­ving our emails or news­let­ters, your data will also be pro­ces­sed and stored. Email mar­ke­ting is a sub-area of online mar­ke­ting. It invol­ves sen­ding news or gene­ral infor­ma­ti­on about a com­pa­ny, pro­ducts or ser­vices by e‑mail to a spe­ci­fic group of peo­p­le who are inte­res­ted in them.

If you want to take part in our e‑mail mar­ke­ting (usual­ly by news­let­ter), you nor­mal­ly just need to regis­ter with your e‑mail address. To do this, you fill in an online form and send it off. Howe­ver, we may also ask you to pro­vi­de your title and name so that we can wri­te to you per­so­nal­ly.

Basi­cal­ly, the regis­tra­ti­on for news­let­ters works with the help of the so-called „dou­ble opt-in pro­ce­du­re”. After you have regis­tered for our news­let­ter on our web­site, you will recei­ve an e‑mail con­fir­ming your news­let­ter regis­tra­ti­on. This ensu­res that the e‑mail address belongs to you and that no-one has regis­tered with a third-party e‑mail address. We or a noti­fi­ca­ti­on tool used by us logs each indi­vi­du­al regis­tra­ti­on. This is neces­sa­ry so that we can pro­ve that the regis­tra­ti­on pro­cess is legal­ly cor­rect. As a rule, the time of regis­tra­ti­on, the time of regis­tra­ti­on con­fir­ma­ti­on and your IP address are saved. In addi­ti­on, it is also log­ged when you make chan­ges to your stored data.

Why do we use email marketing?

We natu­ral­ly want to stay in cont­act with you and always pro­vi­de you with the most important news about our com­pa­ny. To do this, we use email mar­ke­ting – often sim­ply refer­red to as „news­let­ters” – as an essen­ti­al part of our online mar­ke­ting. If you agree to this or if it is per­mit­ted by law, we will send you news­let­ters, sys­tem e‑mails or other noti­fi­ca­ti­ons by e‑mail. When we use the term „news­let­ter” in the fol­lo­wing text, we main­ly mean e‑mails sent regu­lar­ly. Of cour­se, we do not want to bother you in any way with our news­let­ters. That is why we always endea­vour to offer only rele­vant and inte­res­t­ing con­tent. For exam­p­le, you can find out more about our com­pa­ny, our ser­vices or pro­ducts. As we are con­stant­ly impro­ving our offers, you will always find out via our news­let­ter when the­re is news or when we are offe­ring spe­cial, lucra­ti­ve pro­mo­ti­ons. If we com­mis­si­on a ser­vice pro­vi­der who offers a pro­fes­sio­nal dis­patch tool for our email mar­ke­ting, we do so in order to be able to offer you fast and secu­re news­let­ters. The pur­po­se of our e‑mail mar­ke­ting is basi­cal­ly to inform you about new offers and also to achie­ve our cor­po­ra­te goals.

What data is processed?

If you beco­me a sub­scri­ber to our news­let­ter via our web­site, you con­firm your mem­ber­ship of an e‑mail list by e‑mail. In addi­ti­on to your IP address and e‑mail address, your title, name, address and tele­pho­ne num­ber may also be stored. Howe­ver, only if you con­sent to this data sto­rage. The data mark­ed as such is neces­sa­ry so that you can par­ti­ci­pa­te in the ser­vice offe­red. Pro­vi­ding this infor­ma­ti­on is vol­un­t­a­ry, but if you do not pro­vi­de it, you will not be able to use the ser­vice. In addi­ti­on, infor­ma­ti­on about your device or your favou­ri­te con­tent on our web­site may also be stored. You can find out more about the sto­rage of data when you visit a web­site in the „Auto­ma­tic data sto­rage” sec­tion. We record your decla­ra­ti­on of con­sent so that we can always pro­ve that it com­pli­es with our laws.

Duration of data processing

If you unsub­scri­be your e‑mail address from our e‑mail/newsletter dis­tri­bu­ti­on list, we may store your address for up to three years on the basis of our legi­ti­ma­te inte­rests so that we can still pro­ve that you gave your con­sent at the time. We may only pro­cess this data if we have to defend our­sel­ves against any claims.

Howe­ver, if you con­firm that you have given us your con­sent to the news­let­ter regis­tra­ti­on, you can sub­mit an indi­vi­du­al can­cel­la­ti­on request at any time. If you per­ma­nent­ly revo­ke your con­sent, we reser­ve the right to store your e‑mail address in a black­list. As long as you have vol­un­t­a­ri­ly sub­scri­bed to our news­let­ter, we will of cour­se retain your e‑mail address.

Right of objection

You have the opti­on of can­cel­ling your news­let­ter sub­scrip­ti­on at any time. All you have to do is revo­ke your con­sent to the news­let­ter sub­scrip­ti­on. This usual­ly only takes a few seconds or one or two clicks. You will usual­ly find a link to can­cel your news­let­ter sub­scrip­ti­on at the end of every email. If you real­ly can­not find the link in the news­let­ter, plea­se cont­act us by e‑mail and we will can­cel your news­let­ter sub­scrip­ti­on imme­dia­te­ly.

Legal basis

Our news­let­ter is sent on the basis of your con­sent (Artic­le 6(1)(a) GDPR). This means that we may only send you a news­let­ter if you have actively sub­scri­bed to it before­hand. We may also send you adver­ti­sing mes­sa­ges if you have beco­me our cus­to­mer and have not objec­ted to the use of your email address for direct adver­ti­sing.

Infor­ma­ti­on on spe­ci­fic email mar­ke­ting ser­vices and how they pro­cess per­so­nal data, if available, can be found in the fol­lo­wing sec­tions.

Security & Anti-Spam

Secu­ri­ty & Anti-Spam Pri­va­cy Poli­cy Sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: cyber secu­ri­ty 📓 Pro­ces­sed data: Data such as your IP address, name or tech­ni­cal data such as brow­ser ver­si­on You can find more details on this below and in the indi­vi­du­al data pro­tec­tion texts. 📅 Sto­rage peri­od: Most of the data is stored until it is no lon­ger requi­red for the ful­film­ent of the ser­vice ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What is security & anti-spam software?

With so-called secu­ri­ty and anti-spam soft­ware, you and we can pro­tect our­sel­ves from various spam or phis­hing emails and pos­si­ble other cyber­at­tacks. Spam refers to adver­ti­sing emails from a mass mai­ling that you did not request yours­elf. Such emails are also known as data junk and can also cau­se cos­ts. Phis­hing emails, on the other hand, are mes­sa­ges that aim to build trust via fake mes­sa­ges or web­sites in order to obtain per­so­nal data. Anti-spam soft­ware gene­ral­ly pro­tects against unwan­ted spam mes­sa­ges or mali­cious emails that could intro­du­ce viru­s­es into our sys­tem, for exam­p­le. We also use gene­ral fire­wall and secu­ri­ty sys­tems to pro­tect our com­pu­ters from unwan­ted net­work attacks.

Why do we use security & anti-spam software?

We attach gre­at importance to secu­ri­ty on our web­site. After all, it’s not just about our secu­ri­ty, but abo­ve all about yours. Unfort­u­na­te­ly, cyber thre­ats are now part of ever­y­day life in the world of IT and the Inter­net. Hackers often try to ste­al per­so­nal data from an IT sys­tem with the help of a cyber attack. And that is why a good defence sys­tem is abso­lut­e­ly essen­ti­al. A secu­ri­ty sys­tem moni­tors all inco­ming and out­go­ing con­nec­tions to our net­work or com­pu­ter. To achie­ve even grea­ter secu­ri­ty against cyber attacks, we also use other exter­nal secu­ri­ty ser­vices in addi­ti­on to the stan­dar­di­sed secu­ri­ty sys­tems on our com­pu­ter. This pre­vents unaut­ho­ri­sed data traf­fic and pro­tects us from cyber­crime.

What data is processed by security & anti-spam software?

Exact­ly which data is coll­ec­ted and stored depends of cour­se on the respec­ti­ve ser­vice. Howe­ver, we always endea­vour to only use pro­gram­mes that coll­ect data very spa­rin­gly or only store data that is neces­sa­ry for the ful­film­ent of the ser­vice offe­red. In prin­ci­ple, the ser­vice may store data such as name, address, IP address, e‑mail address and tech­ni­cal data such as brow­ser type or brow­ser ver­si­on. Any per­for­mance and log data may also be coll­ec­ted in order to reco­g­ni­se pos­si­ble inco­ming thre­ats in good time. This data is pro­ces­sed as part of the ser­vices and in com­pli­ance with the appli­ca­ble laws. This also includes the GDPR for US pro­vi­ders (via the stan­dard con­trac­tu­al clau­ses). In some cases, the­se secu­ri­ty ser­vices also work with third-party pro­vi­ders who may store and/or pro­cess data under ins­truc­tions and in accordance with the data pro­tec­tion gui­de­lines and other secu­ri­ty mea­su­res. Data is usual­ly stored via coo­kies.

Duration of data processing

We will inform you about the dura­ti­on of data pro­ces­sing below if we have fur­ther infor­ma­ti­on on this. For exam­p­le, secu­ri­ty pro­gram­mes store data until you or we revo­ke the data sto­rage. In gene­ral, per­so­nal data is only stored for as long as is abso­lut­e­ly neces­sa­ry for the pro­vi­si­on of the ser­vices. Unfort­u­na­te­ly, in many cases we do not recei­ve pre­cise infor­ma­ti­on from the pro­vi­ders about the length of sto­rage.

Right of objection

You also have the right and the opti­on to with­draw your con­sent to the use of coo­kies or third-party secu­ri­ty soft­ware at any time. This works eit­her via our coo­kie manage­ment tool or via other opt-out func­tions. For exam­p­le, you can also pre­vent data coll­ec­tion by coo­kies by mana­ging, deac­ti­vat­ing or dele­ting coo­kies in your brow­ser.

As such secu­ri­ty ser­vices may also use coo­kies, we recom­mend that you read our gene­ral pri­va­cy poli­cy on coo­kies. To find out exact­ly which of your data is stored and pro­ces­sed, you should read the pri­va­cy poli­ci­es of the respec­ti­ve tools.

Legal basis

We use the secu­ri­ty ser­vices main­ly on the basis of our legi­ti­ma­te inte­rests (Art. 6 para. 1 lit. f GDPR) in a good secu­ri­ty sys­tem against various cyber attacks.

Cer­tain pro­ces­sing ope­ra­ti­ons, in par­ti­cu­lar the use of coo­kies and the use of secu­ri­ty func­tions, requi­re your con­sent. If you have con­sen­ted to your data being pro­ces­sed and stored by inte­gra­ted secu­ri­ty ser­vices, this con­sent is the legal basis for data pro­ces­sing (Art. 6 para. 1 lit. a GDPR). Most of the ser­vices we use set coo­kies in your brow­ser to store data. We the­r­e­fo­re recom­mend that you read our data pro­tec­tion text on coo­kies careful­ly and view the pri­va­cy poli­cy or coo­kie gui­de­lines of the respec­ti­ve ser­vice pro­vi­der.

Infor­ma­ti­on on spe­cial tools – if available – can be found in the fol­lo­wing sec­tions.

Google reCAPTCHA privacy policy

Goog­le reCAPTCHA pri­va­cy poli­cy sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Opti­mi­sa­ti­on of our ser­vice per­for­mance and pro­tec­tion against cyber attacks 📓 Pro­ces­sed data: Data such as IP address, brow­ser infor­ma­ti­on, your ope­ra­ting sys­tem, limi­t­ed loca­ti­on and usa­ge data You can find more details below in this pri­va­cy poli­cy. 📅 Sto­rage dura­ti­on: depen­ding on the stored data ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What is reCAPTCHA?

Our pri­ma­ry goal is to secu­re and pro­tect our web­site for you and for us in the best pos­si­ble way. To ensu­re this, we use Goog­le reCAPTCHA from Goog­le Inc. For the Euro­pean regi­on, the com­pa­ny Goog­le Ire­land Limi­t­ed (Gor­don House, Bar­row Street Dub­lin 4, Ire­land) is respon­si­ble for all Goog­le ser­vices. With reCAPTCHA we can deter­mi­ne whe­ther you are real­ly a fle­sh and blood per­son and not a robot or other spam soft­ware. By spam we mean any unso­li­ci­ted infor­ma­ti­on that is sent to us elec­tro­ni­cal­ly. With the clas­sic CAPTCHAS, you usual­ly had to sol­ve text or pic­tu­re puz­zles for veri­fi­ca­ti­on. With reCAPTCHA from Goog­le, we don’t usual­ly have to bother you with such puz­zles. In most cases, it is enough to sim­ply tick a box to con­firm that you are not a bot. With the new Invi­si­ble reCAPTCHA ver­si­on, you no lon­ger even have to tick the box. You can find out exact­ly how this works and, abo­ve all, which data is used for this in the cour­se of this pri­va­cy poli­cy.

reCAPTCHA is a free captcha ser­vice from Goog­le that pro­tects web­sites from spam soft­ware and misu­se by non-human visi­tors. This ser­vice is most com­mon­ly used when you fill out forms on the Inter­net. A Captcha ser­vice is a type of auto­ma­tic Turing test that is desi­gned to ensu­re that an action on the Inter­net is per­for­med by a human and not by a bot. In the clas­sic Turing test (named after the com­pu­ter sci­en­tist Alan Turing), a human deter­mi­nes the dif­fe­rence bet­ween a bot and a human. With captchas, the com­pu­ter or a soft­ware pro­gram­me also does this. Clas­sic captchas work with small tasks that are easy for humans to sol­ve but pre­sent con­sidera­ble dif­fi­cul­ties for machi­nes. With reCAPTCHA, you no lon­ger have to actively sol­ve puz­zles. The tool uses modern risk tech­ni­ques to distin­gu­ish humans from bots. All you have to do is tick the „I am not a robot” text box or, with Invi­si­ble reCAPTCHA, even that is no lon­ger neces­sa­ry. With reCAPTCHA, a Java­Script ele­ment is inte­gra­ted into the source code and then the tool runs in the back­ground and ana­ly­ses your user beha­viour. The soft­ware cal­cu­la­tes a so-called captcha score from the­se user actions. Goog­le uses this score to cal­cu­la­te the pro­ba­bi­li­ty that you are human even befo­re you enter the captcha. reCAPTCHA or captchas in gene­ral are always used when bots could mani­pu­la­te or abu­se cer­tain actions (e.g. regis­tra­ti­ons, sur­veys, etc.).

Why do we use reCAPTCHA on our website?

We only want to wel­co­me peo­p­le of fle­sh and blood on our site. Bots and spam soft­ware of all kinds can safe­ly stay at home. That’s why we do ever­y­thing we can to pro­tect our­sel­ves and offer you the best pos­si­ble user-friendliness. For this reason, we use Goog­le reCAPTCHA from Goog­le. This way we can be pret­ty sure that we remain a „bot-free” web­site. By using reCAPTCHA, data is trans­mit­ted to Goog­le to deter­mi­ne whe­ther you are actual­ly a human being. reCAPTCHA the­r­e­fo­re ser­ves to ensu­re the secu­ri­ty of our web­site and, by exten­si­on, your secu­ri­ty. For exam­p­le, wit­hout reCAPTCHA it could hap­pen that a bot regis­ters as many e‑mail addres­ses as pos­si­ble during regis­tra­ti­on in order to sub­se­quent­ly „spam” forums or blogs with unwan­ted adver­ti­sing con­tent. With reCAPTCHA we can pre­vent such bot attacks.

What data is stored by reCAPTCHA?

reCAPTCHA coll­ects per­so­nal data from users in order to deter­mi­ne whe­ther the actions on our web­site actual­ly ori­gi­na­te from peo­p­le. The IP address and other data that Goog­le requi­res for the reCAPTCHA ser­vice may the­r­e­fo­re be sent to Goog­le. IP addres­ses are almost always trun­ca­ted within the mem­ber sta­tes of the EU or other signa­to­ry sta­tes to the Agree­ment on the Euro­pean Eco­no­mic Area befo­re the data is sent to a ser­ver in the USA. The IP address is not com­bi­ned with other Goog­le data unless you are log­ged in with your Goog­le account while using reCAPTCHA. First, the reCAPTCHA algo­rithm checks whe­ther Goog­le coo­kies from other Goog­le ser­vices (You­Tube, Gmail, etc.) have alre­a­dy been pla­ced on your brow­ser. Then reCAPTCHA sets an addi­tio­nal coo­kie in your brow­ser and takes a snapshot of your brow­ser win­dow.

The fol­lo­wing list of coll­ec­ted brow­ser and user data does not cla­im to be exhaus­ti­ve. Rather, they are examp­les of data that, to our know­ledge, are pro­ces­sed by Goog­le.

• Refer­rer URL (the address of the page from which the visi­tor comes)
• IP address (e.g. 256.123.123.1)
• Infor­ma­ti­on about the ope­ra­ting sys­tem (the soft­ware that enables your com­pu­ter to ope­ra­te. Com­mon ope­ra­ting sys­tems are Win­dows, Mac OS X or Linux)
• Coo­kies (small text files that store data in your brow­ser)
• Mou­se and key­board beha­viour (every action you per­form with the mou­se or key­board is saved)
• Date and lan­guage set­tings (which lan­guage or date you have pre­set on your PC is saved)
• All Java­Script objects (Java­Script is a pro­gramming lan­guage that enables web­sites to cus­to­mi­se them­sel­ves to the user. Java­Script objects can coll­ect all kinds of data under one name)
• Screen reso­lu­ti­on (indi­ca­tes how many pixels the image dis­play con­sists of)

It is undis­pu­ted that Goog­le uses and ana­ly­ses this data even befo­re you click on the „I am not a robot” check­box. With the Invi­si­ble reCAPTCHA ver­si­on, you don’t even have to tick the box and the enti­re reco­gni­ti­on pro­cess runs in the back­ground. Goog­le does not tell you in detail exact­ly how much and what data it stores.

The fol­lo­wing coo­kies are used by reCAPTCHA: Here we refer to the reCAPTCHA demo ver­si­on from Goog­le at https://www.google.com/recaptcha/api2/demo. All the­se coo­kies requi­re a uni­que iden­ti­fier for track­ing pur­po­ses. Here is a list of coo­kies that Goog­le reCAPTCHA has set on the demo ver­si­on:

Name: IDE
Value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-112970128–8
Inten­ded use: This coo­kie is set by the com­pa­ny Dou­ble­Click (also owned by Goog­le) to regis­ter and report the actions of a user on the web­site when inter­ac­ting with adverts. This allows the effec­ti­ve­ness of adver­ti­sing to be mea­su­red and appro­pria­te opti­mi­sa­ti­on mea­su­res to be taken. IDE is stored in brow­sers under the domain doubleclick.net.
Expiry date: after one year

Name: 1P_JAR
Value: 2019–5‑14–12
Inten­ded use: This coo­kie coll­ects sta­tis­tics on web­site usa­ge and mea­su­res con­ver­si­ons. A con­ver­si­on occurs, for exam­p­le, when a user beco­mes a buy­er. The coo­kie is also used to dis­play rele­vant adverts to users. The coo­kie can also be used to pre­vent a user from see­ing the same advert more than once.
Expiry date: after one month

Name: ANID
Value: U7j1v3dZa1129701280xgZFmiqWppRWKOr
Inten­ded use: We were unable to find out much infor­ma­ti­on about this coo­kie. In Google’s pri­va­cy poli­cy, the coo­kie is men­tio­ned in con­nec­tion with „adver­ti­sing coo­kies” such as „DSID”, „FLC”, „AID”, „TAID”. ANID is stored under domain google.com.
Expiry date: after 9 months

Name: CONSENT
Value: YES+AT.de+20150628–20‑0
Inten­ded use: The coo­kie stores the sta­tus of a user’s con­sent to the use of various Goog­le ser­vices. CONSENT is also used for secu­ri­ty pur­po­ses to veri­fy users, pre­vent frau­du­lent log­in infor­ma­ti­on and pro­tect user data from unaut­ho­ri­sed attacks.
Expiry date: after 19 years

Name: NID
Value: 0WmuWqy112970128zILzqV_nmt3sDXwPeM5Q
Inten­ded use: NID is used by Goog­le to cus­to­mi­se adverts to your Goog­le sear­ches. With the help of the coo­kie, Goog­le „remem­bers” your most fre­quent­ly ente­red search queries or your pre­vious inter­ac­tion with adverts. This means you always recei­ve cus­to­mi­sed adverts. The coo­kie con­ta­ins a uni­que ID to coll­ect the user’s per­so­nal set­tings for adver­ti­sing pur­po­ses.
Expiry date: after 6 months

Name: DV
Value: gEAABBCjJMXcI0dSAAAANbqc112970128‑4
Inten­ded use: As soon as you have ticked the „I am not a robot” box, this coo­kie will be set. The coo­kie is used by Goog­le Ana­ly­tics for per­so­na­li­sed adver­ti­sing. DV coll­ects infor­ma­ti­on in anony­mi­sed form and is also used to make user distinc­tions.
Expiry date: after 10 minu­tes

Remark: This list can­not cla­im to be exhaus­ti­ve, as expe­ri­ence has shown that Goog­le chan­ges its choice of coo­kies from time to time.

How long and where is the data stored?

By inser­ting reCAPTCHA, data is trans­fer­red from you to the Goog­le ser­ver. Whe­re exact­ly this data is stored is not made clear by Goog­le, even after repea­ted requests. Wit­hout having recei­ved con­fir­ma­ti­on from Goog­le, it can be assu­med that data such as mou­se inter­ac­tion, time spent on the web­site or lan­guage set­tings are stored on the Euro­pean or Ame­ri­can Goog­le ser­vers. The IP address that your brow­ser trans­mits to Goog­le is not mer­ged with other Goog­le data from other Goog­le ser­vices. Howe­ver, if you are log­ged in to your Goog­le account while using the reCAPTCHA plug-in, the data will be mer­ged. The devia­ting data pro­tec­tion pro­vi­si­ons of Goog­le app­ly.

How can I delete my data or prevent data storage?

If you do not want any data about you and your beha­viour to be trans­mit­ted to Goog­le, you must log out of Goog­le com­ple­te­ly and dele­te all Goog­le coo­kies befo­re you visit our web­site or use the reCAPTCHA soft­ware. In prin­ci­ple, the data is auto­ma­ti­cal­ly trans­mit­ted to Goog­le as soon as you visit our web­site. To dele­te this data again, you must cont­act Goog­le sup­port at  https://support.google.com/?hl=de&tid=112970128 cont­act.

By using our web­site, you con­sent to the auto­ma­tic coll­ec­tion, pro­ces­sing and use of data by Goog­le LLC and its repre­sen­ta­ti­ves.

Plea­se note that when using this tool, your data may also be stored and pro­ces­sed out­side the EU. Most third count­ries (inclu­ding the USA) are not con­side­red secu­re under cur­rent Euro­pean data pro­tec­tion law. Data may the­r­e­fo­re not sim­ply be trans­fer­red to inse­cu­re third count­ries, stored and pro­ces­sed the­re, unless the­re are sui­ta­ble gua­ran­tees (such as EU stan­dard con­trac­tu­al clau­ses) bet­ween us and the non-European ser­vice pro­vi­der.

Legal basis

If you have con­sen­ted to the use of Goog­le reCAPTCHA, the legal basis for the cor­re­spon­ding data pro­ces­sing is this con­sent. Accor­ding to Art. 6 para. 1 lit. a GDPR (con­sent) repres­ents the legal basis for the pro­ces­sing of per­so­nal data, as may occur when Goog­le reCAPTCHA is used to coll­ect data.

We also have a legi­ti­ma­te inte­rest in using Goog­le reCAPTCHA to opti­mi­se our online ser­vice and make it more secu­re. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests). Nevert­hel­ess, we only use Goog­le reCAPTCHA if you have given your con­sent.

Goog­le also pro­ces­ses your data in the USA, among other places. Goog­le is an acti­ve par­ti­ci­pant in the EU-US Data Pri­va­cy Frame­work, which regu­la­tes the cor­rect and secu­re trans­fer of per­so­nal data from EU citi­zens to the USA. You can find more infor­ma­ti­on on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Goog­le also uses so-called stan­dard con­trac­tu­al clau­ses (= Art. 46 (2) and (3) GDPR). Stan­dard Con­trac­tu­al Clau­ses (SCCs) are tem­pla­tes pro­vi­ded by the EU Com­mis­si­on and are inten­ded to ensu­re that your data com­pli­es with Euro­pean data pro­tec­tion stan­dards even if it is trans­fer­red to third count­ries (such as the USA) and stored the­re. Through the EU-US Data Pri­va­cy Frame­work and the stan­dard con­trac­tu­al clau­ses, Goog­le under­ta­kes to com­ply with the Euro­pean level of data pro­tec­tion when pro­ces­sing your rele­vant data, even if the data is stored, pro­ces­sed and mana­ged in the USA. The­se clau­ses are based on an imple­men­ting decis­i­on of the EU Com­mis­si­on. You can find the decis­i­on and the cor­re­spon­ding stan­dard con­trac­tu­al clau­ses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Goog­le Ads Data Pro­ces­sing Terms, which refer to the stan­dard con­trac­tu­al clau­ses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can find out more about reCAPTCHA on Google’s web deve­lo­per page at https://developers.google.com/recaptcha/. Goog­le does go into more detail about the tech­ni­cal deve­lo­p­ment of reCAPTCHA here, but you will search in vain for pre­cise infor­ma­ti­on about data sto­rage and data pro­tec­tion issues. A good over­view of the basic use of data at Goog­le can be found in the company’s own pri­va­cy poli­cy at https://policies.google.com/privacy.

Audio & Video Introduction

Audio & Video Pri­va­cy Poli­cy Sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Opti­mi­sa­ti­on of our ser­vice per­for­mance 📓 Pro­ces­sed data: Data such as cont­act details, user beha­viour data, infor­ma­ti­on about your device and your IP address may be stored. You can find more details on this below in the cor­re­spon­ding data pro­tec­tion texts. 📅 Sto­rage peri­od: Data is gene­ral­ly stored for as long as it is requi­red for the pur­po­se of the ser­vice ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What are audio and video elements?

We have inte­gra­ted audio and video ele­ments on our web­site so that you can watch vide­os or lis­ten to music/podcasts direct­ly via our web­site. The con­tent is pro­vi­ded by ser­vice pro­vi­ders. All con­tent is the­r­e­fo­re also obtai­ned from the cor­re­spon­ding ser­vers of the pro­vi­ders.

The­se are inte­gra­ted func­tion­al ele­ments from plat­forms such as You­Tube, Vimeo or Spo­ti­fy. The use of the­se por­tals is usual­ly free of char­ge, but paid con­tent can also be published. With the help of the­se inte­gra­ted ele­ments, you can lis­ten to or watch the respec­ti­ve con­tent via our web­site.

If you use audio or video ele­ments on our web­site, your per­so­nal data may also be trans­mit­ted to the ser­vice pro­vi­ders, pro­ces­sed and stored.

Why do we use audio & video elements on our website?

Of cour­se we want to pro­vi­de you with the best offer on our web­site. And we rea­li­se that con­tent is no lon­ger just con­vey­ed in text and sta­tic images. Ins­tead of sim­ply giving you a link to a video, we offer you audio and video for­mats direct­ly on our web­site that are enter­tai­ning or infor­ma­ti­ve and ide­al­ly even both. This expands our ser­vice and makes it easier for you to access inte­res­t­ing con­tent. We the­r­e­fo­re offer video and/or audio con­tent in addi­ti­on to our texts and images.

What data is stored by audio & video elements?

When you access a page on our web­site that has an embedded video, for exam­p­le, your ser­ver con­nects to the ser­ver of the ser­vice pro­vi­der. Your data is also trans­fer­red to the third-party pro­vi­der and stored the­re. Some data is coll­ec­ted and stored regard­less of whe­ther you have an account with the third-party pro­vi­der or not. This usual­ly includes your IP address, brow­ser type, ope­ra­ting sys­tem and other gene­ral infor­ma­ti­on about your end device. In addi­ti­on, most pro­vi­ders also coll­ect infor­ma­ti­on about your web acti­vi­ty. This includes, for exam­p­le, ses­si­on dura­ti­on, boun­ce rate, which but­ton you cli­cked on or which web­site you used to access the ser­vice. All this infor­ma­ti­on is usual­ly stored via coo­kies or pixel tags (also known as web bea­cons). Pseud­ony­mi­sed data is usual­ly stored in coo­kies in your brow­ser. You can always find out exact­ly which data is stored and pro­ces­sed in the pri­va­cy poli­cy of the respec­ti­ve pro­vi­der.

Duration of data processing

You can find out exact­ly how long the data is stored on the ser­vers of the third-party pro­vi­ders eit­her below in the data pro­tec­tion text of the respec­ti­ve tool or in the provider’s pri­va­cy poli­cy. In prin­ci­ple, per­so­nal data is only ever pro­ces­sed for as long as is abso­lut­e­ly neces­sa­ry for the pro­vi­si­on of our ser­vices or pro­ducts. This gene­ral­ly also appli­es to third-party pro­vi­ders. In most cases, you can assu­me that cer­tain data will be stored on the ser­vers of third-party pro­vi­ders for seve­ral years. Data can be stored for dif­fe­rent lengths of time, espe­ci­al­ly in coo­kies. Some coo­kies are dele­ted as soon as you lea­ve the web­site, while others may be stored in your brow­ser for seve­ral years.

Right of objection

You also have the right and the opti­on to with­draw your con­sent to the use of coo­kies or third-party pro­vi­ders at any time. This works eit­her via our coo­kie manage­ment tool or via other opt-out func­tions. For exam­p­le, you can also pre­vent data coll­ec­tion by coo­kies by mana­ging, deac­ti­vat­ing or dele­ting coo­kies in your brow­ser. The lawful­ness of the pro­ces­sing until the can­cel­la­ti­on remains unaf­fec­ted.

Sin­ce the inte­gra­ted audio and video func­tions on our web­site usual­ly also use coo­kies, you should also read our gene­ral pri­va­cy poli­cy on coo­kies. You can find out more about the hand­ling and sto­rage of your data in the pri­va­cy poli­ci­es of the respec­ti­ve third-party pro­vi­ders.

Legal basis

If you have con­sen­ted to your data being pro­ces­sed and stored by inte­gra­ted audio and video ele­ments, this con­sent is the legal basis for data pro­ces­sing (Art. 6 para. 1 lit. a GDPR). In prin­ci­ple, your data is also pro­ces­sed on the basis of our legi­ti­ma­te inte­rest (Art. 6 para. 1 lit. f GDPR) We store and pro­cess your data for the pur­po­se of fast and good com­mu­ni­ca­ti­on with you or other cus­to­mers and busi­ness part­ners. Nevert­hel­ess, we only use the inte­gra­ted audio and video ele­ments if you have given your con­sent.

Online map services Introduction

Online map ser­vices Pri­va­cy poli­cy sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Impro­ve­ment of the user expe­ri­ence 📓 Pro­ces­sed data: Which data is pro­ces­sed depends hea­vi­ly on the ser­vices used. It is usual­ly IP address, loca­ti­on data, search items and/or tech­ni­cal data. You can find more details on this in the respec­ti­ve tools used. 📅 Sto­rage dura­ti­on: depen­ding on the tools used ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What are online map services?

We also use online map ser­vices for our web­site as an exten­ded ser­vice. Goog­le Maps is pro­ba­b­ly the ser­vice you are most fami­li­ar with, but the­re are also other pro­vi­ders that spe­cia­li­se in crea­ting digi­tal maps. Such ser­vices make it pos­si­ble to dis­play loca­ti­ons, rou­te plans or other geo­gra­phi­cal infor­ma­ti­on direct­ly via our web­site. With an inte­gra­ted map ser­vice, you no lon­ger have to lea­ve our web­site to view the rou­te to a loca­ti­on, for exam­p­le. In order for the online map to work on our web­site, map sec­tions are inte­gra­ted using HTML code. The ser­vices can then dis­play street maps, the earth’s sur­face or aeri­al or satel­li­te images. If you use the inte­gra­ted map ser­vice, data is also trans­fer­red to the tool used and stored the­re. This data may also include per­so­nal data.

Why do we use online map services on our website?

Gene­ral­ly spea­king, our aim is to offer you a plea­sant time on our web­site. And your time is only enjoya­ble if you can easi­ly find your way around our web­site and find all the infor­ma­ti­on you need quick­ly and easi­ly. That’s why we thought that an online map sys­tem could signi­fi­cant­ly opti­mi­se our ser­vice on the web­site. Wit­hout lea­ving our web­site, you can use the map sys­tem to easi­ly view rou­te descrip­ti­ons, loca­ti­ons or even places of inte­rest. Of cour­se, it is also very prac­ti­cal that you can see at a glan­ce whe­re we are based so that you can find us quick­ly and safe­ly. As you can see, the­re are sim­ply many advan­ta­ges and we cle­ar­ly regard online map ser­vices on our web­site as part of our cus­to­mer ser­vice.

What data is stored by online map services?

When you open a page on our web­site that has a built-in online map func­tion, per­so­nal data may be trans­mit­ted to the respec­ti­ve ser­vice and stored the­re. In most cases, this is your IP address, which can also be used to deter­mi­ne your appro­xi­ma­te loca­ti­on. In addi­ti­on to the IP address, data such as search terms ente­red and lon­gi­tu­de and lati­tu­de coor­di­na­tes are also stored. If you enter an address for rou­te plan­ning, for exam­p­le, this data is also stored. The data is not stored by us, but on the ser­vers of the inte­gra­ted tools. You can ima­gi­ne it like this: You are on our web­site, but when you inter­act with a map ser­vice, this inter­ac­tion actual­ly hap­pens on their web­site. In order for the ser­vice to func­tion pro­per­ly, at least one coo­kie is usual­ly set in your brow­ser. Goog­le Maps, for exam­p­le, also uses coo­kies to record user beha­viour in order to opti­mi­se its own ser­vice and dis­play per­so­na­li­sed adver­ti­sing. You can find out more about coo­kies in our „Coo­kies” sec­tion.

How long and where is the data stored?

Each online map ser­vice pro­ces­ses dif­fe­rent user data. If we have fur­ther infor­ma­ti­on, we will inform you about the dura­ti­on of data pro­ces­sing below in the rele­vant sec­tions on the indi­vi­du­al tools. In prin­ci­ple, per­so­nal data is only stored for as long as is neces­sa­ry for the pro­vi­si­on of the ser­vice. Goog­le Maps, for exam­p­le, stores cer­tain data for a spe­ci­fied peri­od of time, while you must dele­te other data yours­elf. With Map­box, for exam­p­le, the IP address is stored for 30 days and then dele­ted. As you can see, each tool stores data for dif­fe­rent lengths of time. We the­r­e­fo­re recom­mend that you take a clo­se look at the pri­va­cy poli­ci­es of the tools you use.

The pro­vi­ders also use coo­kies to store data on your user beha­viour with the map ser­vice. You can find more gene­ral infor­ma­ti­on on coo­kies in our „Coo­kies” sec­tion, but you can also find out which coo­kies may be used in the data pro­tec­tion texts of the indi­vi­du­al pro­vi­ders. In most cases, howe­ver, this is only an exem­pla­ry list and is not com­ple­te.

Right of objection

You always have the pos­si­bi­li­ty and also the right to access your per­so­nal data and also to object to its use and pro­ces­sing. You can also with­draw the con­sent you have given us at any time. As a rule, the easie­st way to do this is via the coo­kie con­sent tool. Howe­ver, the­re are also other opt-out tools that you can use. You can also mana­ge, dele­te or deac­ti­va­te any coo­kies set by the pro­vi­ders you use yours­elf with just a few mou­se clicks. Howe­ver, some func­tions of the ser­vice may then no lon­ger work as usu­al. How you mana­ge coo­kies in your brow­ser also depends on the brow­ser you are using. In the „Coo­kies” sec­tion, you will also find links to the ins­truc­tions for the most important brow­sers.

Legal basis

If you have con­sen­ted to the use of an online map ser­vice, the legal basis for the cor­re­spon­ding data pro­ces­sing is this con­sent. Accor­ding to Art. 6 para. 1 lit. a GDPR (con­sent), this con­sent con­sti­tu­tes the legal basis for the pro­ces­sing of per­so­nal data, as may occur when it is coll­ec­ted by an online map ser­vice.

We also have a legi­ti­ma­te inte­rest in using an online map ser­vice to opti­mi­se our ser­vice on our web­site. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests). Howe­ver, we only ever use an online map ser­vice if you have given your con­sent. We would like to empha­sise this again at this point.

Infor­ma­ti­on on spe­cial online map ser­vices – if available – can be found in the fol­lo­wing sec­tions.

Mapbox API Privacy Policy

Map­box API Pri­va­cy Poli­cy Sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Opti­mi­sa­ti­on of our ser­vice per­for­mance 📓 Pro­ces­sed data: Data such as IP address, brow­ser infor­ma­ti­on, your ope­ra­ting sys­tem, con­tent of the request, limi­t­ed loca­ti­on and usa­ge data You can find more details below in this pri­va­cy poli­cy. 📅 Sto­rage peri­od: the IP address is dele­ted after 30 days, ID data after 36 months ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What is Mapbox API?

On our web­site we use the Map­box API of the Ame­ri­can soft­ware com­pa­ny Map­box Inc, 740 15th Street NW, 5th Flo­or, Dis­trict of Colum­bia 20005, USA. Map­box is an online map tool (open source map­ping) that is acces­sed via an inter­face (API). By using this tool, your IP address is for­ward­ed to Map­box and stored, among other things. In this pri­va­cy poli­cy, you can find out more about the func­tions of the tool, why we use it and, abo­ve all, what data is stored and how you can pre­vent this.

Map­box is an Ame­ri­can soft­ware com­pa­ny that offers cus­to­mi­sed online maps for web­sites. Map­box can be used to illus­tra­te con­tent on our web­site or, for exam­p­le, to gra­phi­cal­ly dis­play direc­tions. The maps can be easi­ly inte­gra­ted into our web­site using small code snip­pets (Java­Script code). Among other things, Map­box offers a mobile-friendly envi­ron­ment, rou­te infor­ma­ti­on is pro­vi­ded in real time and data is visua­li­sed.

Why do we use Mapbox API on our website?

We also want to offer you a com­pre­hen­si­ve ser­vice on our web­site and this should not sim­ply end with our ser­vices or pro­ducts. No, all of our con­tent should also be useful to you. And this includes, for exam­p­le, maps that show you the way to our com­pa­ny.

What data is stored by Mapbox API?

When you access one of our sub­pages that has an inte­gra­ted online map from Map­box, data about your user beha­viour may be coll­ec­ted and stored. This is neces­sa­ry to ensu­re that the inte­gra­ted online maps func­tion pro­per­ly. It is also pos­si­ble that data coll­ec­ted by Map­box will be pas­sed on to third par­ties, but not per­so­nal data. This hap­pens eit­her if this is neces­sa­ry for legal reasons or if Map­box expli­cit­ly com­mis­si­ons ano­ther com­pa­ny. The map con­tent is trans­mit­ted direct­ly to your brow­ser and inte­gra­ted into our web­site.

Map­box auto­ma­ti­cal­ly coll­ects cer­tain tech­ni­cal infor­ma­ti­on when requests are made to the APIs. In addi­ti­on to your IP address, this includes brow­ser infor­ma­ti­on, your ope­ra­ting sys­tem, the con­tent of the request, limi­t­ed loca­ti­on and usa­ge data, the URL of the web­site visi­ted and the date and time of the web­site visit. Accor­ding to Map­box, the data is only used to impro­ve its own pro­ducts. Map­box also coll­ects ran­dom­ly gene­ra­ted IDs to ana­ly­se user beha­viour and deter­mi­ne the num­ber of acti­ve users.

If you use one of our sub­pages and inter­act with an online map, Map­box sets the fol­lo­wing coo­kie in your brow­ser:

Name: ppcbb-enable-content-mapbox_js
Value: 1605795587112970128–4
Inten­ded use: We have not yet been able to find out more detail­ed infor­ma­ti­on about the pur­po­se of the coo­kie.
Expiry date: after one year

Remark: In our tests, we did not find any coo­kies in the Chro­me brow­ser, but we did in other brow­sers.

How long and where is data stored?

The data coll­ec­ted is stored and pro­ces­sed on the Ame­ri­can ser­vers of the com­pa­ny Map­box. Your IP address is stored for 30 days for secu­ri­ty reasons and then dele­ted. Ran­dom­ly gene­ra­ted IDs (no per­so­nal data) that ana­ly­se the use of the APIs are dele­ted after 36 months.

How can I delete my data or prevent data storage?

If you do not want Map­box to pro­cess data about you or your user beha­viour, you can deac­ti­va­te Java­Script in your brow­ser set­tings. Of cour­se, you will then no lon­ger be able to use the cor­re­spon­ding func­tions to their full ext­ent.

You have the right to access your per­so­nal data at any time and to object to its use and pro­ces­sing. You can mana­ge, dele­te or deac­ti­va­te coo­kies that may be set by Map­box API in your brow­ser at any time. Howe­ver, this may mean that the ser­vice no lon­ger func­tions ful­ly. The manage­ment, dele­ti­on or deac­ti­va­ti­on of coo­kies works slight­ly dif­fer­ent­ly for each brow­ser. In the „Coo­kies” sec­tion, you will find the rele­vant links to the ins­truc­tions for the most popu­lar brow­sers.

Legal basis

If you have con­sen­ted to the use of Map­box API, the legal basis for the cor­re­spon­ding data pro­ces­sing is this con­sent. Accor­ding to Art. 6 para. 1 lit. a GDPR (con­sent) repres­ents the legal basis for the pro­ces­sing of per­so­nal data as it may occur when coll­ec­ted by Map­box API.

We also have a legi­ti­ma­te inte­rest in using Map­box API to opti­mi­se our online ser­vice. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests). Nevert­hel­ess, we only use Map­box API if you have given your con­sent.

Map­box also pro­ces­ses your data in the USA, among other places. Map­box is an acti­ve par­ti­ci­pant in the EU-US Data Pri­va­cy Frame­work, which regu­la­tes the cor­rect and secu­re trans­fer of per­so­nal data of EU citi­zens to the USA. You can find more infor­ma­ti­on on this at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Map­box also uses so-called stan­dard con­trac­tu­al clau­ses (= Art. 46 (2) and (3) GDPR). Stan­dard Con­trac­tu­al Clau­ses (SCCs) are tem­pla­tes pro­vi­ded by the EU Com­mis­si­on and are inten­ded to ensu­re that your data com­pli­es with Euro­pean data pro­tec­tion stan­dards even if it is trans­fer­red to third count­ries (such as the USA) and stored the­re. Through the EU-US Data Pri­va­cy Frame­work and the stan­dard con­trac­tu­al clau­ses, Map­box under­ta­kes to com­ply with the Euro­pean level of data pro­tec­tion when pro­ces­sing your rele­vant data, even if the data is stored, pro­ces­sed and mana­ged in the USA. The­se clau­ses are based on an imple­men­ting decis­i­on of the EU Com­mis­si­on. You can find the decis­i­on and the cor­re­spon­ding stan­dard con­trac­tu­al clau­ses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

You can find out more about the data and stan­dard con­trac­tu­al clau­ses that are pro­ces­sed through the use of Map­box API in the pri­va­cy poli­cy on https://www.mapbox.com/legal/privacy.

OpenStreetMap privacy policy

Open­Street­Map pri­va­cy poli­cy sum­ma­ry 👥 Data sub­ject: Visi­tors to the web­site 🤝 Pur­po­se: Opti­mi­sa­ti­on of our ser­vice per­for­mance 📓 Pro­ces­sed data: Data such as IP address, brow­ser infor­ma­ti­on, your ope­ra­ting sys­tem, con­tent of the request, limi­t­ed loca­ti­on and usa­ge data You can find more details below in this pri­va­cy poli­cy. 📅 Sto­rage peri­od: the IP address is dele­ted after 180 days ⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (con­sent), Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests)

What is OpenStreetMap?

We have inte­gra­ted map sec­tions from the online map­ping tool „Open­Street­Map” on our web­site. This is a so-called open source map­ping, which we can access via an API (inter­face). This func­tion is offe­red by the Open­Street­Map Foun­da­ti­on, St John’s Inno­va­ti­on Cent­re, Cow­ley Road, Cam­bridge, CB4 0WS, United King­dom. By using this map func­tion, your IP address will be for­ward­ed to Open­Street­Map. This pri­va­cy poli­cy explains why we use func­tions of the Open­Street­Map tool, whe­re which data is stored and how you can pre­vent this data sto­rage.

The Open­Street­Map pro­ject was laun­ched in 2004. The aim of the pro­ject is and was to crea­te a free map of the world. Users around the world coll­ect data on buil­dings, forests, rivers and roads, for exam­p­le. Over the years, an exten­si­ve digi­tal world map has been crea­ted by users them­sel­ves. Of cour­se, the map is not com­ple­te, but in most regi­ons it con­ta­ins a gre­at deal of data.

Why do we use OpenStreetMap on our website?

First and fore­most, our web­site should be hel­pful to you. And from our point of view, it is always hel­pful when you can find infor­ma­ti­on quick­ly and easi­ly. On the one hand, of cour­se, it is about our ser­vices and pro­ducts, but on the other hand it should also pro­vi­de you with other hel­pful infor­ma­ti­on. That’s why we also use the Open­Street­Map map ser­vice. For exam­p­le, we can show you exact­ly how to find our com­pa­ny. The map shows you the best rou­te to us and your jour­ney beco­mes child’s play.

What data is stored by OpenStreetMap?

When you visit one of our web­sites that offers Open­Street­Map, user data is trans­mit­ted to the ser­vice and stored the­re. Open­Street­Map coll­ects infor­ma­ti­on about your inter­ac­tions with the digi­tal map, your IP address, data about your brow­ser, device type, ope­ra­ting sys­tem and on which day and at what time you used the ser­vice. Track­ing soft­ware is also used to record user inter­ac­tions. The com­pa­ny spe­ci­fies the „Piwik” ana­ly­sis tool in its own pri­va­cy poli­cy.

The data coll­ec­ted is sub­se­quent­ly acces­si­ble to the rele­vant working groups of the Open­Street­Map Foun­da­ti­on. Accor­ding to the com­pa­ny, per­so­nal data is not pas­sed on to other per­sons or com­pa­nies unless this is legal­ly neces­sa­ry. The third-party pro­vi­der Piwik does store your IP address, but in trun­ca­ted form.

The fol­lo­wing coo­kie may be set in your brow­ser when you inter­act with Open­Street­Map on our web­site:

Name: _osm_location
Value: 9.63312%7C52.41500%7C17%7CM
Inten­ded use: The coo­kie is requi­red to unlock the con­tents of Open­Street­Map.
Expiry date: after 10 years

If you want to view the full image of the map, you will be lin­ked to the Open­Street­Map web­site. The fol­lo­wing coo­kies, among others, can be stored in your brow­ser the­re:

Name: _osm_totp_token
Value: 148253112970128–2
Inten­ded use: This coo­kie is used to ensu­re the ope­ra­ti­on of the map sec­tion.
Expiry date: after one hour

Name: _osm_session
Value: 1d9bfa122e0259d5f6db4cb8ef653a1c
Inten­ded use: Ses­si­on infor­ma­ti­on (i.e. user beha­viour) can be stored with the help of coo­kies.
Expiry date: after the end of the mee­ting

Name: _pk_id.1.cf09
Value: 4a5.1593684142.2.1593688396.1593688396112970128–9
Inten­ded use: This coo­kie is set by Piwik to store or mea­su­re user data such as click beha­viour.
Expiry date: after one year

How long and where is the data stored?

The API ser­vers, the data­ba­ses and the ser­vers of auxi­lia­ry ser­vices are curr­ent­ly loca­ted in the United King­dom (Gre­at Bri­tain and Nor­t­hern Ire­land) and in the Net­her­lands. Your IP address and user infor­ma­ti­on, which is stored in abbre­via­ted form by the web ana­ly­sis tool Piwik, will be dele­ted after 180 days.

How can I delete my data or prevent data storage?

You have the right to access your per­so­nal data at any time and to object to its use and pro­ces­sing. You can mana­ge, dele­te or deac­ti­va­te coo­kies that may be set by Open­Street­Map in your brow­ser at any time. Howe­ver, this will pre­vent the ser­vice from working to its full ext­ent. The manage­ment, dele­ti­on or deac­ti­va­ti­on of coo­kies works slight­ly dif­fer­ent­ly for each brow­ser. In the „Coo­kies” sec­tion, you will find the rele­vant links to the ins­truc­tions for the most popu­lar brow­sers.

Legal basis

If you have con­sen­ted to the use of Open­Street­Map, the legal basis for the cor­re­spon­ding data pro­ces­sing is this con­sent. Accor­ding to Art. 6 para. 1 lit. a GDPR (con­sent) repres­ents the legal basis for the pro­ces­sing of per­so­nal data as it may occur during the coll­ec­tion by Open­Street­Map.

We also have a legi­ti­ma­te inte­rest in using Open­Street­Map to opti­mi­se our online ser­vice. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legi­ti­ma­te inte­rests). Nevert­hel­ess, we only use Open­Street­Map if you have given your con­sent.

If you would like to find out more about data pro­ces­sing by Open­Street­Map, we recom­mend that you read the company’s pri­va­cy poli­cy at https://wiki.osmfoundation.org/wiki/Privacy_Policy.

All texts are pro­tec­ted by copy­right.

Source: Pri­va­cy poli­cy crea­ted with the data pro­tec­tion gene­ra­tor for Aus­tria by AdSimp­le