Privacy Policy

You have the following rights vis-à-vis the controller with regard to your personal data. Regarding the conditions for exercising these rights, reference is made to the respective legal basis: 

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to revoke consent given in accordance with Art. 7 (3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

In addition, you have the right to object:

Data subjects have the right to object at any time to the processing of personal data concerning them which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR, for reasons arising from their particular situation. 

The controller shall no longer process the personal data concerned unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subjects, or unless the processing serves to assert, exercise or defend legal claims.

If the personal data concerned is processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If data subjects object to processing for direct marketing purposes, the personal data concerning them will no longer be processed for these purposes.

Data subjects have the possibility of exercising their right of objection by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.

If we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.

If the processing of personal data is carried out to fulfill the contracts concluded with us, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing. 

If reference is made below to data being processed in the USA, we would like to point out that the European Court of Justice has assessed the level of data protection in the USA as inadequate. In particular, there is a risk that your data will be processed by US authorities for control and monitoring purposes without legal recourse. If you have consented to the use of the respective service, you consent to your data being processed in the USA in accordance with Art. 49 (1) (a) GDPR.

If cookies or similar technologies are used, we obtain prior consent (Section 25 of the Telemedia Act [TDDDG]), unless this is not required by law. Consent is particularly unnecessary if the storage and retrieval of information, including cookies, is absolutely necessary to provide users with a telemedia service they have expressly requested (i.e., our online offering). The revocable consent will be clearly communicated to users and will contain information about the respective cookie usage.

The respective storage period of personal data depends on the legal basis, the purpose of the processing and, if applicable, relevant statutory retention periods. 

Basically: 

If data processing is based on consent within the meaning of Art. 6 (1) (a) GDPR, the data will be stored until the consent is revoked. 

If data processing is carried out on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) GDPR, unless compelling legitimate grounds for the processing are proven which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, personal data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the information in this statement on specific processing situations, personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

1. Processing of personal data when visiting the website

a. Description and scope of data processing

When you visit our website (without registration or other contact), the following data (so-called log files) is transmitted by your browser to our servers: 

• IP address
• Date and time of the request
• Time zone difference to GMT
• Content of the website
• Access status (HTTP status)
• amount of data transferred
• Request website
• Web browser
• Operating system
• Language and version of the browser

Our hosting service provider is checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck +49 (0) 451 / 70 99 70, support@checkdomain.de, https://www.checkdomain.de/. 

b. Legal basis for data processing

The legal basis for the storage of data and log files is Art. 6 (1) (f) GDPR.

c. Purpose of data processing

Storing data in log files ensures the proper functioning of our website. It also serves to optimize and secure our systems. The data is not evaluated for marketing purposes in this context. 

d. Duration of storage

The data we store will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case after the end of the respective session. 

Further storage is possible. In this case, the users' IP addresses are deleted or altered so that the accessing client can no longer be identified.

e. Possibility of objection and removal 

The collection of this data is absolutely necessary for the operation of the website. Therefore, the user has no right to object. 

2. Processing of personal data through cookies

a. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored on the visitor's computer system when they visit our website. Cookies contain a string of characters that allows the visitor's browser to be identified when they return to our website. 

We use the following types of cookies: 

• Transient cookies/session cookies: Are deleted after the session ends
• Persistent cookies: Are deleted after the specified storage period
• Technically necessary cookies

If cookies are also used on our websites for advertising and/or analysis purposes, we will inform you about this separately in this declaration.

You can set your browser to inform you about the use of cookies and to decide whether to accept them individually, or to deny them in certain cases or in general. If you do not accept cookies, the functionality of our website may be limited. 

If cookies are also used on our websites for advertising and/or analysis purposes, we will inform you about this separately in this declaration.

b. Legal basis for data processing

The legal basis for the processing of personal data using necessary cookies is Art. 6 (1) (f) GDPR. 

c. Purpose of data processing

Technically necessary cookies are used to simplify the use of websites. Some functions of the website or online shop cannot be offered without the use of cookies. These require that the browser be recognized even after changing pages.

The user data collected through technically necessary cookies is not used to create user profiles.

d. Duration of storage, possibility of objection and removal 

Cookies are stored on the user's computer and transmitted from there. Therefore, users have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions.

3. Contact form and email 

a. Description and scope of data processing

We provide visitors to our website with a contact form for quick, electronic contact. The data entered in the input form is transmitted to us and stored. 

If you contact us via contact form or email, you agree to email communication that is encrypted for transport but not content. Please inform yourself about the associated risks, for example, here: https://www.bsi-fuer-buerger.de.

In addition, the user’s IP address as well as the date and time of transmission are saved at the time of sending. 

Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored. 

Your data will not be shared with third parties. It will be used exclusively to process your request.

b. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 (1) (a) GDPR.

The legal basis for processing data transmitted when sending an email is Art. 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, the legal basis for processing is Art. 6 (1) (b) GDPR.

c. Purpose of data processing

The processing of personal data serves solely to process the contact. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d. Duration of storage 

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input mask and data sent via email, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively resolved. 

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

If the correspondence results in a business transaction, we are legally obliged to keep the exchanged correspondence for 6 years (beginning with the end of the calendar year in which the respective letter was sent).

e. Possibility of objection and removal 

The user has the right to revoke their consent to the processing of personal data at any time. To do so, they can contact the controller using the contact options provided on the website. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. 

If the retention of data results from a legal obligation, there is no right of objection.

4. Google Analytics 

a. Description and scope of data processing

This website uses the web analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses analysis cookies. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. We extend the Google Analytics code with the code "gat._anonymizeIp();". This code means that the logged IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of the use of Google Analytics will not be merged with other Google data. Further information can be found at https://www.google.com/analytics/terms/de.html or under https://policies.google.com/?hl=de. 

b. Legal basis for data processing

The legal basis for the processing of users’ personal data is Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG.

We would like to point out that the European Court of Justice has deemed the level of data protection in the USA inadequate. In particular, there is a risk that your data will be processed by US authorities for control and monitoring purposes without legal recourse. If you consent to our use of Google Analytics, you consent to your data being processed in the USA in accordance with Art. 49 (1) (a) GDPR.

c. Purpose of data processing

Processing users' personal data allows us to analyze their browsing behavior. By evaluating the data obtained, we are able to compile information about the use of individual components of our website. This helps us improve our website and its user-friendliness. By anonymizing the IP address, we adequately take into account users' interest in the protection of their personal data.

d. Duration of storage 

Your data will be deleted when it is no longer required for our business processes and there are no legal retention obligations to the contrary. 

We have also specified that Google will automatically delete the data after 14 months. 

e. Possibility of objection and removal 

Cookies are stored on the user's computer and transmitted from there. Therefore, users have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de download and install. 

5. Google Business

a. Description and scope of data processing

We operate a so-called Google Business listing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you have a Google user account, you have the option of interacting with the service using the interactive features provided by the service (such as commenting, rating, sharing, and direct messaging). The service collects data from you, such as your IP address, as well as any information you enter. You consented to this data processing when you created a Google user account. 

We would like to point out that the provider may transfer the data collected about you in this context to countries outside the European Union. Information about the data collected and processed by the provider can be found in the provider's privacy policy, which you can find at https://policies.google.com/privacy?hl=de can retrieve. 

We also operate the Google Business listing to make our stationary locations easier to find. 

b. Legal basis for data processing

If you contact us via the Google Business listing, the legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. 

c. Purpose of data processing

The purpose of data processing is to answer your inquiries and, if necessary, to conclude or initiate contracts. 

d. Duration of storage 

We do not know how Google uses the data from the visit for its own purposes, to what extent activities are assigned to individual users, how long Google stores this data and whether data is passed on to third parties.

e. Possibility of objection and removal 

You have the rights set out in the “Your Rights” section. 

6. Hotjar

a. Description and scope of data processing

We use Hotjar, a service provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com Hotjar is a tool for analyzing your user behavior on our website. With Hotjar, we can record, among other things, your mouse and scroll movements and clicks. Hotjar can also determine how long you left the mouse pointer on a certain spot. From this information, Hotjar creates so-called heat maps, which can be used to determine which website areas are viewed preferentially by website visitors. Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your entries in a contact form (so-called conversion funnels). In addition, Hotjar can be used to obtain direct feedback from website visitors. This function is used to improve the website operator's web offerings. Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They are used to make our offering more user-friendly, effective and secure. These cookies can be used, in particular, to determine whether our website was visited using a specific device or whether the Hotjar functions have been deactivated for the browser in question. Hotjar cookies remain on your device until you delete them. You can set your browser to inform you when cookies are set, to only allow cookies in individual cases, to exclude cookies for certain cases or generally, and to activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.

For more information about Hotjar and the data collected, please see Hotjar’s privacy policy at the following link: https://www.hotjar.com/privacy 

b. Legal basis for data processing

The use of Hotjar and the storage of Hotjar cookies is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

c. Purpose of data processing

The service is used for analysis purposes and to improve our website. 

d. Duration of storage 

Hotjar deletes all data older than one year. 

e. Possibility of objection and removal 

If you would like to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/opt-out 

Please note that Hotjar must be deactivated separately for each browser or device.

7. Google Tag Manager

a. Description and scope of data processing

We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this tool allows the integration of tags that collect browser data and, for example, feed data to marketing tools. 

b. Legal basis for data processing

The legal basis for data processing is Art. 6 (1) (a) GDPR. Consent is obtained for the tool used. In addition, there is a legitimate interest in using the tool. The legal basis for this is Art. 6 (1) (f) GDPR. Purpose of data processing

The use of the Tag Manager for easy integration of scripts and clear management of the tools used. 

c. Duration of storage 

How long the individual tools store data can be found in the respective sections of this privacy policy. 

d. Possibility of objection and removal 

Information on objection and removal options can be found in the relevant section of this privacy policy. 

8. Google Ads

a. Description and scope of data processing

We have integrated Google AdWords into our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of Google AdWords enables the promotion of our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine, as well as by displaying third-party advertising on our website. If a user clicks on a Google AdWords ad, a conversion cookie is stored on the user's computer. Conversion cookies are not used to identify users. Conversion cookies are used to track which subpages of our website were accessed and whether sales were generated or canceled. The personal data is stored by Google in the USA. Google may share this data with third parties under certain circumstances.

b. Legal basis for data processing

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) (a) GDPR.

c. Purpose of data processing

Google AdWords enables the display of online advertising in Google's search engine results and in the Google advertising network. To do this, we predefine keywords that ensure that an ad is displayed in Google's search engine results only when the user retrieves a keyword-relevant search result. In the Google advertising network, ads are distributed on relevant websites using an automatic algorithm, taking into account the previously defined keywords. The data obtained helps us optimize our ads. 

d. Duration of storage

Your data will be deleted when it is no longer required for our business processes and there are no statutory retention periods to the contrary. We have no influence on the storage of data by the provider. You can reach the provider using the contact details provided above. 

e. Possibility of objection and removal 

Cookies are stored on the user's computer and transmitted from there. Therefore, users have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions.

Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do so, the data subject must click on the link www.google.de/settings/ads and make the desired settings there.

Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ can be retrieved.