Data Protection

Table of Contents

• Introduction and Overview
• Scope
• Legal Bases
• Contact Details of the Responsible Party
• Retention Period
• Rights under the General Data Protection Regulation
• Security of Data Processing
• Communication
• Cookies
• Web Hosting Introduction
• Web Analytics Introduction
• E-Mail Marketing Introduction
• Chatbots Introduction
• Online Marketing Introduction
• Cookie Consent Management Platform Introduction
• Security & Anti-Spam
• Web Design Introduction
• Online Map Services Introduction
• Online Booking Systems Introduction
• Explanation of used terms
• Closing remarks

Introduction and Overview

We have drafted this Datenschutzerklärung (version 11.12.2025-113087491) to inform you according to the provisions of Datenschutz-Grundverordnung (EU) 2016/679 and applicable national laws to explain which personal data (short: data) we as controllers – and the processors we have commissioned (e.g., providers) – process, will process in the future, and what legal options you have. The terms used are to be understood as gender-neutral.
In short: We inform you comprehensively über data that we über you process.

Privacy poläcies sound for generally very technical and use legal terms. This privacy poläcy, however, should describe the most important things as simply and transparently as possible. As far as it is conducive to transparency, technical terms are explained in a reader-friendly way, links to further information are offered and graphics are used. We inform in clear and simple language that we only process personal data within the scope of our business activities when there is an appropriate legal basis. This is certainly not possible when one provides as concise, unclear, and legally‑technical explanations as are often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps there is one or another piece of information you did not know.
If questions still remain, we would like to ask you to contact the responsible party named below or in the imprint, follow the existing links and view further information on third‑party sites. Our contact details can also be found in the imprint.

Scope

This privacy policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us (data processors). By personal data we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person's name, e‑mail address and postal address. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes:

• all online presences (websites, online shops) that we operate
• Social media presence and email communication
• mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas in which personal data are processed in a structured manner by the company over the mentioned channels. Should we enter into legal relationships with you outside these channels, we will inform you separately if necessary.

Legal Bases

In the following privacy policyä we provide you with transparent information about the legal basesä and regulations, i.e., the legal foundations of the General Data Protection Regulation, which enable usö to process personal data.
Regarding EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEANÄ PARLIAMENT AND OF THE COUNCIL of 27 April 2016. This EU General Data Protection Regulation can be read online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 read.

We process your data only if at least one of the following conditions applies:

1. Consent (Article 6 paragraph 1 letter a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.
2. Contract (Article 6 paragraph 1 point b GDPR): To fulfill a contract or pre‑contractual obligations with you, we process your data. If, for example, we conclude a purchase contract with you, we need personal information in advance.
3. Legal Obligation (Article 6 paragraph 1 letter c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to retain invoices für accounting. These usually contain personal data.
4. Legitimate Interests (Article 6 paragraph 1 letter f GDPR): In the case of legitimate interests that do not einschränken your fundamental rights, we reserve the processing of personal data. We müssen, for example, process certain data in order to operate our website safely and economically efficiently. This processing is therefore a legitimate interest.

Further conditions such as the processing of recordings in the public interest and the exercise of public authority, as well as the protection of vital interests, generally do not occur with us. Should such a legal basis nevertheless be applicable, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

• In Austria is this the Federal Act for the protection of natural persons in the processing of personal data (Data Protection Act), short DSG.
• In Germany applies the Federal Data Protection Act, short BDSG.

If additional regional or national laws apply, we will inform you about them in the following sections.

Contact Details of the Responsible Party

If you have any questions regarding data protection or the processing of personal data, you will find the contact details of the responsible party below in accordance with Article 4 paragraph 7 of the EU General Data Protection Regulation (GDPR):
Hotel Liebmann GmbH & Co KG

Liebmannweg 23,
8301 Laßnitzhöhe,
Österreich

Phone: +43 3133 2322-6
Fax: 01234/56789-0
Email: office@hotel-liebmann.at

E‑mail: office@hotel-liebmann.at
Phone: +43 3133 2322-6
Imprint: https://www.hotel-liebmann.at/impressum/

Retention Period

That we only store personal data for as long as it is absolutely necessary for the provision of our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases we are legally obliged to retain certain data even after the original purpose has ceased, for example for accounting purposes.

If you wish to have your data deleted or withdraw consent for data processing, the data will be deleted as quickly as possible, provided there is no obligation to retain it.

We will inform you further below about the specific duration of each data processing, provided we have additional information.

Rights under the General Data Protection Regulation

According to Articles 13 and 14 of the GDPR, we inform you about the following rights that you are entitled to, to ensure a fair and transparent processing of data:

• According to Article 15 of the GDPR, you have a right of access regarding whether we process data about you. If this is the case, you have the right to receive a copy of the data and to learn the following information:
  • the purpose for which we carry out the processing;
  • the categories, i.e., the types of data that are processed;
  • who receives this data and, when the data is transferred to third countries, how security can be guaranteed;
  • how long the data is stored;
  • the existence of the right to rectification, deletion or restriction of processing and the right to object to processing;
  • that you can file a complaint with a supervisory authority (links to these authorities can be found further below);
  • the source of the data, if we did not collect it from you;
  • whether profiling is carried out, i.e., data is automatically evaluated to create a personal profile of you.
• According to Article 16 GDPR you have a right to rectification of data, which means that we must correct the data if you find errors.
• According to Article 17 GDPR you have the right to erasure („right to be forgotten“), which concretely means that you may request the deletion of your data.
• According to Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but not use it further.
• According to Article 20 GDPR, you have the right to data portability, which means that we will provide your data in a common format upon request.
• According to Article 21 GDPR, you have a right to object, which, once exercised, leads to a change in processing.
  • If the processing of your data is based on Article 6(1)(e) (public interest, exercise of public authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then examine as quickly as possible whether we can legally comply with this objection.
  • If data is used for direct advertising, you can object to this type of data processing at any time. We may no longer use your data for direct marketing thereafter.
  • If data is used for profiling, you can object to this type of data processing at any time. We may no longer use your data for profiling thereafter.
• According to Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (for example, profiling).
• According to Article 77 GDPR, you have the right to lodge a complaint. This means you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible party listed above with us!

If you believe that the processing of your data violates data protection law or your data protection rights have been infringed in any other way, you can complain to the supervisory authority. This is the data protection authority for Austria, whose website you can find at https://www.dsb.gv.at/ . In Germany there is a data protection officer for each federal state. For more information you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) . For our company the following local data protection authority is responsible:

Austrian Data Protection Authority

Head: Dr. Matthias Schmidl
Address: Barichgasse 40-42, 1030 Vienna
Phone number: +43 1 52 152-0
E-mail address: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

Security of Data Processing

To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. In doing so, we make it as difficult as possible, within our capabilities, for third parties to infer personal information from our data.

Art. 25 GDPR refers here to “data protection through technical design and privacy-friendly default settings” and means that one should always consider security both in software (e.g., forms) and also hardware (e.g., access to the server room) and implement appropriate measures. In the following, we will, if necessary, go into specific measures.

TLS encryption with https

TLS, encryption and https sound very technical and they are. We use HTTPS (the Hypertext Transfer Protocol Secure stands for “secure hypertext‑transfer protocol”), to transfer data securely over the internet.
This means that the complete transmission of all data from your browser to our web server is secured – no one can “eavesdrop”.

With this we have introduced an additional security layer and fulfill data protection by design (Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of confidential data.
You can recognize the use of this data transmission protection by the small lock icon top left in the browser, left of the web address (e.g., examplepage.de) and the use of the https scheme (instead of http) as part of our web address.
If you want to learn more about encryption, we recommend a Google search for “Hypertext Transfer Protocol Secure wiki” to find good links to further information.

Communication

Communication Summary  Data subjects: All who communicate with us by phone, email or online form  Processed data: e.g., phone number, name, email address, entered form data. For more details see the respective contact method used 欄 Purpose: Handling communication with customers, business partners etc.  Retention period: Duration of the business case and the legal regulations ⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (legitimate interests)

If you contact us and communicate by phone, email, or online form, personal data may be processed.

The data are processed for the handling and processing of your question and the related business transaction. The data are stored only as long as necessary or as long as required by law.

Data subjects

All of the mentioned processes are affected, which seek contact with us via the communication channels we provide.

Phone

If you call us, the call data will be stored pseudonymously on the respective device and with the telecommunications provider used. Additionally, data such as name and telephone number can be sent by e‑mail afterwards and stored for responding to the inquiry. The data will be deleted as soon as the business case has ended and legal regulations allow it.

E-Mail Address

When you communicate with us via e‑mail, data may be stored on the respective device (computer, laptop, smartphone, …) and also stored on the e‑mail server. The data will be deleted as soon as the business case has ended and legal requirements allow it.

Online Forms

If you communicate with us via an online form, the data will be stored on our web server and, if necessary, forwarded to an email address of ours. The data will be deleted as soon as the business case is completed and legal requirements allow it.

Legal Bases

The processing of the data is based on the following legal bases:

• Art. 6(1)(a) GDPR (Consent): You give us consent to store your data and further use it for purposes related to the business case;
• Art. 6 para. 1 lit. b GDPR (Contract): There is a necessity for the fulfillment of a contract with you or a data processor such as the telephone provider, or we must process the data for pre‑contractual activities, such as the preparation of an offer;
• Article 6 paragraph 1 letter f GDPR (Legitimate Interests): We want to handle customer inquiries and business communication in a professional framework. For this, certain technical facilities such as e‑mail programs, Exchange servers and mobile network operators are necessary in order to be able to operate the communication efficiently.

Cookies

Cookies Summary  Affected: Visitors of the website 欄 Purpose: dependent on the specific cookie. More details can be found further below or from the software manufacturer that sets the cookie.  Processed data: Dependent on the cookie used. More details can be found further below or from the software manufacturer that sets the cookie.  Retention period: dependent on the specific cookie, can vary from hours to years ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.
In the following we explaän what cookies are and why they are used, so that you can better understand the following privacy statement.

Whenever you surf the Internet, you use a browser. Well-known browsers include, for example, Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

One thing cannot be denied: Cookies are truly useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other application areas. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, essentially the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data from you, such as language or personal site settings. When you revisit our site, your browser transmits the „user-related“ information back to our site. Thanks to the cookies, our website knows who you are and provides you with the settings you are accustomed to. In some browsers each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie from the server, which the browser reuses when another page is requested.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g., Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and contain no viruses, trojans, or other “malware“. Cookies also cannot access information on your PC.

For example, cookie data can look like this:

Name: _ga
Value: GA1.2.1326744211.152113087491-9
Purpose: Distinguishing website visitors
Expiration date: after 2 years

A browser should be able to support these minimum sizes:

• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we specifically use depends on the services used and is clarified in the following sections of the privacy policy. Here we would like to briefly discuss the different types of HTTP cookies.

There are four types of cookies:

Essential Cookies
These cookies are nöcessary to ensure basic functions of the website. For example, they are needed when a user adds a product to the cart, then continues browsing other pages and later proceeds to checkout. Through these cookies the cart is not gelöscht, even if the user closes the browser window.

Purposeful Cookies
These cookies collect info über user behavior and whether the user receives any error messages. Additionally, with the help of these cookies, the loading time and the website's behavior across different browsers are measured.

Goal-oriented cookies
These cookies provide better user-friendliness. For example, entered locations, font sizes or form data are stored.

Advertising cookies
These cookies are also called targeting cookies. They serve to deliver individually tailored advertising to the user. This can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these types of cookies you would like to allow. And of course, this decision is also stored in a cookie.

If you want to know more über Cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Purpose of processing via cookies

The purpose ultimately depends on the specific cookie. You can find more details further below or from the software manufacturer that sets the cookie.

Which data is processed?

Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you, within the scope of the following privacy policy, about the processed and stored data.

Retention period of cookies

The storage duration depends on the individual cookie and is further specified below. Some cookies are deleted after less than an hour, while others can remain stored on a computer for several years.

You also have control over the storage period yourself. You can manually delete all cookies at any time via your browser (see also below “Widerspruchsrecht”). Furthermore, cookies that are based on consent are deleted at the latest after you withdraw your consent, while the legality of the storage remains unaffected until then.

Right to object – how can I delete cookies?

How and whether you want to use cookies is up to you. Regardless of which service or website the cookies come from, you always have the option to delete cookies, disable them, or allow them only partially. For example, you can block third‑party cookies but allow all other cookies.

If you want to find out which cookies have been stored in your browser, or if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Managing cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and Managing Cookies

If you basically do not want any cookies, you can set up your browser to always inform you when a cookie is about to be set. This way you can decide for each individual cookie whether to allow the cookie or not. The procedure varies depending on the browser. It is best to search Google for the instructions using the search term “Cookies löschen Chrome” or “Cookies deaktivieren Chrome” in the case of a Chrome browser.

Legal basis

Since 2009 there have been the so-called „Cookie Guidelines“. It states that storing cookies requires a consent (Article 6(1)(a) GDPR) from you. Within the EU-Ländes there are however very different reactions to these guidelines. In Österreich the implementation of this guideline took place in § 165 paragraph 3 of the Telecommunications Act (2021). In Germany the cookie guidelines were not implemented as national law. Instead the implementation of this guideline was largely carried out in § 15 paragraph 3 of the Telemedia Act (TMG), which has been replaced since May 2024 by the Digital Services Act (DDG)

Für strictly necessary cookies, even where no consent is given, legitimate interests (Article 6(1)(f) GDPR), which are in most cases of an economic nature. We want to provide website visitors with a pleasant user experience and for that certain cookies are often strictly necessary.

Where non-essential cookies are used, this only happens with your consent. The legal basis is, in this respect, Article 6(1)(a) GDPR.

In the following sections you will be informed in more detail about the use of cookies, provided that the software used employs cookies.

Web Hosting Introduction

Webhosting Summary  Data subjects: visitors of the website 欄 Purpose: professional hosting of the website and securing the operation  Processed data: IP address, time of website visit, browser used and other data. More details can be found further below or with the respective web hosting provider used.  Retention period: dependent on the respective provider, but usually 2 weeks ⚖️ Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is web hosting?

If you visit websites nowadays, certain information – including personal data – is automatically generated and stored, as on this website as well. This data should be processed as sparingly as possible and only with justification. By "website" we mean, by the way, the entirety of all web pages on a domain, i.e., everything from the homepage to the very last subpage (like this one). By "domain" we mean, for example, beispiel.de or musterbeispiel.com.

If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We briefly refer to them as browsers or web browsers.

To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complex and demanding task, which is why it is usually handled by professional providers. They offer web hosting and thus ensure reliable and error‑free storage of website data. A whole lot of technical terms, but please stay tuned, it will get even better!

When the browser connects on your computer (desktop, laptop, tablet, or smartphone) and during data transmission to and from the web server, personal data may be processed. On one hand, your computer stores data; on the other hand, the web server must also store data for a period of time to ensure proper operation.

A picture says more than a thousand words, so the following graphic illustrates the interaction between the browser, the internet, and the hosting provider.

Why do we process personal data?

The purposes of data processing are:

1. Professional website hosting and securing of operations
2. to maintain operational and IT security
3. Anonymous evaluation of access behavior to improve our offering and, if necessary, for prosecution or pursuit of claims

Which data is processed?

Even while you are currently visiting our website, our web server – the computer on which this website is stored – generally automatically stores data such as

• the complete internet address (URL) of the accessed webpage
• Browser and browser version (e.g., Chrome 87)
• the operating system used (e.g., Windows 10)
• the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichgekommen/)
• the hostname and the IP address of the device from which access is made (e.g., COMPUTERNAME and 194.23.43.121)
• Date and Time
• in files, the so-called web server logfiles

How long is data stored?

As a rule, the aforementioned data are stored for two weeks and then automatically deleted. We do not share this data, but we cannot rule out that this data may be accessed by authorities in the event of illegal behavior.

In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we do not share your data without consent!

Legal basis

The legality of processing personal data in the context of web hosting is derived from Art. 6(1)(f) GDPR (legitimate interests), because the use of professional hosting with a provider is necessary to present the company on the Internet safely and user‑friendly and, if necessary, to be able to pursue attacks and claims arising from it.

Between us and the hosting provider there is usually a contract for data processing in accordance with Art. 28 ff. GDPR, which ensures compliance with data protection and guarantees data security.

External web hosting provider privacy policy

Below you will find the contact details of our external hosting provider, where you can learn more about data processing in addition to the information above:

SiteGround Spain S.L.
Calle de Prim 19,
28004 Madrid,
Spain

You can learn more about the data processing by this provider in the privacy policy.

Web Analytics Introduction

Web Analytics Privacy Policy Summary  Data subjects: Visitors of the website 欄 Purpose: Evaluation of visitor information to optimize the web offering.  Processed data: Access statistics, including data such as locations of accesses, device data, duration and time of access, navigation behavior, click behavior and IP addresses. For more details, see the web analytics tool used.  Retention period: dependent on the web analytics tool used ⚖️ Legal bases: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate interests)

What is Web Analytics?

We use software on our website to evaluate the behavior of website visitors, commonly called web analytics or web analysis. In doing so, data is collected that the respective analytics tool provider (also called a tracking tool) stores, manages, and processes. With the help of this data, analyses of user behavior on our website are created and made available to us as website operators. Additionally, most tools offer various testing options. This allows us, for example, to test which offers or content are most appealing to our visitors. For this purpose, we show you two different offers for a limited period of time. After the test (so‑called A/B test) we know which product or content our website visitors find more interesting. For such testing procedures, as well as for other analytics methods, user profiles can also be created and the data stored in cookies.

Why do we use Web Analytics?

With our website we have a clear goal in mind: we want to provide the best web offering in the market for our industry. To achieve this goal, we want to both offer the best and most interesting offering and also ensure that you feel completely comfortable on our website. With the help of web analytics tools we can examine the behavior of our website visitors more closely and then accordingly improve our web offering for you and us. For example, we can determine the average age of our visitors, where they come from, when our website is most visited, or which content or products are particularly popular. All this information helps us optimize the website and thus tailor it perfectly to your needs, interests, and wishes.

Which data is processed?

Which data exactly is stored naturally depends on the analysis tools used. However, typically, for example, it is stored which content you view on our website, which buttons or links you click, when you access a page, which browser you use, with which device (PC, tablet, smartphone, etc.) you visit the website, or which computer system you use. If you have agreed that location data may also be collected, these can also be processed by the web analytics tool provider.

Additionally, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are personal data. However, your IP address is usually stored in a pseudonymized (i.e., obscured and shortened) form. For the purposes of testing, web analysis, and web optimization, no direct data such as your name, age, address, or email address is generally stored. All of this data, if collected, is stored in a pseudonymized manner. Thus, you cannot be identified as an individual.

The following example schematically shows how Google Analytics works as an example of client-based web tracking with JavaScript code.

How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, while other cookies can store data for several years.

Duration of data processing

We will inform you further below about the duration of data processing, as soon as we have additional information. In general, we process personal data only for as long as it is absolutely necessary for the provision of our services and products. If, for example in the case of accounting, it is legally required, this retention period may be exceeded.

Right to object

You also have the right and the ability at any time to withdraw your consent to the use of cookies or third parties. This can be done either through our cookie management tool or through other opt‑out functions. For example, you can also prevent data collection via cookies by managing, disabling, or deleting cookies in your browser.

Legal basis

The use of web analytics requires your consent, which we have obtained with our cookie popup. This consent constitutes, according to Article 6 paragraph 1 letter a GDPR (consent) the legal basis für the processing of personal data as it may occur in the collection by web analytics tools.

Additionally to the consent, we have a legitimate interest in analyzing the behavior of website visitors and thereby improving our offering technically and economically. With the help of web analytics we identify website errors, can detect attacks and improve efficiency. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests). We only use the tools insofar as consent has been given.

Since web analytics tools use cookies, we also recommend that you read our general cookie privacy policy. To find out exactly what data about you is stored and processed, you should read the privacy statements of the respective tools.

Information on specific web analytics tools, you can obtain – if available – in the following sections.

Google Analytics Privacy Policy

Google Analytics Datenschutzerklärung Summary  Affected: Visitors of the website 欄 Purpose: Evaluation of visitor information to optimize the web offering.  Processed data: Access statistics, the data such as locations of accesses, Gerätedaten, access duration and time, navigation behavior and click behavior. More details can be found further below in this Datenschutzerklärung.  Retention period: individually configurable, standardmäßig stores Google Analytics 4 data for 14 months ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Analytics?

We use on our website the analytics tracking tool Google Analytics in the version Google Analytics 4 (GA4) from the American company Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. By combining various technologies such as cookies, device IDs, and login credentials, you as a user can be identified across different devices. This allows your actions to be analyzed across platforms.

For example, if you click a link, this event is stored in a cookie and sent to Google Analytics. Using the reports we receive from Google Analytics, we can better tailor our website and our service to your preferences. Below we go into more detail about the tracking tool and primarily inform you about which data is processed and how you can prevent it.

Google Analytics is a tracking tool that serves the traffic analysis of our website. The basis of these measurements and analyses is a pseudonymous user identification number. This number does not contain personal data such as name or address, but serves to assign events to a device. GA4 uses an event-based model that captures detailed information about user interactions such as page views, clicks, scrolling, conversion events. In addition, various machine learning functions have also been built into GA4 to better understand user behavior and certain trends. GA4 relies on modeling with the help of machine learning functions. This means that, based on the collected data, missing data can also be extrapolated in order to optimize the analysis and also to be able to provide forecasts.

To ensure Google Analytics works fundamentally, a tracking code is embedded into the code of our website. When you visit our website, this code records various events that you perform on our website. With GA4's event-based data model, we as website operators can define and track specific events to obtain analyses of user interactions. Thus, in addition to general information such as clicks or page views, special events that are important for our business can also be tracked. Such special events can, for example, be the submission of a contact form or the purchase of a product.

As soon as you leave our website, this data is sent to the Google Analytics servers and stored there.

Google processes the data and we receive reports about your user behavior. This may include, among other things, the following reports:

• Audience reports: Through audience reports we get to know our users better and know more precisely who is interested in our service.
• Display reports: Through display reports we can more easily analyze and improve our online advertising.
• Acquisition reports: Acquisition reports provide us with helpful information about how we can attract more people to our service.
• Behavior reports: Here we learn how you interact with our website. We can trace the path you take on our site and which links you click.
• Conversion reports: A conversion is an event where you perform a desired action as a result of a marketing message. For example, when you go from being just a website visitor to a buyer or newsletter subscriber. With these reports we learn more about how our marketing measures are received by you. This is how we aim to increase our conversion rate.
• Real-time reports: Here we always find out instantly what is happening on our website right now. For example, we can see how many users are currently reading this text.

In addition to the analysis reports mentioned above, Google Analytics 4 also offers the following features, among others:

• Event-based data model: This model captures very specific events that can occur on our website. For example, playing a video, purchasing a product, or signing up for our newsletter.
• Advanced analytics features: With these features we can better understand your behavior on our website or certain general trends. Thus we can, for example, segment user groups, conduct comparative analyses of target groups, or trace your path or journey on our website.
• Predictive modeling: Based on collected data, missing data can be extrapolated using machine learning to predict future events and trends. This can help us develop better marketing strategies.
• Cross-platform analysis: The collection and analysis of data is possible from both websites and apps. This gives us the opportunity to analyze user behavior across platforms, provided that you have, of course, consented to the data processing.

Why do we use Google Analytics on our website?

Our goal with this website is clear: we want to provide you with the best possible service. The statistics and data from Google Analytics help us achieve this goal.

The statistically evaluated data give us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is more easily found by interested people on Google. On the other hand, the data help us understand you as a visitor better. Thus we know very precisely what we need to improve on our website to provide you with the best possible service. The data also serve us to carry out our advertising and marketing measures more individually and cost-effectively. Finally, it only makes sense to show our products and services to people who are interested in them.

What data is stored by Google Analytics?

Google Analytics creates a random, unique ID using a tracking code that is linked to your browser cookie. This allows Google Analytics to recognize you as a new user and assign you a User-ID. When you visit our site again, you will be recognized as „returning“ User. All collected data is stored together with this User-ID. This makes it possible to evaluate pseudonymous User profiles.

In order to analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is the default. Depending on the property used, data is retained for varying lengths of time.

Your interactions are measured across platforms through identifiers such as cookies, app instance IDs, user IDs, or custom event parameters, provided you have consented. Interactions are all types of actions you perform on our website. If you also use other Google systems (such as a Google account), data generated by Google Analytics can be linked with third‑party cookies. Google does not share Google Analytics data unless we, as the website operator, approve it. Exceptions may occur if required by law.

According to Google, no IP addresses are logged or stored in Google Analytics 4. However, Google uses the IP address data to derive location data and deletes it immediately thereafter. All IP addresses collected from users in the EU are therefore deleted before the data is stored in a data center or on a server.

Since Google Analytics 4 focuses on event-based data, the tool uses significantly fewer cookies compared to earlier versions (such as Google Universal Analytics). However, there are some specific cookies used by GA4. For example:

Name: _ga
Value: 2.1326744211.152113087491-5
Purpose: analytics.js uses the _ga cookie by default to store the user ID. Fundamentally it serves to distinguish website visitors.
Expiration: after 2 years

Name: _gid
Value: 2.1687193234.152113087491-1
Purpose: The cookie also serves to distinguish website visitors
Expiration date: after 24 hours

Name: _gat_gtag_UA_
Value: 1
Purpose: Used to reduce the request rate. When Google Analytics über the Google Tag Manager is provided, erhält this cookie the name _dc_gtm_
Expiration date: after 1 minute

Note: This Aufzählung cannot claim completeness, as Google repeatedly changes the choice of its cookies. The goal of GA4 is also to improve data protection. Therefore the tool offers several Möglichkeiten for controlling data collection. So we can, for example, set the retention period ourselves and also control data collection.

Here we give you an overview of the most important types of data collected with Google Analytics:

Heatmaps: Google creates so-called heatmaps. Über Heatmaps you can see exactly the areas you click. So we get information about where you are „unterwegs“ on our site.

Session duration: Google defines session duration as the time you spend on our site without leaving the page. If you have been inactive for 20 minutes, the session ends automatically.

Bounce rate (eng. Bounce rate): A bounce is referred to when you view only one page on our website and then leave the website again.

Account creation: If you create an account or place an order on our website, Google Analytics collects this data.

Location: IP addresses are not logged or stored in Google Analytics. However, shortly before the deletion of the IP address, derivations for location data are used.

Technical information: Technical information includes, among other things, your browser type, your internet provider or your screen resolution.

Source: Google Analytics, or rather, we are naturally also interested in which website or which advertisement you came to our site from.

Additional data includes contact information, any reviews, playing media (e.g., when you play a video through our site), sharing content on social media, or adding to your favorites. The list is not exhaustive and is intended only as a general guide to data storage by Google Analytics.

How long and where are the data stored?

Google has its servers distributed worldwide. Here you can read exactly where the Google data centers are located: https://datacenters.google/

Your data is distributed across multiple physical storage media. This has the advantage that the data is more quickly retrievable and better protected against manipulation. In every Google data center there are corresponding emergency programs for your data. For example, if the hardware at Google fails or natural disasters incapacitate servers, the risk of a service interruption at Google remains low.

The retention period of the data depends on the properties used. The storage duration is always set individually for each property. Google Analytics offers us four options to control the retention period:

• 2 months: that is the shortest storage period.
• 14 months: by default, the data in GA4 is retained for 14 months.
• 26 months: you can also store the data for 26 months.
• Data is only deleted when we delete it manually

Additionally, there is also the option that data is only deleted when you no longer visit our website within the period we have chosen. In this case, the retention period is reset each time you revisit our website within the specified period.

When the specified period has expired, the data will be deleted once a month. This retention period applies to your data that is linked with cookies, user identification, and advertising IDs (e.g., cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data is a merging of individual data into a larger entity.

How can I delete my data or prevent data storage?

Under the data protection law of the Europäischen Union you have the right to obtain information about your data, to update it, to delete it or to restrict it. By using the browser add‑on to disable Google Analytics JavaScript (analytics.js, gtag.js) you prevent Google Analytics 4 from using your data. The browser add‑on can be downloaded and installed from https://tools.google.com/dlpage/gaoptout?hl=de . Please note that this add‑on only disables data collection by Google Analytics.

If you want to generally disable, delete, or manage cookies, you will find under the section „Cookies“ the appropriate links to the respective guides of the most popular browsers.

Legal basis

The use of Google Analytics requires your consent, which we have obtained with our cookie popup. This consent constitutes, according to Article 6(1)(a) GDPR (consent) the legal basis für the processing of personal data, as it may occur in the collection by web analytics tools.

In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors in order to improve our offering technically and economically. With the help of Google Analytics we detect website errors, can identify attacks and improve efficiency. The legal basis for this is Art. 6 Abs. 1 lit. f DSGVO (Berechtigte Interessen). We nevertheless only use Google Analytics if you have given consent.

Google processes data from you, among other things, also in the USA. Google is an active participant of the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU Bürgern to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so‑called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are template provisions provided by the EU Commission and are intended to ensure that your data complies with European data‑protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU‑US Data Privacy Framework and the standard contractual clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the relevant standard contractual clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

We hope we were able to bring you the most important information about the data processing of Google Analytics näherbringen. If you want to learn more über the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.

If you want to learn more about data processing, use the Google privacy policy at https://policies.google.com/privacy?hl=de.

Google Site Kit Privacy Policy

Google Site Kit Datenschutzerklärung Summary  Data subjects: Visitors of the website 欄 Purpose: Evaluation of visitor information to optimize the web offering.  Processed data: Access statistics, the data such as locations of accesses, Gerätedaten, access duration and time, navigation behavior, click behavior and IP addresses. More details can be found further below and in the Datenschutzerklärung of Google Analytics.  Retention period: abhängig von den verwendeten Properties ⚖️ Legal bases: Art. 6 Abs. 1 lit. a GDPR (Consent), Art. 6 Abs. 1 lit. f GDPR (Legitimate interests)

What is Google Site Kit?

We have integrated the WordPress plugin Google Site Kit from the American company Google Inc. into our website. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google Site Kit we can quickly and easily view statistics that come from various Google products such as Google Analytics directly in our WordPress dashboard. The tool, or the tools embedded in Google Site Kit, also collect personal data from you. In this privacy policy we explain why we use Google Site Kit, how long and where data is stored, and which other privacy texts are relevant to you in this context.

Google Site Kit is a plugin for the content management system WordPress. With this plugin we can view important website analysis statistics directly in our dashboard. These are statistics collected by other Google products, primarily Google Analytics. In addition to Google Analytics, the services Google Search Console, Page Speed Insight, Google AdSense, Google Optimize and Google Tag Manager can also be linked with Google Site Kit.

Why do we use Google Site Kit on our website?

As a service provider, it is our task to offer you the best possible experience on our website. You should feel comfortable on our website and quickly and easily find exactly what you are looking for. Statistical analyses help us get to know you better and adapt our offering to your wishes and interests. For these analyses we use various Google tools. Site Kit greatly facilitates our work in this regard, because we can view and analyze the statistics of the Google products directly in the dashboard. So we no longer have to log in separately to each tool. Site Kit therefore always provides a good overview of the most important analytics data.

What data is stored by Google Site Kit?

If you have actively consented to tracking tools in the cookie notice (also called a script or banner), Google products such as Google Analytics will set cookies and send data about you, such as your user behavior, to Google, where it is stored and processed. This also includes personal data such as your IP address.

For more detailed information about the individual services, we have dedicated sections in this privacy policy. For example, see our privacy policy for Google Analytics. Here we go into great detail about the data collected. You will learn how long Google Analytics stores, manages, and processes data, which cookies may be used, and how you can prevent data storage. We also have separate privacy policies with comprehensive information for other Google services such as Google Tag Manager or Google AdSense.

Below we show you example Google Analytics cookies that may be set in your browser, provided you have generally consented to data processing by Google. Please note that these cookies are only a selection:

Name: _ga
Value:2.1326744211.152113087491-2
Purpose: Standardmäßig uses analytics.js the _ga cookie to store the User-ID. Fundamentally it serves to distinguish website visitors.
Expiration date: after 2 years

Name: _gid
Value:2.1687193234.152113087491-7
Purpose: This cookie also serves to distinguish website visitors.
Expiration date: after 24 hours

Name: _gat_gtag_UA_
Value: 1
Purpose: This cookie is used to reduce the request rate.
Expiration date: after 1 minute

How long and where are the data stored?

Google stores collected data on its own Google servers, which are distributed worldwide. Most servers are located in the United States and therefore it is easy mögable that your data may also be stored there. On https://datacenters.google/ you can see exactly where the company provides servers.

Data collected through Google Analytics is retained for a standard 26 months. Afterwards, your user data is deleted. The retention period applies to all data linked with cookies, user identification, and advertising IDs.

How can I delete my data or prevent data storage?

You always have the right to obtain information about your data, to have your data deleted, corrected, or restricted. Additionally, you can also disable, delete, or manage cookies in your browser at any time.

If you want to generally disable, delete, or manage cookies, you will find under the section „Cookies“ the appropriate links to the respective guides of the most popular browsers.

Legal basis

The use of Google Site Kit requires your consent, which we obtained with our cookie popup. This consent constitutes, according to Art. 6(1)(a) GDPR (consent) the legal basis für the processing of personal data as may occur in the collection by web‑analytics tools.

Additionally to the consent, we have a legitimate interest in analyzing the behavior of website visitors and thereby improving our offering technically and economically. With the help of Google Site Kit we detect website errors, can identify attacks and improve efficiency. The legal basis for this is Art. 6 Abs. 1 lit. f DSGVO (Berechtigte Interessen). We nevertheless only use Google Site Kit insofar as you have given consent.

Google processes data from you, among other things, also in the USA. Google is an active participant of the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU Bürgern to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so‑called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are template provisions provided by the EU Commission and are intended to ensure that your data complies with European data‑protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU‑US Data Privacy Framework and the standard contractual clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the relevant standard contractual clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

To learn more über data processing by Google, we recommend the comprehensive Google privacy policies at https://policies.google.com/privacy?hl=de.

E-Mail Marketing Introduction

E-mail Marketing Summary  Affected: newsletter subscribers 欄 Purpose: Direct advertising via e-mail, notification über system-relevant events  Processed data: Data entered during registration, at minimum the e-mail address. For more details, see the e-mail marketing tool used.  Retention period: Duration of the subscription ⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is email marketing?

To keep you constantly informed, we also use the possibility of e‑mail marketing. In doing so, if you have consented to receiving our e‑mails or newsletters, your data will also be processed and stored. E‑mail marketing is a sub‑area of online marketing. In this process, news or general information about a company, products or services is sent by e‑mail to a specific group of people who are interested in it.

If you want to participate in our e‑mail marketing (usually via newsletter), you normally only need to sign up with your e‑mail address. For this, you fill out an online form and submit it. However, it may also happen that we ask you for your salutation and your name so that we can address you personally.

Basically, signing up for newsletters works using the so-called “Double-Opt-In procedure“. After you have signed up for our newsletter on our website, you will receive an email through which you confirm the newsletter subscription. This ensures that the email address belongs to you and that no one has signed up with a foreign email address. We or a notification tool we use logs each individual registration. This is necessary so that we can also prove the legally correct registration process. Typically, the time of registration, the time of confirmation, and your IP address are stored. Additionally, changes to your stored data are also logged.

Why do we use email marketing?

We naturally want to stay in contact with you and always present you with the most important news about our company. For this purpose we use, among other things, e‑mail marketing – often referred to simply as “Newsletter” – as an essential part of our online marketing. If you consent to it or it is permitted by law, we will send you newsletters, system e‑mails or other notifications by e‑mail. When we use the term „Newsletter“ in the following text, we primarily mean regularly sent e‑mails. Of course we do not want to bother you with our newsletters in any way. Therefore we are truly always striving to provide only relevant and interesting content. Thus you will learn more about our company, our services or products. Since we are constantly improving our offers, you will also always learn through our newsletter when there is news or when we are offering special, lucrative promotions. If we commission a service provider that offers a professional sending tool for our e‑mail marketing, we do so in order to be able to provide you with fast and secure newsletters. The purpose of our e‑mail marketing is basically to inform you about new offers and to get closer to our business objectives.

Which data is processed?

If you become a subscriber to our newsletter via our website, you confirm membership in an email list by email. In addition to IP address and email address, your salutation, name, address and telephone number may also be stored. However, only if you consent to this data storage. The data marked as such are necessary for you to participate in the offered service. Providing this information is voluntary, but not providing it will prevent you from using the service. Additionally, information about your device or your preferred content on our website may also be stored. For more about data storage when you visit a website, see the “Automatic Data Storage” section. We record your consent declaration so that we can always demonstrate that it complies with our laws.

Duration of data processing

If you unsubscribe your email address from our email/newsletter distribution list, we may store your address for up to three years based on our legitimate interests, so that we can still prove your prior consent. We may process this data only if we need to defend against any claims.

If you confirm that you have given us consent to subscribe to the newsletter, you can submit an individual deletion request at any time. If you permanently withdraw consent, we reserve the right to store your email address on a blocklist. As long as you have voluntarily subscribed to our newsletter, we will, of course, also retain your email address.

Right to object

You can cancel your newsletter subscription at any time. To do so, you simply need to withdraw your consent to the newsletter subscription. This usually takes only a few seconds or one or two clicks. Usually you will find a link at the very end of each e‑mail to cancel the newsletter subscription. If the link cannot be found in the newsletter, please contact us by e‑mail and we will cancel your newsletter subscription immediately.

Legal basis

The sending of our newsletter is based on your consent (Article 6(1)(a) GDPR). This means we may only send you a newsletter if you have actively subscribed beforehand. If applicable, we may also send you advertising messages, provided you have become our customer and have not objected to the use of your email address for direct marketing.

Information about special e‑mail marketing services and how they process personal data can be found – if available – in the following sections.

Chatbots Introduction

Chatbots Datenschutzerklärung Summary  Data subjects: Visitors of the website 欄 Purpose: Contact inquiries and the general communication between us and you  Processed data: Data such as name, address, email address, telephone number, general content data, possibly IP address More details can be found in the respective tools used.  Retention period: abhängig on the used chatbots & chat functions ⚖️ Legal bases: Art. 6 Abs. 1 lit. a DSGVO (Consent), Art. 6 Abs. 1 lit. f DSGVO (Legitimate interests), Art. 6 Abs. 1 S. 1 lit. b. DSGVO (contractual or pre‑contractual obligations)

What are chatbots?

You can also communicate with us via chatbots or similar chat functions. A chat provides the possibility to write or speak to each other with only a very small delay. A chatbot is software that attempts to answer your question and, if necessary, informs you about news. By using these communication tools, your personal data may also be processed and stored.

Why do we use chatbots?

Communication options with you are important to us. After all, we want to talk with you and answer all possible questions about our service as best as possible. Well-functioning communication is an important part of our service. Chatbots have the great advantage that we can automatically answer frequently asked questions using this software. This saves us time and you still receive detailed and helpful answers. If the chatbot cannot help further, you of course always have the option to contact us personally.

Please note that when using our built-in elements, data about you may also be processed outside the European Union, as many providers are American companies. As a result, you may no longer be able to assert or enforce your rights regarding your personal data as easily.

Which data is processed?

It may happen that you also use the chat services on other websites/platforms. In this case, your user ID is also stored on the servers of that website. We can also be informed about which user used the chat at which time. The content is also stored. Which data exactly is stored depends on the respective service. In general, however, it concerns contact data such as email address or telephone number, IP address and various usage data.

If you have consented to the chat function being used, this consent, along with any possible registration, will also be stored or logged. We do this so that we can present the registration or consent if it is legally required.

The provider of a chat platform can also find out when you chat, and also receives technical information about the device you are using. Which information exactly is stored and processed also depends on your PC settings. In many cases, data about your approximate location can be collected. This is done on the one hand to optimize the chat services and on the other hand to ensure more security. Furthermore, the information can also be used to implement personalized advertising and marketing measures.

If you have consented that a chatbot may send you messages, you can of course deactivate this activation at any time. The chatbot also serves as assistance here and shows you how you can unsubscribe from this function. All of your related data will subsequently be deleted from the recipient list.

We use the aforementioned data, for example, to be able to address you personally via chat, to be able to answer your questions and inquiries, or also to send you possible content. Additionally, we can also fundamentally improve our chat services with it.

How long is data stored?

How long the data is processed and stored primarily depends on the tools we use. Further down you will learn more about the data processing of the individual tools. The privacy policies of the providers usually state exactly which data is stored and processed for how long. In principle, personal data is processed only as long as necessary for the provision of our services. When data is stored in cookies, the storage duration varies greatly. The data can be deleted immediately after leaving a website, but it can also be stored for several years. Therefore, you should examine each individual cookie in detail if you want to know more about data storage. Usually, the privacy policies of the individual providers also contain insightful information about the individual cookies.

Right to object

You also have the right and the ability at any time to withdraw your consent to the use of cookies or third parties. This can be done either through our cookie management tool or through other opt‑out functions. For example, you can also prevent data collection via cookies by managing, disabling, or deleting cookies in your browser.

Since chat services may use cookies, we also recommend our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Legal basis

We ask über a popup window for your permission to process data from you within the chat services. If you consent, this consent also serves as a legal basis (Art. 6(1)(a) GDPR) for data processing. In addition, we handle your inquiries and manage your data within contractual or pre‑contractual relationships in order to erfüllen our pre‑contractual and contractual obligations or to answer inquiries. The basis for this is dafür Art. 6(1) sentence 1 lit. b GDPR. Grundsätzlich werden Ihre Daten auch auf Grundlage unseres berechtigten Interesses (Art. 6(1)(f) GDPR) in fast and good communication with you or other customers and Geschäftspartnern stored and processed. We nevertheless only use the tools insofar as you have given consent.

Online Marketing Introduction

Online-Marketing Datenschutzerklärung Summary  Affected: Visitors of the website 欄 Purpose: Evaluation of visitor information to optimize the web offering.  Processed data: Access statistics, the data such as locations of accesses, Gerätedaten, duration of access and time, navigation behavior, click behavior and IP addresses. Also personal data such as name or e‑mail address can be processed. More details can be found in the respective online marketing tool used.  Retention period: abhängig von den eingesetzten Online-Marketing-Tools ⚖️ Legal bases: Art. 6(1) lit. a GDPR (Consent), Art. 6(1) lit. f GDPR (Legitimate interests)

What is online marketing?

Online marketing refers to all measures that are carried out online in order to achieve marketing goals such as increasing brand awareness or closing a business deal. Furthermore, our online marketing measures aim to draw people's attention to our website. In order to be able to show our offer to many interested people, we therefore engage in online marketing. Most often this involves online advertising, content marketing, or search engine optimization. To use online marketing efficiently and purposefully, personal data is also stored and processed. The data helps us, on the one hand, to show our content only to those persons who are truly interested in it, and, on the other hand, to measure the advertising success of our online marketing measures.

Why do we use online marketing tools?

We want to show our website to every person who is interested in our offer. We are aware that this is not possible without deliberately set measures. Therefore we do online marketing. There are various tools that make our work on online marketing measures easier and also constantly provide improvement suggestions based on data. This allows us to target our campaigns more precisely to our target audience. The purpose of these deployed online marketing tools is ultimately the optimization of our offer.

Which data is processed?

In order for our online marketing to work and the success of the measures to be measurable, user profiles are created and data, for example in cookies (which are small text files), are stored. With the help of this data we can not only place advertising in the traditional sense, but also directly on our website present our content in the way you prefer. For this there are various third‑party tools that offer these functions and accordingly also collect and store data from you. In the mentioned cookies, for example, it is stored which pages you have visited on our website, how long you have viewed these pages, which links or buttons you click, or from which website you came to us. Additionally, technical information can also be stored, such as your IP address, which browser you use, from which device you visit our website, or the time when you accessed our website and when you left it again. If you have consented that we may also determine your location, we can also store and process that.

Your IP address is stored in pseudonymized form (i.e., shortened). Unique data that directly identifies you as a person, such as name, address or e‑mail address, is also stored only in pseudonymized form within the advertising and online marketing procedures. Therefore we cannot identify you as a person, but we have only the pseudonymized, stored information saved in the user profiles.

The cookies can, in some cases, also be deployed, analyzed, and used for advertising purposes on other websites that use the same advertising tools. The data may then also be stored on the servers of the advertising tools providers.

In exceptional cases, unique data (names, email address, etc.) can also be stored in user profiles. This storage occurs, for example, when you are a member of a social media channel, which we use for our online marketing measures, and the network links previously received data with the user profile.

With all the advertising tools we use that store your data on their servers, we always receive only aggregated information and never data that can identify you as an individual. The data merely shows how well the implemented advertising measures performed. For example, we see which measures you or other users prompted to come to our website and purchase a service or product there. Based on the analyses, we can improve our advertising offering in the future and tailor it even more precisely to the needs and wishes of interested persons.

Duration of data processing

Regarding the duration of data processing, we will inform you further below, provided we have additional information about it. In general, we process personal data only for as long as it is absolutely necessary for the provision of our services and products. Data stored in cookies are retained for varying periods. Some cookies are deleted as soon as you leave the website, while others can be stored in your browser for several years. In the respective privacy policies of the individual providers, you will usually find detailed information about the specific cookies used by the provider.

Right to object

You also have the right and the ability at any time to withdraw your consent to the use of cookies or third parties. This works either through our cookie management tool or through other opt‑out functions. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser. The legality of the processing remains unaffected until the withdrawal.

Since online marketing tools typically use cookies, we also recommend our general cookie privacy policy. To find out exactly which data of yours is stored and processed, you should read the privacy statements of the respective tools.

Legal basis

If you have consented that third parties may be used, the legal basis for the corresponding data processing is this consent. This consent constitutes, according to Article 6(1)(a) GDPR (consent) the legal basis für the processing of personal data, as it may occur in the collection by online marketing tools.

We also have a legitimate interest to measure online marketing&#amp;#xDF; measures in an anonymized form in order to optimize our offering and our&#amp;#xDF; measures using the data obtained. The legal basis for this is Art. 6(1)(f) GDPR (Legitimate Interests). We nevertheless only use the tools insofar as you have given consent.

You will receive information about special online marketing tools – if available – in the following sections.

Cookie Consent Management Platform Introduction

Cookie Consent Management Platform Summary  Affected: website visitors 欄 Purpose: Obtaining and managing consent for certain cookies and thus the use of specific tools  Processed data: Data for managing the set cookie preferences such as IP address, time of consent, type of consent, individual consents. More details can be found in the respective tool.  Retention period: Depends on the tool used, you should expect periods of several years ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is a Cookie Consent Management Platform?

We use a Consent Management Platform (CMP) software on our website that facilitates the correct and secure handling of scripts and cookies for us and for you. The software automatically creates a cookie popup, scans and controls all scripts and cookies, provides a legally required cookie consent for you, and helps us and you keep track of all cookies. With most cookie consent management tools, all existing cookies are identified and categorized. As a website visitor, you then decide yourself whether and which scripts and cookies you allow or do not allow. The following graphic shows the relationship between the browser, web server, and CMP.

Why do we use a cookie management tool?

Our goal is to provide you with the best possible transparency in the area of data protection. In addition, we are also legally obliged to do so. We want to inform you as thoroughly as possible about all tools and all cookies that can store and process your data. It is also your right to decide yourself which cookies you accept and which you do not. To grant you this right, we first need to know exactly which cookies have actually landed on our website. Thanks to a cookie management tool that regularly scans the website for all existing cookies, we are aware of all cookies and can provide you with GDPR‑compliant information about them. Through the consent system, you can then accept or reject cookies.

Which data is processed?

In the context of our cookie management tool, you can manage each individual cookie yourself and have full control over the storage and processing of your data. Your consent declaration is stored so that we do not have to ask you each time you visit our website again, and we can also prove your consent when legally required. This is stored either in an opt-in cookie or on a server. Depending on the provider of the cookie management tool, the retention period of your cookie consent varies. Usually, this data (such as pseudonymous user ID, consent timestamp, detailed information about cookie categories or tools, browser, device information) is stored for up to two years.

Duration of data processing

We inform you about the duration of data processing further below, provided we have additional information about it. In general, we process personal data only for as long as it is absolutely necessary for the provision of our services and products. Data stored in cookies are retained for varying periods. Some cookies are deleted as soon as you leave the website, while others can be stored in your browser for several years. The exact duration of data processing depends on the tool used; typically, you should expect a storage period of several years. In the privacy policies of the individual providers, you will usually find detailed information about the duration of data processing.

Right to object

You also have the right and the ability at any time to withdraw your consent to the use of cookies. This works either through our cookie management tool or through other opt‑out functions. For example, you can also prevent data collection via cookies by managing, disabling, or deleting cookies in your browser.

Information about special cookie management tools – if available – can be found in the following sections.

Legal basis

If you consent to cookies, personal data about you will be processed and stored über these cookies. If we dürfen use cookies based on your consent (Article 6(1)(a) GDPR), this consent also simultaneously constitutes the legal basis for the use of cookies or the processing of your data. In order to können manage consent for cookies and to enable you to können give consent, a cookie consent management platform software is employed. The use of this software ermöglicht us to operate the website efficiently and in compliance with the law, which represents a legitimate interest (Article 6(1)(f) GDPR).

Security & Anti-Spam

Security & Anti-Spam Privacy Policy Summary  Affected: Visitors of the website 欄 Purpose: Cybersecurity  Processed data: Data such as your IP address, name or technical data such as browser version More details can be found further below and in the individual privacy texts.  Retention period: most data are stored until they are no longer needed to fulfill the service ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)

What is a security & anti‑spam software?

With so-called security & anti-spam software, you and we can protect ourselves from various spam or phishing emails and possible other cyber attacks. Spam is understood as advertising emails sent in bulk that you did not request. Such emails are also called data junk and can also incur costs. Phishing emails, on the other hand, are messages that aim to build trust through fake messages or websites in order to obtain personal data. An anti-spam software generally protects against unwanted spam messages or malicious emails that could, for example, inject viruses into our system. We also use general firewall and security systems that protect our computers from unwanted network attacks.

Why do we use security & anti-spam software?

We place great emphasis on security on our website. After all, it is not only about our security, but especially about yours. Unfortunately, cyber threats have already become everyday in the world of IT and the Internet. Often, hackers try to steal personal data from an IT system using a cyber attack. Therefore, a good defense system is absolutely necessary. A security system monitors all incoming and outgoing connections to our network or computer. To achieve even greater security against cyber attacks, we use, in addition to the standardized security systems on our computer, further external security services. Unauthorized data traffic is thus better prevented, and we protect ourselves from cybercrime.

Which data are processed by security & anti‑spam software?

Which data exactly is collected and stored naturally depends on the respective service. However, we always strive to use only programs that collect data very sparingly or only store data that is necessary for the fulfillment of the offered service. In principle, the service can store data such as name, address, IP address, email address, and technical data such as browser type or browser version. Performance and log data may also be collected in order to detect possible incoming threats in a timely manner. This data is processed within the scope of the services and in compliance with applicable laws. This also includes the GDPR for US providers (via the standard contractual clauses). These security services sometimes also work with third parties, which, under instruction and in accordance with privacy policies and additional security measures, can store and/or process data. Data storage is usually done via cookies.

Duration of data processing

We inform you about the duration of data processing further below, provided we have additional information on it. For example, security programs store data until you or we revoke the data storage. In general, personal data is stored only as long as it is absolutely necessary for the provision of services. In many cases, we unfortunately lack precise information from the providers about the length of storage.

Right to object

You also have the right and the ability at any time to withdraw your consent to the use of cookies or third‑party security software. This can be done either through our cookie management tool or via other opt‑out functions. For example, you can also prevent data collection through cookies by managing, disabling, or deleting cookies in your browser.

Since such security services may also use cookies, we recommend our general cookie privacy policy. To find out exactly which of your data is stored and processed, you should read the privacy statements of the respective tools.

Legal basis

We primarily use the security services based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in a good security system against various cyber attacks.

Certain processing activities, especially the use of cookies and the utilization of security features, require your consent. If you have consented that data about you may be processed and stored by integrated security services, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Most of the services we use place cookies in your browser to store data. Therefore, we recommend that you read our privacy text on cookies carefully and view the privacy policy or the cookie policy of the respective service provider.

Learn information about special tools – if available – in the following sections.

Google reCAPTCHA Privacy Policy

Google reCAPTCHA Datenschutzerklärung Summary  Affected: Visitors of the website 欄 Purpose: Optimization of our service performance and protection against cyber attacks  Processed data: Data such as IP address, browser information, your operating system, limited location and usage data More details can be found further below in this Datenschutzerklärung.  Retention period: dependent on the stored data ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is reCAPTCHA?

Our top priority is to secure and protect our website for you and for us as best as possible. To ensure this, we use Google reCAPTCHA from Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With reCAPTCHA we can determine whether you are truly a human made of flesh and blood and not a robot or other spam software. By spam we mean any unwanted information that reaches us electronically without being requested. In classic CAPTCHAs you usually had to solve text or image puzzles for verification. With Google's reCAPTCHA we usually do not have to bother you with such puzzles. In most cases it is sufficient simply to tick a box to confirm that you are not a bot. With the new Invisible reCAPTCHA version you don't even have to tick a box. How it works exactly and especially which data is used for it, you will learn in the course of this privacy policy.

reCAPTCHA is a free captcha service from Google that protects websites from spam software and abuse by non-human visitors. This service is most commonly used when you fill out forms on the internet. A captcha service is a kind of automated Turing test that is intended to ensure that an action on the internet is performed by a human and not by a bot. In the classic Turing test (named after computer scientist Alan Turing), a human makes the distinction between bot and human. With captchas, the computer or a software program also takes over this. Classic captchas work with small tasks that are easy for humans to solve but pose significant difficulties for machines. With reCAPTCHA you no longer have to actively solve puzzles. The tool uses modern risk techniques to distinguish humans from bots. Here you only need to tick the text box „I am not a robot“ or, with Invisible reCAPTCHA, even that is no longer necessary. reCAPTCHA embeds a JavaScript element into the source code, and then the tool runs in the background and analyzes your user behavior. From these user actions, the software calculates a so‑called captcha score. Google uses this score to determine, even before the captcha input, how likely it is that you are a human. reCAPTCHA or captchas in general are used whenever bots could manipulate or abuse certain actions (such as registrations, surveys, etc.).

Why do we use reCAPTCHA on our website?

We only want to welcome flesh-and-blood humans on our site. Bots or spam software of all kinds are welcome to stay at home. Therefore we pull all levers to protect ourselves and to offer you the best possible user-friendliness. For this reason we use Google reCAPTCHA from Google. This allows us to be fairly certain that we remain a “bot-free“ website. By using reCAPTCHA, data is transmitted to Google to determine whether you are indeed a human. reCAPTCHA therefore serves the security of our website and, consequently, also your security. For example, without reCAPTCHA it could happen that during registration a bot registers as many email addresses as possible, then spams forums or blogs with unwanted advertising content “zuzuspamen“. With reCAPTCHA we can prevent such bot attacks.

What data is stored by reCAPTCHA?

reCAPTCHA collects personal data from users in order to determine whether the actions on our website are actually performed by humans. Therefore, the IP address and other data required by Google for the reCAPTCHA service may be sent to Google. IP addresses are almost always truncated within the EU member states or other contracting states of the European Economic Area agreement before the data reaches a server in the United States. The IP address is not combined with other Google data unless you are logged into your Google account while using reCAPTCHA. First, the reCAPTCHA algorithm checks whether Google cookies from other Google services (YouTube, Gmail, etc.) are already placed in your browser. Then, reCAPTCHA sets an additional cookie in your browser and captures a snapshot of your browser window.

The following list of collected browser and user data does not claim to be exhaustive. Rather, they are examples of data that, to our knowledge, are processed by Google.

• Referrer URL (the address of the page from which the visitor comes)
• IP address (e.g., 256.123.123.1)
• Information about the operating system (the software that enables your computer to operate. Known operating systems are Windows, Mac OS X, or Linux)
• Cookies (small text files that store data in your browser)
• Mouse and keyboard behavior (every action you perform with the mouse or keyboard is recorded)
• Date and language settings (which language or which date you have set as default on your PC are stored)
• All JavaScript objects (JavaScript is a programming language that enables websites to adapt to the user. JavaScript objects can collect all possible data under a single name)
• Screen resolution (indicates how many pixels the image display consists of)

It is undisputed that Google uses and analyzes this data even before you click the checkbox “I am not a robot“. In the Invisible reCAPTCHA version, even the checkbox is omitted and the entire detection process runs in the background. How much and which data Google exactly stores is not disclosed in detail by Google.

The following cookies are used by reCAPTCHA: Here we refer to the reCAPTCHA demo version from Google at https://www.google.com/recaptcha/api2/demo. All these cookies benötigen for tracking purposes a unique identifier. Here is a list of cookies that Google reCAPTCHA has set on the demo version:

Name: IDE
Value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-113087491-8
Purpose: This cookie is set by the company DoubleClick (gehört also Google) to register and report the actions of a user on the website in relation to advertisements. This allows the advertising effectiveness to be measured and appropriate optimization measures to be taken. IDE is stored in browsers under the domain doubleclick.net.
Expiration date: after one year

Name: 1P_JAR
Value: 2019-5-14-12
Purpose: This cookie collects statistics on website usage and measures conversions. A conversion occurs, for example, when a user becomes a Käufer. The cookie is also used to display relevant ads to users. Additionally, the cookie can be used to prevent a user from seeing the same ad more than once.
Expiration date: after one month

Name: ANID
Value: U7j1v3dZa1130874910xgZFmiqWppRWKOr
Purpose: We could not obtain many details about this cookie. In Google's privacy policy the cookie is mentioned in connection with „advertising cookies“ such as “DSID”, “FLC”, “AID”, “TAID” mentioned. ANID is stored under domain google.com.
Expiration date: after 9 months

Name: CONSENT
Value: YES+AT.de+20150628-20-0
Purpose: This cookie stores the consent status of a user for using various Google services. CONSENT also serves security, to verify users, prevent fraud of login credentials and protect user data from unauthorized attacks.
Expiration date: after 19 years

Name: NID
Value: 0WmuWqy113087491zILzqV_nmt3sDXwPeM5Q
Purpose: NID is used by Google to tailor advertising to your Google search. With the help of the cookie „remembers“ Google your most entered search queries or your previous interaction with ads. Thus you always receive customized ads. The cookie contains a unique ID to collect personal settings of the user for advertising purposes.
Expiration date: after 6 months

Name: DV
Value: gEAABBCjJMXcI0dSAAAANbqc113087491-4
Purpose: As soon as you have checked the „I am not a robot“ checkbox, this cookie is set. The cookie is used by Google Analytics für personalized advertising. DV collects information in an anonymized form and is further used to make user distinctions.
Expiration date: after 10 minutes

Note: This list cannot claim to be complete, as Google routinely changes the choice of its cookies.

How long and where are the data stored?

By inserting reCAPTCHA, data from you are transferred to the Google server übertragen. Where exactly these data are stored, Google does not clarify, even after repeated inquiries. Without having received a confirmation ä from Google, it must be assumed that data such as mouse interaction, time spent on the website or language settings are stored on the European â or American Google servers. The IP address that your browser transmits to Google ü is generally not combined with other Google data from other Google services. However, if you are logged into your Google account while using the reCAPTCHA plug‑in, the data are combined. For this, the differing data protection regulations of Google apply.

How can I delete my data or prevent data storage?

If you want that über you and über your behavior no data is transmitted to Google, you must über before you visit our website or use the reCAPTCHA software, log out completely from Google and delete all Google cookies. By default the data is automatically transmitted to Google as soon as you open our site. To delete this data again, you must contact Google Support at  https://support.google.com/?hl=de&tid=113087491 contact.

If you use our website, you agree that Google LLC and its representatives automatically collect, process, and use data.

Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are considered unsafe under current European data protection law. Data to unsafe third countries may therefore not be simply transferred, stored, and processed there unless appropriate guarantees (such as EU standard contractual clauses) exist between us and the non‑European service provider.

Legal basis

If you have consented to the use of Google reCAPTCHA, the legal basis for the corresponding data processing is this consent. This consent constitutes, according to Art. 6(1)(a) GDPR (consent) the legal basis für the processing of personal data, as may occur in the collection by Google reCAPTCHA.

We also have a legitimate interest in using Google reCAPTCHA to optimize and secure our online service. The corresponding legal basis for this is Art. 6(1) lit. f GDPR (Legitimate Interests). We nevertheless only implement Google reCAPTCHA insofar as you have given consent.

Google processes data about you, among other things, also in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so‑called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are template provisions provided by the EU Commission and are intended to ensure that your data complies with European data‑protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU‑US Data Privacy Framework and the standard contractual clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the relevant standard contractual clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

You can learn a bit more about reCAPTCHA on Google's developer site at https://developers.google.com/recaptcha/. Google does discuss the technical development of reCAPTCHA here, but detailed information about data storage and privacy-related topics is also not found there. A good overview of the basic use of data by Google can be found in the in-house privacy policy at https://policies.google.com/privacy.

Web Design Introduction

Webdesign Privacy Policy Summary  Data subjects: Visitors of the website 欄 Purpose: Improving user experience  Processed data: Which data is processed depends heavily on the services used. Usually it includes IP address, technical data, language settings, browser version, screen resolution and browser name. For more details, see the respective web design tools used.  Retention period: dependent on the tools used ⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is web design?

We use various tools on our website that serve our web design. Web design is not only about making our website look pretty, as often assumed, but also about functionality and performance. Of course, the appropriate look of a website is also one of the major goals of professional web design. Web design is a subfield of media design and deals with both the visual as well as the structural and functional design of a website. The goal is to improve your experience on our website with the help of web design. In web design jargon, this is referred to as User Experience (UX) and usability. User Experience refers to all impressions and experiences that a website visitor has on a website. A subcategory of User Experience is usability. This concerns the user-friendliness of a website. Emphasis is placed especially on ensuring that content, subpages or products are clearly structured and that you can easily and quickly find what you are looking for. To provide you with the best possible experience on our website, we also use so‑called third‑party web design tools. In this privacy policy, the category "Webdesign“ therefore includes all services that aesthetically improve our website. These can include, for example, fonts, various plugins, or other embedded web design functions.

Why do we use web design tools?

How you capture information on a website depends heavily on the structure, functionality, and visual perception of the website. Therefore, good and professional web design has become increasingly important for us as well. We are constantly working on improving our website and see this also as an extended service for you as a website visitor. Furthermore, a beautiful and functional website also brings economic advantages for us. Ultimately, you will only visit us and use our offers if you feel completely comfortable.

What data is stored by web design tools?

When you visit our website, web design elements may be embedded in our pages that can also process data. Which data exactly is involved naturally depends heavily on the tools used. Below you can see exactly which tools we use for our website. We recommend that you also read the privacy policy of the tools used for more information about data processing. Usually you will find there which data is processed, whether cookies are used, and how long the data is retained. Through fonts such as Google Fonts, information such as language settings, IP address, browser version, browser screen resolution, and browser name are automatically transferred to Google's servers.

Duration of data processing

How long data is processed is very individual and depends on the web design elements used. If cookies, for example, are employed, the retention period can be as short as one minute or even last a few years. Please inform yourself about this. To that end, we recommend, on the one hand, our general text section about cookies as well as the privacy statements of the tools used. There you will usually learn which cookies are used exactly and what information is stored in them. Google font files, for example, are stored for one year. This is intended to improve a website's loading time. In principle, data is always retained only as long as necessary for the provision of the service. In the case of legal regulations, data may also be stored longer.

Right to object

You also have the right at any time to withdraw your consent to the use of cookies or third parties. This works either via our cookie management tool or via other opt‑out functions. You can also prevent data collection through cookies by managing, disabling, or deleting cookies in your browser. Under web design elements (mostly fonts) there are, however, also data that cannot be deleted as easily. This occurs when data is automatically collected during a page request and transmitted to a third party (such as Google). Please contact the support of the respective provider. In the case of Google you can reach support at https://support.google.com/?hl=de.

Legal basis

If you have consented to the use of web design tools, the legal basis for the corresponding data processing is that consent. According to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data that may occur during collection by web design tools. Additionally, we have a legitimate interest in improving the web design on our website. After all, we can only provide you with a beautiful and professional web offering if we do so. The corresponding legal basis for this is Art. 6(1)(f) GDPR (legitimate interests). Nevertheless, we only use web design tools to the extent that you have given consent. We want to emphasize this again here.

You can obtain information about specific web design tools – if available – in the following sections.

Google Fonts Privacy Policy

Google Fonts Privacy Policy Summary  Affected: Visitors of the website 欄 Purpose: Optimization of our service performance  Processed data: Data such as IP address and CSS and font requests More details can be found further below in this privacy policy.  Retention period: Font files are stored at Google for one year ⚖️ Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What are Google Fonts?

On our website we use Google Fonts. These are the “Google fonts” of the company Google Inc. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

For using Google fonts, you do not need to log in or set a password. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you do not need to worry that your Google account data will be transmitted to Google while using Google Fonts. Google records the usage of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We will look at the exact data storage details later.

Google Fonts (formerly Google Web Fonts) is a directory with over 800 typefaces, that Google makes them available to your users for free.

Many of these fonts are released under the SIL Open Font License, while others have been released under the Apache License. Both are free software licenses.

Why do we use Google Fonts on our website?

With Google Fonts we can use fonts on our own website and do not have to upload them to our own server. Google Fonts is an important building block to keep the quality of our website high. All Google fonts are automatically optimized for the web, which saves data volume and is especially a great advantage for use on mobile devices. When you visit our site, the low file size ensures fast loading times. Furthermore, Google Fonts are secure web fonts. Different rendering systems in various browsers, operating systems, and mobile devices can cause errors. Such errors can sometimes visually distort text or entire web pages. Thanks to the fast Content Delivery Network (CDN), there are no cross‑platform problems with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). We therefore use Google Fonts so that we can present our entire online service as beautifully and consistently as possible.

What data does Google store?

If you visit our website, the fonts are loaded from a Google server. This external request transmits data to the Google servers. This allows Google to recognize that you, or your IP address, have visited our website. The Google Fonts API was developed to reduce the use, storage, and collection of end-user data to what is necessary for proper font delivery. API, by the way, stands for “Application Programming Interface“ and also serves as a data transmitter in the software domain.

Google Fonts securely stores CSS and font requests with Google and is therefore protected. Through the collected usage statistics, Google can determine how well the individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites use Google Fonts. This data is published in the BigQuery database of Google Fonts. Businesses and developers use the Google web service BigQuery to be able to examine and manipulate large amounts of data.

It should also be noted that each Google Font request automatically transmits information such as language settings, IP address, browser version, browser screen resolution, and browser name to Google's servers. Whether this data is also stored is not clearly ascertainable, and Google does not communicate this unambiguously.

How long and where are the data stored?

Requests for CSS assets are stored by Google on its servers for one day, which are primarily located outside the EU. This allows us to use the fonts via a Google stylesheet. A stylesheet is a template that lets you easily and quickly, for example, change the design or the font of a website.

The font files are stored at Google for one year. Google aims to fundamentally improve website loading times. When millions of websites reference the same fonts, they are cached after the first visit and appear instantly on all other subsequently visited sites. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.

How can I delete my data or prevent data storage?

Those data that Google stores for a day or a year cannot simply be deleted. The data are automatically transmitted to Google when the page is accessed. To delete this data prematurely, you must contact Google Support at https://support.google.com/?hl=de&tid=113087491 . You can only prevent data storage in this case by not visiting our site.

Unlike other web fonts, Google gives us uneingeschränkten access to all fonts. We können therefore access an unlimited sea of fonts and thus extract the optimum for our website. More about Google Fonts and further questions can be found at https://developers.google.com/fonts/faq?tid=113087491. There, Google does address privacy‑relevant matters, but truly detailed information über data storage is not included. It is relatively difficult to obtain truly precise information über stored data from Google.

Legal basis

If you have consented to the use of Google Fonts, the legal basis for the corresponding data processing is this consent. This consent states, according to Art. 6(1)(a) GDPR (consent) the legal basis für the processing of personal data, as may occur in the collection by Google Fonts.

We also have a legitimate interest in using Google Font to optimise our online service. The legal basis for this is Art. 6 Abs. 1 lit. f DSGVO (Berechtigte Interessen). However, we only use Google Font insofar as you have given consent.

Google processes data from you, among other things, also in the USA. Google is an active participant of the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU Bürgern to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so‑called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are template provisions provided by the EU Commission and are intended to ensure that your data complies with European data‑protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU‑US Data Privacy Framework and the standard contractual clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the relevant standard contractual clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

Which data grundsätzlich is collected by Google and wofür these data are used, you can also read on https://www.google.com/intl/de/policies/privacy/ read.

Online Map Services Introduction

Online map services privacy policy summary  Data subjects: website visitors 欄 Purpose: improving user experience  Processed data: Which data is processed depends heavily on the services used. Usually it includes IP address, location data, search items and/or technical data. You can find more details in the respective tools used.  Retention period: dependent on the tools used ⚖️ Legal bases: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are online map services?

We also use online map services as an extended service for our website. Google Maps is probably the service you are most familiar with, but there are also other providers that specialize in creating digital maps. Such services enable locations, route plans, or other geographic information to be displayed directly through our website. By embedding a map service, you no longer have to leave our website to, for example, view the route to a location. To make the online map work on our website, map sections are embedded using HTML code. The services can then display street maps, the Earth's surface, or aerial and satellite images. If you use the built-in map offering, data is also transferred to the tool used and stored there. This data may also include personal data.

Why do we use online map services on our website?

In general terms, it is our concern to provide you with a pleasant experience on our website. And your time is only pleasant, of course, if you can navigate our website easily and find all the information you need quickly and simply. Therefore, we thought that an online map system could be a significant optimization of our service on the website. Without leaving our website, you can, using the map system, view route descriptions, locations, or even attractions without any trouble. It is, of course, also very convenient that you can see at a glance where our headquarters are, so you can find us quickly and safely. As you can see, there are many advantages, and we consider online map services on our website clearly as part of our customer service.

Which data is stored by online map services?

When you open a page on our website that has an online map function built in, personal data can be transmitted to the respective service and stored there. Usually this is your IP address, which can also be used to determine your approximate location. In addition to the IP address, data such as entered search terms as well as latitude and longitude coordinates are also stored. If you, for example, enter an address for route planning, this data is also stored. The data is not stored with us, but on the servers of the integrated tools. You can imagine it roughly like this: you are indeed on our website, but when you interact with a map service, that interaction actually takes place on their website. In order for the service to work properly, typically at least one cookie is set in your browser. Google Maps, for example, also uses cookies to record user behavior and thus optimize its own service and to be able to serve personalized advertising. You can learn more about cookies in our section „Cookies“.

How long and where are the data stored?

Each online map service processes different user data. If we have further information, we will inform you about the duration of data processing further down in the relevant sections for the individual tools. In principle, personal data is always retained only as long as necessary for the provision of the service. For example, Google Maps stores certain data for a fixed period, while other data you must delete yourself. With Mapbox, the IP address is retained for about 30 days and then deleted. As you can see, each tool stores data for different lengths of time. Therefore, we recommend that you carefully review the privacy policies of the tools used.

The providers also use cookies to store data about your user behavior with the map service. More general information about cookies can be found in our section „Cookies“, but you can also learn from the privacy texts of the individual providers which cookies may be used. Usually, however, this is only an exemplary list and is not complete.

Right to object

You always have the possibility and also the right to access your personal data and to object to its use and processing. You can also withdraw your consent that you have given us at any time. Usually, this works most easily through the Cookie-Consent-Tool. However, there are also other opt-out tools you can use. Possible cookies set by the providers used can also be managed, deleted, or disabled by you with a few clicks. It may, however, happen that some functions of the service no longer work as usual. How you manage cookies in your browser also depends on the browser you use. In the “Cookies“ section you will also find links to the guides for the major browsers.

Legal basis

If you have consented to the use of an online map service, the legal basis for the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (consent), this consent constitutes the legal basis for the processing of personal data that may occur during collection by an online map service.

We also have a legitimate interest in using an online map service to optimize our service on our website. The corresponding legal basis is Art. 6(1) f GDPR (legitimate interests). However, we only use an online map service when you have given consent. We want to make sure this is recorded again at this point.

Information on special online map services can be found – if available – in the following sections.

Google Maps Privacy Policy

Google Maps Datenschutzerklärung Summary  Affected persons: Visitors of the website 欄 Purpose: Optimization of our service performance  Processed data: Data such as entered search terms, your IP address and also latitude and Längen coordinates. More details can be found further below in this Datenschutzerklärung.  Retention period: abhängig on the stored data ⚖️ Legal bases: Art. 6 Abs. 1 lit. a GDPR (Consent), Art. 6 Abs. 1 lit. f GDPR (Legitimate interests)

What is Google Maps?

We use Google Maps from Google Inc. on our website. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google Maps we can show you locations better and thus adapt our service to your needs. By using Google Maps, data is transferred to Google and stored on Google's servers. Here we want to go into more detail about what Google Maps is, why we use this Google service, what data is stored and how you can prevent this.

Google Maps is an internet mapping service from the company Google. With Google Maps you can search online for precise locations of cities, attractions, accommodations or businesses using a PC, a tablet, or an app. If businesses are listed on Google My Business, additional information about the company is displayed alongside the location. To show directions, map excerpts of a location can be embedded into a website using HTML code. Google Maps displays the Earth's surface as a street map or as an aerial or satellite image. Thanks to Street View images and high‑quality satellite images, very accurate representations are possible.

Why do we use Google Maps on our website?

All our efforts on this page aim to provide you with a useful and meaningful time on our website. By integrating Google Maps, we can provide you with the most important information about various locations. You can see at a glance where our headquarters are located. The directions always show you the best or fastest route to us. You can retrieve the route for travel by car, public transport, on foot, or by bicycle. For us, providing Google Maps is part of our customer service.

What data is stored by Google Maps?

In order for Google Maps to provide its service fully, the company must collect and store data from you. This includes, among other things, the search terms you entered, your IP address, and the latitude and longitude coordinates. If you use the route planner function, the entered starting address is also stored. This data storage, however, occurs on the Google Maps websites. We can only inform you about this, but we have no influence over it. Since we have embedded Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google primarily uses this data to optimize its own services and to provide you with individualized, personalized advertising.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID
Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ113087491-5
Purpose: NID is used by Google to tailor advertising to your Google search. With the help of the cookie „erinnert“ Google remembers your most frequently entered search queries or your previous interaction with ads. This way you always receive customized advertising. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.
Expiration date: after 6 months

Note: We cannot guarantee completeness of the information about the stored data. Especially when using cookies, changes can never be excluded. To identify the NID cookie, a dedicated test page was created, where only Google Maps was embedded.

How long and where are the data stored?

The Google servers are located in data centers around the world. Most servers, however, are located in America. For this reason, your data is also increasingly stored in the USA. Here you can read exactly where the Google data centers are located: https://datacenters.google/

Google distributes the data across various storage media. This makes the data faster to retrieve and better protected against potential manipulation attempts. Each data center also has special emergency programs. For example, if there are problems with Google hardware or a natural disaster disables the servers, the data remains fairly safe and still protected.

Google stores some data for a fixed period of time. For other data, Google only provides the option to delete it manually. Furthermore, the company also anonymizes information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 or 18 months.

How can I delete my data or prevent data storage?

With the automatic deletion function for location and activity data introduced in 2019, information about location determination and web/app activity – depending on your decision – is stored for either 3 or 18 months and then deleted. Additionally, you can also manually delete this data from the history at any time via the Google account. If you want to completely prevent location tracking, you must pause the „Web & App Activity“ section in the Google account. Click „Data & Personalization“ and then the option „Activity Settings“. Here you can turn the activities on or off.

In your browser you can also disable, delete, or manage individual cookies. Depending on which browser you use, this works slightly differently. In the “Cookies” section you will find the corresponding links to the respective guides for the most popular browsers.

If you generally do not want any cookies, you can configure your browser to always inform you when a cookie is about to be set. This way you can decide for each individual cookie whether to allow it or not.

Legal basis

If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. This consent constitutes, according to Article 6(1)(a) GDPR (consent) the legal basis für the processing of personal data as may occur in the collection by Google Maps.

From our side there is also a legitimate interest to use Google Maps to optimise our online service. The corresponding legal basis is Art. 6 Abs. 1 lit. f DSGVO (Berechtigte Interessen). We only use Google Maps insofar as you have given consent.

Google processes data from you, among other things, also in the USA. Google is an active participant of the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU Bürgern to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

In addition, Google uses so‑called standard contractual clauses (= Art. 46(2) and (3) GDPR). Standard contractual clauses (Standard Contractual Clauses – SCC) are template provisions provided by the EU Commission and are intended to ensure that your data complies with European data‑protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU‑US Data Privacy Framework and the standard contractual clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the relevant standard contractual clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.

If you want to learn more über the data processing of Google, we recommend the company's own Datenschutzerklärung at https://policies.google.com/privacy?hl=de.

Online Booking Systems Introduction

Online booking systems privacy policy summary  Data subjects: visitors of the website 欄 Purpose: improving user experience and organization  Processed data: Which data is processed, hängt heavily on the services used. Usually it is IP address, contact and payment data and/or technical data. More details can be found in the respective tools used.  Retention period: dependent on the tools used ⚖️ Legal bases: Art. 6 Abs. 1 lit. a GDPR (consent), Art. 6 Abs. 1 lit. f GDPR (legitimate interests)

What is an online booking system?

So that you can make bookings through our website, we use one or more booking systems. Appointments, for example, can be created very easily online. A booking system is a software application integrated into our website that displays available resources (such as free appointments) and through which you can book directly online and usually also pay. You are probably already familiar with such booking systems from the gastronomy or hospitality industry. However, these systems are now used in a wide variety of sectors. Depending on the tool and settings, booking systems can be used internally for us as well as for customers like you. In the process, personal data about you is usually collected and stored.

Usually the booking works as follows: You will find the booking system on our website, where you can book an appointment for a service with a click of the mouse and by providing your data, and you can usually pay for it immediately as well. It may be that you can enter various details about yourself via a form. Please be aware that all data you enter can be stored and managed in a database.

Why do we use an online booking system?

We see our website, in a sense, as a free service for you. You should receive helpful information and feel completely comfortable on our site. This also includes an online service that makes booking appointments or services as easy as possible for you. The days of having to wait days by phone or email for a booking confirmation are over. With an online booking system, you have everything done after a few clicks and can get back to other things. It also makes it easier for us to manage all bookings and appointments. Therefore, we consider such a booking system absolutely worthwhile for both you and us.

Which data is processed?

Which data exactly is processed, we cannot tell you in this general information text about the booking system. This always depends on the tool used and the functions and possibilities it contains. Many booking systems offer, in addition to the conventional booking function, a range of additional features. For example, many systems also have an external online payment system (e.g., from Stripe, Klarna or PayPal) and a calendar synchronization function integrated. Accordingly, depending on the functions, different and varying amounts of data can be processed. Typically, data such as IP address, name and contact details, technical information about your device and the time of a booking are processed. If you also make a payment in the system, bank data such as account number, credit card number, passwords, TANs, etc. are stored and passed on to the respective payment provider. We recommend that you read the privacy policy of the tool used carefully so that you know which data is specifically processed from you.

Duration of data processing

Each booking system stores data for varying lengths of time. Therefore we cannot provide concrete information here about the duration of data processing. In principle, however, personal data is always stored only as long as it is absolutely necessary for the provision of the services. Booking systems generally also use cookies that store information for varying periods. Some cookies are deleted immediately after leaving the site, while others can be stored for several years. In our section „Cookies“ you can learn more about this. Please also review the respective privacy policies of the providers. They should explain how long your data is stored in the specific case.

Right to object

If you have consented to data processing by a booking system, you naturally always have the possibility and the right to withdraw this consent. So please always be aware that you have rights regarding your personal data and that you can exercise these rights at any time. If you do not want personal data to be processed, then no personal data may be processed. It's that simple. The easiest way to withdraw data processing is via a cookie consent tool or other offered opt‑out functions. For example, you can also manage cookie data storage directly in your browser. Until you withdraw your consent, the legality of the data management remains unaffected.

Legal basis

If you have consented to the use of booking systems, the legal basis for the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (consent), it provides the legal basis for the processing of personal data that may occur through booking systems.

Furthermore, we also have a legitimate interest in using booking systems because, on the one hand, they allow us to expand our customer service and, on the other hand, to optimise our internal booking organisation. The corresponding legal basis is Article 6(1)(f) GDPR (legitimate interests). We nevertheless only deploy the tools insofar as you have given consent. We want to make sure this is explicitly noted here.

You will receive information on special booking systems – if available – in the following sections.

Explanation of used terms

We always strive to draft our privacy policy as clear and understandable as possible. However, this is not always easy, especially with technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical expressions (such as cookies, IP address). However, we do not want to use them without explanation. Below you will find an alphabetical list of important terms used, which we may not have addressed sufficiently in the existing privacy policy. If these terms have been taken from the GDPR and are definitions, we will also cite the GDPR texts here and, if necessary, add our own explanations.

Data processor

Definition according to Article 4 of the GDPR

In the sense of this regulation, the term refers to:

„Processor“ a natural or legal person, authority, institution or other entity that processes personal data on behalf of the controller;

Erläuterung: We, as a company and website owner, are responsible for all data that we process from you. In addition to the controllers, there can also be so‑called data processors. This includes every company or person that processes personal data on our behalf. Data processors can therefore be, in addition to service providers such as tax advisors, also hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

Consent

Definition according to Article 4 of the GDPR

In the sense of this regulation, the term refers to:

„Consent“ of the data subject, any voluntarily for the specific case, in an informed manner and unambiguously given declaration of intent in the form of a statement or any other clear confirming action, by which the data subject indicates that they agree with the processing of the personal data concerning them;

Explanation: Usually, such consent on websites is obtained via a Cookie-Consent-Tool. You probably know this. Whenever you first visit a website, you are usually asked über a banner whether you agree to or consent to the data processing. Usually you ön also make individual settings and thus decide yourself which data processing you allow and which you do not. If you do not consent, ürfen no personal data of yours be processed. In principle, consent can of course also be given in writing, i.e., not über a tool.

Personal data

Definition according to Article 4 of the GDPR

In the sense of this regulation, the term refers to:

„personal data“ all information that relates to an identified or identifiable natural person (hereinafter „data subject“) are; a natural person is considered identifiable who can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;

Erläuterung: Personal data are therefore all those data that you as a person can identify können. These are usually data such as:

• Name
• Address
• Email address
• Mailing address
• Phone number
• Date of birth
• Identification numbers such as social security number, tax identification number, personal ID number or matriculation number
• Bank data such as account number, credit information, account balances, etc.

According to the Europäischem Court of Justice (ECJ) also your IP address as personal data. IT experts can, based on your IP address, at least determine the approximate location of your device and subsequently identify you as the subscriber. Therefore, storing an IP address also requires a legal basis under the GDPR. There are also so-called „special categories“ of personal data that are also particularly sensitive. These include:

• racial and ethnic origin
• political opinions
• religious or philosophical beliefs
• union membership
• genetic data, for example data taken from blood or saliva samples
• biometric data (these are information about psychological, körperlichen or behavioral characteristics that can identify a person).
  Health data
• Data regarding sexual orientation or sexual life

Profiling

Definition according to Article 4 of the GDPR

In the sense of this regulation, the term refers to:

„Profiling“ any type of automated processing of personal data that consists of using this personal data to assess certain persönliche aspects that relate to a natürliche person, in particular to analyze aspects concerning work performance, economic situation, health, persönliche preferences, interests, Zuverlässigkeit, behavior, location or changes of residence of this natürlichen person, or to predict them;

Explanation: Profiling collects various information über a person in order to learn more über that person. In the web sector, profiling is häufig für advertising purposes or also für Bonitätsprüfungen applied. Web- or advertising analysis programs, for example, collect data über your behavior and your interests on a website. This results in a specific user profile, with whose help advertising can be targeted to a specific audience.

 

Data controller

Definition according to Article 4 of the GDPR

In the sense of this regulation, the term refers to:

„Controller“ the natural or legal person, authority, institution or other entity that alone or jointly with others decides on the purposes and means of processing personal data; if the purposes and means of this processing are stipulated by Union law or the law of the Member States, the Controller or the criteria for its designation may be provided for by Union law or the law of the Member States;

Erläuterung: In our case we are responsible for the processing of your personal data and therefore the “Controller”. If we pass collected data for processing to other service providers, they are “Processors”. For this a “Data Processing Agreement (AVV)” must be signed.

 

Processing

Definition according to Article 4 of the GDPR

In the sense of this regulation, the term refers to:

„Processing“ any with or without the aid of automated means performedü operation or any such series of operations in connection with personal data such as collection, recording, organization, ordering, storage, adaptation or alterationä, retrieval, query, use, disclosure by transmissionÜ, dissemination or any other form of provision, alignment or linkingü, restrictionä, erasureö or destruction;

Note: If we speak of processing in our privacy policy, we mean any kind of data processing. This includes, as mentioned above in the original GDPR explanation, not only collection but also storage and processing of data.

Closing remarks

Congratulations! If you are reading these lines, you have truly fought your way through our entire privacy policy “gekämpft” or at least scrolled this far. As you can see from the length of our privacy policy, we take the protection of your personal data very seriously, not lightly.
It is important to us to inform you, to the best of our knowledge and conscience, about the processing of personal data. However, we want not only to tell you which data is processed, but also to explain the reasons for using various software programs. Typically, privacy policies sound very technical and legal. Since most of you are not web developers or lawyers, we wanted to take a different linguistic approach and explain the matter in simple and clear language. Of course, this is not always possible due to the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy.
If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible party. We wish you a pleasant time and hope to welcome you again on our website soon.

All texts are protected by copyright.

Source: Privacy Policy created with the data protection generator for Austria by AdSimple