In This Month’s Issue

Cookies and web storage

We use so-called “cookies” or the “web storage” of your browser to improve the user-friendliness on our website.

What are cookies?

Put simply, a cookie is a small text file that stores data about websites you visit. Cookies can be used in many ways. For example, you can save a type of “user profile”, ie things like your preferred language and other page settings that are required by our website in order to be able to offer you certain services. The cookie file is stored on your end device and can also help to recognize you when you visit our website again.

Under certain circumstances, cookies can also provide us with information about your preferred activities on our website and thus tailor our website to your individual interests or even increase the speed of navigation on our website.

How to avoid cookies

You can manually delete the cookies in the security settings of your browser at any time.

You can also prevent cookies from being saved from the outset by setting your browser accordingly. Please note, however, that you may then not be able to use all the functions of our website to their full extent, or that errors may occur in the presentation and use of the website.

Third party cookies

It is possible that third-party providers with whom we design and operate our website, in particular through so-called plugins (see below in the section “Third-party services”), independently save their own cookies on your device. If you only want to accept our own cookies, but not cookies from these third parties, you can prevent the storage of these cookies by the corresponding browser setting “Block third-party cookies”.

Legal Basis

The legal basis for the use of cookies that are absolutely necessary for the functioning of the website (eg shopping cart cookie, session cookie) is Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to be able to offer you a functioning website. Cookies are necessary because they are an integral part of current Internet technology and without cookies many functions of current websites would not be available. We therefore need cookies in order to be able to make the website available to you upon your request.

You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

However, we would like to point out that the processing of your data in certain cookies is mandatory within the meaning of Art. 21 Para. 1 GDPR, since otherwise the website cannot be operated at all and we technically do not have the option of setting cookies on certain ones prevent individual end devices. However, you may be able to do this yourself in your browser. For more information, please take a look at the instructions for your browser.

What is Web Storage?

Web storage is a technology for web applications that stores data in a web browser. Web storage can be seen as a further development of cookies, but differs from them in some respects.

In contrast to cookies, which can be accessed by both server and client, the web storage is completely controlled by the client. This means that data is not transferred to the server every time the website is accessed. Access is only possible locally via scripts on the website. Specifically, this means that third parties cannot access the information stored on the website. Only you and we can access the locally stored data.

Legal Basis

The legal basis for the use of web storage, which is absolutely necessary for the functioning of the website, is Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to be able to offer you a functioning website. Web storage is necessary because it is an integral part of current Internet technology and without it many functions of current websites would not be available. We therefore need the web storage so that we can make the website available to you on your request.

You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

However, we would like to point out that the processing of your data in web storage may be compulsory within the meaning of Art. 21 Para. 1 GDPR, since otherwise the website cannot be operated at all and we do not have the technical option to use it for certain purposes prevent individual end devices. However, you may be able to do this yourself in your browser. For more information, please take a look at the instructions for your browser.

Contact

Our website offers ways to contact us directly. By contacting us, you agree to the processing and storage of your transmitted data (especially your email address) to process your request. You can object to this processing at any time with future effect. Please use our contact details in the imprint. However, please note that we will no longer process your request.

We will only process the data you have provided to us until the respective purpose of contacting you has been reached, unless there are legal retention periods to the contrary. If the purpose of contacting you is to assert data subject rights, the statements made in the “Your rights as data subject” section apply.

We need the following information from you:

• Name: It is necessary for us to provide your name so that we can process your request and establish personal contact. We will only use your information for this purpose.

•   E-Mail: It is necessary for us to provide your email address so that we can process and answer your request. We will only use your information for this purpose.

The legal basis for the use of the data you transmit to us by contacting us is Art. 6 Para. 1 S. 1 Letter a) GDPR (consent of the data subject). You can revoke your consent at any time with future effect. Please use the contact details given in the imprint:

The legal basis for processing the mandatory information is Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing). We have outlined your legitimate interest in the list above.

You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

Third Party Services

We use services / resources from third parties, e.g. plugins, external content, software or other external service providers (services) to simplify our data processing and to expand the functional scope of our website. Personal data may also be transmitted to the service provider. In order to protect your data, we have, if necessary, the service providers acc. Art. 28 GDPR contractually obliged to process your data only according to our instructions.

We expressly point out that we are regularly only responsible for data collection and transmission by the service within the meaning of the GDPR, but not for any later processing by the respective service provider.

We use the following services in detail:

Google Services

Our website uses the following services from Google Ireland Limited (“Google EU”), Gordon House, Barrow Street, Dublin 4, Ireland. This company represents the company Google LLC (“Google US”), 1600 Amphitheater Parkway Mountain View, CA 94043, USA in the EU. The company Google US fulfills the requirements of the “EU-US Privacy Shield” The Privacy Shield Agreement regulates the protection of personal data transferred from a member state of the European Union to the United States and ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union You can find a list of certified companies here: https://www.privacyshield.gov/list.

By using the services, data is transmitted to Google EU and possibly from Google EU to Google US. The Google Group can process the transmitted data in order to create anonymized user profiles for statistical purposes. If you also have a Google account and are logged in to it, Google can assign the transmitted data to your account – also across devices. We have no influence on this data processing. Google EU is therefore responsible for this data processing.

You can find more information on handling user data in Google’s privacy policy: https://policies.google.com/privacy.
You can manage your Google advertising settings on the following website: https://adssettings.google.com/?hl=de(This setting will be deleted if you delete your cookies).

We use:
Google Fonts

Our website uses the external font service “Google Fonts” from Google. This service enables us to present our website uniformly and attractively even with very differently configured user end devices by loading fonts from an external server instead of from the user’s end device. The required fonts are usually requested from a Google server in the USA. As a result of this request, the following information is transmitted to the Google server and stored there: Your IP address, product and version information about the browser used and the operating system (so-called user agent), the website from which your access took place ( so-called referrer), date and time of the request and possibly your internet service provider.

The legal basis for the processing of your data in relation to the “Google Fonts” service is Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for an appealing and uniform presentation of our online offer. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

Google Maps

Our website uses the external map service “Google Maps” from Google. Google Maps is used to offer an interactive map on our website that shows you how to find and reach us. This service enables us to present our website appropriately by loading map material from an external server. The required data is usually requested from a Google server in the USA. As a result of this request, the following information is transmitted to the Google server and stored there: your IP address, product and version information about the browser used and the operating system (so-called user agent), the website from which your access took place ( so-called referrer), date and time of the request and possibly your internet service provider.

This service uses your browser’s web storage. See the Web Storage section above for more information.

The legal basis for the processing of your data in relation to Google Maps is Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for an appealing presentation of our online offer and the easy location of the places indicated on our homepage. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

Google reCAPTCHA

Our website uses the “Google reCAPTCHA” abuse protection from Google. reCAPTCHA serves to prevent cyberattacks and harassment caused by so-called “bots” (artificial website users) by checking via an input field whether it is a real person who visits the website. This service enables us to operate our website stably and protect it from misuse. For this purpose, the data entered is usually transferred to a Google server in the USA and processed there for verification. As a result of this request, the following information is transmitted to the Google server and stored there: Your input in the input field, your IP address, product and version information about the browser used and the operating system (so-called user agent), the website.

The legal basis for the processing of your data in relation to the “Google reCAPTCHA” service is Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for effective protection of our online offer against cyber attacks and misuse. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

Content Delivery Networks

Our website uses so-called Content Delivery Networks (CDN). A CDN is a network of powerful servers that cache content in various locations around the world. A CDN has two main tasks: on the one hand, it should provide content in the shortest possible time, and on the other hand, it should relieve the web host by distributing the data traffic.

CDNs deliver two types of content: static and dynamic content. All website visitors receive static content in the same form, such as video content from streaming services or code frameworks (e.g. Javascript, jQuery). Dynamic content is initially adapted to the user and only created when the request is made. This includes content that is done via web applications, email or online shops and is personalized. In order to be able to use the latter, information about the website visitor must first be transmitted to the CDN. Personal data can also be transmitted from you.

Every time the application is called up, general information is automatically transmitted from your browser to the server (so-called server log files). For more information, see above under “Server log files”.

The legal basis for the use of CDNs and the transmission of your data to them is Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing), unless otherwise stated for the respective service. The legitimate interest arises from our need for a technically flawless and fast display of our website and the relief of our IT infrastructure. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

We use:
Bootstrap

We use the CDN service “BootstrapCDN” (also called “MaxCDN”) from StackPath LLC (“StackPath”), 2021 McKinney Ave., Suite 1100, Dallas, TX 75201, USA. The StackPath company fulfills the requirements of the “EU-US Privacy Shield”. The Privacy Shield Agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. The list of certified companies can be found here: https://www.privacyshield.gov/list .

You can find more information on the handling of user data in the data protection declaration of StackPath: https://www.stackpath.com/privacy-statement/ or in the data protection declaration of BootstrapCDN: https://www.bootstrapcdn.com/privacy-policy/ .

Media Services

We use certain services to fill and supplement our website with digital content. We usually use the integration functions of external platforms for this. As a result, when the content is retrieved from the provider’s server, data is transmitted to it and usually stored there, e.g. your IP address, product and version information about the browser used and the operating system (so-called user agent), the website of which Your access took place (so-called referer), date and time of the request and possibly your internet service provider. For more information, see above under “Server log files”.

The legal basis for the use of media services is generally Art. 6 Para. 1 Sentence 1 Letter f) GDPR (legitimate interest in data processing), unless otherwise stated for the respective service. The legitimate interest arises from our interest in being able to offer you a content and visually appealing website. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

We use:
Font Awesome

Our website uses pictograms from the “Font Awesome” service. The service is offered by Fonticons, Inc., Delaware, USA. Fonticons, Inc. is represented by The Corporation Trust Company, Corporation Trust Center 1209 Orange St., Wilmington, DE 19801, USA.

You can find more information on handling user data in Font Awesome’s privacy policy at: https://fontawesome.com/privacy .

Google Fonts

Our website uses the “Google Fonts” service from Google. See the data protection information above.

Google Maps

Our website uses the “Google Maps” service from Google. See the data protection information above.

Newsletters

If you subscribe to any of our newsletters, we will use your personal data to send you our e-mail newsletter and to optimize our newsletter. In this context, we might collect information about if and when you received our newsletter. You may withdraw your consent and unsubscribe from the newsletter at any time either by sending a message to us or via an unsubscribe link in the newsletter without incurring other than the transmission costs according to the basic rates. We might offer you more detailed options to set your newsletter preferences.

Social media fan sites

In addition to our website, we maintain online presences on social platforms in order to communicate with the customers, interested parties and users active there and to be able to inform them about our services.

If you visit our presence on a social platform, your data will usually be processed by the respective provider of the platform for our market research and advertising purposes. The provider can also process the data for its own purposes. User profiles can be created based on your usage behavior and your resulting interests. These usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that are believed to correspond to your interests. For these purposes, cookies (see above) are usually stored on your end device, in which your usage behavior and your interests are stored. Especially if you are a member of the respective platforms and are logged in to them, additional data can be saved independently in the usage profiles. For a detailed description of the respective data processing and the possibilities of objection, we refer to the information linked by the provider below, since only they know the exact processes of their data processing.

We would like to point out that your data can also be processed outside the European Union. This can result in risks because, for example, enforcing your rights could be difficult.

The legal basis for using the online presence and the associated data processing is generally Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to present ourselves to visitors and users of social networks and to make statements of all kinds in the media and opinion market. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

The use of statistical data of all visitors to our social media websites, which are collected, processed and made available to us by the respective site operators, is based on Art. 6 Para. 1 S. 1 Letter f) GDPR (legitimate interest in data processing ). The legitimate interest arises from our need for an anonymous evaluation of visitor and usage behavior on our websites to improve the design of our online offering and optimize our communication with interested parties. You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

If you are asked by the respective providers for your consent to data processing, the legal basis for the processing is Art. 6 Para. 1 S. 1 Letter a) GDPR (consent of the data subject). You can revoke this consent at any time with future effect. Please contact the provider who asked for your consent.

In the event that you want to assert your rights mentioned above, we would like to point out that, despite possible shared responsibility, they can be most effectively exercised by the providers. As a rule, only the providers have direct access to your data and can take appropriate measures and provide information directly. If you still need help, you can contact us and we will support you at all times within our means.

We are represented on:

FACEBOOK

Facebook is a social network of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Facebook Ireland Ltd. is the European subsidiary of Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The company Facebook Inc. fulfills the requirements of the “EU-US Privacy Shield”. The Privacy Shield Agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. The list of certified companies can be found here: https://www.privacyshield.gov/list

Further information on data protection at Facebook can be found at: https://www.facebook.com/about/privacy/ . We inform you about our own data processing in this declaration.

We have concluded an additional agreement with Facebook as part of our user contract, which regulates the responsibility for data processing with regard to the page insights function in accordance with Art. 26 GDPR. The details of the agreement can be found here: https://www.facebook.com/legal/terms/page_controller_addendum . Among other things, Facebook has undertaken to inform you about data processing as part of the page insights function. You can find this information

here: https://www.facebook.com/legal/terms/information_about_page_insights_data .

INSTAGRAM

Instagram is a social network of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Facebook Ireland Ltd. is the European subsidiary of Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The company Facebook Inc. fulfills the requirements of the “EU-US Privacy Shield”. The Privacy Shield Agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. The list of certified companies can be found here: https://www.privacyshield.gov/list .

Further information on data protection at Instagram can be found at: http://instagram.com/about/legal/privacy/ .

Further information on data protection at Facebook can be found at: https://www.facebook.com/about/privacy/ .

LINKEDIN

LinkedIn is a professional network of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This company represents LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, California 94085, USA in the EU. LinkedIn Corp. meets the requirements of the “EU-US Privacy Shield”. The Privacy Shield Agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. The list of certified companies can be found here: https://www.privacyshield.gov/list .

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy .

You can configure LinkedIn’s data collection on the following page: https://www.linkedin.com/psettings/guest-controls/ .

Status of data protection declaration: 29.01.2020

Source: Süddeutsche Datenschutzgesellschaft mbH