2) Data Collection When Visiting Our Website
2.1 When you use our website purely for informational purposes — that is, if you do not register or otherwise transmit information to us — we only collect the data that your browser sends to our server (so-called server log files). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:
The website visited
- date and time of access
- amount of data sent (in bytes)
- source/reference from which you reached the page
- browser used
- operating system used
- IP address used (if applicable, in anonymized form)
Processing is carried out in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.3) Hosting & Content-Delivery-Network
We use a service provider for hosting our website and displaying its content. This provider delivers its services either directly or through selected subcontractors exclusively on servers located within the European Union.
All data collected on our website are processed on these servers.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits any unauthorized disclosure to third parties.
3) Hosting & Content Delivery Network
We use a service provider for hosting our website and displaying its content. This provider delivers its services either directly or through selected subcontractors exclusively on servers located within the European Union.
All data collected on our website are processed on these servers.
We have concluded a data processing agreement (DPA) with the provider, which ensures the protection of our website visitors’ data and prohibits any unauthorized disclosure to third parties.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies — small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called session cookies), while others remain on your device for a longer period and allow your site preferences to be stored (so-called persistent cookies). You can find the exact storage duration of persistent cookies in the overview of your browser’s cookie settings.
If personal data are also processed by individual cookies implemented by us, such processing is carried out either pursuant to Art. 6(1)(b) GDPR for the performance of a contract, pursuant to Art. 6(1)(a) GDPR in the case of consent granted, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can configure your browser to inform you about the setting of cookies and to decide individually whether to accept them, or to exclude the acceptance of cookies for specific cases or in general.
Please note that disabling cookies may limit the functionality of our website.
5) Contacting Us
When you contact us (e.g., via contact form or email), personal data are processed solely for the purpose of handling and responding to your inquiry, and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the relevant matter has been conclusively resolved and provided that there are no statutory retention obligations to the contrary.
6) Data Processing for Order Handling
To the extent necessary for the performance of a contract and for delivery and payment purposes, the personal data we collect are disclosed to the transport company and the financial institution commissioned to carry out these services, pursuant to Art. 6(1)(b) GDPR.
If, under a corresponding contract, we are obligated to provide updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order (such as name, address, and email address) in order to personally inform you, via an appropriate communication channel (e.g., by post or email), about upcoming updates within the legally prescribed period. This processing is carried out in accordance with our legal obligations pursuant to Art. 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of sending notifications about updates we are legally required to provide and will be processed only to the extent necessary for this purpose.
In order to process your order, we also cooperate with the service provider(s) listed below, who assist us in fulfilling the contracts concluded with you, either in whole or in part. Certain personal data are transferred to these service providers in accordance with the following information.
7) Website Functionalities
7.1 Vimeo
This website uses plugins for displaying and playing videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers in order to load the plugin. In this process, certain information — including your IP address — is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.
If you are logged into a user account with the provider during your visit to our website, your data will be directly associated with your account when you click on a video. If you do not wish to have this data associated with your account, you must log out before activating the playback button.
All of the aforementioned processing activities — in particular the setting of cookies for retrieving information on the device used — are carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by deactivating this service through the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
7.2 Youtube
This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA.
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers in order to load the plugin. In this process, certain information — including your IP address — is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.
If you are logged into a user account with the provider during your visit to our website, your data will be directly associated with your account when you click on a video. If you do not wish to have this data associated with your account, you must log out before activating the playback button.
All of the aforementioned processing activities — in particular the setting of cookies for retrieving information on the device used — are carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by deactivating this service through the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
8) Tools and Other Services
Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consents for cookies and cookie-based applications that require consent.
The Cookie Consent Tool is displayed to users when they access the site as an interactive interface, through which consents for specific cookies and/or cookie-based applications can be granted by ticking checkboxes. By means of this tool, all cookies and services requiring consent are only activated if the respective user grants consent by selecting the corresponding checkbox. This ensures that such cookies are placed on the user’s device only if consent has been given.
The tool itself uses technically necessary cookies to store your cookie preferences. Personal user data are generally not processed in this context.
If, in individual cases, personal data (such as the IP address) are processed for the purpose of storing, assigning, or logging cookie settings, this processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management system for cookies and, consequently, in a legally compliant design of our website.
Another legal basis for the processing is Art. 6(1)(c) GDPR, as we, as the controller, are legally obliged to make the use of technically unnecessary cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement (DPA) with the provider, ensuring the protection of our website visitors’ data and prohibiting any unauthorized disclosure to third parties.
Further information about the operator and configuration options of the Cookie Consent Tool can be found directly within the corresponding user interface on our website.
9) Data Subject Rights
9.1 Applicable data protection law grants you the following rights with regard to the processing of your personal data by the controller. For the respective conditions governing their exercise, reference is made to the corresponding legal basis indicated below:
-
Right of access pursuant to Art. 15 GDPR;
-
Right to rectification pursuant to Art. 16 GDPR;
-
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
-
Right to restriction of processing pursuant to Art. 18 GDPR;
-
Right to notification pursuant to Art. 19 GDPR;
-
Right to data portability pursuant to Art. 20 GDPR;
-
Right to withdraw consent pursuant to Art. 7(3) GDPR;
-
Right to lodge a complaint pursuant to Art. 77 GDPR.
9.2 Right to Object
If we process your personal data based on our predominant legitimate interest within the framework of a balancing of interests, you have the right to object to such processing at any time with effect for the future, on grounds relating to your particular situation.
If you exercise your right to object, we will cease processing the affected data. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
If your personal data are processed by us for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for such advertising purposes. You may exercise the objection as described above.
If you exercise your right to object, we will cease processing your personal data for direct marketing purposes.
10) Duration of Storage of Personal Data
The duration for which personal data are stored is determined based on the respective legal basis, the purpose of processing, and—where applicable—also on the relevant statutory retention periods (e.g., commercial and tax law retention periods).
When personal data are processed on the basis of an explicit consent pursuant to Art. 6(1)(a) GDPR, such data will be stored until you withdraw your consent.
If statutory retention periods apply to data processed within the framework of contractual or quasi-contractual obligations pursuant to Art. 6(1)(b) GDPR, such data will be routinely deleted after the expiration of the retention periods, provided they are no longer required for the performance of the contract or the initiation of a contract and/or there is no legitimate interest on our part in continued storage.
When personal data are processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
When personal data are processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise stated within this privacy notice for specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.