Our DSGVO

Privacy

This privacy statement informs you about the type, scope and purpose of the processing of personal data (hereinafter "data") in the framework of the provision of our services, as well as within our online website and associated web pages, features and content, as well as external online presences, such as our Social Media Profiles (hereinafter collectively referred to as the "online offering"). In terms of the terminology used, such as "processing" or "responsible" we refer to the definitions in art. 4 of the General data protection regulation (DSGVO).

More responsible

Ossaya
Steinacher Str. 122
88339 Bad Waldsee
in Germany
Telephone: +49 (0) 160 36 89 399
Fax: +49 (0) 7524 40 92 100
E-Mail: ossaya@ossaya.de

VAT identification number: DE 299042019
Small business according to § 19 UStG

Owner: Karim Kraus-Touihri
Link to the imprint: https://ossaya.de/de/info/impressum.html

Contact Data Protection Officer:
E-Mail: ossaya@ossaya.de

Types of data processed

- Inventory data (e.g., personal master data, names or addresses).
- Contact information (e.g., e-Mail, telephone numbers).
- Content data (e.g., text input, photographs, Videos).
- Usage data (e.g., websites visited, interest in content, access times).
 Meta-communication data (e.g., device information, IP addresses).

Categories of data subjects

Visitors and users of the online offer (hereinafter, the data subjects are collectively referred to as "users").

Purpose of processing

- Making available the online offer, its functions and content.
- Answering contact requests and communication with users.
- Security arrangements.
- Range Measurement / Marketing

Terminology Used

'Personal data' means all information relating to an identified or identifiable natural Person (hereinafter referred to as 'data subject'); an identifiable natural Person is considered to be a natural Person who is directly or indirectly identified, in particular by means of an identification such as a name, an identification number, location data, an Online identification (e.g. The physical, physiological, genetic, psychological, economic, cultural or social identity of that natural Person.

'Processing' means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data. The term extends far and covers virtually every handling of data.

"Pseudonymization" the processing of personal data in such a way that the personal data may not be assigned without recourse to additional information specific to the Person concerned, unless such additional information is kept separately and the technical and organisational measures are subject to, ensure that the personal data will not be assigned to an identified or identifiable natural Person.

"Profiling" any form of automated processing of personal data, which is that these personal data will be used to evaluate certain personal aspects relating to a natural Person, and, in particular, aspects concerning performance at work, economic situation, health, personal preferences, interests, reliability, behavior, place of residence or change of location to analyze this natural Person or to predict.

The "controller" shall mean the natural or legal Person, authority, body or other body which alone or together with others determines the purposes and means of processing personal data.

'Processor' means a natural or legal Person, authority, body or other body which processes personal data on behalf of the controller.

Relevant Legal Bases

In accordance with Article 13 DSGVO, we shall inform you of the legal bases for our data processing. For users from the scope of the General data protection regulation (DSGVO), i.e. the EU and the EEC provided the legal basis of data protection is not called a Declaration, the following:
The legal basis for obtaining consent is Article 6 para. 1 lit. a and article 7 of the DSGVO;
The legal basis for processing in order to fulfil our services and to carry out contractual measures as well as to respond to inquiries is Article 6 para. 1 lit. b DSGVO;
The legal basis for processing in order to fulfil our legal obligations is Article 6 para. 1 lit. c DSGVO;
In the event that vital interests of the data subject or of another natural Person necessitate the processing of personal data, Article 6 (1) of the directive provides for the processing of personal data. 1 lit. d DSGVO as a legal basis.
The legal basis for the processing necessary to carry out a task which is in the public interest or which is carried out in the exercise of public authority conferred on the person responsible is Article 6 (1) of the directive. 1 lit. e DSGVO.
The legal basis for processing in order to safeguard our legitimate interests is Article 6 para. 1 lit. f DSGVO.
The processing of data for purposes other than those for which they have been married shall be governed by the provisions of Art. 4 DSGVO.
The processing of special categories of data (in accordance with Article 9 Para. 1 DSGVO) shall be determined in accordance with the provisions of Article 9 Para. 2 DSGVO.

Security arrangements

We're meeting in accordance with the statutory Requirements, taking into account the State of technology, the cost of implementation and the nature, the extent, the circumstances and the purposes of the processing, as well as the different probability of occurrence and Severity of the risk for the rights and freedoms of natural persons, appropriate technical and organisational measures to ensure a risk-adequate level of protection.

Measures include, in particular, safeguarding the confidentiality, integrity and availability of data by monitoring the physical access to the data, as well as their access, entry, transfer, availability and separation. In addition, we have established procedures to ensure the exercise of data protection rights, deletion of data and response to the threat of data. We also take the protection of personal data into account when developing or processing personal data. Selection of Hardware, Software, and procedures, according to the principle of data protection by design and privacy by default.
Cooperation with processors, jointly responsible parties and third parties

If we have processors in our processing of information to other persons and companies (Contract, jointly responsible, or a third party) disclose, you grant to transmit, or you otherwise have access to the data, this is done only on the basis of a statutory licence (for example, if a Transmission of the data to third parties, such as payment service providers, to performance of the contract is required), users have consented to a legal obligation so provides, or on the basis of our legitimate interests (e.g., use of contractors, web hosts, etc.).

Insofar as we disclose, transmit or otherwise grant access to data to other companies within our group of companies, this is done for administrative purposes in particular as a legitimate interest and in addition on a basis corresponding to the legal requirements.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU), the European economic area (EEA) or the Swiss Confederation), or this occurs in the context of the use of services of third parties or disclosure, or Transmission of data to other people or companies, this is done only if it is done for the fulfillment of our (pre -) contractual obligations, on the basis of their consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to statutory or contractual permits, we process or leave the data in a third country only if the legal requirements are met. In other words, processing is carried out, for example, on the basis of special guarantees, such as the officially recognized establishment of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or observance of officially recognized special contractual obligations.

Rights of data subjects

You have the right to request confirmation as to whether data to be processed and information about this data, as well as further information and a copy of the data in accordance with the statutory requirements.

You have accordingly. legal requirements the right to request the completion of the data relating to you or the correction of the incorrect data relating to you.

In accordance with the legal requirements, you have the right to demand that data in question be deleted immediately, or alternatively, in accordance with the legal requirements, to demand a restriction on the processing of the data.

You have the right to request that the data relating to you, which you have provided to us, be received in accordance with the legal requirements and to request their transmission to other persons responsible.

They shall also have the right to lodge a complaint with the competent supervisory authority in accordance with statutory provisions.

Withdrawal

You have the right to revoke consents granted with effect for the future.
Right of objection

You can object to the future processing of your data at any time in accordance with the legal requirements. The objection may be made, in particular, against the processing for the purpose of direct advertising.

Cookies and right of objection for direct advertising

"Cookies" are small files that are stored on users ' computers. Different information can be stored within the Cookies. A Cookie is primarily used to store the information about a user (or the device on which the Cookie is stored) during or after his visit within an online offer. Temporary Cookies, or" Session Cookies "or" transient Cookies", are Cookies that are deleted after a user leaves an online site and closes his Browser. In such a Cookie, for example, the content of a shopping cart can be stored in an online store or a Login Status. The term" permanent "or" persistent " refers to Cookies that remain stored even after the browser is closed. For example, the Login Status can be saved if users visit it after several days. Can also be stored in such a Cookie, the interests of the users, which are used for range measurement or marketing purposes. Third-Party cookies are Cookies that are offered by third-Party providers as the person responsible for operating the website (otherwise, if they are only their Cookies, they are referred to as "First-Party Cookies").

We can use temporary and permanent Cookies and clarify this within the scope of our Privacy Policy.

If users do not want Cookies to be stored on their computer, they are asked to deactivate the corresponding Option in the system settings of their browser. Stored Cookies can be deleted in the system settings of the browser. The exclusion of Cookies can lead to functional limitations of this online offer.

A General objection against the use for purposes of online marketing Cookies that are used can be explained in a variety of services, especially in the case of tracking, on the American side http://www.aboutads.info/choices and/ or the EU side http://www.youronlinechoices.com/. Furthermore, the storage of Cookies can be achieved by means of their deactivation in the settings of the browser. Please note that it may not be possible to use all functions of this online offer.

Deletion of data

The data processed by US will be deleted or restricted in their processing in accordance with the legal requirements. Unless expressly stated in the context of this data protection declaration, the data stored by US will be deleted as soon as they are no longer necessary for their purpose and no legal retention obligations prevent the deletion.

Insofar as the data is not deleted because it is necessary for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons.

Changes and updates to the Privacy Policy

We ask you to inform us regularly about the content of our Privacy Policy. We will adjust the privacy policy as soon as the changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require you to participate (e.g. consent) or other individual notification.

Business-Related Processing

In addition, we process
- Contract data (e.g., subject of the contract, term, customer category).
 Payment data (e.g., Bank account details, payment history)
from our customers, prospects and business partners for the purpose of providing contractual services, Service and customer care, Marketing, advertising and market research.

Ordering process in the online shop and customer account

We process the data of our customers as part of the ordering process in our online shop to enable you to choose and order the selected products and services, as well as their payment and delivery, respectively execution.

The processed data includes inventory data, communication data, contract data, payment data and the data subjects of the processing include our customers, prospects and other business partners. Processing is carried out for the purpose of providing contractual services within the framework of the operation of an online shop, billing, delivery and customer services. Here, we use Session Cookies to store the shopping cart contents and permanent Cookies to store the Login Status.

Processing is carried out in order to fulfill our services and perform contractual measures (e.g. execution of order processes) and to the extent required by law (e.g., legally required archiving of business transactions for trading and tax purposes). In doing so, the information marked as necessary for the establishment and performance of the contract is required. The data we disclose to third parties only in the context of the delivery, payment or within the framework of the statutory permissions and obligations, as well as when this is done on the basis of our legitimate interests, which we inform you in accordance with this privacy statement (e.g., that is against the Law and tax advisors, financial institutions, freight companies, and authorities).

Users can optionally create a user account by viewing their orders in particular. In the course of registration, the required mandatory data will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with respect to the user account, subject to their retention is necessary for commercial or tax reasons. Information in the customer's account remains until it is deleted with subsequent archiving in the case of a legal obligation or our legitimate interests (e.g., in the case of legal disputes). It is up to the users to secure their data in case of termination before the end of the contract.

As part of the registration and re-registration as well as the use of our online services, we store the IP address and the time of the respective user transaction. The storage takes place on the basis of our legitimate interests, as well as the user to protect against misuse and other unauthorised use. This data is not passed on to third parties unless it is necessary to pursue our legal claims as a legitimate interest or there is a legal obligation to do so.

The deletion takes place after the expiration of legal warranty and other contractual rights or obligations (e.g., payment claims or performance obligations from contracts with customers), whereby the necessity of the storage of the data is checked every three years; in the case of storage due to legal archiving obligations, the deletion takes place after their expiry.

External Payment Service Providers

We use external payment service providers, whose platforms by the users, and we have payment transactions can make (e.g., each with a Link to the privacy statement, Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html)

In the context of the performance of contracts, we place the payment service providers on the basis of Article 6 para. 1 lit. b. DSGVO on. In addition, we use external payment service providers on the basis of our legitimate interests in accordance with art. Art. 6, Para. 1 lit. f. DSGVO, in order to provide our users with effective and secure payment option.

Include, by the payment service provider processed data is inventory data, such as the Name and address, Bank data, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as the contract, sums of money, and the recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed by the payment service providers and stored by them. I. e. we do not receive any account or credit card information, but only information with confirmation or negative confirmation of payment. Under certain circumstances, the data will be transmitted by the payment service provider to credit reporting agencies. This transmission aims to verify identity and creditworthiness. Please refer to the general terms and conditions and Privacy Policy of the payment service provider.

Payment transactions are governed by the terms and conditions and the privacy policy of the respective payment service providers, which can be accessed within the respective websites or transaction applications. We also refer to these for further information and assertion of rights of withdrawal, information and other data subjects.

Registration function

Users can create a user account. In the context of the registration, the required mandatory information is communicated to users and, on the basis of Article 6 para. 1 lit. b dsgvo processed for the purpose of providing the user account. The data processed includes, in particular, the Login information (Name, password, and E-mail address). The data entered as part of the registration will be used for the purposes of using the user account and its purpose.

Users can be informed by E-mail about information relevant to their user account, such as technical changes. If users have terminated their user account, their data will be deleted with respect to the user account, subject to a statutory retention obligation. It is up to the users to secure their data in case of termination before the end of the contract. We are entitled to delete all data of the user stored during the contract period irretrievably.

In the context of the use of our registration and login functions, as well as the use of the user account, we store the IP address and the time of each user action. The storage takes place on the basis of our legitimate interests, as well as the user to protect against misuse and other unauthorised use. In principle, this data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to art. Art. 6, Para. 1 lit. c. DSGVO. The IP addresses will be anonymized or deleted at the latest after 7 days.

Comments and contributions

If users leave comments or other contributions, their IP addresses can be used on the basis of our legitimate interests within the meaning of art. 1 lit. f. DSGVO be stored for 7 days. This is for our security, if someone leaves in comments and contributions illegal content (insults, forbidden political Propaganda, etc.). In this case, we can be prosecuted for the comment or contribution and are therefore interested in the identity of the author.

Furthermore, we reserve the right, on the basis of our legitimate interests in accordance with art. Art. 6, Para. 1 lit. f. DSGVO to process the user's information for spam detection.

On the same legal basis, we reserve the right, in the case of surveys, to store the IP addresses of the users for their duration and to use Cookies in order to avoid multiple agreements.

The information provided in the context of the comments and contributions to the Person, any contact and website information as well as the content details, will be stored by US permanently until the opposition of the user.

Comments

The follow-up comments can be made by users with their consent in accordance with. Art. 6, Para. 1 lit. a DSGVO will be subscribed to. Users receive a confirmation email to verify that they are the owner of the email address they have entered. Users can unsubscribe ongoing comment subscriptions at any time. The confirmation e-mail will contain information about the cancellation options. For the purpose of proving the consent of the users, we store the registration time along with the IP address of the users and delete this information when users log out of the subscription.

You can cancel the receipt of our subscription at any time, i.e. withdraw your consent. We may store the e-mail addresses we have provided up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual cancellation request is possible at any time, provided that the former existence of a consent is confirmed.

Akismet Anti-Spam Check

Our website uses the "Akismet" service provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. The use is based on our legitimate interests within the meaning of Article 6 para. 1 lit. f) DSGVO. With the help of this service, comments from real people are distinguished from Spam comments. For this purpose, all comments are sent to a server in the USA, where they are analyzed and stored for comparison purposes for four days. If a comment has been classified as Spam, the data will be stored beyond this time. This information includes the Name entered, the email address, the IP address, the comment content, the Referrer information on the Browser used and the computer system and the time of entry.

Further information on the collection and use of data by Akismet can be found in the data protection instructions of Automattic: https://automattic.com/privacy/.

Users are welcome to use pseudonyms, or to refrain from entering the name or email address. You can completely prevent the transfer of data by not using our comment system. That would be a pity, but unfortunately we do not see any alternatives that work equally effectively.

Call up Emojis and Smilies

Within our WordPress blog, graphical Emojis (or Smilies), i.e. small graphical files that express feelings, are used, which are obtained from external servers. In this case, the providers of the servers collect the IP addresses of the users. This is necessary so that the Emojie files can be transmitted to the Browser of the user. The Emojie Service is provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Privacy policy of Automattic: https://automattic.com/privacy/. The Server Domains used are s.w.org and twemoji.maxcdn.com to the best of our knowledge, these are so-called Content Delivery Networks, i.e. servers, which serve only a fast and secure transmission of the files and the personal data of the users are deleted after transmission.

The use of the Emojis is based on our legitimate interests, i.e. interest in an attractive design of our online offer in accordance with art. Art. 6, Para. 1 lit. f. DSGVO.

Contacting

When contacting us (e.g. via contact form, E - Mail, telephone or via social media), the information of the user to process the contact request and its processing in accordance with. Art. 6, Para. 1 lit. b. (in the context of contractual / pre-contractual relations), Art. 6 para. 1 lit. f. (other requests) processed DSGVO.. The user data can be stored in a Customer Relationship Management System ("CRM System") or comparable request organization.

We will delete the requests if they are no longer required. We check the necessity every two years; furthermore, the statutory archiving obligations apply.

Newsletter

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation process as well as your rights to object. By subscribing to our Newsletter, you agree to the receipt and the described procedures.

Content of the newsletter: we send newsletters, e-Mails and other electronic notifications with advertising information (hereinafter referred to as "newsletters") only with the consent of the recipients or with a legal permission. To the extent that the content of the Newsletter is specifically described in the context of an application for the Newsletter, they shall be decisive for the consent of the users. Moreover, our newsletters contain information about our services and us.

Double-Opt-in and logging: the registration for our Newsletter takes place in a so-called Double-Opt-in procedure. This means that you will receive an E-Mail after registration, in which you will be asked to confirm your registration. This confirmation is necessary so that no one can register with other E-mail addresses. Subscriptions to the Newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. The changes to your data stored by the shipping service provider are also logged.

Login details: to subscribe to the Newsletter, it is sufficient to provide your E-mail address. Optionally, we ask you to enter a name in the newsletter for your personal address.

The sending of the newsletter and the measurement of the success associated with it are made on the basis of the consent of the recipients according to art. Art. 6, Para. 1 lit. a, art. 7 DSGVO in conjunction with § 7 Abs. 2 No. 3 UWG or if consent is not required, based on our legitimate interests in direct marketing according to. Art. 6, Para. 1 lt. f. DSGVO i. V. m. § 7 Abs. 3 UWG.

The registration procedure is recorded on the basis of our legitimate interests in accordance with the German civil code. Art. 6, Para. 1 lit. f DSGVO. Our interest is directed to the use of a user-friendly and safe newsletter system that serves our business interests, as well as the expectations of users and also proof of consent allowed.

Cancellation / revocation - you can cancel the receipt of our newsletter at any time, i.e. withdraw your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may store the e-mail addresses we have provided up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual cancellation request is possible at any time, provided that the former existence of a consent is confirmed.

Hosting and E-Mail

The Hosting services used by us serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, e-mail delivery, security services as well as technical maintenance services, which we use for the purpose of operating this online offer.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, Meta - and communication data of customers, prospects and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with. Art. 6, Para. 1 lit. f DSGVO i. V. m. art. 28 DSGVO (completion of order processing agreement).

Collection of access data and log files

We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of art. 1 lit. f. DSGVO data about each access to the Server on which this service is located (so-called server logfiles). The access data include: Name of the retrieved website, file, date and time of access, transferred data volume, message about successful retrieval, browser type plus Version, the operating system of the user, Referrer URL (the previously visited page), IP address and the requesting Provider.

Logfile information is stored for security reasons (e.g. to investigate abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for the purpose of proof shall be excluded from deletion until the final clarification of the incident in question.

Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called Website Tags via a user interface (and thus integrate Google Analytics and other Google Marketing Services into our online offer). The Tag Manager itself (which implements the Tags) does not process personal data of users. With regard to the processing of the personal data of the users, the following information about the Google services is referred to. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) Google Analytics, a web analysis service of Google LLC ("Google"). Google uses Cookies. The information generated by the Cookie about your use of the online service by users are usually transmitted to a Google Server in the USA and stored there.

Google is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf, to the use of our online offer by the user in order to compile Reports about the activities within this online offer and more, with the use of this website and Internet related services to provide us. Pseudonyms can be used to create user profiles from the processed data.

We only use Google Analytics with IP anonymization enabled. That means that the IP address of the users is shortened by Google within member States of the European Union or in other contractual States of the agreement on the European economic area. Only in exceptional cases will the full IP address transferred to a Google Server in the USA and shortened there.

The IP address transmitted by the user's Browser is not combined with other data from Google. The user can prevent the storage of Cookies by a corresponding setting of your Browser Software; users can also extend the coverage generated by the Cookie on your use of the website-related data to Google and the processing of these data by Google, by downloading available under the following Link Browser Plugin and install: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information on Google's use of data, settings and opposition options, please refer to Google's Privacy Policy (https://policies.google.com/privacy) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

The personal data of the users will be deleted or anonymized after 14 months.

Google Universal Analytics

We use Google Analytics in its design as "Universal Analytics". "Universal Analytics "means a process by Google Analytics, in which the user analysis is based on a pseudonym user ID and thus a pseudonym profile of the user is created with information from the use of different devices (so-called"Cross-Device Tracking").

Targeting with Google Analytics

We use Google Analytics to by within advertising services, Google's and its partners ' Ads, only to those users that have also shown an interest in our online offer, or the specific characteristics (e.g., interests in particular topics or products, which are determined on the basis of the visited web pages), which we submit to Google (so-called "Remarketing", or "Google-Analytics-Audiences"). With the help of Remarketing Audiences, we also want to ensure that our ads correspond to the potential interest of the users.

Google Adsense with personalized ads

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the AdSense service, with the help of which ads appear in our website and we receive a reward for their insertion or other use. For these purposes, usage data, such as a click on an ad and the IP address of the user is processed, whereby the IP address is shortened by the last two digits. Therefore, the processing of the data of the users is pseudonymized.

We use Adsense with personalized Ads. Google will draw conclusions about their interests based on the Websites or Apps used by users and the user profiles thus created. Advertisers use this information to align their campaigns with these interests, which is equally beneficial for users and advertisers. Google Ads are personalized, when collected or known data, the view selection, determine, or influence. This includes previous search queries, activities, site visits, use of Apps, demographic and location information. Specifically, this includes: demographic Targeting, interest category Targeting, Remarketing, and Targeting on customer reconciliation lists and target group lists uploaded to DoubleClick Bid Manager or Campaign Manager.

For more information on Google's use of data, settings and opposition options, please refer to Google's Privacy Policy (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Google Adsense with non-personalized ads

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the AdSense service, with the help of which ads appear in our website and we receive a reward for their insertion or other use. For these purposes, usage data, such as a click on an ad and the IP address of the user is processed, whereby the IP address is shortened by the last two digits. Therefore, the processing of the data of the users is pseudonymized.

We use Adsense with non-personalized Ads. The ads are not displayed based on user profiles. Non-personalized ads are not based on previous user behavior. Targeting uses context information, including a rough geographical Targeting based on the current location, content on the current Website or App, and current search terms. Google prevents any personalised Targeting, including demographic Targeting and targeting based on user lists.

For more information on Google's use of data, settings and opposition options, please refer to Google's Privacy Policy (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Google AdWords and Conversion measurement

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the online marketing method, Google AdWords, Ads in Google advertising to place network (e.g., in search results, in Videos, on websites, etc.), so that they are visible to users, who have an alleged interest in the Ad. This allows us to display ads for and within our online offer more specifically in order to present users only ads that potentially correspond to their interests. For example, if a user sees ads for products he or she is interested in on other online offers, this is referred to as "Remarketing". For these purposes, when accessing our and other websites on which the Google advertising network is active, a Google Code is executed directly by Google and so-called (Re)marketing Tags (invisible graphics or Code, also known as "Web Beacons") are integrated into the website. With this help, the user is stored on the device an individual Cookie, i.e. a small file (instead of Cookies can also be used similar technologies). In this file, it is noted that the sites the user visited, what content and which services the user has clicked interested in further technical information about the Browser and operating system, referring sites, visiting time, as well as further information on the use of the online offer.

We also receive an individual "Conversion Cookie". The information collected by Cookies is used by Google to generate Conversion statistics for us. However, we only experience the total anonymous number of users who clicked on our ad and were redirected to a page with a Conversion Tracking Tag. However, we do not receive any information that personally identifies users.

The data of the users are processed within the framework of the Google advertising network pseudonym. In other words, Google does not store and process, for example, the name or e-mail address of the user, but processes the relevant data cookie-related within pseudonym user profiles. That is, from the perspective of Google, the ads are not managed and displayed for a specifically identified Person, but for the Cookie owner, regardless of who this Cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about the users is transmitted to Google and stored on Google's servers in the USA.

For more information on Google's use of data, settings and opposition options, please refer to Google's Privacy Policy (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Google Doubleclick

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the online marketing method Google "Doubleclick" to place ads on the Google advertising network (e.g., in search results, in Videos, on websites, etc.). Double Click is characterized by displaying ads in real time based on users ' alleged interests. This allows us to display ads for and within our online offer more specifically in order to present users only ads that potentially correspond to their interests. For example, if a user Ads are displayed for products for which he was interested in other online offers, this is called "Remarketing". For these purposes, when accessing our and other websites on which the Google advertising network is active, a Google Code is executed directly by Google and so-called (Re)marketing Tags (invisible graphics or Code, also known as "Web Beacons") are integrated into the website. With this help, the user is provided with an individual Cookie, i.e. a small file is stored (instead of Cookies, similar technologies can be used). In this file, it is noted that the sites the user visited, what content and which services the user has clicked interested in further technical information about the Browser and operating system, referring sites, visiting time, as well as further information on the use of the online offer.

It also captures the IP address of the user, wherein this truncated within member States of the European Union or in other contractual States of the agreement on the European economic area and only in exceptional cases be transmitted to a Google Server in the USA where it is shortened. Google may also link the above information to such information from other sources. If the user then visits other websites, it can be displayed according to his alleged interests on the basis of his user profile ads tailored to him.

The data of the users are processed within the framework of the Google advertising network pseudonym. In other words, Google does not store and process, for example, the name or e-mail address of the user, but processes the relevant data cookie-related within pseudonym user profiles. That is, from the perspective of Google, the ads are not managed and displayed for a specifically identified Person, but for the Cookie owner, regardless of who this Cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the United States.

For more information on Google's use of data, settings and opposition options, please refer to Google's Privacy Policy (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

Jetpack (WordPress Stats)

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) the Plugin Jetpack (here the sub-function "Wordpress Stats"), which includes a Tool for statistical analysis of visitor traffic, and Automattic, Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack uses so-called "Cookies", text files that are stored on your Computer and which enable an analysis of your use of the Website.

The information generated by the Cookie about your use of this website will be stored on a Server in United States. User profiles can be created from the processed data, these being used only for analysis and not for advertising purposes. For more information, see Automattic's Privacy Policy: https://automattic.com/privacy / and information about Jetpack Cookies: https://jetpack.com/support/cookies/.

Facebook-pixels, Custom Audiences and Facebook Conversion

Within our on-line offer the so-called "Facebook Pixel" of the social network Facebook, which is run by the Facebook Inc because of our legitimate interests to the analysis, optimization and economic operation of the website and to these purposes., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook is certified under the Privacy-Shield-agreement and, therefore, offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook pixel, Facebook is on the one hand possible to determine the visitors of our online offer as a target group for the display of ads (so-called "Facebook Ads"). Accordingly, we place the Facebook Pixel to the connected Facebook-Ads only to those Facebook-view other users who have shown an interest in our online offer, or the specific characteristics (e.g., interests in particular topics or products, which are determined on the basis of the visited web pages), we submit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we want to make sure that our Facebook-Ads correspond to the potential interest of the user and not harassing. With the help of the Facebook Pixel, we can further the effectiveness of Facebook advertisements for statistical and market research understand the purposes in which we see whether a user after clicking on a Facebook advertisement were directed to our site (so-called "Conversion").

The processing of data by Facebook takes place within the framework of Facebook's data usage policy. Accordingly, General references to the presentation of Facebook Ads, in the data use policy of Facebook: https://www.facebook.com/policy. Specific information and Details about the Facebook-pixels, and its operation, you will receive in the help section of Facebook: https://www.facebook.com/business/help/651294705016616.

You may object to the collection by Facebook Pixel and use of your data to display Facebook Ads. In order to select which types of ads are shown within Facebook, you can go to the Facebook page set up and the instructions on the settings, usage-based advertising follow: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. for all devices, such as desktop computers or mobile devices.

You can object to the use of Cookies, which serve to audience measurement and advertising purposes, also via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and in addition the American advertising American website (http://www.aboutads.info/choices) or the European site (http://www.youronlinechoices.com/uk/your-ad-choices/).

Bing Ads

Within our online offer, we use our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) the Conversion and Tracking Tool "Bing Ads"of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. So-called "Conversion measurement, are stored by Cookies on the devices of the users, in order to enable an analysis of your use of the website by the user, if the user arrived via a Microsoft Bing ad on our on-line quotation ("). Microsoft and we can recognize in this way that someone clicked on an ad, was forwarded to our online offer and reached a previously specified landing page (sog "Conversion page"). We only see the total number of users who clicked on a Bing Ad and were then redirected to the Conversion page. No IP addresses are stored. No personal information will be disclosed regarding the identity of the users.

Microsoft is certified under the Privacy-Shield-agreement and, therefore, offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active).

If users do not want to participate in the Tracking process of Bing Ads, you can also disable the necessary placement of a cookie by Browser setting, or the Opt-Out page from Microsoft: http://choice.microsoft.com/de-DE/opt-out.

For more information about privacy and the Cookies used in the Microsoft Bing Ads users can find the privacy statement of Microsoft: https://privacy.microsoft.com/de-de/privacystatement.

Online presences in social media

We maintain online presence within social networks and platforms in order to communicate with active customers, prospects and users and to inform them about our services.

We would like to point out that users ' data can be processed outside the territory of the European Union. This may result in risks for users, as this could make enforcement of users ' rights more difficult. With respect to US providers certified under the Privacy Shield, we point out that you are committed to complying with EU data protection standards.

In addition, the data of the users are usually processed for market research and advertising purposes. For example, user profiles can be created from user behavior and the resulting interests of users. The usage profiles can be used in turn, for example, to display ads inside and outside the platforms, which are supposed to correspond to the interests of the users. For these purposes, Cookies are usually stored on the users ' computers, in which the user's behavior and interests are stored. In addition, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged into them).

The processing of the personal data of the users takes place on the basis of our legitimate interests in effective Information of the users and communication with the users in accordance with art. Art. 6, Para. 1 lit. f. DSGVO. If users are asked by the respective providers of the platforms for consent to the above-described data processing, the legal basis of the processing is art. 1 lit. a., art. 7 DSGVO.

For a detailed description of the respective processing and the opt-out options (Opt-out), we refer to the information of the providers linked below.

Also in the case of requests for information and the assertion of user rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the user and can take appropriate action and information. If you still need help, you can contact us.

- Facebook, pages, groups (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basis of an agreement on joint processing of personal data - privacy statement: https://www.facebook.com/about/privacy/, specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – privacy policy: https://policies.google.com/privacy Opt-Out: https://adssettings.google.com/authenticated Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

- Instagram (Instagram Inc. 1601 Willow Road, Menlo Park, CA, 94025, USA) - Privacy Policy / Opt-Out: http://instagram.com/about/legal/privacy/.

- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - privacy policy: https://twitter.com/de/privacy Opt-Out: https://twitter.com/personalization Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – privacy statement/ Opt-Out: https://about.pinterest.com/de/privacy-policy.

- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - privacy policy https://www.linkedin.com/legal/privacy-policy Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

- Xing (XING AG, dammtorstraße 29-32, 20354 Hamburg, Germany) privacy statement/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

- Wakalet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) - privacy statement/ Opt-Out: https://wakelet.com/privacy.html.

- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) privacy statement/ Opt-Out: https://soundcloud.com/pages/privacy.

Integration of third-party services and content

Within our online offer, we use our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. F. DSGVO) provide third - party content or services to include their content and Services, such as Videos or fonts (hereinafter referred to as “content”).

This always implies that the third-party providers of this content, the IP address of the users perceive, because they could not send the content to their browsers without the IP address. The IP address is therefore required for the presentation of this content. We endeavour to use only such content whose respective provider uses the IP address only for the delivery of the content. Third parties may also use so-called Pixel Tags (invisible graphics, also known as "Web Beacons") for statistical or marketing purposes. The "Pixel Tags" can be used to evaluate information such as visitor traffic on the pages of this Website. The pseudonyms information can also be stored in Cookies on the device of the user and include, inter alia, technical information about the Browser and operating system, referring web pages, visit time as well as other information about the use of our online offer, as well as associated with such information from other sources.

Vimeo

We can see the Videos of the platform “Vimeo” provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy statement: https://vimeo.com/privacy. We point out that Vimeo, Google Analytics, may use and refer to the privacy statement (https://policies.google.com/privacy), as well as Opt-Out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or the settings from Google for the use of data for marketing purposes (https://adssettings.google.com/).

YouTube

We integrate the video platform “YouTube” of the provider, Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Fonts

We incorporate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google ReCaptcha

We incorporate the feature to detect Bots, for example, when entering into online forms ("ReCaptcha") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Maps

We include maps of the Google Maps service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, IP addresses and location data of the users, which are not collected without their consent (usually within the framework of the settings of their mobile devices). The data can be processed in the USA. Privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

OpenStreetMap

We integrate the maps of the service "OpenStreetMap" (https://www.openstreetmap.de), which are offered on the basis of the Open Data Commons Open Database license (ODbL) by the OpenStreetMap Foundation (OSMF). Privacy statement: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

To the best of our knowledge, OpenStreetMap will use the user's data solely for the purpose of displaying the map functions and caching the selected settings. This data may include, in particular, IP addresses and location data of the users, which are not collected without their consent (usually within the framework of the settings of their mobile devices).

The data can be processed in the USA. For more information, please refer to the privacy policy of OpenStreetMap: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

Typekit fonts from Adobe

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe is certified under the Privacy-Shield-agreement and, therefore, offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Use of Facebook social Plugins

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of art. 1 lit. f. DSGVO) Social Plugins ("Plugins") of the social network facebook.com operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
This may include, for example, content such as images, Videos or texts and buttons with which users can share content of this online offer within Facebook. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy-Shield-agreement and, therefore, offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user calls a function of this online offer, which contains such a Plugin, builds his device, a direct connection with the servers of Facebook. The content of the Plugin is transmitted by Facebook directly to the user's device and in the online offer involved. User profiles can be created from the processed data. We therefore have no influence on the amount of data Facebook collects with the help of this plugin and therefore informs the users according to our level of knowledge.

By integrating the Plugin, Facebook receives the Information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the Plugins, for example by clicking the Like Button or leave a comment, the corresponding Information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook brings its IP address in experience and stores. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options for protecting the privacy of users, can be found in the data protection instructions of Facebook: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and do not want Facebook about this online offer collects data about him and his Facebook stored member data, he must log out of Facebook before using our online offer for Facebook and delete Cookies. For more settings, and contradictions to the use of data for advertising purposes, within the Facebook-profile settings: https://www.facebook.com/settings?tab=ads or on the American side http://www.aboutads.info/choices and/ or the EU side http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

Twitter

Within our online offer, functions and content of the service Twitter, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This may include, for example, content such as images, Videos or texts and buttons with which users can share content of this online offer within Twitter.
If the users are members of the Twitter platform, Twitter may assign the above-mentioned content and functions to the users ' profiles there. Twitter is certified under the Privacy-Shield-agreement and, therefore, offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy statement: https://twitter.com/de/privacy Opt-Out: https://twitter.com/personalization.

Instagram

Within our online offer, functions and content of the service Instagram, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, Videos or texts and buttons, with which users can share content of this online offer within Instagram. If the users are members of the Instagram platform, Instagram can assign the above-mentioned content and functions to the users ' profiles there. Privacy policy of Instagram: http://instagram.com/about/legal/privacy/.

Pinterest

Within our online offer, functions and content of the service Pinterest, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA. This may include, for example, content such as images, Videos or text and buttons with which users can share content of this online offer within Pinterest. If the users are members of the Pinterest platform, Pinterest may assign the above-mentioned content and functions to the users ' profiles. Data privacy statement of Pinterest: https://about.pinterest.com/de/privacy-policy.

Xing

Within our online offer functions and content of the service Xing, offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, can be integrated. This may include, for example, content such as images, Videos or texts and buttons with which users can share content of this online offer within Xing. If the users are members of the Xing platform, Xing may assign the above-mentioned content and functions to the users ' profiles. Privacy policy of Xing: https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn

Within our online offer functions and content of the service LinkedIn, offered by LinkedIn Ireland Unlimited company Wilton Place, Dublin 2, Ireland, can be integrated. This may include, for example, content such as images, Videos or texts and buttons with which users can share content of this online offer within LinkedIn. If the users are members of the platform LinkedIn, LinkedIn may assign the above-mentioned content and functions to the users ' profiles. Privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy.. LinkedIn is certified under the Privacy-Shield-agreement and, therefore, offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Privacy statement: https://www.linkedin.com/legal/privacy-policy Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Google+

Within our online offer functions and content of the platform Google+, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") can be integrated. This may include, for example, content such as images, Videos or texts and buttons with which users can share content of this online offer within Google. If the users are members of the Google + platform, Google may assign the above-mentioned content and functions to the users ' profiles there.

Google is certified under the Privacy-Shield-agreement and, therefore, offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). For more information about the use of data by Google, recruitment and objections that you can learn in the privacy statement of Google (https://policies.google.com/technologies/ads), as well as in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke

Verification: 09cdbedf7618da03