Privacy policy

Preamble

Mit der folgenden Datenschutzerklärung möchten wir Sie darüber aufklären, welche Arten Ihrer personenbezogenen Daten (nachfolgend auch kurz als „Daten“ bezeichnet) wir zu welchen Zwecken und in welchem Umfang verarbeiten. Die Datenschutzerklärung gilt für alle von uns durchgeführten Verarbeitungen personenbezogener Daten, sowohl im Rahmen der Erbringung unserer Leistungen als auch insbesondere auf unseren Webseiten, in mobilen Applikationen sowie innerhalb externer Onlinepräsenzen, wie z. B. unserer Social-Media-Profile (nachfolgend zusammenfassend bezeichnet als „Onlineangebot“).

The terms used are not gender-specific.

Last update: February 17, 2024

Responsible

Hope House Gifhorn – a business segment of the Evangelischen Gemeinschaft Gifhorn e.V.
Ev. Gemeinschaft Gifhorn e.V. Websites Administration
Calberlaher Damm 112
38518 Gifhorn
Germany
E-Mail Address: web-admin@evg-gifhorn.de

Contact Data Protection Officer

E-Mail Address: datenschutz@evg-gifhorn.de

Overview of processing

The following Overview summarizes the types of data processed and the purposes of its processing and refers to the persons concerned.

Types of data processed

• Inventory data.
• Payment data.
• Location data.
• Contact information.
• Content data.
• Contract data.
• Usage data.
• Meta, communication, and process data.

Categories of affected persons

• Communication partner.
• Users.
• Members.
• Business and contract partners.

Purposes of the processing

• Provision of contractual services and performance of contractual obligations.
• Contact requests and communication.
• Security measures.
• Direct marketing.
• Range measurement.
• Office and organization procedures.
• Managing and responding to requests.
• Firewall.
• Feedback.
• Marketing.
• Profiles with user-related information.
• Provision of our online offer and user-friendliness.
• Information Technology Infrastructure.

Relevant Legal Bases

Relevant legal bases in accordance with the DSGVO: In the Following you get an Overview of the legal foundations of the DSGVO on the Basis of which we process personal data. Please note that in addition to the provisions of the DSGVO national data protection may apply presets in your or in our living room or country of residence. Furthermore, in individual cases, more specific legal basis, should be governed, we will inform you of this in the privacy statement.

• Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO) – The Person concerned has given his / her consent to the processing of their personal data for a specific purpose or more specific purposes.
• Fulfilment of the contract and pre-contractual requests (article 6, Para. 1 S. 1 lit. b) DSGVO) – The processing is necessary for the performance of a contract whose contractual party is the data subject, or for the execution of pre-contractual measures will be required, at the request of the Person concerned.
• Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO) – The processing is necessary to safeguard the legitimate interests of the controller or of a third party is required, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data, prevail.

National data protection regulations in Germany: In addition to the data protection provisions of the DSGVO national data protection regulations in Germany. In particular, the law on protection against misuse of personal data in data processing (Federal data protection act – BDSG) belongs to. The data protection act contains special provisions on the right to information, the right to Erasure, the right to object to the processing of special categories of personal data, processing for other purposes and for Transmission as well as automated decision making in individual cases, including Profiling. Furthermore, the country's data protection laws of the individual States can move to the application.

Note on the validity of the DSGVO and the Swiss DSG: Diese Datenschutzhinweise dienen sowohl der Informationserteilung nach dem schweizerischen Bundesgesetz über den Datenschutz (Schweizer DSG) als auch nach der Datenschutzgrundverordnung (DSGVO). Aus diesem Grund bitten wir Sie zu beachten, dass aufgrund der breiteren räumlichen Anwendung und Verständlichkeit die Begriffe der DSGVO verwendet werden. Insbesondere statt der im Schweizer DSG verwendeten Begriffe „Bearbeitung“ von „Personendaten“, „überwiegendes Interesse“ und „besonders schützenswerte Personendaten“ werden die in der DSGVO verwendeten Begriffe „Verarbeitung“ von „personenbezogenen Daten“ sowie „berechtigtes Interesse“ und „besondere Kategorien von Daten“ verwendet. Die gesetzliche Bedeutung der Begriffe wird jedoch im Rahmen der Geltung des Schweizer DSG weiterhin nach dem Schweizer DSG bestimmt.

Security measures

We meet in accordance with the legal requirements, taking into account the State of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the different probability of Occurrence and the extent of the threat to the rights and freedoms of natural persons take appropriate technical and organizational measures to ensure the level of risk appropriate level of protection.

The measures include in particular the securing of confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as the access, input, transmission, the securing of availability and its separation. Furthermore, we have established procedures to ensure that users ' rights, the deletion of data and reaction to endangerment of the data. In addition, we take into account the protection of personal data already in the development or Selection of Hardware, Software and procedures, in accordance with the principle of data protection by technology design and by privacy-friendly default settings.

Kürzung der IP-Adresse: Sofern IP-Adressen von uns oder von den eingesetzten Dienstleistern und Technologien verarbeitet werden und die Verarbeitung einer vollständigen IP-Adresse nicht erforderlich ist, wird die IP-Adresse gekürzt (auch als „IP-Masking“ bezeichnet). Hierbei werden die letzten beiden Ziffern, bzw. der letzte Teil der IP-Adresse nach einem Punkt entfernt, bzw. durch Platzhalter ersetzt. Mit der Kürzung der IP-Adresse soll die Identifizierung einer Person anhand ihrer IP-Adresse verhindert oder wesentlich erschwert werden.

TLS/SSL encryption (https): to protect the user data transmitted via our Online services, we use TLS/SSL encryption. Secure Sockets Layer (SSL) is the standard technology for secure Internet connections through the use of encryption between a web site or App and a Browser (or between two servers), and transmitted data. Transport Layer Security (TLS) is an updated and more secure Version of SSL. Hyper Text Transfer Protocol Secure (HTTPS) is displayed in the URL when a Website is secured by an SSL/TLS certificate.

Transfer of personal data

In the context of our processing of personal data that the data can be transmitted to other Bodies, enterprises, legally independent organizational units or individuals, or they will be disclosed to. The recipients of this data include, for example, with IT tasks commissioned service providers or providers of services and content that are embedded in a website,. In such cases, we comply with the statutory requirements and include, in particular, appropriate contracts or Agreements, which serve the protection of your data, with the recipients of your data.

Transmission of data within the organization: We may transfer personal data to other entities within our organization or provide you with access to this information. Provided that such disclosure shall be made for administrative purposes, the transfer of data on our legitimate business and economic interests or, if you are the fulfillment of our contract-related obligations, or if a data subject's consent or a legal permission.

International Data Transfers

Data processing in third countries: If we i.e., data in a third country (outside the European Union (EU), the European economic area (EEA)) or the processing in the context of the use of third-party services or disclosure or Transmission of data to other persons, Bodies or companies, this will only be done in accordance with the statutory requirements. If the level of data protection in the third country has been recognised by means of an adequacy decision (art. 45 DSGVO), it serves as a basis of data transfers. In the Rest of the data transfer, if the data protection is assured level otherwise, in particular due to standard contractual clauses (article 46, Para. 2 lit. c) DSGVO), explicit consent, or, in the case of a contractual or legally required Transmission (article 49, Para. 1 DSGVO). In addition, we will share with you the fundamentals of third-country transmission at the individual providers in the third country where the adequacy decisions are considered foundations of a priority. Information to a third country transfers and the present adequacy decisions can be found in the offer of information by the EU Commission: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en?prefLang=de.

EU-US Trans-Atlantic Data Privacy Framework: Im Rahmen des sogenannten „Data Privacy Framework“ (DPF) hat die EU-Kommission das Datenschutzniveau ebenfalls für bestimmte Unternehmen aus den USA im Rahmen der Angemessenheitsbeschlusses vom 10.07.2023 als sicher anerkannt. Die Liste der zertifizierten Unternehmen als auch weitere Informationen zu dem DPF können Sie der Webseite des Handelsministeriums der USA unter https://www.dataprivacyframework.gov/ (in English) can be found. We will inform you in the framework of the privacy notice, which one of us used the service are certified providers under the Data Privacy Framework.

Rights of persons concerned

Rights of the affected persons from the DSGVO: you have various rights as a data subject according to the DSGVO, which arise in particular from art. from 15 to 21 DSGVO:

• Right to object: you have the right for reasons arising from your particular Situation, at any time, to the processing of personal data relating to them, on the basis of article 6 Para. 1 lit. e or f DSGVO takes to submit an objection; this also applies to a rules-based Profiling. The personal data shall be processed in order to operate direct advertising, you have the right to at any time object to the processing of personal data concerning them for the purpose of appeal of such advertising; this also applies to Profiling, insofar as it relates to such direct advertising.
• Right of revocation in case of consent: You have the right to withdraw consent at any time.
• Right to information: You have the right to request confirmation as to whether data to be processed and to request information about these data as well as further information and a copy of the data in accordance with legal requirements.
• Right to rectification: They have, in accordance with the statutory requirements, the right to request the completion of data concerning you or the rectification of the inaccurate data.
• Right to Erasure and to restriction of processing: They have, in accordance with the statutory requirements, the right to request that you delete data in question without delay, or, alternatively, in accordance with the statutory requirements, a restriction of the processing of the data.
• Right to data portability: You have the right to receive data you have provided to us, in accordance with the statutory requirements in a structured, common and machine-readable Format or to request its Transfer to another person responsible.
• Complaint with Supervisory authority: You have without prejudice to any other administrative or judicial remedy, the right to Lodge a complaint with a Supervisory authority, in particular in the member state of your habitual residence, your workplace or the place of the suspected infringement if you are of the opinion that the processing of their personal data breaches the provisions of the DSGVO.

Use of Cookies

Cookies are endorsements are small text files or other Storage, the information on the devices, save, and information from the devices to read. For example, the Login Status of a user's account, a basket content in a E-Shop, the type of content accessed or used functions of the online offer. Cookies can also be used for different purposes, to be offered, for example, for the purposes of functionality, safety and comfort of online as well as the creation of an analysis of the visitor flows.

Instructions for consent: We use Cookies, in accordance with the statutory provisions. Therefore, we get by the users prior consent, except when this is required by law. A consent is not necessary if the Saving and reading of the information, including Cookies that are strictly necessary to provide the users expressly requested by you of the tele-media services (i.e. online) available. To the strictly necessary Cookies, Cookies with features that serve to display and operability of the website, load balancing , security, storage of preferences and choices of the users or similar with the provision of the primary and secondary functions of the users requested online publication - related purposes in the rule. The revocable consent is communicated to the users and provides the information to the Cookie usage.

Privacy legal legal bases: Which data protection legislation, the legal basis, we process the personal data of the users with the help of the Cookies depends on whether we ask users to consent. If the users consent is the legal basis for the processing of your data is the consent. Otherwise, by using Cookies data processed on the basis of our legitimate interests (for example, in a business operation of our online offer and to improve its usability), processed, or, if this is done in the framework of the fulfilment of our contractual obligations, if the use of Cookies is necessary to comply with our contractual obligations. The purposes for which Cookies we process, we clarify in the course of this data protection Declaration, or in the context of our Opt - in and processing processes.

Storage duration: With regard to the duration of storage of the following types of Cookies can be distinguished:

• Temporary Cookies (also known as a Session or "session Cookies"): Temporary Cookies are deleted after a user has left a quote Online and be a terminal device (such as a Browser or mobile application) is closed.
• Permanent Cookies: Permanent Cookies remain after the Closing of the terminal is stored. The Login can be, for example, Status or preferred content displayed directly saved when the user visits a Website. Also, the can be with the help of Cookies, the user's data collected for the range measurement is used. Unless we notify users have no explicit information about the type and duration of storage of the Cookies (e.g., in the context of obtaining consent), users should assume that Cookies are permanent, and the storage period can be up to two years.

Allgemeine Hinweise zum Widerruf und Widerspruch (sog. „Opt-Out“): Users which you have given consent can be revoked at any time and the workmanship are in accordance with the statutory requirements. For this purpose, the user can restrict, among other things, to the use of Cookies in the settings of your browser (where this the functionality of our online offer may be limited). An objection to the use of Cookies for Online Marketing purposes can also through the Websites https://optout.aboutads.info and https://www.youronlinechoices.com/ be explained.

• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Complianz: Consent management: procedures for the collection, logging, management, and revocation of consent, in particular to the use of Cookies and similar technologies for the storage, readout and processing of information devices of the users, as well as their processing; Service provider: Execution on servers and/or computers under their own privacy and legal accountability; Website: https://complianz.io/; Privacy policy: https://complianz.io/legal/. For More Information: It is an individual user ID, language, and types of consent and the date of their submission are stored on the server and in the Cookie on the device of the user.

Perception of tasks in accordance with the articles of Association or the rules of procedure

Wir verarbeiten die Daten unserer Mitglieder, Unterstützer, Interessenten, Geschäftspartner oder sonstiger Personen (Zusammenfassend „Betroffene“), wenn wir mit ihnen in einem Mitgliedschafts- oder sonstigem geschäftlichen Verhältnis stehen und unsere Aufgaben wahrnehmen sowie Empfänger von Leistungen und Zuwendungen sind. Im Übrigen verarbeiten wir die Daten Betroffener auf Grundlage unserer berechtigten Interessen, z. B. wenn es sich um administrative Aufgaben oder Öffentlichkeitsarbeit handelt.

The processed data, the type, scope and purpose and necessity of their processing are determined by the underlying membership or contractual relationship, including the necessity of any data, information (in addition, we indicate required data).

We will delete data for the provision of our articles of Association and business purposes are no longer required. This will be determined according to the respective tasks and contractual relationships. We will retain the data for as long as you for the transaction of business, as well as in terms of any warranty or liability obligations based on our legitimate interest in its regulation may be relevant. The necessity of the storage of the data is checked regularly; otherwise the statutory storage obligations apply.

• Types Of Data Processed: Inventory data (e.g. names, addresses); - payment data (e.g. Bank details, invoices, payment history); contact information (e.g. E-Mail, telephone numbers); contract data (e .B. Subject Of Contract, Duration, Customer Category).
• Affected Persons: Users (e.g. website visitors, users of online services); members. Business and contract partners.
• Purposes of the processing: Provision of contractual services and fulfillment of contractual obligations; contact requests and communication. Managing and responding to requests.
• Legal basis: Fulfilment of the contract and pre-contractual requests (article 6, Para. 1 S. 1 lit. b) DSGVO). Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

Provision of the online offer and Webhosting

We process the data of users to be able to offer you our Online services. For this purpose we process the IP address of the user is necessary in order to transmit the content and functionality of our Online services to the Browser or the terminal device of the user.

• Types Of Data Processed: Usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and process data (e.g., IP-addresses, time information, identification numbers, consent status); content data (for example,.B. Entries in online forms).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Provision of our online offer and user-friendliness; Information technology infrastructure (operation and deployment of information systems and technical equipment (computers, servers, etc.).); Security measures. Firewall.
• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Provision of the online offer to rent a space: Für die Bereitstellung unseres Onlineangebotes nutzen wir Speicherplatz, Rechenkapazität und Software, die wir von einem entsprechenden Serveranbieter (auch „Webhoster“ genannt) mieten oder anderweitig beziehen; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Provision of the online offer to private/ dedicated server hardware: For the provision of our online offer, we make use of us-operated server hardware, as well as the associated storage, computing capacity, and the Software; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Collection of access data and log files: Der Zugriff auf unser Onlineangebot wird in Form von so genannten „Server-Logfiles“ protokolliert. Zu den Serverlogfiles können die Adresse und Name der abgerufenen Webseiten und Dateien, Datum und Uhrzeit des Abrufs, übertragene Datenmengen, Meldung über erfolgreichen Abruf, Browsertyp nebst Version, das Betriebssystem des Nutzers, Referrer URL (die zuvor besuchte Seite) und im Regelfall IP-Adressen und der anfragende Provider gehören. Die Serverlogfiles können zum einen zu Zwecken der Sicherheit eingesetzt werden, z. B., um eine Überlastung der Server zu vermeiden (insbesondere im Fall von missbräuchlichen Angriffen, sogenannten DDoS-Attacken) und zum anderen, um die Auslastung der Server und ihre Stabilität sicherzustellen; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO). Deletion of data: Logfile information is stored for a maximum period of 30 days and thereafter deleted or anonymized. Data whose further retention is, for purposes of proof required, are excluded until the final clarification of the respective incident of the deletion.
• E-Mail-sending and Hosting: We used web hosting services also include sending, receiving and storing E-Mails. For these purposes, the addresses of the recipient and sender, as well as further information regarding the E-mail sending (e.g., the participating Provider), as well as the contents of the respective emails processed. The above data can be processed further, for the purposes of the detection of SPAM. We kindly ask you to note that E-Mails on the Internet are generally not sent in encrypted form. As a rule, E to be encrypted emails while in transit, but (unless there is a so-called end-to-end encryption is the method used) not on the servers from which you sent and received. We can therefore assume for the Transmission of E-Mails between the sender and the reception on our Server and no responsibility; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Wordfence: Firewall - and security - as well as error detection functions to unauthorized access attempts, as well as technical vulnerabilities, which could allow such access, detect and prevent. For these purposes, Cookies, and similar, is necessary for that purpose memory used procedures and safety protocols during the audit and, in particular, in the case of unauthorized access are created. In this respect, the IP addresses of the users, a user identification number and their activities, including the time of access, processed and stored, as well as with the provider of the Firewall, and security of the data provided matched and delivered to you; Service provider: Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://www.wordfence.com; Privacy policy: https://www.wordfence.com/privacy-policy/; Basis Of Land Transfers To Third: Standard contractual clauses (https://www.wordfence.com/standard-contractual-clauses/). For More Information: https://www.wordfence.com/help/general-data-protection-regulation/.

Blogs and publication media

Wir nutzen Blogs oder vergleichbare Mittel der Onlinekommunikation und Publikation (nachfolgend „Publikationsmedium“). Die Daten der Leser werden für die Zwecke des Publikationsmediums nur insoweit verarbeitet, als es für dessen Darstellung und die Kommunikation zwischen Autoren und Lesern oder aus Gründen der Sicherheit erforderlich ist. Im Übrigen verweisen wir auf die Informationen zur Verarbeitung der Besucher unseres Publikationsmediums im Rahmen dieser Datenschutzhinweise.

• Types Of Data Processed: Inventory data (e.g. names, addresses); contact information (e.g. E-Mail, telephone numbers), content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Provision of contractual services and fulfillment of contractual obligations; Feedback (e.g., Collect Feedback via Online form); provision of our online offer and user-friendliness. Security measures.
• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Updraft plus: Backup Software and Backup storage; Service provider: Simba Hosting Ltd., 11, Barringer Way, St. Neots, Cambs., PE19 1LW, UK; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://updraftplus.com/; Privacy policy: https://updraftplus.com/data-protection-and-privacy-centre/. Basis Of Land Transfers To Third: The adequacy decision (GB).

Newsletter and electronic notifications

Wir versenden Newsletter, E-Mails und weitere elektronische Benachrichtigungen (nachfolgend „Newsletter“) nur mit der Einwilligung der Empfänger oder einer gesetzlichen Erlaubnis. Sofern im Rahmen einer Anmeldung zum Newsletter dessen Inhalte konkret umschrieben werden, sind sie für die Einwilligung der Nutzer maßgeblich. Im Übrigen enthalten unsere Newsletter Informationen zu unseren Leistungen und uns.

To opt-in to our newsletter, it is sufficient in principle, if you specify your E-Mail address. We can, however, ask you to make a name, for the purpose of personal address in the Newsletter, or other information, unless they are for the purpose of the newsletter is required.

The Double-Opt-In Procedure: The registration to our Newsletter takes place in a so-called Double-Opt-In procedure. I.e., you received after the registration, an E-Mail to confirm your registration asked. This confirmation is necessary so that nobody can register with strangers E-Mail addresses. The registrations for the Newsletter are logged in order to be able to sign-in process according to the legal requirements to prove. For this purpose, the storage of the login and confirmation time as well as the IP address. Similarly, the Changes of the shipping service provider stored data is logged.

Cancellation and limitation of processing: Wir können die ausgetragenen E-Mail-Adressen bis zu drei Jahren auf Grundlage unserer berechtigten Interessen speichern, bevor wir sie löschen, um eine ehemals gegebene Einwilligung nachweisen zu können. Die Verarbeitung dieser Daten wird auf den Zweck einer möglichen Abwehr von Ansprüchen beschränkt. Ein individueller Löschungsantrag ist jederzeit möglich, sofern zugleich das ehemalige Bestehen einer Einwilligung bestätigt wird. Im Fall von Pflichten zur dauerhaften Beachtung von Widersprüchen behalten wir uns die Speicherung der E-Mail-Adresse alleine zu diesem Zweck in einer Sperrliste (sogenannte „Blocklist“) vor.

The logging of the registration process is carried out on the basis of our legitimate interests for the purposes of the proof to its proper performance. As far as we mail appoint a service provider with sending E -, this is done on the basis of our legitimate interests in an efficient and safe delivery system.

Content:

Information about us, our services, promotions and Offers.

• Types Of Data Processed: Inventory data (e.g. names, addresses); contact information (e.g. E-Mail, telephone numbers); Meta-, communication -, and process data (e.g., IP-addresses, time information, identification numbers, consent status); usage data (e .B. websites visited, interest in content, access times).
• Affected Persons: Communication partner.
• Purposes of the processing: Direct marketing (e .B. by E-Mail or by post).
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO).
• Objection Option (Opt-Out): You can terminate the receipt of our newsletter at any time, that is .h. Your consent is revoked, and the other receiving contradict. A Link to cancel the newsletter can be found either at the end of every newsletter or otherwise use any of the above contact methods, preferable E-Mail, to do so.

For more information about processing processes, procedures and services:

• The measurement of the Opening and click-through rates: Die Newsletter enthalten einen sogenannte „web-beacon“, d. h., eine pixelgroße Datei, die beim Öffnen des Newsletters von unserem Server, bzw., sofern wir einen Versanddienstleister einsetzen, von dessen Server abgerufen wird. Im Rahmen dieses Abrufs werden zunächst technische Informationen, wie Informationen zum Browser und Ihrem System, als auch Ihre IP-Adresse und der Zeitpunkt des Abrufs, erhoben.
  
  This information is used for technical improvement of our newsletter on the basis of the technical data or the target groups and their reading behaviour based on their retrieval locations (which are using the IP address can be determined) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which Links are clicked. This information will be assigned to the individual newsletter recipients and their profiles up to the deletion of saved. The evaluations help us recognize the reading habits of our users and our content and to adapt them or to send different contents according to the interests of our users. Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO).

Promotional communications via E-Mail, Post, Fax, or phone

We process personal data for the purposes of commercial communications can be done through various channels, such as E-Mail, telephone, Postal mail or Fax, in accordance with the legal requirements.

The receiver shall have the right, granted to revoke the consent at any time, or to speak of promotional communications at any time.

After the revocation or objection, we will store the proof of the previous authorization data necessary to contact you or sending up to three years after the end of the year of the revocation or objection, on the basis of our legitimate interests. The processing of these data is limited to the purpose of a possible defence against claims. On the basis of the legitimate interest is to observe the revocation and contradiction of the user permanently, we will store also to prevent re-contacting the data required (e.g., depending on the communication channel, the E-Mail address, phone number, Name).

• Types Of Data Processed: Inventory data (e.g. names, addresses); contact information (e .B. E-Mail, Telephone Numbers).
• Affected Persons: Communication partner.
• Purposes of the processing: Direct marketing (e .B. by E-Mail or by post).
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO). Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

Web Analytics, Monitoring, and optimization

Die Webanalyse (auch als „Reichweitenmessung“ bezeichnet) dient der Auswertung der Besucherströme unseres Onlineangebotes und kann Verhalten, Interessen oder demographische Informationen zu den Besuchern, wie z. B. das Alter oder das Geschlecht, als pseudonyme Werte umfassen. Mit Hilfe der Reichweitenanalyse können wir z. B. erkennen, zu welcher Zeit unser Onlineangebot oder dessen Funktionen oder Inhalte am häufigsten genutzt werden oder zur Wiederverwendung einladen. Ebenso können wir nachvollziehen, welche Bereiche der Optimierung bedürfen.

In addition to web Analytics, we can also use the test procedure, for example, to test different versions of our online offer or that of its components, and optimize.

Unless otherwise specified, can these purposes, Profiles, i.e., applied to a usage process aggregated data and information in a Browser, or in a terminal and this read will be stored. Among the collected information, in particular, visited websites, and there used elements as well as technical information, such as the Browser used, the computer system used and information on use of time. If users are in the collection of their location data to us or to the providers of the services agreement, may also use location data to be processed.

It is also the IP addresses are stored to the user. However, we use an IP-Masking procedure (i.e. Pseudonymisation by shortening the IP-address) in order to protect the user. In General, the will be saved in the context of web Analytics, A/B testing and optimization, there is no clear data of the user (such as E-Mail addresses or names), but pseudonyms. Which means that we as the provider of the Software used to know the actual identity of the users, but only for the purposes of the respective procedure in the profiles stored information.

• Types Of Data Processed: Usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Range measurement (e.g. access statistics, recognition of returning visitors); Profiles with user-related information (creation of user profiles). Provision of our online offer and user-friendliness.
• Safety measures: IP-Masking (Pseudonymization of the IP address).
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO).

For more information about processing processes, procedures and services:

• Google Analytics: We use Google Analytics to measure and analyze the use of our online offer on the basis of a pseudonymous user ID. This identification number contains no clear data, such as names or E-Mail addresses. It is used, analysis of information, a terminal map to see which content is accessed by the users within one or different Use, which search terms you've used, re-called or using our online offer in their interactions. Similarly, the time of use and the duration of which will be stored, as well as the sources of the users, refer to our online offer and the technical aspects of your devices and browsers.
  In pseudonymous Profiles of users will be created with information from the use of various devices, where Cookies can be used. Google Analytics tracks and stores individual IP addresses for EU users. Analytics provides, however, a rough geographical location data, by deriving the following metadata of IP addresses: the city (and the derived latitude and longitude of the city), continent, country, Region, sub-continent (and ID-based counterparts). The EU data traffic, the IP-address data will be used exclusively for this derivation of geolocation data, before they are deleted immediately. You are not logged, are not accessible and will not be used for other purposes. If Google Analytics measurement to collect data, all IP queries on EU based servers, before the traffic is forwarded for processing to Analytics Server; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO); Website: https://marketingplatform.google.com/intl/de/about/analytics/; Safety measures: IP-Masking (Pseudonymization of the IP address); Privacy policy: https://policies.google.com/privacy; Order processing contract: https://business.safety.google/adsprocessorterms/; Basis Of Land Transfers To Third: Data Privacy Framework (DPF); Objection Option (Opt-Out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=deSettings for the display of advertisements: https://myadcenter.google.com/personalizationoff. For More Information: https://business.safety.google/adsservices/ (Types of processing, and the processed data).
• Jetpack (WordPress Stats): Jetpack provides analysis functions for WordPress Software; Service provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, a 25-Herbert Pl, Dublin, D02 AY86, Ireland; Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO); Website: https://automattic.com; Privacy policy: https://automattic.com/privacy; Basis Of Land Transfers To Third: Data Privacy Framework (DPF).

Presence in social networks (Social Media)

We maintain online presences within social networks and processed in this context, data of the user in order to communicate with active users, or information about us can offer.

We point out that data of the users outside the area of the European Union can be processed. This may result to the users of the risks, because, for example, the enforcement of the rights of the users, it may be more difficult.

Furthermore, the data of the users within social networks for market research and promotional purposes. For example, on the basis of user behavior and the resulting interests of the users, user profiles inferred to be created. The usage profiles can in turn be used to switch to for example, to display both inside and outside of the ad networks, corresponding presumably to the interests of the user. For these purposes, stored in a rule, Cookies on the computers of the users, in which the user behavior and the interests of the users are stored. Further, in the use of data profiles are saved regardless of the users used devices (in particular if the users are members of the respective platforms and these are logged in).

For a detailed description of the respective Processing and the options to object (Opt-Out), we refer to the privacy statements and information provided by the operator of the respective networks.

Also, in the case of requests for information and the assertion of rights, we point out that these can be effectively made in the vendors claim. Only the providers have access to the data of the users and can directly take appropriate measures and information. If you still need help, then you can contact us.

• Types Of Data Processed: Contact information (e.g. E-Mail, telephone numbers), content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Contact requests and communication; Feedback (e.g., Collect Feedback via the Online form). Marketing.
• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Instagram: Social Network; Service provider: Meta-Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://www.instagram.com; Privacy policy: https://instagram.com/about/legal/privacy. Basis Of Land Transfers To Third: Data Privacy Framework (DPF).
• Facebook Pages: Profiles within the social network Facebook; Service provider: Meta-Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy; Basis Of Land Transfers To Third: Data Privacy Framework (DPF); For More Information: Wir sind gemeinsam mit Meta Platforms Ireland Limited für die Erhebung (jedoch nicht die weitere Verarbeitung) von Daten der Besucher unserer Facebook-Seite (sog. „Fanpage“) verantwortlich. Zu diesen Daten gehören Informationen zu den Arten von Inhalten, die Nutzer sich ansehen oder mit denen sie interagieren, oder die von ihnen vorgenommenen Handlungen (siehe unter „Von dir und anderen getätigte und bereitgestellte Dinge“ in der Facebook-Datenrichtlinie: https://www.facebook.com/policy), sowie Informationen über die von den Nutzern genutzten Geräte (z. B. IP-Adressen, Betriebssystem, Browsertyp, Spracheinstellungen, Cookie-Daten; siehe unter „Geräteinformationen“ in der Facebook-Datenrichtlinie: https://www.facebook.com/policy). Wie in der Facebook-Datenrichtlinie unter „Wie verwenden wir diese Informationen?“ erläutert, erhebt und verwendet Facebook Informationen auch, um Analysedienste, so genannte „Seiten-Insights“, für Seitenbetreiber bereitzustellen, damit diese Erkenntnisse darüber erhalten, wie Personen mit ihren Seiten und mit den mit ihnen verbundenen Inhalten interagieren. Wir haben mit Facebook eine spezielle Vereinbarung abgeschlossen („Informationen zu Seiten-Insights“, https://www.facebook.com/legal/terms/page_controller_addendum), in der insbesondere geregelt wird, welche Sicherheitsmaßnahmen Facebook beachten muss und in der Facebook sich bereit erklärt hat die Betroffenenrechte zu erfüllen (d. h. Nutzer können z. .B. Auskünfte oder Löschungsanfragen direkt an Facebook richten). Die Rechte der Nutzer (insbesondere auf Auskunft, Löschung, Widerspruch und Beschwerde bei zuständiger Aufsichtsbehörde), werden durch die Vereinbarungen mit Facebook nicht eingeschränkt. Weitere Hinweise finden sich in den „Informationen zu Seiten-Insights“ (https://www.facebook.com/legal/terms/information_about_page_insights_data). Is the joint responsibility by not limited to the collection and Transmission of data to the Meta-Platforms Ireland Limited, a company based in the EU. The further processing of the data is the sole responsibility of Meta-Platforms Ireland Limited, which, in particular, the Transmission of data to the parent Meta-Platforms, Inc. in the United States relates.

Plugins and embedded functions and content

Wir binden in unser Onlineangebot Funktions- und Inhaltselemente ein, die von den Servern ihrer jeweiligen Anbieter (nachfolgend bezeichnet als „Drittanbieter“) bezogen werden. Dabei kann es sich zum Beispiel um Grafiken, Videos oder Stadtpläne handeln (nachfolgend einheitlich bezeichnet als „Inhalte“).

Die Einbindung setzt immer voraus, dass die Drittanbieter dieser Inhalte die IP-Adresse der Nutzer verarbeiten, da sie ohne die IP-Adresse die Inhalte nicht an deren Browser senden könnten. Die IP-Adresse ist damit für die Darstellung dieser Inhalte oder Funktionen erforderlich. Wir bemühen uns, nur solche Inhalte zu verwenden, deren jeweilige Anbieter die IP-Adresse lediglich zur Auslieferung der Inhalte verwenden. Drittanbieter können ferner sogenannte Pixel-Tags (unsichtbare Grafiken, auch als „Web Beacons“ bezeichnet) für statistische oder Marketingzwecke verwenden. Durch die „Pixel-Tags“ können Informationen, wie der Besucherverkehr auf den Seiten dieser Webseite, ausgewertet werden. Die pseudonymen Informationen können ferner in Cookies auf dem Gerät der Nutzer gespeichert werden und unter anderem technische Informationen zum Browser und zum Betriebssystem, zu verweisenden Webseiten, zur Besuchszeit sowie weitere Angaben zur Nutzung unseres Onlineangebotes enthalten als auch mit solchen Informationen aus anderen Quellen verbunden werden.

• Types Of Data Processed: Usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and process data (e.g., IP-addresses, time information, identification numbers, consent status). Location data (information on the geographical Position of a device or a Person).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Provision of our online offer and user-friendliness.
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO). Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Google Fonts (deploy on your own Server): Provision of font files to a user-friendly presentation of our online offer; Service provider: The Google Fonts are hosted on our Server, it will not transmit data to Google; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Google Maps: Wir binden die Landkarten des Dienstes „Google Maps“ des Anbieters Google ein. Zu den verarbeiteten Daten können insbesondere IP-Adressen und Standortdaten der Nutzer gehören; Service provider: Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland; Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO); Website: https://mapsplatform.google.com/; Privacy policy: https://policies.google.com/privacy. Basis Of Land Transfers To Third: Data Privacy Framework (DPF).

The Management, organization and tools

Wir setzen Dienstleistungen, Plattformen und Software anderer Anbieter (nachfolgend bezeichnet als „Drittanbieter“) zu Zwecken der Organisation, Verwaltung, Planung sowie Erbringung unserer Leistungen ein. Bei der Auswahl der Drittanbieter und ihrer Leistungen beachten wir die gesetzlichen Vorgaben.

In this context, personal data may be processed and on the servers of the third-party provider. This data can be affected, which we process in accordance with this privacy statement. The data can include, in particular master data and contact details of the users, the data include transactions, contracts, and other processes and their contents.

If a user in the context of the communication, of business or other relations are referred to us on the third-party or that the Software or platforms, to be able to process the third-party use of data and meta-data for security purposes, the service optimization or marketing purposes. We ask, therefore, to refer to the privacy notices of the respective third-party provider.

• Types Of Data Processed: Content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Communication partners, and users (for example,.B. Website visitors, users of online services).
• Purposes of the processing: Provision of contractual services and performance of contractual obligations. Office and organization procedures.

Amendments and updates to this privacy statement

We ask you to inform yourself regularly about the contents of our privacy policy. We adapt the privacy policy as soon as the Changes of the data processing operations carried out this necessary. We will inform you as soon as by the Changes in an act of Cooperation on their part (e.g. consent) or other individual notification is required. When this privacy statement was last updated, please refer to the date specified in the preamble.

Unless we specify in this privacy statement addresses and contact information of the enterprises and organizations, please note that the addresses may change over time, and ask for the details, please contact to check.