Overview of Data Protection

Data Recording on the Website

How Do We Collect Your Data? We collect your data in two primary ways:

• Directly Provided Data: This includes information you provide to us voluntarily. For instance, when you fill out a contact form, subscribe to our newsletter, or engage in transactions, the data entered, such as your name, email address, and payment details, is collected.
• Automatically Collected Data: When you visit our website, certain technical data is automatically gathered by our IT systems. This includes, but is not limited to, your internet browser type, operating system, the time of your page visit, and sometimes your IP address. This collection is typically done through cookies and similar tracking technologies.

Why Do We Use Your Data? The data we collect serves multiple purposes:

• Website Functionality: Some data is essential for the proper functioning of our website. It helps us ensure the site’s stability, security, and user-friendly navigation.
• User Experience and Service Improvement: We analyze visitor data to understand how our users interact with the website. This analysis aids us in identifying user preferences, improving our content, and developing better services.
• Personalization: By understanding your preferences and usage patterns, we can tailor our services and content to better suit your needs, providing a more personalized and efficient user experience.
• Legal Compliance and Security: Some data collection is necessary to comply with legal requirements and to protect both our users and our platform from fraudulent activities and security breaches.

We are committed to using your data responsibly and ethically, ensuring that it is processed in line with legal requirements and industry best practices. Your privacy is our priority, and we strive to use your data in ways that benefit and enhance your experience on our site. For more detailed information on our data processing practices, please refer to our comprehensive privacy policy.

 User Rights

As a valued user of our website, you are entitled to various rights regarding the handling and processing of your personal data. These rights are fundamental to our commitment to transparency, privacy, and user empowerment. Here’s an overview of your rights:

• Right to Information: You have the right to obtain clear, transparent, and understandable information about how we use your personal data and your rights. This includes knowing the origin, recipient, and specific purpose of your stored personal data.
• Right to Access: You can request access to your personal data that we process. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected or completed.
• Right to Erasure (‘Right to be Forgotten’): In certain circumstances, you have the right to have your personal data deleted or removed. This is not a general right to erasure; there are exceptions.
• Right to Restrict Processing: Under certain conditions, you have the right to ‘block’ or suppress further use of your personal data.
• Right to Data Portability: You have rights to obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy, or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
• Right to Object: You have the right to object to certain types of processing, including processing for direct marketing purposes.
• Right to Lodge a Complaint: You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.
• Right to Withdraw Consent: If you have given your consent to anything we do with your personal data, you have the right to withdraw that consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful).

For further information on your rights and how to exercise them, or for any other queries related to your personal data, feel free to contact us at any time at the address provided in the imprint. We are committed to addressing your concerns and ensuring that your rights are fully respected and upheld.

Hosting and Content Delivery Networks (CDN)

External Hosting: Our website is hosted by an external service provider (host). The personal data collected on our website is stored on the host’s servers. This may include, but is not limited to, IP addresses, contact requests, metadata and communications, contract information, contact details, names, web page access, and other data generated through a website. The host is used for the purpose of fulfilling the contract with our potential and existing customers and in the interest of secure, fast, and efficient provision of our online services by a professional provider.

Our host will only process your data to the extent necessary to fulfill its performance obligations and to follow our instructions with respect to such data. To ensure data protection-compliant processing, we have concluded a data processing agreement with our host.

General Information and Mandatory Information

Data Protection: The operators of this website take your privacy very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Our website may be used without providing personal data. However, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

Please be aware that data transmission over the Internet (e.g., communication by email) can have security gaps. A complete protection of data against access by third parties is not possible.

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of your consent to data processing: Many data processing operations are only possible with your express consent. You can revoke an existing consent at any time. An informal email making this request is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and direct advertising (Art. 21 GDPR): If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims (objection according to Art. 21 Para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection according to Art. 21 Para. 2 GDPR).

Information on Data Transfer to Non-EU Countries

Data Transfer to Non-EU Countries: In certain circumstances, it may be necessary for us to transfer personal data to countries outside the European Union (EU) or the European Economic Area (EEA). This may occur, for example, when our service providers or partners are based in such countries or when data is required to fulfill our contractual obligations with you. In these cases, we ensure that the transfer of data is in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This includes ensuring that the recipient country has been deemed to have an adequate level of data protection by the European Commission, or by implementing standard contractual clauses approved by the European Commission to safeguard the data transferred. We take all necessary steps to ensure that your data is treated securely and in accordance with this privacy policy when transferred to these countries.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Specific Data Recording Practices

Cookies: Our website uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They do not harm your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective, and secure. Most of the cookies we use are “session cookies,” which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

Server Log Files: The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.