GDPR

 3.3.1 Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”), if you are a resident of the European Union, the European Economic Area and Switzerland, Google Ireland Limited ( Registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. This service uses “cookies” to analyze the use of the website.
We use user behavior in the analysis to optimize both our website and our advertising. We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. A transmission of the collected information to a third country without an adequate level of security cannot be ruled out.
With your express consent to the processing of cookies, you also consent to the possible processing of your data in the USA.
The information can also be passed on to contractual partners of Google. You can find more information on handling user data in Google’s data protection declaration: https://www.google.de/intl/de/policies/privacy/.

Storage period: see list of cookies
Order data processing:  We have concluded an order data processing contract with Google.

3.3.2 Facebook pixels

We use “Facebook pixels” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or for residents of the European Union, the European Economic Area and Switzerland, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”).
When you visit our website, a direct connection is established between your browser and the Facebook server via the Facebook Pixel. As a result, Facebook receives the information that you have visited our site with your IP address. This enables Facebook to assign your visit to our website to your user account. We can use the information obtained in this way to display Facebook ads or for tracking functions. The data collected are anonymous for us as the operator. A transmission of the collected information to a third country without an adequate level of security cannot be ruled out.
Storage period: see list of cookies

You can find more information on this in Facebook’s data protection declaration at https://www.facebook.com/about/privacy/
If you do not want data to be collected via Custom Audience, you can do so here https://www.facebook.com/ads/preferences /? entry_product=disable ad_settings_screen. You need to log into Facebook first. If you do not have a Facebook account, you can suppress usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

 

3.4. Social Media

In addition to our website, we also maintain appearances in social networks, in particular Facebook, Instagram, LinkedIn and YouTube to increase the level of awareness of our company and for marketing purposes. If you visit one of our presences, personal data may be transmitted to the operator of the social network. In addition, the operator can link your profile to ours, provided you are logged into the respective network.
Legal basis: Consent (Art 6 para 1 lit a GDPR), legitimate interest (Art 6 para 1 lit f GDPR), express consent (Art 49 para 1 lit a GDPR).
Recipients / recipient categories: Processors
You can find details about the specific data collection and processing by the respective operator in the following links:
Facebook: https://de-de.facebook.com/about/privacy/
Instagram: https://help.instagram.com/155833707900388
LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE
Youtube: https://www.youtube.com/static?gl=DE&template=terms&hl=de and https://policies.google.com/privacy/
A transmission of the collected information to a third country without an adequate level of security cannot be ruled out.

3.5. Message service

On this website, for the purpose of operating a message service that is used to answer inquiries, your username and message content are collected as data and stored for the course of the chat.
In addition to the IP address, information about the time the message was created is also saved.
Legal basis: Consent (Art 6 Paragraph 1 lit a GDPR), legitimate interest, in particular to improve our own services for the benefit of the user (Art 6 Paragraph 1 lit f GDPR), Section 96 Paragraph 3 TKG 2003, express consent (Art 49 Paragraph 1 lit. a GDPR).
A transmission of the collected information to a third country without an adequate level of security cannot be ruled out.
Details about the specific data collection and processing by the respective operator can be found in the following links:
Calendly: https://calendly.com/pages/privacy
Chatra: https://chatra.com/terms-of-service/

 

3.6. Live chat system

Purpose: We use the video conferencing tool Zoom from the American software company Zoom Video Communications for our website. The company’s headquarters are in San Jose, California, at 55 Almaden Boulevard, 6th Floor, CA 95113. With the “Zoom Meetings” service, we can hold an online video conference with customers, business partners, clients and employees very easily and without any software installation. So we can easily get in touch digitally, exchange ideas on various topics, send text messages or even make phone calls. You can also use zoom to share the screen, exchange files and use a whiteboard.
Zoom automatically saves technical data from your browser or your IP address. If you provide data such as your name, your user name, your e-mail address or your telephone number, this data will be saved by Zoom. Content that you upload while using Zoom is also saved. This includes, for example, files or chat logs. A transmission of the collected information to a third country without an adequate level of security cannot be ruled out.
Legal basis: Consent (Art 6 Paragraph 1 lit a GDPR), legitimate interest, in particular to improve our own services for the benefit of the user (Art 6 Paragraph 1 lit f GDPR), express consent (Art 49 Paragraph 1 lit a GDPR).
Storage period: The data collected is stored for as long as it is necessary to provide the services or for our own purposes. The data will only be stored for longer if this is required for legal reasons.

3.7. reCAPTCHA

On this website we use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to differentiate whether an input is made by a natural person or is improperly made by machine and automated processing. reCATPCHA serves the security of our website and consequently also your security. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Paragraph 1 lit. avoiding abuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. come to the USA without an adequate level of security.
Further information on Google reCAPTCHA and Google’s data protection declaration can be viewed at: https://www.google.com/intl/de/policies/privacy/

3.8. E-commerce store, customer administration, accounting, logistics and bookkeeping

§ Purpose: Processing of personal data in the context of any business relationships with customers and suppliers in the context of a commercial exercise, including systematic recording of all business transactions relating to income and expenditure.
§  Legal basis: Consent (Art 6 Para 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Art 6 Par 1 lit b GDPR), fulfillment of a legal obligation (Art 6 Par 1 lit c GDPR), legitimate interest, in particular defense, exercise and assertion of legal claims (Art 6 Paragraph 1 lit f GDPR), express consent (Art 9 Paragraph 2 lit a GDPR), Section 96 Paragraph 3 TKG 2003, express consent (Art 49 Paragraph 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Art 49 Paragraph 1 lit b GDPR), necessary to fulfill an interest of the data subject (Art 49 Paragraph 1 lit c GDPR), assertion, exercise and defense of legal claims (Art 49 Paragraph 1 lit e GDPR ).
§ The following data is processed for the e-commerce store via our website: master data, nationality, date of birth, passport number.
§ Storage period: Until the end of the business relationship or until the expiry of the guarantee, warranty, statute of limitations and statutory retention periods applicable to the client (in particular BAO); in addition, until the end of any legal disputes in which the data is required as evidence.
§ Recipients / recipient categories: tax office, courts and authorities, suppliers, debt collection agencies, banks dealing with the disbursement to the person concerned or to third parties, legal representatives, accountants, payroll administrators, hotels / accommodations, airlines.

The provision of your personal data is necessary to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude a contract with you.

3.8.1 Payment methods

3.8.1.1 PayPal

PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
Legal basis: Consent (Art 6 Paragraph 1 lit a GDPR), fulfillment of a contract, required to carry out pre-contractual measures (Art 6 Paragraph 1 lit b GDPR).
Further information on the online payment service provider is available here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

3.8.1.2 Klarna

The use of the payment methods invoice, hire purchase and direct debit requires a positive credit check. In this respect, we forward your data to Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm Sweden, for the purpose of address and credit checks as part of the purchase initiation and processing of the purchase contract.
Legal basis: Consent (Art 6 Paragraph 1 lit a GDPR), fulfillment of a contract, required to carry out pre-contractual measures (Art 6 Paragraph 1 lit b GDPR).
You can find more information about the payment provider here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

3.9. Customer care and marketing for own purposes

§ Purpose: processing of own or purchased customer and prospect data for the initiation of business regarding the own delivery or service offer as well as for the implementation of advertising measures and newsletter dispatch; Customer Relation Management.
§  Legal basis: Consent (Art 6 Para 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Art 6 Par 1 lit b GDPR), fulfillment of a legal obligation (Art 6 Par 1 lit c GDPR), legitimate interest, in particular defense, exercise and assertion of legal claims (Art 6 Paragraph 1 lit f GDPR), express consent (Art 49 Paragraph 1 lit a GDPR).
§ The following data are processed for sending the newsletter via our website: Master data
§ Storage period: The data may be stored until the end of the third year after the last contact with the client, unless there are longer contractual or statutory retention periods. When sending newsletters until revoked.
§ Recipients / recipient categories: company of the analysis service / service provider

3.9.1 MailChimp

We use the services of the newsletter company MailChimp on our website. MailChimp is operated by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. With MailChimp we can send you interesting news very easily via newsletter and stay in contact with you.
Sometimes it can happen that you open our newsletter for a better presentation via a link provided. This is the case, for example, if your e-mail program does not work or the newsletter is not displayed properly. The newsletter is then displayed on a MailChimp website.
Details about the specific data collection and processing by the operator can be found in the following link: https: //mailchimp.com/legal/cookies/.
MailChimp is an American company and all data collected is stored on American servers with an insufficient level of security.
In principle, the data remains permanently stored on Mailchimp’s servers and is only deleted when you request it. You can have your contact deleted by us. This permanently removes all of your personal data for us and anonymizes you in the Mailchimp reports.

3.10. Applicant management

§ Purpose: Use and record keeping of personal data provided by applicants, if this data was provided by the person concerned.
§ Legal basis: Consent (Art 6 Paragraph 1 lit a GDPR), explicit consent (Art 9 Paragraph 2 lit a GDPR) as well as assertion, exercise and defense of legal claims (Art 9 Paragraph 2 lit f GDPR) and legitimate interest (Art 10 GDPR in conjunction with Section 4 (3) no.2 DSG).
§ Storage period: Applicant data will be deleted immediately after the advertised position has been filled or after the claim period under the Equal Treatment Act (7 months) has expired, unless consent has been given to keep records. Unsolicited applications are appropriately kept on record until they are revoked by the person concerned.
§ Recipients / recipient categories: Applicant data will not be passed on.

---

 

4. Information about data transfers to third countries or to international organizations

Note on data processing in the USA:
According to the case law of the European Court of Justice (judgment of July 16, 2020, Az: C-311/18 (“Schrems II”), the USA does not have an adequate level of security for which no legal protection against these measures can be claimed.

---

 

5. Changes to these data protection regulations

We reserve the right to change these data protection regulations at any time, taking into account the applicable data protection regulations.

Current status: November 2020