Skip to main content

Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy set out below.

Data Collection on This Website

Who is responsible for collecting data on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information on the Controller” of this privacy policy.

How do we collect your data?

Some of your data is collected when you provide it to us. This may, for example, include information you enter into a contact form.

Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This primarily comprises technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to obtain information, free of charge, about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have consented to data processing, you may withdraw your consent at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about these matters or any other questions concerning data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically analyzed. This is done primarily using analytics programs.

Detailed information about these analytics programs can be found in the following privacy policy.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data, and other data generated via a website.

The host is used for the purpose of fulfilling contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of ensuring that our online services are provided securely, quickly, and efficiently by a professional provider (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We use the following host:

BOA Business Solutions GmbH
Poststr. 5/1
D-88471 Laupheim
Tel.: 07392 / 96998-0
Email: info@boa-gmbh.de

Data Processing Agreement

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law, ensuring that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g., communication by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Controller

The controller responsible for data processing on this website is:

Bäaam GmbH
Dorf, 142
Gebäude 44
6292 Finkenberg

Phone: 00436642523687
Email: entertainment@baam.marketing

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion will take place once these grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data within the meaning of Art. 9(1) GDPR are processed. If you have consented to the storage of cookies or access to information on your terminal device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) TTDSG. Consent may be withdrawn at any time. If your data is required to fulfill a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to comply with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Information on the relevant legal bases in individual cases is provided in the following sections of this privacy policy.

Information on Data Transfers to the USA and Other Third Countries

Among other things, we use tools provided by companies based in the USA or other third countries that are not considered secure under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. Please note that a level of data protection comparable to that in the EU cannot be guaranteed in these countries. For example, US companies are required to disclose personal data to security authorities without you, as the data subject, being able to seek judicial redress against this. It therefore cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of Your Consent to Data Processing

Many data processing operations are possible only with your express consent. You can withdraw consent already given at any time. The lawfulness of data processing carried out before withdrawal remains unaffected.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR UNLESS THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website

If, after concluding a contract subject to payment, you are required to provide us with your payment details (e.g., account number for direct debit authorization), these details are needed to process the payment.

Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser bar.

With encrypted communication, the payment details you transmit to us cannot be read by third parties.

Access, Deletion, and Correction

Within the framework of applicable statutory provisions, you have the right at any time to obtain information, free of charge, about your stored personal data, its origin and recipients, and the purpose of data processing, as well as, where applicable, the right to have this data corrected or deleted. You can contact us at any time about these matters or other questions concerning personal data.

Right to Restriction of Processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time for this purpose. The right to restriction of processing applies in the following cases:

  • If you dispute the accuracy of the personal data we have stored about you, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.
  • If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests must be weighed against ours. As long as it has not been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may, apart from storage, be processed only with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

Objection to Promotional Emails

We hereby object to the use of contact details published as part of our legal notice obligations for the purpose of sending unsolicited advertising and informational materials. The website operators expressly reserve the right to take legal action in the event of unsolicited transmission of advertising information, for example through spam emails.

4. Data Collection on This Website

Cookies

Our websites use so-called “cookies.” Cookies are small text files that do not harm your terminal device. They are stored on your terminal device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your terminal device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you visit our website (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g., cookies for processing payment services).

Cookies have different functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to evaluate user behavior or display advertising.

Cookies necessary for electronic communication, for providing certain functions you request (e.g., shopping cart functionality), or for optimizing the website (e.g., cookies for measuring website audiences) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically error-free and optimized manner. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TTDSG); consent may be withdrawn at any time.

You can configure your browser to inform you when cookies are set, to allow cookies only in individual cases, to exclude acceptance of cookies in certain cases or in general, and to enable automatic deletion of cookies when you close your browser. Disabling cookies may restrict the functionality of this website.

If cookies from third-party companies or cookies for analytical purposes are used, we will inform you separately in this privacy policy and, if necessary, request your consent.

Consent with Borlabs Cookie

Our website uses the Borlabs Cookie consent technology to obtain your consent to the storage of certain cookies in your browser or the use of certain technologies and to document this consent in compliance with data protection law. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter “Borlabs”).

When you visit our website, a Borlabs cookie is stored in your browser, in which the consents you have given or their withdrawal are recorded. This data is not passed on to the provider of Borlabs Cookie.

The collected data is stored until you ask us to delete it, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs Cookie consent technology is used to obtain the consent legally required for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website, for which server log files must be collected.

Contact Form

If you send us inquiries via the contact form, the information you provide in the inquiry form, including your contact details, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We do not share this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry relates to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if requested.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions, particularly retention periods, remain unaffected.

Inquiries by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry relates to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if requested.

The data sent to us through contact inquiries will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Registration on This Website

You can register on this website to use additional features. We use the data entered for registration only for the purpose of using the particular offering or service for which you registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

We use the email address provided during registration to inform you about important changes, such as changes to the scope of our offerings or technically necessary changes.

The data entered during registration is processed for the purpose of carrying out the user relationship established by registration and, where applicable, initiating further contracts (Art. 6(1)(b) GDPR).

The data collected during registration is stored by us for as long as you are registered on this website and is then deleted. Statutory retention periods remain unaffected.

Comment Function on This Website

For the comment function on this website, we store your comment along with information about when the comment was created, your email address, and, if you do not post anonymously, the username you selected.

Storage of IP Addresses

Our comment function stores the IP addresses of users who post comments. Because we do not review comments on this website before they are published, we need this data so that we can take action against the author in the event of legal violations such as insults or propaganda.

Subscribing to Comments

As a website user, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the notification emails. The data entered when subscribing to comments will then be deleted; however, if you provided this data to us for other purposes and elsewhere (e.g., when subscribing to the newsletter), it will remain with us.

Storage Period for Comments

Comments and the associated data are stored and remain on this website until the content being commented on is completely deleted or the comments must be deleted for legal reasons (e.g., offensive comments).

Legal Basis

Comments are stored on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. An informal notification by email is sufficient. The lawfulness of data processing already carried out remains unaffected by withdrawal.

ProvenExpert

We have integrated ProvenExpert rating seals into this website. The provider is Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, https://www.provenexpert.com.

The ProvenExpert seal enables us to display customer reviews submitted about our company on ProvenExpert in a seal on our website. When you visit our website, a connection to ProvenExpert is established, allowing ProvenExpert to determine that you have visited our website. ProvenExpert also records your language settings in order to display the seal in your chosen language.

ProvenExpert is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in presenting customer reviews as transparently as possible. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

5. Social Media

Instagram Plugin

Functions of the Instagram service are integrated into this website. These functions are provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that, as the website provider, we have no knowledge of the content of the transmitted data or how Instagram uses it.

The storage and analysis of the data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in achieving the widest possible visibility on social media. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The processing carried out by Facebook or Instagram after the data has been forwarded is not part of the joint responsibility. Our joint obligations have been set out in an agreement on joint processing. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for implementing the tool on our website in compliance with data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You can exercise your rights as a data subject (e.g., requests for access) regarding data processed by Facebook or Instagram directly with Facebook. If you exercise your rights as a data subject with us, we are obliged to forward them to Facebook.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875, and https://de-de.facebook.com/help/566994660333381.

Further information can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

6. Analytics Tools and Advertising

Google Analytics

This website uses functions of the Google Analytics web analytics service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s origin. This data is combined under a user ID and assigned to the website visitor’s respective terminal device.

In addition, Google Analytics allows us to record, among other things, your mouse movements, scrolling movements, and clicks. Google Analytics also uses various modeling approaches to supplement the collected datasets and employs machine-learning technologies for data analysis.

Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there.

This analytics tool is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP Anonymization

We have enabled the IP anonymization function on this website. As a result, Google truncates your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area before transferring it to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services to the website operator relating to website activity and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

More information about how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Storage Period

Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g., user ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 2 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when a user enters certain search terms on Google (keyword targeting). In addition, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can quantitatively evaluate this data by analyzing, for example, which search terms caused our advertisements to be displayed and how many advertisements resulted in corresponding clicks.

Google Ads is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing its services and products as effectively as possible.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Remarketing

This website uses Google Analytics Remarketing functions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyzes your user behavior on our website (e.g., clicking on certain products) to assign you to certain advertising target groups and subsequently display appropriate advertising messages when you visit other online services (remarketing or retargeting).

In addition, the advertising target groups created using Google Remarketing may be linked to Google’s cross-device functions. In this way, interest-based, personalized advertising messages tailored to your previous usage and browsing behavior on one terminal device (e.g., mobile phone) can also be displayed on another of your terminal devices (e.g., tablet or PC).

If you have a Google account, you can object to personalized advertising at the following link: https://www.google.com/settings/ads/onweb/.

Google Remarketing is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing its products as effectively as possible. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Further information and data protection provisions can be found in Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Audience Creation Using Customer Match

For audience creation, we use, among other things, Google Remarketing’s Customer Match function. In doing so, we transfer certain customer data (e.g., email addresses) from our customer lists to Google. If the customers concerned are Google users and are logged into their Google accounts, they will be shown relevant advertising messages within the Google network (e.g., on YouTube, Gmail, or the search engine).

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can recognize whether a user has performed certain actions. For example, we can evaluate which buttons on our website are clicked and how often, and which products are viewed or purchased particularly frequently. This information is used to compile conversion statistics. We learn the total number of users who have clicked on our advertisements and what actions they have performed. We do not receive information that would allow us to identify users personally. Google itself uses cookies or comparable recognition technologies for identification.

Google Conversion Tracking is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

More information about Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google DoubleClick

This website uses functions of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “DoubleClick”).

DoubleClick is used to display interest-based advertisements to you across the Google advertising network. With the help of DoubleClick, advertisements can be specifically tailored to the interests of the respective viewer. For example, our advertising may appear in Google search results or in advertising banners linked to DoubleClick.

To display interest-based advertising to users, DoubleClick must recognize the respective viewer and be able to associate the websites they have visited, their clicks, and other information about their user behavior with them. DoubleClick uses cookies or comparable recognition technologies (e.g., device fingerprinting) for this purpose. The information collected is combined into a pseudonymous user profile in order to display advertising that matches the user’s interests.

Google DoubleClick is used in the interest of targeted advertising measures. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Further information on options for objecting to advertisements displayed by Google can be found at the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

7. Newsletter

Newsletter Data

If you would like to subscribe to the newsletter offered on the website, we require an email address from you and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected, or it is collected only on a voluntary basis. We use newsletter service providers, described below, to process the newsletter distribution.

MailChimp

This website uses MailChimp services to send newsletters. The provider is The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service that can be used, among other things, to organize and analyze newsletter distribution. If you enter data for the purpose of subscribing to the newsletter (e.g., an email address), it is stored on MailChimp servers in the USA.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent via MailChimp, a file contained in the email (a so-called web beacon) connects to MailChimp servers in the USA. This makes it possible to determine whether a newsletter message was opened and which links, if any, were clicked. Technical information is also recorded (e.g., time of access, IP address, browser type, and operating system). This information cannot be assigned to the individual newsletter recipient. It is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses may be used to better tailor future newsletters to the interests of recipients.

If you do not want analysis by MailChimp, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message.

Data processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing carried out before withdrawal remains unaffected.

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider on a blacklist if this is necessary to prevent future mailings. The data on the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage on the blacklist is not limited in time. You can object to this storage if your interests outweigh our legitimate interest.

For more information, please refer to MailChimp’s data protection provisions at: https://mailchimp.com/legal/terms/.

Data Processing Agreement

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law, ensuring that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

8. Plugins and Tools

YouTube

This website embeds videos from YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our web pages on which YouTube is embedded, a connection is established to YouTube’s servers. The YouTube server is informed which of our pages you have visited.

YouTube may also store various cookies on your terminal device or use comparable recognition technologies (e.g., device fingerprinting). In this way, YouTube may obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of presenting our online offerings in an appealing way. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Further information on how user data is handled can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts

This website uses so-called web fonts provided by Google to ensure a uniform presentation of fonts. When you access a page, your browser loads the necessary web fonts into its browser cache so that text and fonts are displayed correctly.

For this purpose, the browser you use must establish a connection to Google’s servers. This informs Google that this website was accessed via your IP address. Google Web Fonts are used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform presentation of fonts on its website. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This website uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use Google Maps functions, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer. When Google Maps is activated, Google may use Google Web Fonts for the purpose of displaying fonts consistently. When you access Google Maps, your browser loads the required web fonts into its browser cache so that text and fonts are displayed correctly.

Google Maps is used in the interest of presenting our online offerings in an appealing way and making the places listed on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

More information on how user data is handled can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is intended to verify whether data entered on this website (e.g., in a contact form) is being entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as a visitor accesses the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, time spent by the website visitor on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The storage and analysis of the data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online offerings against abusive automated data extraction and spam. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Further information about Google reCAPTCHA can be found in Google’s privacy policy and terms of service at: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Spotify

This website integrates functions of the Spotify music service. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize the Spotify plugins by the green logo on this website. An overview of Spotify plugins can be found at: https://developer.spotify.com.

As a result, when you visit this website, a direct connection may be established between your browser and Spotify’s server via the plugin. Spotify thereby receives the information that you have visited this website using your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of this website to your Spotify profile. This allows Spotify to associate your visit to this website with your user account.

Please note that Google Analytics cookies are used when Spotify is used, meaning that your usage data may also be passed on to Google when using Spotify. Google Analytics is a tool of the Google group, based in the USA, for analyzing user behavior. Spotify is solely responsible for this integration. As the website operator, we have no influence over this processing.

The storage and analysis of the data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in providing an appealing audio experience on its website. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Further information can be found in Spotify’s privacy policy: https://www.spotify.com/de/legal/privacy-policy/.

If you do not want Spotify to associate your visit to this website with your Spotify user account, please log out of your Spotify account.

9. Online Marketing and Affiliate Programs

Affiliate Programs on This Website

The website operator participates in affiliate partner programs. If you click on an advertisement on our website that is part of an affiliate program and then complete a transaction (e.g., a purchase), we receive remuneration from our affiliate partners. For this purpose, our affiliate partners must be able to identify you and track that you reached the relevant product via the advertisement placed on our website and completed the predefined transaction. Our affiliate partners use cookies or comparable recognition technologies (e.g., device fingerprinting) for this purpose.

The storage and analysis of the data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the correct calculation of its affiliate remuneration. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

We participate in the following affiliate programs:

Amazon Affiliate Program

The provider is Amazon Europe Core S.à.r.l. Details can be found in Amazon’s privacy policy at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.

10. eCommerce and Payment Providers

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only to the extent necessary to establish, define the content of, or modify the legal relationship (master data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We collect, process, and use personal data concerning the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill for it.

The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transfer Upon Conclusion of Contracts for Services and Digital Content

We transfer personal data to third parties only if this is necessary for the performance of the contract, for example to the financial institution responsible for processing payments.

No further transfer of data takes place, or it takes place only if you have expressly consented to the transfer. Your data is not passed on to third parties without your express consent, for example for advertising purposes.

The legal basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Digistore24

Some of our products, services, and content are offered by Digistore24 as a reseller. The provider and contractual partner is Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim. Digistore24 GmbH, as the controller, specifies in its own privacy policy which data it stores and processes when this website is accessed. Further information can be found in Digistore24’s privacy policy: https://www.digistore24.com/dataschutz.

Promotional Links / Content Links

On this website, we use various links to Digistore24 offerings. The purpose of these links is to draw your attention to products that may be of interest to you.

Some of these links point to the domain digistore24.com of Digistore24 GmbH.

When you click on one of these links, you access a web page on Digistore24’s server.

Our server does not transmit any data to Digistore24 in this process; instead, as with any website visit, the data is transmitted to Digistore24 by your web browser. We have no influence over the extent to which your web browser transmits data to Digistore24.

For further information on the extent to which Digistore24 handles data from website visits, please refer to Digistore24’s privacy policy: https://www.digistore24.com/dataschutz.

Affiliate Advertising Material Generator

The affiliate advertising material generator allows advertising materials to be created automatically. It provides an input field in which you can enter your Digistore24 ID. You will then receive advertising materials that you can use to promote products and services quickly and easily.

In addition to the above, depending on your input, a check is made to determine whether an affiliate partnership exists. Details can be found in Digistore24’s privacy policy: https://www.digistore24.com/dataschutz.

elopage

Among other things, we offer digital goods and services for purchase on this website. We use elopage to sell these products on our website. The provider is elopage GmbH, Kurfürstendamm 208, 10719 Berlin, Germany (hereinafter “elopage”).

If you click on one of our products, you will be redirected to our sales page on elopage. The contract is then processed via elopage. Details can be found in elopage’s privacy policy at: https://elopage.com/privacy?locale=de.

elopage is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in using a fast and professional sales page to distribute our products. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data Processing Agreement

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law, ensuring that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

11. Our Own Services

Handling of Applicant Data

We offer you the opportunity to apply for a position with us (e.g., by email, post, or online application form). Below, we inform you about the scope, purpose, and use of your personal data collected as part of the application process. We assure you that your data will be collected, processed, and used in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated as strictly confidential.

Scope and Purpose of Data Collection

If you submit an application to us, we process the personal data associated with it (e.g., contact and communication data, application documents, notes taken during interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is Section 26 BDSG under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general initiation of a contract), and—if you have given your consent—Art. 6(1)(a) GDPR. Consent may be withdrawn at any time. Within our company, your personal data will be shared only with persons involved in processing your application.

If the application is successful, the data you submitted will be stored in our data processing systems for the purpose of carrying out the employment relationship on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR.

Data Retention Period

If we are unable to offer you a position, you reject a job offer, or you withdraw your application, we reserve the right to retain the data you have submitted for up to 6 months after the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Art. 6(1)(f) GDPR). The data will then be deleted and physical application documents destroyed. The purpose of retention is, in particular, to preserve evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), deletion will take place only when the purpose for further retention no longer applies.

A longer retention period may also apply if you have given corresponding consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.