Privacy policy

Introduction

With the following data protection declaration, we would like to inform you about which types of your personal data (hereinafter also referred to as “data”) we process for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as .B our social media profiles (hereinafter collectively referred to as “online offer”).

The terms used are not gender-specific.

As of February 28, 2021

Outline

Person in charge

SOPAGO GmbH
Jakob-Klar-Str. 4
80796 Munich
Germany

Authorised representatives: Dipl. Kfm. Harald Baumeister, Dipl.-Ing. Egon Hübinger-Graner

E-mail address: info@sopago.org

Imprint: https://sopago.org/impressum

Overview of processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of data processed

  • Inventory data (e.B. names, addresses)
  • Content data (e.B. entries in online forms)
  • Contact details (e.B. e-mail, telephone numbers)
  • Meta/communication data (e.B. device information, IP addresses)
  • Usage data (e.B websites visited, interest in content, access times)

Categories of data subjects

  • Communication
  • Users (e.B. website visitors, users of online services)

Purposes of processing

  • Provision of our online offer and user-friendliness
  • Conversion measurement (measuring the effectiveness of marketing measures)
  • Marketing
  • Contact requests and communication
  • Profiles with user-related information (creation of user profiles)
  • Provision of contractual services and customer service

Relevant legal bases

Below you will find an overview of the legal bases of the GDPR on which we base the processing of personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations of your or our country of residence or domicile may apply. If, in addition, more specific legal bases are decisive in individual cases, we will inform you of these in the data protection declaration.

  • Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR) – The data subject has given his or her consent to the processing of personal data concerning him or her for a specific purpose or for several specific purposes.
  • Performance of the contract and pre-contractual requests (Art. 6 para. 1 sentence 1 lit.b. GDPR) – The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.
  • Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR) – The processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail.

National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Germany. This includes, in particular, the Act on the Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for the purposes of the employment relationship (§ 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships as well as the consent of employees. Furthermore, state data protection laws of the individual federal states can be applied.

Security measures

In accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

Measures shall include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access, input, disclosure, ensuring availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, the deletion of data and reactions to the threat to the data. Furthermore, we take into account the protection of personal data already during the development or selection of hardware, software and procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

Shortening of the IP address:If IP addresses are processed by us or by the service providers and technologies used and the processing of a complete IP address is not required, the IP address will be shortened (also referred to as “IP masking”). The last two digits, or the last part of the IP address after a period, are removed or replaced by placeholders. The shortening of the IP address is intended to prevent or make it much more difficult to identify a person based on their IP address.

SSL encryption (https):In order to protect your data transmitted via our online offer, we use SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser.

Transmission of personal data

As part of our processing of personal data, it happens that the data is transmitted to other bodies, companies, legally independent organizational units or persons or that it is disclosed to them. The recipients of this data may include, for example.B service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such a case, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.

Data transfer within the organization:We may transfer personal data to other entities within our organization or grant them access to this data. If this transfer takes place for administrative purposes, the transfer of the data is based on our legitimate business and business interests or takes place if it is necessary to fulfil our contractual obligations or if there is a consent of the persons concerned or a legal permission.

Data processing in third countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or if the processing takes place in the context of the use of third-party services or the disclosure or transmission of data to other persons, bodies or companies, this will only take place in accordance with the legal requirements.

Subject to express consent or contractually or legally required transfer, we process or have the data processed only in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

Use of cookies

Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user’s computer. A cookie is primarily used to store the information about a user during or after his visit within an online offer. The stored information may include.B, for example, the language settings on a website, the login status, a shopping cart or the place where a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.B. when user information is stored on the basis of pseudonymous online identifiers, also referred to as “user IDs”)

The following cookie types and functions are distinguished:

  • Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
  • Permanent cookies: Permanent cookies remain stored even after closing the browser. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users used for range measurement or marketing purposes may be stored in such a cookie.
  • First-party cookies: First-party cookies are set by ourselves.
  • Third-party cookies (also: third-party cookies):Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
  • Necessary (also: essential or strictly necessary) cookies: On the one hand, cookies may be absolutely necessary for the operation of a website (e.B. to store logins or other user input or for security reasons).
  • Statistics, marketing and personalization cookies: Furthermore,cookies are usually also used in the context of range measurement and when the interests of a user or his behavior (e.B viewing certain content, use of functions, etc.) are stored on individual websites in a user profile. Such profiles serve to show users, e.B. content that corresponds to their potential interests. This procedure is also referred to as “tracking”, i.e. tracking the potential interests of users. If we use cookies or “tracking” technologies, we will inform you separately in our privacy policy or as part of obtaining consent.

Notes on legal bases: The legal basis on which we process your personal data with the help of cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for the processing of your data is the declared consent. Otherwise, the data processed with the help of cookies will be processed on the basis of our legitimate interests (e.B. in the business operation of our online offer and its improvement) or if the use of cookies is necessary to fulfil our contractual obligations.

Storage period: If we do not provide you with explicit information on the storage period of permanent cookies (e.B. as part of a so-called cookie opt-in), please assume that the storage period can be up to two years.

General information on revocation and objection (opt-out): Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke a given consent or to object to the processing of your data by cookie technologies (collectively referred to as “opt-out”). You can first declare your objection by means of the settings of your browser, e.B., by deactivating the use of cookies (whereby this may also limit the functionality of our online offer). An objection to the use of cookies for online marketing purposes can also be declared by means of a variety of services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you can receive further objection notices in the context of the information on the service providers and cookies used.

Processing of cookie data onthe basis of consent: We use a cookie consent management procedure in which the consent of users to the use of cookies, or the processing and providers mentioned in the context of the cookie consent management procedure, can be obtained and managed and revoked by users. In this case, the declaration of consent is stored in order not to have to repeat its request again and to be able to prove the consent in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies) in order to be able to assign the consent to a user or his device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of consent can be up to two years. A pseudonymous user identifier is formed and stored with the time of consent, information on the scope of the consent (e.B which categories of cookies and/or service providers) as well as the browser, system and device used.

  • Types of data processed: Usage data (e.B. websites visited, interest in content, access times), meta/communication data (e.B. device information, IP addresses)
  • Data subjects: Users (e.B. website visitors, users of online services)
  • Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)

Provision of the online offer and web hosting

In order to be able to provide our online offer securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be retrieved. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security and technical maintenance services.

The data processed in the context of the provision of the hosting offer may include all information concerning the users of our online offer that arises in the context of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the content of online offers to browsers, and all entries made within our online offer or from websites.

Collection of access data and log files:We ourselves (or our web hosting provider) collect data on each access to the server (so-called server log files). The server log files may include the address and name of the accessed websites and files, date and time of retrieval, data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.

The server log files can be used on the one hand for security purposes, e.B. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks) and on the other hand to ensure the utilization of the servers and their stability.

  • Types of data processed: Content data (e.B. entries in online forms), usage data (e.B. websites visited, interest in content, access times), meta/communication data (e.B. device information, IP addresses)
  • Data subjects: Users (e.B. website visitors, users of online services)
  • Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)

Services and service providers used:

  • alfahosting: services in the field of provision of information technology infrastructure and related services (e.B storage space and/or computing capacities); Service provider: Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany; Website: https://alfahosting.de; Privacy Policy: https://alfahosting.de/datenschutz

Special notes on applications (apps)

We process the data of the users of our application to the extent necessary to provide users with the application and its functionalities, to monitor its security and to be able to further develop it. We may also contact users in compliance with legal requirements if the communication is necessary for the purposes of administration or use of the application. In addition, with regard to the processing of users’ data, we refer to the data protection information in this data protection declaration.

Legal basis: The processing of data that is necessary for the provision of the functionalities of the application serves the fulfillment of contractual obligations. This also applies if the provision of the functions requires authorization of the users (e.B. releases of device functions). If the processing of data is not necessary for the provision of the functionalities of the application, but serves the security of the application or our business interests (e.B. collection of data for the purposes of optimizing the application or security purposes), it is carried out on the basis of our legitimate interests. If users are expressly asked for their consent to the processing of their data, the processing of the data covered by the consent takes place on the basis of the consent.

Device permissions to access functions and data:The use of our application or its functionalities may require permissions of users to access certain functions of the devices used or to the data stored on the devices or accessible with the help of the devices. By default, these permissions must be granted by the users and can be revoked at any time in the settings of the respective devices. The exact procedure for controlling app permissions may depend on users’ device and software. If explanations are required, users can contact us. We would like to point out that the refusal or revocation of the respective authorizations may affect the functionality of our application.

  • Types of data processed: Inventory data (e.B. names, addresses), meta/communication data (e.B. device information, IP addresses)
  • Purposes of processing: Provision of contractual services and customer service
  • Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR), fulfillment of contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)

Contact

When contacting us (e.B. via contact form, e-mail, telephone or via social media), the details of the requesting persons will be processed insofar as this is necessary to answer the contact requests and any requested measures.

The answer to contact requests in the context of contractual or pre-contractual relationships takes place to fulfil our contractual obligations or to answer (pre)contractual inquiries and otherwise on the basis of the legitimate interests in answering the inquiries.

  • Types of data processed: Inventory data (e.B. names, addresses), contact data (e.B. e-mail, telephone numbers), content data (e.B. entries in online forms)
  • Data subjects: Communication
  • Purposes of processing: Contact requests and communication
  • Legal basis: Performance of the contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit.b. GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)

Push notifications

With the consent of the users, we can send the users so-called “push notifications”. These are messages that are displayed on users’ screens, devices or browsers, even if our online service is not actively used.

In order to register for the push messages, users must confirm the request of their browser or device to receive the push messages. This consent process is documented and stored. The storage is necessary to recognize whether users have consented to the receipt of the push messages and to be able to prove their consent. For these purposes, a pseudonymous identifier of the browser (so-called “push token”) or the device ID of a terminal device is stored.

On the one hand, the push messages may be necessary for the fulfilment of contractual obligations (e.B technical and organisational information relevant to the use of our online offer) and are otherwise sent, unless specifically stated below, on the basis of the consent of the users. Users can change the receipt of push messages at any time with the help of the notification settings of their respective browsers or end devices.

  • Purposes of processing: Provision of contractual services and customer service
  • Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR), fulfillment of contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR)

Online Marketing

We process personal data for online marketing purposes, which may include, in particular, the marketing of advertising space or the presentation of advertising and other content (collectively referred to as “content”) based on potential interests of users and the measurement of their effectiveness.

For these purposes, so-called user profiles are created and stored in a file (so-called “cookie”) or similar procedures are used by means of which the information about the user relevant for the presentation of the aforementioned content is stored. This information may include, for example.B content viewed, websites visited, online networks used, but also communication partners and technical information such as the browser used, the computer system used and information on times of use. If users have consented to the collection of their location data, these can also be processed.

The IP addresses of the users are also stored. However, we use available IP masking procedures (i.e. pseudonymization by shortening the IP address) to protect users. In general, no clear data of the users (such as e.B e-mail addresses or names) are stored as part of the online marketing procedure, but pseudonyms. This means that we, as well as the providers of online marketing procedures, do not know the actual identity of the users, but only the information stored in their profiles.

The information in the profiles is usually stored in the cookies or by means of similar procedures. These cookies can later generally also be read on other websites that use the same online marketing procedure and analyzed for the purpose of presenting content as well as supplemented with further data and stored on the server of the online marketing method provider.

Exceptionally, clear data can be assigned to the profiles. This is the case if the users are, for example.B, members of a social network whose online marketing procedures we use and the network connects the profiles of the users with the aforementioned information. We ask you to note that users can make additional agreements with the providers, e.B. by giving their consent as part of the registration.

In principle, we only have access to aggregated information about the success of our advertisements. However, in the context of so-called conversion measurements, we can check which of our online marketing procedures have led to a so-called conversion, i.e.B., to the conclusion of a contract with us. Conversion measurement is used solely to analyze the success of our marketing efforts.

Unless otherwise stated, we ask you to assume that cookies used will be stored for a period of two years.

Notes on legal bases: If we ask the users for their consent to the use of third-party providers, the legal basis for the processing of data is consent. Otherwise, the data of the users will be processed on the basis of our legitimate interests (i.e. interest in efficient, economic and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.

  • Types of data processed: Usage data (e.B. websites visited, interest in content, access times), meta/communication data (e.B. device information, IP addresses)
  • Data subjects: Users (e.B. website visitors, users of online services)
  • Purposes of processing: Marketing, profiles with user-related information (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures)
  • Security measures: IP masking (pseudonymization of the IP address)
  • Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)
  • Possibility of objection (opt-out): We refer to the data protection information of the respective providers and the possibilities of objection specified to the providers (so-called “opt-out”). If no explicit opt-out option has been specified, there is the possibility that you can disable cookies in the settings of your browser. However, this may restrict the functions of our online offer. We therefore also recommend the following opt-out options, which are offered in summary to the respective areas: a) Europe: https://www.youronlinechoices.eu. (b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. (d) Cross-territorial: https://optout.aboutads.info

Services and service providers used:

  • Google Analytics: Online marketing and web analytics; Service providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy policy: https://policies.google.com/privacy; Possibility of objection (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated
  • Google Ads and conversion measurement: We use the online marketing procedure “Google Ads” to place ads in the Google advertising network (e.B., in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the ads. We also measure the conversion of the ads. However, we only know the anonymous total number of users who clicked on our ad and were redirected to a page with a so-called “conversion tracking tag”. However, we ourselves do not receive any information with which users can be identified. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy

Plugins and embedded functions as well as content

We integrate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as “third-party providers”). These may be, for example, graphics, videos or city maps (hereinafter uniformly referred to as “Content”).

The integration always requires that the third-party providers of this content process the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required for the presentation of this content or functions. We endeavor to use only such content whose respective providers use the IP address only to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and contain, among other things, technical information about the browser and the operating system, to referring websites, the time of visit and other information on the use of our online offer as well as be combined with such information from other sources.

Notes on legal bases: If we ask the users for their consent to the use of third-party providers, the legal basis for the processing of data is consent. Otherwise, the data of the users will be processed on the basis of our legitimate interests (i.e. interest in efficient, economic and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.

  • Types of data processed: Usage data (e.B. websites visited, interest in content, access times), meta/communication data (e.B. device information, IP addresses)
  • Data subjects: Users (e.B. website visitors, users of online services)
  • Purposes of processing: Provision of our online offer and user-friendliness, provision of contractual services and customer service
  • Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)

Services and service providers used:

  • Font Awesome: display of fonts and symbols; Service provider: Fonticons, Inc. ,6 Porter Road Apartment 3R, Cambridge, MA 02140, USA; Website: https://fontawesome.com/; Privacy Policy: https://fontawesome.com/privacy
  • Google Fonts: We integrate the fonts (“Google Fonts”) of the provider Google, whereby the data of the users are used solely for the purpose of displaying the fonts in the browser of the users. The integration takes place on the basis of our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible licensing restrictions for their integration. Service providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy
  • Google Maps: We integrate the maps of the service “Google Maps” of the provider Google. The processed data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually carried out as part of the settings of their mobile devices); Service providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://cloud.google.com/maps-platform; Privacy Policy: https://policies.google.com/privacy; Possibility of objection (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated
  • reCAPTCHA: We integrate the “reCAPTCHA” function in order to be able to recognize whether entries (e.B. in online forms) are made by humans and not by automatically acting machines (so-called “bots”). The processed data may include IP addresses, information about operating systems, devices or browsers used, language settings, location, mouse movements, keystrokes, length of stay on websites, previously visited websites, interactions with ReCaptcha on other websites, possibly cookies and results of manual recognition processes (e.B answering questions asked or selecting objects in images). Service providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.google.com/recaptcha/; Privacy Policy: https://policies.google.com/privacy; Possibility of objection (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated

Deletion of data

The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions are omitted (e.B. if the purpose of the processing of this data has ceased to exist or they are not necessary for the purpose).

If the data is not deleted because it is necessary for other and legally permissible purposes, their processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example.B to data that must be stored for commercial or tax reasons or whose storage is necessary for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.

As part of our privacy policy, we may provide users with further information on the deletion and storage of data that applies specifically to the respective processing process.

Changes and updates to the Privacy Policy

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the privacy policy as soon as the changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.B. consent) or other individual notification.

If we provide addresses and contact information of companies and organizations in this privacy policy, we ask you to note that the addresses may change over time and ask you to check the information before contacting us.

Rights of data subjects

As a data subject, you are entitled to various rights under the GDPR, which result in particular from Articles 15 to 21 GDPR:

  • Right to object: You have the right, for reasons arising from your particular situation, at any time against the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising.
  • Right of revocation for consents: You have the right to revoke your consent at any time.
  • Right to information: You have the right to request confirmation as to whether the data in question is being processed and to obtain information about this data as well as further information and a copy of the data in accordance with the legal requirements.
  • Right to rectification: In accordance with the legal requirements, you have the right to request the completion of the data concerning you or the correction of the incorrect data concerning you.
  • Right to erasure and restriction of processing: In accordance with the legal requirements, you have the right to demand that data concerning you be deleted immediately or, alternatively, to demand a restriction of the processing of the data in accordance with the legal requirements.
  • Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with the legal requirements or to request their transmission to another controller.
  • Complaint to the supervisory authority: In accordance with the law and without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a data protection supervisory authority, in particular a supervisory authority in the Member State in which you are habitually resident, the supervisory authority of your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you data violates the GDPR.

Definitions

This section provides you with an overview of the terms used in this privacy policy. Many of the terms are taken from the law and defined above all in Art. 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are primarily intended to serve the purpose of understanding. The terms are sorted alphabetically.

  • IP masking: “IP masking” is a method in which the last octet, i.e. the last two numbers of an IP address, is deleted so that the IP address can no longer be used to uniquely identify a person. Therefore, IP masking is a means of pseudonymizing processing methods, especially in online marketing
  • Conversion measurement: Conversion measurement (also known as “visit action evaluation”) is a method by which the effectiveness of marketing measures can be determined. For this purpose, a cookie is usually stored on the users’ devices within the websites on which the marketing measures are carried out and then retrieved again on the target website. For example, we can track whether the ads we place on other websites have been successful.
  • Personal data: “Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.B. cookie) or to one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Profiles with user-related information: The processing of “profiles with user-related information”, or “profiles” for short, includes any type of automated processing of personal data, which consists in the fact that these personal data are used to address certain personal aspects relating to a natural person (depending on the type of profiling, different information regarding demographics, behavior and interests, such as.B. interaction with websites and their contents, etc.) analyze, evaluate or predict (e.B interests in certain content or products, click behavior on a website or location). Cookies and web beacons are often used for profiling purposes.
  • Responsible: “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Processing: “Processing” means any operation or set of operations performed with or without the aid of automated procedures in connection with personal data. The term goes far and covers practically every handling of data, be it the collection, evaluation, storage, transmission or deletion.
Legal text by Dr. Schwenke - please click for further information.