DATA PROTECTION DECLARATION FOR THE UTILIZATION OF ONLINE OFFERS AND SERVICES OF AD-MEDIA GMBH, COLOGNE, GERMANY
This Data Protection Declaration has the purpose of informing users regarding the type, realm of application, and purpose of gathering and utilizing personal data within our online offers and associated websites, functions, and contents as well as external online appearances such as our social media profiles (hereinafter referred to as ”online offers”).
1.) ACTING AND RESPONSIBLE ENTITY
The acting and responsible entity for gathering, processing, and utilizing your personal data in the sense of Germany’s “Bundesdatenschutzgesetz” is ad-media GmbH (hereinafter referred to as ”ad-media”). If you wish to object to the gathering, processing, or utilization of your data by ad-media, either in accordance with these data protection regulations as a whole or in respect of individual measures, you can send your objection via email, fax message or letter to the following addressees:
|Street, Building Number:||Industriestrasse 180|
|Postal Code, City, Country:||50999 Köln, Germany|
|Voice Phone:||+49 2236 962390|
|Fax Message:||+49 2236 962396|
DATA PROTECTION ADDRESSEE:
|Name:||Ben Green Consultancy UG|
Furthermore, you are of course entitled to obtain information on the data gathered and stored by us at anytime. Any such query is free of cost.
2.) GATHERING, PROCESSING, AND UTILIZATION OF PERSONAL DATA
2.1) Types of processed data
Basic data (such as names and addresses)
Contact data (such as email addresses, voice phone numbers)
Content data (such as text, photos, videos)
Utilization data (such as websites visited, interest shown in contents, access times)
Meta/communication data (such as equipment information, IP addresses)
2.2) Processing special data categories (Art. 9 Abs. 1 GDPR)
Data of this category are not processed by us.
2.3) Categories of individuals whose data may be processed
- Customers / interested individuals
- Visitors and users of our online offers
- Hereinafter, we will be referring to such individuals also as “users“
2.4) Personal data
Personal data comprise pieces of information on factual or personal matters of a defined or definable natural person. This includes, for example, your name, your phone number, your residential and postal address, and all other basic data that you are making available to us upon registration and when subsequently your customer account is created by us. Statistical data that we gather, for example, when our websites are visited and that cannot be directly associated with you as an individual, do not form part of these personal data. For instance, these may be statistics as to the pages of our websites that are particularly well received or the number of users that have visited certain pages.
For each customer who registers with us, we will establish a password-protected and direct access tool to the basic data gathered and stored for him or her (customer account). It is with the help of this tool that you will be able to obtain information on your data, as to the status of your orders, and how to manage this data. It shall be your obligation to keep your access data confidential and to ensure that this data is not made available to any unauthorized third party. We cannot, and will not, assume any responsibility or warranty for any unauthorized use of passwords, unless such unauthorized use is clearly and undoubtedly based on a failure on our part.
2.5) Gathering, processing and utilizing your personal data
Data protection is of utmost importance to us. For this reason, we strictly adhere to the legal obligations and regulations of the German Data Protection Law and all related stipulations. We gather, store, and process your data exclusively for the purpose of executing relevant contracts, for our service activities, technical administration and management, and our own marketing purposes and activities. Your personal data will only be forwarded, transmitted, or made available to any third party in another fashion or for some other purpose if this is essential for contract execution or invoicing or if you have explicitly given your prior consent. For instance, certain service providers such as printing agencies collaborating with us for purposes of project execution may receive data to be able to provide their services to us and to execute your contract. The utilization of data forwarded in such a fashion is permitted for such service providers only inasmuch as this it necessary for the execution of their services for us. Any other utilization of information is absolutely prohibited and none of the service providers collaborating with us will engage in such unauthorized activities. To execute your order, we will need your correct name, your address, and your invoicing data. We will need your email address to be able to confirm your contract and to communicate with you. We also utilize this data for your identification (customer login). Furthermore, you will receive the confirmation of your contract with us via your email address. Your personal data will be deleted if legal provisions of retaining such data do not stand against such deletion and if you have demanded that such data be deleted, or if such data is no longer necessary for the execution of the activity and the purpose for which the data has been stored, or if any such storage is prohibited for other legal reasons.
Ordering advertisements, trade journal subscriptions, books, participations in events, and concrete pens The data you provide for the ordering of goods will be exclusively used for the execution and processing of your order. After completing the order and upon full payment, your data will be deleted as soon as the legally binding trade and taxation provisions have expired, unless you have explicitly given your consent that this data may be utilized in the future as well
Your data will be forwarded to the delivery service company inasmuch as this is necessary for delivery of the goods you have ordered. To effect payment, we will also make your invoicing data available to the relevant credit institution/company. These institutions/companies are only entitled to utilize your data for the execution of your order, and explicitly not in any other manner and for other purposes
2.6) Utilization of your data for promotional and advertising purposes Apart from processing your data for the execution of any already existing contract you have with ad-media, we also utilize the data to communicate with you regarding orders, products and marketing campaigns and to inform you about, and suggest to you, certain products and services that may be of interest for you. You are entitled to object to the utilization of your personal data for promotional purposes, individually or as a whole, at any time. In this event, any such activity on our part will be immediately discontinued and there will be no further expenses other than the basic transmission fees that will have to be borne by you. A text message addressed to any of the contact data given in Item I. of this document (e.g. email, fax message, letter) will suffice to this end.
2.6.1) Newsletter and ePaper For the dispatch of our newsletter, we use the so-called double opt-in procedure, which means that we will only send you our newsletter via email, when you either have explicitly confirmed that you wish this newsletter service to be enabled by us or if there exists a legal basis for such activation. Should either be the case, we will send you a corresponding email message and ask you to confirm its reception by clicking one of the links contained in this email confirming that you indeed wish to receive our newsletter. Should you subsequently not wish to receive any subsequent edition of the newsletter, you are free to object to any further reception at any time and there will be no further expenses other than the basic transmission fees that will have to be borne by you. A text message addressed to any of the contact data given in Item I of this document (e.g. email, fax message, letter) will suffice to this end. There will, of course, also be a corresponding link for a discontinuation of the newsletter in every one of its editions that will serve the same purpose.
The following information is intended to make you aware of the contents of our newsletter and the registration, dispatch, and statistical evaluation procedures as well as your rights of objection. By subscribing to our newsletter, you are consenting to receiving the newsletter and to the relevant procedures as described. Content of newsletter: We send newsletters, emails and other electronic messages containing promotional information (hereinafter referred to as “newsletter“) only if there exists a corresponding consent on the part of the recipient or in the event of existing legal authorization to this effect. In the event and inasmuch newsletter contents are specifically described in the framework of user registration, such contents shall be relevant. Furthermore, our newsletters contain information pertaining to our products, offers, activities, campaigns, and our company.
Double opt-in and protocolling: Registration for our newsletter is carried out by means of the so-called double opt-in procedure. That is to say, after registration you will receive an email asking you to confirm this registration. This confirmation is necessary to ensure that unauthorized registrations via email are not possible. All newsletter registrations will be protocolled to be able to prove that all legal stipulations pertaining to the registration procedure have been observed. This includes the gathering and storage of the registration and confirmation date and time as well as the corresponding IP address. Also, any modification of the data stored with the dispatching service provider will be protocolled.
Registration data: To register for the newsletter, it is sufficient to provide us with your email address. As an additional option, we will request you to give us the name of a relevant individual to be able to personally address someone in the newsletter
Success ratings: Our newsletters contain a so-called “web beacon“, that is, a 1x1 pixel file, which is called from the server when the newsletter is opened. As a consequence, technical information pertaining to this activity such as data on the system you are using, your browser, but also your IP address and the date and time of your call will be gathered. This information is used to improve our services on the basis of the technical data provided or by means of the target groups, their reading behaviour, and the location of their calls and/or queries (that can be determined via their IP addresses), or their access times. These statistics also include information on whether newsletters have been opened, when they were opened, and what links were clicked. For technical reasons, this information can be attributed to individual newsletter recipients. However, it is neither our intention, nor that of our dispatch service provider, to track and monitor individual users. These evaluations merely serve to enable us to recognize the individual reading behaviour of our users in order to adapt our contents accordingly or to send out different contents to better match the interest of our users.
Our newsletter and/or ePaper dispatch and/or success evaluations are always carried out on the basis of a consent given by the recipient in accordance with Art. 6 Abs. 1 lit. a, Art. 7 GDPR i.V.m § 7 Abs. 2 Nr. 3 UWG and on the basis of relevant legal permission according to § 7 Abs. 3 UWG.
The protocolling of the registration procedure is based on our justified interests in accordance with Art. 6 Abs. 1 lit. f GDPR and serves as a proof that the recipient has given his or her consent to be sent and to receive the newsletter and/or the ePaper.
Objections – You may indicate a discontinuation of your preparedness, or revoke your consent, to receiving our newsletter and/or ePaper at any time. A corresponding link to discontinue the reception of our newsletter and/or ePaper can be found at the end of every newsletter edition. If you have only registered for the newsletter and unsubscribed to the same, your personal data will be deleted
2.8) Processing purposes
Making our online offers available, including their contents functions Executing contractually agreed obligations, related services, and customer care and support. Answering contact queries and communicating with users. Marketing, promotion, and market research. Safety measures.
3.) Relevant Legal Provisions
In accordance with Art. 13 GDPR, we are informing you about the relevant legal provisions of our data processing activities. Inasmuch as these legal provisions are not mentioned in the data protection declaration, the following shall apply: The legal basis for obtaining consents are Art. 6 Abs. 1 lit. A and Art. 7 GDPR, the legal basis for processing activities fort he fulfilment of our services and execution of contractual measures and answering queries is Art. 6 Abs. 1 lit. b GDPR, the legal basis for processing for fulfilling our legal obligations is Art. 6 Abs. 1 lit. c GDPR, and the legal basis for processing the execution and maintenance of our justified legal interests is Art. 6 Abs. 1 lit. f GDPR. In the event that vital interests of the relevant person in question or any other natural person make a processing of personal data necessary, Art. 6 Abs. 1 lit. d GDPR shall serve as the legal basis
4.) Modifications and Updates in our Data Protection Declaration
We kindly request you to regularly inform yourselves about the content of our data protection declaration. We always adapt our data protection declaration as soon this is required on account of changes in our data processing activities. We will inform you as soon as any modification requires some kind of cooperation on your part (i. e. consent) or if some other individual messaging or information becomes necessary.
5.) SAFETY MEASURES
In accordance with Art. 32 GDPR, the current state-of-the-art of relevant technologies, implementation costs and the nature, the extent, the circumstances, and the processing purposes, and the different probabilities of occurrence and their risk levels for the rights and liberties of natural persons, we will take organizational measures to ensure that, with a reasonable degree of probability, a sound level of safety with respect to a certain risk is ensured. These measures especially include aspects of data confidentiality, integrity, and availability by monitoring the physical access to said data but also software based and procedural access, inputting, forwarding, availability, and separability aspects. Furthermore, we have ensured the presence of procedures that enable individuals to exercise their rights, to demand the deletion of data, and to obtain appropriate reactions in the event that data is endangered. Furthermore, we take into account the protection of personal data as early as during the initial stages of development, i.e. when selecting hardware, software, and, based on the principle of best data protection, by means of appropriate technological design and data protection friendly presettings (see Art. 25 GDPR).
Our safety measures especially include the encrypted transmission of data between your browser and our server.
6.) COOPERATION WITH DATA PROCESSING SUBCONTRACTORS AND OTHER THIRD PARTIES
Inasmuch as we make data available, transmit, or otherwise permit access to the same in some other fashion within the framework of our processing procedures to other individuals or companies (data processing subcontractors or other third parties), any such undertaking will only be carried out on the basis of a legally permitted activity (e.g. if and when a transfer of data to a third party such as an invoicing service provider in accordance with Art. 6 Abs. 1 lit. b GDPR is necessary for the execution of the contract), if you have agreed to this procedure, if a legal obligation so requires, or on the basis of our justified interest. (e.g. when installing appointees, web hosters, etc.).
Inasmuch as we contract a third party with the processing of data on the basis of a so-called ”Auftragsverarbeitungsvertrag“, this contracting will take place on the basis of Art. 28 GDPR
7.) TRANSMISSION TO COUNTRIES OTHER THAN EU AND EEA MEMBERS
If and inasmuch as we process data in a third country (i.e. a country that is not a member of the European Union or the European Economic Area), or in the event that this takes place when the services of a third party are used, or if this takes place by revelation or transmission to third parties, this will only be carried out if necessary for the fulfilment of our (pre-)contractual obligations, on the basis of your consent, on the basis of a legally binding obligation, or on the basis of our justified interest. Subject to legal or contractual authorization, we process ourselves or have data processed in a third country only in the case of special preconditions in accordance with Art. 44 ff. GDPR. That is to say, this processing will take place, for example, on the basis of special warranties such as the officially recognized determination and recognition that data protection in this country corresponds to the data protection level of the EU (i.e. in the USA on the basis of the “Privacy Shield“) or on the basis of officially recognized special contractual obligations (so-called ”Standardvertragsklauseln“, “Standard Contractual Clauses”).
8.) RIGHTS OF RELEVANT INDIVIDUALS
You are entitled to demand a confirmation whether relevant data is processed, regarding the general utilization of this data, and regarding further general information and the existence of copies of this data according to Art. 15 GDPR.
You are entitled, in accordance with Art. 16 GDPR, to demand that your data be updated and/or perfected or that your data be corrected in the event that such data is incorrect.
You are entitled, in accordance with Art. 17 GDPR, to demand that relevant data will be deleted immediately. and/or that such data, in accordance with Art. 18 GDPR, will only be partially processed.
You are entitled to demand that the data you have made available to us will in turn be received by you in accordance with Art. 20 GDPR and that said data will be transmitted to other representatives/appointees.
You are further entitled to demand in accordance with Art. 77 GDPR to submit a complaint with the relevant supervisory authority.
9.) RIGHT OF REVOCATION
For future purposes, you are entitled to revoke any consent in accordance with Art. 7 Abs. 3 GDPR.
10.) RIGHT OF OBJECTION
You are entitled to object to the future processing of data relevant to you at any time in accordance with Art. 21 GDPR. This objection can especially be raised against the processing of said data for purposes of direct promotional activities.
11.) COOKIES, RIGHT OF OBJECTION AGAINST DIRECT PROMOTIONAL MEASURES, AND REACHABILITY MEASUREMENTS
Cookies are pieces of information that are transmitted from our webserver, or webservers of third parties, to your webservers and are stored there for later calls. Cookies may be small files or other types of information storage. This storage helps us to especially design our websites and our offers to you and help you as a user in that, for example, certain inputs can be stored by you in such a way that you do not need to constantly repeat these inputs.
We set temporary and permanent cookies, i.e. small files that are stored on your equipment (for an explanation of the term and functioning, please refer to the last passage of the data protection declaration). Cookies partially serve to improve operating safety and are also required to operate our online offers (e.g. for displaying the website) or to store user decisions when confirming the cookie banner. We or our technology partners also employ cookies for purposes of reachability and marketing analyses. You will be informed about this in the course of this data protection declaration.
We use “session cookies“ that are only stored during current visits on our online appearance (e.g. to be able to store your login status or the shopping cart function and thus the utilization of our online offers). In a session cookie, a randomly created unambiguous identification number is stored, a so-called session ID. Furthermore, a cookie contains information on its origin and its storage retention period and expiration. These cookies are incapable of storing other information. Session cookies are deleted when you have ended the utilization of our online offers by, for example, logging out or by exiting the browser.
If you do not wish cookies to be stored on your computer, you are requested to disable the corresponding option in the system settings of your browser. Stored cookies can be deleted in the systems settings of your browser. The exclusion of cookies may result in a limitation of functions of this online offer.
This data protection declaration will inform you about the implementation of cookies in the framework of pseudonym reachability measurements.
You may object to the utilization of cookies employed for reachability measurements and promotional purposes via the opt out page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and, in addition, via the U.S. website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/). General objections against the employment of cookies utilized for online marketing purposes can be raised via a multitude of services, and especially in the case of tracking, via die U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, a storage of cookies can be prevented by disabling them in the browser settings. Please note that in such cases it may be possible that not all functions of this online offer can be used.
12.) GATHERING ACCESS DATA AND LOG FILES
Based on our justified interest in the sense of Art. 6 Abs. 1 lit. f. GDPR, we gather data about every access to the server that hosts this service (so-called server log files). Access data include the name of the website called, the file, the date, and the time of the call, the data volume, information on successful calls, browser types including versions, the user’s operating system, referrer URL (the site previously visited), the IP address, and the calling provider.
Foe safety reasons (for instance, (e.g. for clearance of unauthorized use of cases of fraudulent activities), log file information will be stored for a maximum period of seven days and will be deleted thereafter. Data whose further storage will be required for purposes of evidence or proof will not be deleted until the matter in question is finally clarified.
With every access to the sites of ad-media, utilization data will be transmitted by the corresponding internet browser and stored in so-called server log files. The data sets thus stored contain the following information: date and time of calling the site, name of the called site, IP address, referrer URL (original URL, from where you have accessed the websites), the data volume transmitted as well as product and version information of the browser used. IP addresses of users will be deleted or anonymized right after utilization. In the case of anonymization, IP addresses will be modified in such a fashion that individual input data on personal or factual aspects and relationships can either not be associated at all with a certain natural person or only with unreasonable expense in terms of time, costs, and labour. These log file data sets will be evaluated by us in an anonymized form to further improve our offers and to make them more user friendly, to be able to detect errors more quickly and to ameliorate them, and to control server capacities. For example, we can better understand in this fashion at what time of the day the utilization of our website and our offers seems particularly appealing to users so that we can provide appropriate data volumes to ensure that your purchases can be handled as quickly as possible. Furthermore, an analysis of protocolled files can help us detect possible errors on our website and within our offers so that such errors can be eliminated in a quicker way.
13.) DATA DELETION
The files processed by us are either deleted or their processing is limited in accordance with the provisions of Art. 17 und 18 GDPR. Unless explicitly stated otherwise in this data protection declaration, the data stored with us will be deleted as soon as they are no longer required and if there are no legal obligations contradicting such deletion. Inasmuch as data is not deleted because it is necessary for other and legally permitted purposes, its processing will be limited. That is to say, data will be partially blocked and not processed for other purposes. This will apply, for example, for data that has to be retained for reasons of taxation and legally binding commercial and trading provisions.
According to existing legal stipulations, the mandatory retention period is six years in accordance with § 257 Abs. 1 HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, booking documentation, etc.) and ten years in accordance with § 147 Abs. 1 AO (books, records, status reports, booking documentation, commercial and business letters, documents relevant for taxation purposes, etc.).
14.) FULFILMENT OF CONTRACTUAL OBLIGATIONS AND SERVICES
We process basic data (such as names and addresses of users), contract data (such as services made use of, names of contacting persons, information on payments) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 Abs. 1 lit b. GDPR. Inputs designated in the online forms as mandatory are essential for concluding a contract.
If you register for this purpose, we will optionally create a user account for you. During this registration procedure, you will be informed about the inputs that are mandatory for this purpose. User accounts are not made publically available and cannot be indexed by search engines. Once you have cancelled your user account, your data related to this user account will be deleted, provided that their retention is not necessary for reasons of taxation and legally binding commercial provisions in accordance with 6 Abs. 1 lit. c GDPR. It is up to you to decide whether you store and save your data upon cancellation and prior to termination of the contract. We are entitled to irreversibly delete all your data that have been stored during the lifetime of the contract.
In the course of the initial registration process and in the event of renewed registrations, and for utilization of our online services, we will store your IP address plus the date and time of your corresponding action. This storage is carried out on the basis of our justified interest as well as your protective measures against misuse of your data and other unauthorized utilization. This data will never be forwarded to anyone else, except when this becomes necessary for pursuing our claims or if there exists a legally binding obligation in accordance with Art. 6 Abs. 1 lit. c GDPR.
We process utilization data (e.g. the visited websites comprising our online offers, interest in our products or the like) and content data (e.g. inputs in the contact form or user profile) for promotional purposes in a user profile to pop in and make available to you, for example, product information on the basis of the products and services you have hitherto ordered or made use of.
The deletion will be carried out after termination of the legally binding warranty periods and comparable obligations. Every three years, the necessity of storing and retaining such data will be examined. In the event of legally binding obligations of archival, the deletion will be carried out when the corresponding retention period has expired (e.g. for commercially relevant matters, six years; for taxation matters, ten years mandatory storage and retention. Inputs carried out in the customer account will remain there until the account is deleted.
15.) ESTABLISHING CONTACT
When establishing contact with us (via contact form or email), the information you have given will be handled and processed in accordance with Art. 6 Abs. 1 lit. b) GDPR
The information given by you can be stored in our Customer Relationship Management System ("CRM System") or comparable query management tools.
We will delete queries unless they continue to be necessary. We will examine this necessity every two years; queries of customers having a customer account will be permanently stored. For the deletion procedure in this case, we refer to the information given in connection with the customer account. In the case of legally binding obligations of archival, the deletion will take place after expiration of the relevant time period (e.g. for commercially relevant matters, six years; for taxation matters, ten years mandatory storage and retention).
16.) ONLINE APPEARANCE IN SOCIAL MEDIA
We have online appearances within social networks and on platforms to be able to communicate with already existing or prospective customers and users in these media, and to be able to inform them about our products and services. When these networks and platforms are called, the relevant terms and conditions and the data processing regulations of the provider in question will be applicable.
Unless stated otherwise in our data protection declaration, we will process your data inasmuch as you will be communicating with social networks and on platforms, for instance, if you write articles or other contributions within our online appearances or if you send us messages.
17.) WEB ANALYSIS - GOOGLE ANALYTICS
Based on our justified interests (i.e. interest in the analysis, the optimization, and the commercially relevant operation of our online appearance in the sense of Art. 6 Abs. 1 lit. f. GDPR), we employ Google Analytics, a web analysis service of Google.
Google has been certified under the Privacy Shield Agreement and thus guarantees to comply with the European Data Protection Laws. (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google Analytics is a service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", i.e. text files that are stored on your computer and that enable us to carry out an analysis of how our offers via Google are utilized. As a rule, the information on the utilization of our websites that are gathered by the cookie (including your IP address) is transmitted by Google to a server in the USA and stored there. Please note that, on our websites, Google Analytics has been supplemented with the code ”gat._anonymizeIp();;“ to ensure an anonymized recording of IP addresses (so-called IP masking). Your IP address, therefore, is recorded by Google, upon our instigation, only in an abbreviated form, a measure that ensures anonymization and also ensures that conclusions regarding your identity cannot de drawn. So when this IP anonymization is enabled on our websites, Google will carry out a prior abbreviation of your IP address within the European Union and other contracting states comprising the EEA. It is only in very special and exceptional cases that the full IP address will be transmitted by Google to a server in the United States and abbreviated there. Google will use this information to evaluate the utilization of our websites to generate reports to this effect and to provide additional services associated with the utilization of websites and the internet to us. In this context, the processed data may also yield pseudonym user profiles. The IP address transmitted by your browser in the framework of Google Analytics activities will not be combined with other Google data. Any transmission of this data by Google to third parties will only take place on the basis of legal provisions or in the framework of processing data associated with orders. In no case will Google combine your data with other data gathered by Google itself. By utilizing these websites, you are giving your consent to the processing of your data gathered by Google in the above described fashion and for the above outlined purposes. You can prevent the storage of cookies by enabling the corresponding function in your browser software. However, we must inform you that in this case it may be possible that not all functions of our websites can be utilized in their entirety. Furthermore, you can prevent that Google will gather the data generated by this cookie and related to the utilization of these websites (including your IP address) and that this data will be processed by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Click here to disable Google Analytics
Further information on the utilization of data by Google, setting options, and possible types of objection can be found on the following Google websites: https://www.google.com/intl/de/policies/privacy/partners („Datennutzung durch Google bei Ihrer Nutzung von Websites oder Apps unserer Partner“), https://policies.google.com/technologies/ads („Datennutzung zu Werbezwecken“), https://adssettings.google.com/authenticated („Informationen verwalten, die Google verwendet, um Ihnen Werbung einzublenden“).
18.) FACEBOOK SOCIAL PLUGINS
Based on our justified interests (i.e. our interest in the analysis, the optimization, and the commercially professional and economical operation of our online offers in the sense of Art. 6 Abs. 1 lit. f. GDPR), we use social plugins ("Plugins") of the social network facebook.com, that is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. ("Facebook"). These plugins can generate and display elements of interaction or contents (e.g. videos, graphics or texts) and are identifiable by means of the Facebook logos (white “f“ on blue tile, or expressions such as "Like", "Gefällt mir" or a ”thumbs up” symbol) or are identifiable by the expression "Facebook Social Plugin". The listing and appearance of Facebook Social Plugins can be viewed at: https://developers.facebook.com/docs/plugins/. Facebook has been certified under the Privacy Shield Agreement and thus guarantees to adhere to the European Data Protection Laws. (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
If you call a function of this online offer that contains a plugin of this kind, your equipment will establish a direct connection to the servers of Facebook. The content of this plugin will be directly transmitted by Facebook to your equipment and incorporated into the online offer. This entails that on the basis of processed files user profiles of you can be generated. Thus, we do not have any influence on the amount and nature of the data that Facebook gathers with the help of this plugin and are therefore informing you in the following what we know in this context. By incorporating the plugins, Facebook will receive the information that you have called the corresponding page of the online offer. When you are logged into Facebook, Facebook can attribute your visit to your Facebook account. If you interact with the plugins, for example, by clicking the ”Like” button or by making a comment, the corresponding information will be directly transmitted from your equipment to Facebook and will be stored there. Even if you are not a member of Facebook, it is possible that Facebook will find out your IP address and store it. According to Facebook, in Germany only anonymized IP addresses are stored.
The purpose, volume and nature of data collection and further processing of the data by Facebook and your corresponding rights and setting options for the protection of your privacy can be found via Facebook’s data protection information at: https://www.facebook.com/about/privacy/.
19.) INCORPORATION OF SERVICES AND CONTENTS OF THIRD PARTIES
Based on our justified interests (e.g. interest in the analysis, the optimization, and the commercially professional and economical operation of our online offers in the sense of Art. 6 Abs. 1 lit. f. GDPR), we make use of the service and content offers of third parties by incorporating these contents and services such as videos or fonts (hereinafter uniformly referred to as ”contents”). However, this always presupposes that the providers of these contents will be aware of your IP address because this information is essential for the transmission of these contents to your browser. That is to say, knowing your IP address will be necessary for the display of these contents. We will take utmost care to employ only such contents whose providers only use your IP address for the delivery of such contents. Furthermore, third parties can use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. By means of these pixel tags, information such as visitor traffic can be evaluated on the pages of the website in question. Pseudonym information can also be stored in cookies on your equipment and may contain technical information pertaining to your browser and your operating system, referring websites, dates and times of visits, and other information on the utilization of our online offers and can be associated with information from other sources.
The following listing provides an overview of third party providers and their contents and links to their data protection declarations which contain further information on the processing of data and, partially already mentioned in this document, possibilities of objection (so-called opt-outs):
- External fonts of Google, LLC., https://www.google.com/fonts (”Google Fonts“). The incorporation of Google Fonts takes place via a server call at Google (usually in the USA). Data protection declaration at: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
- Maps of provider ”Google Maps“ of third party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection declaration at: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
- Maps of provider ”Google Maps“ of third party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection declaration at: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
- Our online offers include functions of the provider Google+. These functions are offered by the third party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you are logged into your Google+ account, you can link the contents of our pages with your Google+ user account by clicking the Google+ button. As a result, Google can attribute visits of our pages to your user account. Please note that as a provider of our pages we do not receive any information on the contents of the transmitted data and their utilization by Google+. Data protection declaration at: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
- Our online offers incorporate functions of the provider Instagram. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. When you are logged into your Instagram account, you can link, by clicking the Instagram button, the contents of our pages with your Instagram profile. As a result, Instagram can attribute visits on our pages to your user account. Please note that we as a provider of our pages do not receive any information on the contents of the transmitted data and their utilization by Instagram. Data protection declaration at: http://instagram.com/about/legal/privacy/.
- Our online offers utilize the marketing functions (so-called “LinkedIn Insight Tag“) of the LinkedIn network, which is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every call of one of our pages containing functions of LinkedIn will establish a connection to servers of LinkedIn. LinkedIn is then informed that you have visited our internet pages via your IP address. In particular, the LinkedIn Insight Tag enables us to analyse the success of our campaigns within LinkedIn and is of use for us to determine target groups on the basis of user interaction with our online offers. If you are registered with LinkedIn, LinkedIn will be able to attribute your interaction with our online offers to your user account. Even if you click the “recommend button” of LinkedIn while being logged into your LinkedIn account, it is still possible for LinkedIn to attribute your visit on our internet pages to you and your user account. LinkedIn is certified under the Privacy Shield Agreement and thus guarantees that European data Protection Laws are observed. (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Data protection declaration at: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
- Our online offers permit the incorporation of functions of the service provider/platform Twitter (hereinafter referred to as ”Twitter“). Twitter is offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. These functions enable the display of our contributions on Twitter in the framework of our online offers, the linking to our profile, and the possibility of interaction with our contributions to Twitter and the functions of Twitter. It is also possible for us to determine and measure whether, and to what extent, you can reach our online offers via the advertisements we have published on Twitter (so-called conversion measurement). Amongst others, Twitter is certified under the Privacy Shield Agreement and thus guarantees that European Data Protection Laws are observed. (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Data protection declaration at: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
- Newsletter2Go is used as the newsletter software. Your data are transmitted to Newsletter2Go GmbH in the process. Newsletter2Go is forbidden to sell your data or to use them for any other purpose than to dispatch newsletters. Newsletter2Go is a German certified service provider that was selected in accordance with the requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Further information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/