Privacy Policy

1. Data protection at a glance

General information

The following information provides a straightforward overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy set out below this text.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. You will find their contact details in the section “Information on the controller” in this privacy policy.

How do we collect your data?

Your data is collected in part by you providing it to us. This may be, for example, data you enter into a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (for example your internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected in order to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated via the website, the transmitted data is also processed for contract offers, orders, or other enquiries.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given your consent to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. You further have a right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this and any other questions on the subject of data protection.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be analysed statistically. This happens primarily by means of what are known as analytics programs.

Detailed information on these analytics programs can be found in the privacy policy below.

2. Hosting and content delivery networks (CDN)

Bunny.net CDN

We use the content delivery network Bunny.net. The provider is BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (hereinafter “Bunny.net CDN”).

Bunny.net CDN is a globally distributed content delivery network. Technically, the transfer of information between your browser and our website is routed through the content delivery network. This allows us to improve the global availability and the performance of our website. The CDN records the IP address, which is however anonymised. The CDN also records personal data where such data is entered by the user themselves (for example by submitting a contact form on the website).

The use of Bunny.net CDN is based on our legitimate interest in providing our web offering as reliably and securely as possible (Art. 6(1)(f) GDPR).

Further information on Bunny.net CDN can be found here: https://bunny.net/privacy/.

Data processing agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.

When you use this website, various items of personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the internet (for example when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller responsible for data processing on this website is:

ideamano GmbH
Hertener Str. 39
45657 Recklinghausen
Germany

Telephone: +49 2361 9386555
Email: info@ingolfchristianernst.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (such as names, email addresses, or similar).

Storage period

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (such as retention periods under tax or commercial law); in the latter case, deletion takes place once those grounds cease to apply.

General information on the legal bases for data processing on this website

Where you have consented to the data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR, or Art. 9(2)(a) GDPR where special categories of data pursuant to Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, the data processing is additionally based on Art. 49(1)(a) GDPR. Where you have consented to the storage of cookies or to access to information on your terminal equipment (for example via device fingerprinting), the data processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. We further process your data where it is required for compliance with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. Information on the legal bases relevant in each individual case is provided in the following sections of this privacy policy.

Information on data transfer to third countries that are not secure under data protection law, and on transfers to US companies that are not DPF-certified

Among other things, we use tools from companies established in third countries that are not secure under data protection law, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in those countries. We point out that in third countries that are not secure under data protection law, no level of data protection comparable to that of the EU can be guaranteed.

We point out that the USA, as a secure third country, generally offers a level of data protection comparable to that of the EU. A transfer of data to the USA is accordingly permissible if the recipient holds a certification under the “EU-US Data Privacy Framework” (DPF) or has appropriate additional safeguards in place. Information on transfers to third countries, including the data recipients, can be found in this privacy policy.

Recipients of personal data

In the course of our business activities we work with various external parties. This sometimes also requires the transfer of personal data to those external parties. We only disclose personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so (for example the disclosure of data to tax authorities), where we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or where another legal basis permits the disclosure. Where processors are used, we disclose personal data of our customers only on the basis of a valid data processing agreement. In the case of joint processing, a joint controllership agreement is concluded.

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

WHERE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

Information, rectification and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification or erasure of that data. You may contact us at any time regarding this and any other questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you may request the restriction of the data processing instead of erasure.
If we no longer need your personal data but you require it for the exercise, defence or establishment of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. For as long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, that data may – apart from being stored – only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to advertising emails

We hereby object to the use of contact data published within the scope of the imprint obligation for the purpose of sending advertising and information material that has not been expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam emails.

4. Data collection on this website

Cookies

Our website uses what are known as “cookies”. Cookies are small data packets and do not cause any damage to your terminal equipment. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (known as third-party cookies). Third-party cookies enable the integration of certain services provided by third-party companies within websites (for example cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary, since certain website functions would not work without them (for example the shopping cart function or the display of videos). Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (for example the shopping cart function), or to optimise the website (for example cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of that consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent may be withdrawn at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

You can find out which cookies and services are used on this website in this privacy policy.

Server log files

The provider of these pages automatically collects and stores information in what are known as server log files, which your browser automatically transmits to us. These are:

browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimisation of its website – for this purpose, the server log files must be recorded.

Contact form

If you send us enquiries via the contact form, the details you provide in the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry is connected with the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent may be withdrawn at any time.

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies (for example once your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Spam protection with Cloudflare Turnstile

To protect our forms (contact form and newsletter sign-up) against abusive automated use, we use the service “Turnstile”. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Turnstile uses technical characteristics (including IP address and browser signals) to check whether an entry originates from a human or from a machine. The script required for this is not loaded until you click into a form field. Anyone who merely reads our pages does not establish a connection to Cloudflare.

Turnstile is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in warding off spam and in the security of its forms. Where corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal equipment within the meaning of the TDDDG. Consent may be withdrawn at any time.

In this context, data may be transferred to Cloudflare, Inc. in the USA. The transfer is based on the adequacy decision of the EU Commission regarding the EU-US Data Privacy Framework, under which Cloudflare is certified.

Further information on data protection at Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/.

Enquiry by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry including all personal data arising from it (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The data you send to us via contact enquiries remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies (for example once your request has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Communication via WhatsApp

For communication with our customers and other third parties we use, among other things, the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from gaining access to the content of the communication. WhatsApp does, however, gain access to metadata generated in the course of the communication process (for example sender, recipient and time). We further point out that, according to its own statement, WhatsApp shares personal data of its users with its US-based parent company Meta. Further details on the data processing can be found in WhatsApp’s privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

WhatsApp is used on the basis of our legitimate interest in communicating as quickly and effectively as possible with customers, prospective customers and other business and contractual partners (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, the data processing is carried out exclusively on the basis of that consent; it may be withdrawn at any time with effect for the future.

The communication content exchanged between you and us on WhatsApp remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies (for example once your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.

The company holds a certification under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/7735.

We use WhatsApp in the “WhatsApp Business” variant.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.

We have configured our WhatsApp accounts so that there is no automatic synchronisation of data with the address book on the smartphones in use.

Communication via Signal

For communication with our customers and other third parties we use, among other things, the instant messaging service Signal. The provider is Privacy Signal Messenger, LLC, 650 Castro Street, Suite 120-223, Mountain View, CA 94041 (hereinafter “Signal”).

Communication takes place via end-to-end encryption (peer-to-peer), which prevents Signal or other third parties from gaining access to the content of the communication. Signal does, however, gain access to technical data generated in the course of the communication process (for example auth tokens, keys, push tokens).

Further details on the data processing can be found in Signal’s privacy policy at: https://signal.org/legal/#privacy-policy.

Signal is used on the basis of our legitimate interest in communicating as quickly and effectively as possible with customers, prospective customers and other business and contractual partners (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, the data processing is carried out exclusively on the basis of that consent; it may be withdrawn at any time with effect for the future.

The communication content exchanged between you and us on Signal remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies (for example once your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.

5. Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any analyses of its own. It merely serves to manage and deliver the tools integrated through it. Google Tag Manager does, however, record your IP address, which may also be transferred to Google’s parent company in the United States.

Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and straightforward integration and management of various tools on its website. Where corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal equipment (for example device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the origin of the user. This data is assigned to the respective terminal device of the user. It is not assigned to a user ID.

Furthermore, Google Analytics allows us to record, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and employs machine learning technologies in the data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (for example cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

Google Analytics IP anonymisation is activated. As a result, your IP address is truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with further services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Browser plug-in

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245.

Google Signals

We use Google Signals. When you visit our website, Google Analytics records, among other things, your location, search history and YouTube history, as well as demographic data (visitor data). This data can be used for personalised advertising with the help of Google Signals. If you have a Google account, the visitor data from Google Signals is linked to your Google account and used for personalised advertising messages. The data is also used to compile anonymised statistics on the user behaviour of our users.

Data processing agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Matomo

This website uses the open source web analytics service Matomo.

With the help of Matomo we are able to collect and analyse data on the use of our website by website visitors. This allows us to find out, among other things, when which page views took place and from which region they came. We also record various log files (for example IP address, referrer, browsers and operating systems used) and can measure whether our website visitors carry out certain actions (for example clicks, purchases and the like).

This analytics tool is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising. Where corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal equipment (for example device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

IP anonymisation

When analysing with Matomo we use IP anonymisation. Your IP address is truncated before the analysis, so that it can no longer be clearly attributed to you.

Cookieless analysis

We have configured Matomo so that it does not store any cookies in your browser.

Hosting

We host Matomo exclusively on our own servers, so that all analytics data remains with us and is not passed on.

Meta Pixel (formerly Facebook Pixel)

This website uses Meta’s visitor action pixel for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, however, the collected data is also transferred to the USA and to other third countries.

This makes it possible to track the behaviour of page visitors after they have been redirected to the provider’s website by clicking on a Meta advertisement. This allows the effectiveness of Meta advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Meta, so that a connection to the respective user profile on Facebook or Instagram is possible and Meta can use the data for its own advertising purposes in accordance with Meta’s data usage policy (https://www.facebook.com/about/privacy/). This enables Meta to serve advertisements on Facebook or Instagram pages and on other advertising channels. We as the site operator have no influence over this use of the data.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The processing carried out by Meta after the transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing the data protection information when using the Meta tool and for implementing the tool on our website in a manner that is secure under data protection law. Meta is responsible for the data security of the Meta products. You can assert data subject rights (for example requests for information) regarding the data processed on Facebook or Instagram directly with Meta. If you assert your data subject rights with us, we are obliged to forward them to Meta.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381.

In Meta’s privacy notices you will find further information on the protection of your privacy: https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the advertising settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must be logged in to Facebook.

If you do not have an account with Facebook or Instagram, you can deactivate usage-based advertising from Meta on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices.

Meta Conversion API

We have integrated the Meta Conversion API on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, however, the collected data is also transferred to the USA and to other third countries.

The Meta Conversion API enables us to record the interactions of website visitors with our website and pass them on to Meta in order to improve advertising performance on Facebook and Instagram.

For this purpose, the following in particular are recorded: the time of access, the web page accessed, your IP address and your user agent, and where applicable further specific data (for example products purchased, value of the shopping cart, and currency). A complete overview of the data that can be recorded can be found here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

In Meta’s privacy notices you will find further information on the protection of your privacy: https://www.facebook.com/about/privacy/.

Data processing agreement

Meta Custom Audiences

We use Meta Custom Audiences. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

When you visit or use our websites and apps, take up our free or paid offers, transmit data to us, or interact with our company’s Facebook or Instagram content, we collect your personal data in this context. If you give us consent to use Meta Custom Audiences, we will transmit this data to Meta, allowing Meta to serve you relevant advertising. Furthermore, target groups can be defined using your data (lookalike audiences).

Meta processes this data as our processor. Details can be found in Meta’s terms of use: https://www.facebook.com/legal/terms/customaudience.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

TikTok Pixel

We have integrated the TikTok Pixel on this website. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter TikTok).

With the help of the TikTok Pixel we can show website visitors who have viewed our offers interest-based advertising on TikTok (TikTok Ads). At the same time, the TikTok Pixel allows us to determine how effective our advertising on TikTok is. This makes it possible to evaluate the effectiveness of TikTok advertisements for statistical and market research purposes and to optimise them for future advertising measures. Various usage data is processed in this context, such as IP address, page views, time spent on the site, operating systems used and origin of the user, information about the advertisement a person clicked on TikTok, or an event that was triggered (timestamp). This data is combined into a user ID and assigned to the respective terminal device of the website visitor.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to third countries is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.tiktok.com/legal/page/eea/privacy-policy/en and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Data processing agreement

LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by the LinkedIn Insight Tag

With the help of the LinkedIn Insight Tag we receive information about the visitors to our website. If a website visitor is registered with LinkedIn, we can analyse, among other things, the key professional data (for example career level, company size, country, location, industry and job title) of our website visitors and thus align our site better with the respective target groups. Furthermore, the LinkedIn Insight Tag allows us to measure whether visitors to our web pages make a purchase or carry out another action (conversion measurement). Conversion measurement can also take place across devices (for example from PC to tablet). The LinkedIn Insight Tag also offers a retargeting function which allows us to display targeted advertising to visitors of our website outside the website, whereby, according to LinkedIn, no identification of the advertising recipient takes place.

LinkedIn itself also records what are known as log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are truncated or (where they are used to reach LinkedIn members across devices) hashed (pseudonymised). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymised data is then deleted within 180 days.

The data collected by LinkedIn cannot be attributed to specific individuals by us as the website operator. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it for its own advertising purposes. Details can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

Insofar as consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6(1)(a) GDPR and Section 25 TDDDG. Consent may be withdrawn at any time. Insofar as no consent has been obtained, this service is used on the basis of Art. 6(1)(f) GDPR; the website operator has a legitimate interest in effective advertising measures including social media.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Objection to the use of the LinkedIn Insight Tag

You can object to the analysis of usage behaviour and to targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To avoid LinkedIn linking data collected on our website with your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Data processing agreement

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or only on a voluntary basis. We use newsletter service providers for the handling of the newsletter, as described below.

Brevo

This website uses Brevo for sending newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is a service which, among other things, can be used to organise and analyse the sending of newsletters. The data you enter for the purpose of receiving the newsletter is stored on Sendinblue GmbH’s servers in Germany.

Data analysis by Brevo

With the help of Brevo we are able to analyse our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links, if any, were clicked. In this way we can determine, among other things, which links were clicked particularly often.

We can also see whether certain predefined actions were carried out after opening or clicking (conversion rate). For example, we can see whether you made a purchase after clicking on the newsletter.

Brevo also enables us to divide newsletter recipients into different categories (“clustering”). Newsletter recipients can be divided, for example, by age, gender or place of residence. In this way the newsletters can be better tailored to the respective target groups.

If you do not want analysis by Brevo, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose.

Detailed information on the functions of Brevo can be found at the following link: https://www.brevo.com/newsletter-software/.

Legal basis

The data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.

Storage period

The data you provide to us for the purpose of receiving the newsletter is stored by us or by the newsletter service provider until you unsubscribe from the newsletter, and is deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected by this.

After you have been removed from the newsletter distribution list, your email address may be stored by us or by the newsletter service provider in a blacklist where this is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You may object to the storage if your interests outweigh our legitimate interest.

Further details can be found in Brevo’s privacy provisions at: https://www.brevo.com/legal/privacypolicy/.

Data processing agreement

Sending newsletters to existing customers

If you order goods or services from us and provide your email address in this context, that email address may subsequently be used by us for sending newsletters, provided we inform you of this in advance. In such a case, only direct advertising for our own similar goods or services is sent via the newsletter. You may cancel the sending of this newsletter at any time. A corresponding link can be found in every newsletter for this purpose. In this case, the legal basis for sending the newsletter is Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG (German Act Against Unfair Competition).

After you have been removed from the newsletter distribution list, your email address may be stored by us in a blacklist in order to prevent future mailings to you. The data from the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You may object to the storage if your interests outweigh our legitimate interest.

7. Online marketing and partner programmes

Affiliate programmes on this website

We participate in affiliate partner programmes. In affiliate partner programmes, advertisements of one company are placed on websites or other media of other companies in the affiliate partner network. If you click on one of these affiliate advertisements, you are forwarded to the advertised offer. If you subsequently carry out a particular transaction (conversion), the affiliate and, where applicable, the owner of the medium on which the advertisement was placed receives remuneration for this. In order to calculate this remuneration, the affiliate network operator must be able to track which advertisement brought you to the respective offer and led you to carry out the predefined transaction. Cookies or comparable recognition technologies (for example device fingerprinting) are used for this purpose.

The storage and analysis of the data is carried out on the basis of Art. 6(1)(f) GDPR. The participants in the affiliate programme have a legitimate interest in the correct calculation of the affiliate remuneration. Where corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal equipment (for example device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

We participate in the following affiliate programmes:

Amazon Partner Programme

The provider is Amazon Europe Core S.à.r.l. Details can be found in Amazon’s privacy policy at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.

AWIN

The operator of the affiliate network is AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter “AWIN”).

AWIN and the publisher are jointly responsible for the data processing in connection with the partner programme. The obligations incumbent on them jointly have been set out in a joint processing agreement. Under this agreement, you may address your data protection concerns to either controller. Whichever controller is contacted first will answer your enquiry. Each controller independently maintains data protection information pursuant to Art. 13, 14 and 26 GDPR and takes the necessary measures to protect personal data and to comply with the remaining GDPR provisions within its own company. The joint processing agreement can be accessed in AWIN’s terms and conditions at the following link: https://s3.amazonaws.com/docs.awin.com/Legal/Publisher+Terms/2020/DE+Publisher+Terms+GDPR+Annex.pdf.

8. Audio and video conferencing

Data processing

For communication with our customers we use, among other things, online conferencing tools. The tools we use in detail are listed below. If you communicate with us by video or audio conference via the internet, your personal data will be collected and processed by us and by the provider of the respective conferencing tool.

The conferencing tools record all data that you provide or use in order to use the tools (email address and/or your telephone number). The conferencing tools also process the duration of the conference, the start and end (time) of participation in the conference, the number of participants, and other “contextual information” in connection with the communication process (metadata).

Furthermore, the provider of the tool processes all technical data required to handle the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker, and the type of connection.

Where content is exchanged, uploaded or otherwise provided within the tool, this is also stored on the servers of the tool providers. Such content includes in particular cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.

Please note that we do not have full influence over the data processing operations of the tools used. Our options depend largely on the corporate policy of the respective provider. Further information on the data processing by the conferencing tools can be found in the privacy policies of the respective tools used, which we have listed below this text.

Purpose and legal bases

The conferencing tools are used to communicate with prospective or existing contractual partners, or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or with our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the relevant tools are used on the basis of that consent; consent may be withdrawn at any time with effect for the future.

Storage period

Data collected directly by us via the video and conferencing tools is deleted from our systems as soon as you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence over the storage period of your data that is stored by the operators of the conferencing tools for their own purposes. For details on this, please enquire directly with the operators of the conferencing tools.

Conferencing tools used

We use the following conferencing tools:

Google Meet

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on the data processing can be found in Google’s privacy policy: https://policies.google.com/privacy.

Privacy Policy

1. Data protection at a glance

General information

Data collection on this website

Who is responsible for collecting data on this website?

How do we collect your data?

What do we use your data for?

What rights do you have regarding your data?

Analytics tools and third-party tools

2. Hosting and content delivery networks (CDN)

Bunny.net CDN

Data processing agreement

3. General information and mandatory disclosures

Data protection

Information on the controller

Storage period

General information on the legal bases for data processing on this website

Information on data transfer to third countries that are not secure under data protection law, and on transfers to US companies that are not DPF-certified

Recipients of personal data

Withdrawal of your consent to data processing

Right to object to the collection of data in particular cases and to direct marketing (Art. 21 GDPR)

Right to lodge a complaint with the competent supervisory authority

Right to data portability

Information, rectification and erasure

Right to restriction of processing

SSL/TLS encryption

Objection to advertising emails

4. Data collection on this website

Cookies

Server log files

Contact form

Spam protection with Cloudflare Turnstile

Enquiry by email, telephone or fax

Communication via WhatsApp

Communication via Signal

5. Analytics tools and advertising

Google Tag Manager

Google Analytics

IP anonymisation

Browser plug-in

Google Signals

Data processing agreement

Matomo

IP anonymisation

Cookieless analysis

Hosting

Meta Pixel (formerly Facebook Pixel)

Meta Conversion API

Data processing agreement

Meta Custom Audiences

TikTok Pixel

Data processing agreement

LinkedIn Insight Tag

Data processing by the LinkedIn Insight Tag

Legal basis

Objection to the use of the LinkedIn Insight Tag

Data processing agreement

6. Newsletter

Newsletter data

Brevo

Data analysis by Brevo

Legal basis

Storage period

Data processing agreement

Sending newsletters to existing customers

7. Online marketing and partner programmes

Affiliate programmes on this website

Amazon Partner Programme

AWIN

8. Audio and video conferencing

Data processing

Purpose and legal bases

Storage period

Conferencing tools used

Google Meet

Data processing agreement

Klarheits-Impulse.Straight to your inbox.

🍪 This website uses cookies

Necessary Cookies

Analytics & Statistics

Klarheits-Impulse.
Straight to your inbox.