Privacy Policy

Controller responsible for data processing:

Mirja Giebler-Buck
Kirchbergweg 4
82544 Egling
Germany

We are pleased that you are interested in our website. Protecting your privacy is very important to us. Below we will provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing personal information. Each time a website is accessed, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred, and the requesting provider (access data), and documents the retrieval. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offer. This serves to protect our legitimate interests in the proper presentation of our offer, which outweigh others in the context of a balancing of interests in accordance with Art. 6(1) sentence 1 lit. f of the GDPR. All access data is processed only as long as necessary for the purposes described above.

Hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our collaboration with them, please refer to the contact details provided in this privacy policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA.

The adequacy decision for the USA serves as the basis for third-country transfers, provided the respective service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Brazil, Mexico, India, Ukraine. There is no adequacy decision from the European Commission for these countries. Our collaboration with them is based on the following guarantees: Standard contractual clauses from the European Union.

2. Data Processing for Contact and Customer Communication

Contacting Us

As part of contacting us, we collect personal data to process your inquiries in accordance with Art. 6(1) sentence 1 lit. b of the GDPR if you voluntarily provide this information to us (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such because, in these cases, we need the data to process your contact request. Which data is collected can be seen in the respective input forms. After processing your request, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a of the GDPR, or if we reserve the right to use data beyond that which is legally permitted and about which we inform you in this policy.

After fully processing your customer inquiry, your data will be restricted for further processing and deleted after the retention periods under tax and commercial law have expired, in accordance with Art. 6(1) sentence 1 lit. c of the GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a of the GDPR or if we reserve the right to further use your data as legally permitted and about which we inform you in this policy.

3. Advertising by Email

3.1 Email Newsletter with Subscription, Newsletter Tracking with Separate Consent

If you subscribe to our newsletter, we use the data required or separately provided by you to send you our email newsletter regularly based on your consent in accordance with Art. 6(1) sentence 1 lit. a of the GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact details provided below or via a link provided in the newsletter. After unsubscribing, we will delete your email address from the distribution list unless you have expressly consented to the further use of your data in accordance with Art. 6(1) sentence 1 lit. a of the GDPR or if we reserve the right to further use your data, which is legally permitted and about which we inform you in this policy.

If you have additionally given us your consent in accordance with Art. 6(1) sentence 1 lit. a of the GDPR to analyze our newsletters, we will also analyze your interaction with our newsletter by measuring, storing, and evaluating opening rates and click rates to tailor future newsletter campaigns ("newsletter tracking").

For this analysis, the emails sent include one-pixel technologies (e.g., so-called web beacons, tracking pixels) that are stored on our website. For analysis, we link the following "newsletter data" in particular:

The page from which the page was requested (so-called referrer URL)
The date and time of access
The description of the type of web browser used
The IP address of the requesting computer
The email address
The date and time of registration and confirmation

and the one-pixel technologies with your email address or IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID.

You can unsubscribe from newsletter tracking at any time by sending a message to the contact details provided or via a link provided in the newsletter.

The information will be stored as long as you subscribe to the newsletter.

3.2 Newsletter Delivery

The newsletter and the newsletter tracking described above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our collaboration with them, please refer to the contact details provided in this privacy policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA.

The adequacy decision for the USA serves as the basis for third-country transfers, provided the respective service provider is certified. Certification is in place.

4. Cookies and Other Technologies

General Information

To make visiting our website more attractive and to enable the use of certain functions, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the browser session ends, meaning after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser during your next visit (persistent cookies).

Protection of Privacy on Devices

When using our online services, we use technologies that are absolutely necessary to provide the expressly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require consent for this purpose.

For non-essential functions, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not give consent, certain parts of the website may not be fully usable. Any consent you give remains valid until you adjust or reset the respective settings on your device.

Subsequent Data Processing through Cookies and Other Technologies

We use technologies that are essential for the use of certain functions on our website (e.g., website preference settings). These technologies collect and process IP addresses, the time of your visit, device and browser information, and information about your use of our website (e.g., your preferences). This serves our legitimate interest in optimizing the presentation of our offerings, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

We also use technologies to fulfill the legal obligations we are subject to (e.g., to prove consent for the processing of your personal data) as well as for web analytics and online marketing. Further information about this, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

If you have consented to the use of technologies according to Art. 6 para. 1 sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in this Privacy Policy.

4.2 Use of Wix Consent Manager Tool for Managing Consents

We use the Wix Consent Manager Tool on our website to inform you about the cookies and other technologies we use on our site, as well as to obtain, manage, and document your necessary consent to the processing of your personal data by these technologies. This is required under Art. 6 para. 1 sentence 1 lit. c GDPR to fulfill our legal obligation in accordance with Art. 7 para. 1 GDPR, which requires us to prove your consent to the processing of your personal data.

The Wix Consent Manager Tool is provided by Wix.com Ltd., 40 Nemal St., Tel Aviv 6350671, Israel ("Wix"). After you submit your cookie declaration on our website, the Wix web server stores your IP address, the date and time of your declaration, browser information, language, and the URL from which the declaration was sent, as well as information about your consent behavior. A cookie is also set, which contains information about your consent behavior. Your data will be deleted after 365 days unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data in ways permitted by law, about which we inform you in this declaration.

Our service providers are based and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA.

The adequacy decision for the USA applies as the basis for third-country transfers, provided that the respective service provider is certified. Such certification exists.

Our service providers are based and/or use servers in the following countries: Brazil, Mexico, India, Ukraine. For these countries, there is no adequacy decision by the European Commission. Our cooperation with these providers is based on the following safeguards: the European Union's Standard Contractual Clauses.

5. Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes

We use the following cookies and other technologies from third-party providers on our website. Unless stated otherwise for the individual technologies, this is based on your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. After the purpose has been fulfilled and the respective technology is no longer used by us, the data collected in this context will be deleted. You can revoke your consent at any time with future effect. For more information about your revocation options, please see the section "Cookies and Other Technologies." Further information, including the basis of our cooperation with individual providers, can be found under the respective technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact us via the contact information provided in this Privacy Policy.

6. Social Media

6.1 Social Buttons von Facebook (by Meta), Instagram (by Meta)

Our online presence on social networks

If you have given your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the aforementioned social media platforms. Pseudonymized user profiles are created from this data, which can be used, for example, to display advertisements both within and outside the platforms that are presumably tailored to your interests. Cookies are typically used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as contact information and details on your rights and settings to protect your privacy, please refer to the data privacy policies of the providers linked below. If you need further assistance, you can contact us.

Facebook (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information collected automatically by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing as part of visiting a Facebook (by Meta) fan page is based on a joint controller agreement pursuant to Art. 26 GDPR. More information (on Insights data) can be found [here].

Our service providers are located and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for the transfer of data to third countries, provided the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. For these countries, no adequacy decision has been made by the European Commission. Our collaboration with them is based on the following safeguards: Standard Data Protection Clauses of the European Commission.

Instagram (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information collected automatically by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing as part of visiting an Instagram (by Meta) fan page is based on a joint controller agreement pursuant to Art. 26 GDPR. More information (on Insights data) can be found [here].

The adequacy decision for the USA serves as the basis for the transfer of data to third countries, provided the respective service provider is certified. Certification is in place.

7. Contact Options and Your Rights

7.1 Your Rights

As a data subject, you have the following rights:

In accordance with Art. 15 of the GDPR, you have the right to request information about your personal data processed by us to the extent specified therein.
In accordance with Art. 16 of the GDPR, you have the right to request the immediate correction of incorrect or incomplete personal data stored by us.
In accordance with Art. 17 of the GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is required:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise, or defense of legal claims.
In accordance with Art. 18 of the GDPR, you have the right to request the restriction of processing of your personal data, insofar as:
- the accuracy of the data is contested by you;
- the processing is unlawful, but you oppose its erasure;
- we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
- you have objected to the processing pursuant to Art. 21 of the GDPR.
In accordance with Art. 20 of the GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller.
In accordance with Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority at your habitual residence or workplace, or our company's headquarters.

Right to Object

If we process personal data as described above to protect our legitimate interests, which outweigh in the process of balancing of interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only on grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

7.2 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, or if you require information, correction, restriction, or deletion of data, as well as the revocation of consents granted or objections to specific data uses, please contact us directly using the contact details provided in our legal notice.

Home