Privacy policy

1) Introduction and Contact Details of the Person Responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Tobias Lindenberg, Lohmühlenweg 35, 53881 Euskirchen, Germany, Tel.: +49 (0) 177 6267375, E-Mail: [email protected]. The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string "https://" and the lock icon in your browser line.

2) Data Collection When Visiting Our Website

In the case of merely informative use of our website, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of illegal use.

3) Hosting & Content Delivery Network

3.1 AWS-CloudFront

We use a Content Delivery Network of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

This service allows us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded a contract processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contract clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

3.2 Cloudflare

We use a Content Delivery Network of the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

4) Making Contact

In the context of making contact with us (e.g., via a contact form or email), personal data is collected. Which data is collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been fully processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5) Use of Customer Data for Direct Advertising

5.1 Signing up for our email newsletter

When you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have expressly confirmed to us that you agree to receive the newsletter. We will then send you a confirmation email asking you to confirm by clicking on a corresponding link that you want to receive the newsletter in the future.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you sign up for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) and the date and time of registration in order to be able to trace a possible misuse of your email address at a later time. The data collected by us when you register for the newsletter is used exclusively for the purpose of advertising by way of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After your cancellation, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data, or we reserve the right to further data usage, which is legally permitted and about which we inform you in this declaration.

5.2 Rapidmail

Our email newsletters are sent via this provider: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when you registered for the newsletter to this provider in accordance with Art. 6 para. 1 lit. f GDPR, so that they can carry out the newsletter dispatch on our behalf.

Subject to your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or counting pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of call, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data records.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a contract for order processing with the provider, which protects the data of our site visitors and prohibits the passing on to third parties.

6) Web Analysis Services

Plausible
This website uses "Plausible", a web analytics tool from Plausible Insights OÜ
Västriku tn 2, 50403, Tartu, Estonia. It records anonymized interactions of randomly selected, individual visitors with the website. This creates a log of e.g., mouse movements and clicks with the aim of showing potential improvements to the respective website. At no time are personal data collected or processed. Plausible collects exclusively non-personal data such as browser and user agent information when using this website. These are stored in a non-personally identifiable form and evaluated for statistical purposes. Deletion takes place as soon as the data is no longer required for our evaluation purposes.
If personal data is processed in individual cases, the processing is based on our legitimate interest in the statistical evaluation of user behavior for optimization purposes in accordance with Art. 6 para. 1 lit. f GDPR.
You can find more information about Plausible and the data processing carried out by the tool at https://plausible.io/data-policy.

7) Site Functionalities

7.1 Youtube

This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data can also be transmitted to: Google LLC., USA.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

When the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your page visit, your data will be directly associated with your account when you click on a video. If you do not want the association with your account, you must log out before activating the play button.

All of the above-mentioned processing, in particular the setting of cookies for reading information on the used terminal device, only occurs if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke the given consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are supposed to ensure compliance with the European level of data protection.

7.2 hCaptcha

On this website, we use the CAPTCHA service of the following provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA.

The service checks whether an entry is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated harmful access. To ensure that an action is performed by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the used terminal device, identification data of the used browser and operating system type as well as date and duration of the visit and transmits these for evaluation to the provider's servers.

The legal basis is our legitimate interest in determining individual responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

8) Rights of the Data Subject

8.1 The applicable data protection law grants you the following rights with respect to the processing of your personal data by the controller (rights to information and intervention), referring to the respective legal basis for their exercise:

Right to information in accordance with Art. 15 GDPR;
Right to correction in accordance with Art. 16 GDPR;
Right to deletion in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to information in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to revoke granted consents in accordance with Art. 7 para. 3 GDPR;
Right to complain in accordance with Art. 77 GDPR.

8.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A BALANCE OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS FOR THE PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

9) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if relevant - additionally by the respective legal retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of explicit consent according to Art. 6 para. 1 lit. a GDPR, this data is stored until you revoke your consent.

If legal retention periods apply to data that is processed within the framework of legal or similar obligations based on Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer necessary for the fulfilment or initiation of the contract and/or there is no longer any legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can prove compelling reasons for the processing worthy of protection, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In the case of processing personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.