Privacy Policy
Effective Date: November 18, 2024
Table of Contents
- Data Controller
- Overview of Data Processing
- Legal Bases for Processing
- Security Measures
- Transfer of Personal Data
- Data Processing in Third Countries
- Data Deletion
- Use of Cookies
- Provision of Online Services and Web Hosting
- Blogs and Publishing Media
- Contact and Inquiry Management
- Social Media Presence
- Changes and Updates to the Privacy Policy
- Rights of Data Subjects
Data Controller
Details about the data controller are outlined within the document.
Overview of Data Processing
Below is a summary of the types of data processed, their purposes, and the affected individuals.
Types of Data Processed
- Inventory Data
- Contact Data
- Content Data
- Usage Data
- Meta-, Communication-, and Process Data
Categories of Affected Individuals
- Communication partners
- Users
Purposes of Processing
- Providing contractual services and customer support
- Responding to contact requests and communication
- Security measures
- Managing and responding to inquiries
- Feedback collection
- Marketing
- Providing and enhancing our online services
- Maintaining IT infrastructure
Legal Bases for Processing
The following provides an overview of the legal bases under the GDPR on which personal data is processed. Please note that additional national data protection regulations may apply depending on your or our country of residence. If specific legal bases apply in individual cases, these will be indicated within this privacy policy.
Consent (Art. 6(1)(a) GDPR): Processing is based on the individual’s consent for specific purposes.
Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary to protect legitimate interests unless these are overridden by the individual's rights and freedoms requiring data protection.
Additional German Laws
National regulations, including the Federal Data Protection Act (BDSG), provide further specifications, particularly regarding the right to access, data deletion, objection, and processing for employment purposes.
Security Measures
We take technical and organizational measures to ensure an appropriate level of data protection, considering the state of the art, implementation costs, nature, scope, purposes of processing, and risks to individuals' rights and freedoms. Measures include safeguarding the confidentiality, integrity, and availability of data through access control and monitoring, as well as procedures for deleting data and responding to threats.
Transfer of Personal Data
Personal data may be disclosed to other parties such as service providers or integrated content providers. In such cases, legal requirements are followed, including contractual agreements to protect the data.
Data Processing in Third Countries
Where data is processed outside the EU or EEA, this is done only in compliance with legal requirements, such as under standard contractual clauses, recognized adequacy decisions, or explicit consent.
Data Deletion
Data is deleted according to legal provisions as soon as consent is withdrawn or the processing purpose ceases. If data is retained for legal or legitimate purposes, it is restricted in use.
Use of Cookies
Cookies are small files stored on users’ devices to facilitate various functionalities, such as user login or shopping cart management.
Types of Cookies
- Temporary (session-based): Deleted after the user leaves the site.
- Persistent: Stored for predefined durations for functionality or analytics.
Opt-Out Options
Users can manage cookie preferences or opt-out of tracking via browser settings or specific platforms like AboutAds or YourOnlineChoices.
Provision of Online Services and Web Hosting
We process data such as IP addresses to deliver our online content effectively.
Blogs and Publishing Media
User data is processed to manage communication and ensure site security. User comments or feedback may be stored indefinitely for security and moderation purposes.
Contact and Inquiry Management
Data provided through contact channels is used to manage inquiries and ensure efficient communication.
Social Media Presence
We maintain profiles on social networks and process user data for communication and marketing purposes. Note that data may be processed outside the EU.
Platforms Include
- Instagram (Meta Platforms Ireland Limited): For privacy information, see Instagram Privacy Policy.
Changes and Updates to the Privacy Policy
This privacy policy is updated as necessary to reflect changes in our data processing practices.
Rights of Data Subjects
Individuals have rights under Articles 15–21 GDPR, including:
- Right to Object: Oppose processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Revoke previously granted consent.
- Right to Access: Request information about processed data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure: Request deletion of data under certain conditions.
- Right to Data Portability: Receive personal data in a structured, machine-readable format.
- Right to Lodge a Complaint: File complaints with supervisory authorities regarding data processing practices.
For questions or further assistance, please contact us.