Privacy Policy

Controller

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Your rights as a data subject

Using the contact details provided, you can exercise the following rights at any time under the EU General Data Protection Regulation (GDPR):

• access to your data stored by us and its processing (Art. 15 GDPR),
• rectification of inaccurate personal data (Art. 16 GDPR),
• erasure of your data stored by us (Art. 17 GDPR),
• restriction of data processing where we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR),
• objection to the processing of your data by us (Art. 21 GDPR) and
• data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can withdraw it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, e.g. the competent supervisory authority of the federal state of your residence or the authority responsible for us as the controller.

A list of the supervisory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing activities

Collection of general information when you visit our website

Type and purpose of processing

When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data.

It is processed in particular for the following purposes:

• ensuring a smooth connection to the website
• ensuring smooth use of the website
• ensuring and evaluating system security and stability, in particular to detect misuse
• for the technically error-free display and optimisation of the website

We do not use your data to draw conclusions about you personally. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

Legal basis and legitimate interest

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and in ensuring system security and detecting misuse.

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period

Data is stored in server log files in a form that allows the identification of the data subjects for a maximum of 30 days, unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an incident, server log files are stored until the security-relevant event has been eliminated and fully clarified.

Whether provision is required by law or contract

The provision of the aforementioned personal data is neither legally nor contractually required. Without the IP address, however, the service and the functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.

Objection

Please read the information on your right to object under Art. 21 GDPR below.

Web hosting

Type and purpose of processing

To provide our website, we use storage space, computing capacity and software that we rent from a hosting provider. Our hosting provider is Raidboxes GmbH (Dellbrücker Hauptstraße 223, 51069 Cologne, Germany).

All data collected in the course of using our website is processed on the hosting provider’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

Legal basis

Processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our legitimate interest in a secure, fast and efficient provision of our website.

Recipients

The recipient of the data is Raidboxes GmbH, which acts as a processor on our behalf.

Storage period

The data is deleted as soon as the purpose for which it was collected no longer applies. For data used to provide the website, this is generally the case when the respective session has ended.

Transfer to third countries

The data is processed exclusively on servers within the European Union. No transfer to third countries takes place.

Further information: https://raidboxes.io/datenschutzerklaerung/

Contacting us

Type and purpose of processing

Our website contains a contact form that can be used to get in touch with us electronically. If a user makes use of this option, the data entered in the input form is transmitted to us and stored.

At the time the message is sent, the following data is also stored:

• IP address of the requesting device
• Date and time of the request
• URL from which the request was made

You can also contact us via the email addresses provided. In this case, the user’s personal data transmitted with the email is stored. This includes the date and time the email was sent, the email address, IP addresses and information about the servers involved in the email communication.

You can contact us via the telephone numbers provided. In this case, we collect log data including your telephone number and the duration of the call.

Regardless of the method of communication chosen, we collect the content of your enquiry. Your data is stored for the purpose of communicating with you individually.

Legal basis

The data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest in processing your data is to make it easy for you to contact us.

If you contact us to request an offer, the data is processed to carry out pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period

Contact requests are deleted after they have been dealt with, at the latest after 3 years in accordance with statutory limitation periods.

If a contractual relationship is established, we are subject to statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Whether provision is required by law or contract

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the necessary data and the reason for your enquiry.

Objection

Please read the information on your right to object under Art. 21 GDPR below.

Newsletter

Type and purpose of processing

To deliver our newsletter or similar information, we collect personal data that is transmitted to us via an input form.

For a valid registration we need a valid email address. To verify that a registration was actually made by the owner of an email address, we use the double opt-in procedure. For this purpose, we log the newsletter registration, the sending of a confirmation email and the receipt of the requested reply. No further data is collected.

At the time the registration form is submitted, the following data is also stored:

• IP address of the requesting device
• Date and time of the request
• URL from which the request was made

Legal basis

On the basis of your express consent (Art. 6(1)(a) GDPR), we regularly send you our newsletter or similar information by email to the email address you provided.

Recipients

To send our newsletter, we use the rapidmail service of rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany. rapidmail acts as our processor pursuant to Art. 28 GDPR; a corresponding contract is in place. The data is processed on servers in Germany. Further information: https://www.rapidmail.de/datenschutz

On our behalf, rapidmail statistically evaluates whether and when newsletters are opened and which links are clicked. This evaluation serves to improve our content and is likewise based on your consent.

Storage period

In this context, the data is only processed for as long as the corresponding consent exists.

Whether provision is required by law or contract

The provision of your personal data is voluntary and based solely on your consent. Without existing consent, we cannot send you our newsletter.

Withdrawal of consent

You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You can unsubscribe via the link contained in every email or by using the contact details listed in this privacy policy.

Provision of paid services

Type and purpose of processing

We process the data you provide as part of your order in order to carry out and process your order. This also includes the return or exchange of items and complaints.

Your personal data is only used to the extent necessary to process this order and to deliver the requested products and services.

Legal basis

The processing of data required for the conclusion of the contract is based on Art. 6(1)(b) GDPR.

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

To fulfil the contract, we pass on your name and address to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Depending on which payment service provider you select during the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us in order to process payments.

Storage period

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Whether provision is required by law or contract

The provision of your personal data is contractually required. Without it, we cannot carry out the order.

Audience measurement

Type and purpose of processing

Audience measurement is used to evaluate the flow of visitors to our online offering and may include behaviour, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of audience analysis we can, for example, see at what times our online offering or its functions or content are used most frequently or invite repeat use. We can also see which areas need to be adapted.

You can find out below which tools we use for audience measurement.

Legal basis

Processing takes place exclusively with your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give via our cookie banner. Without your consent, the audience measurement tools are not loaded. You can withdraw your consent at any time with effect for the future in the privacy settings (link in the footer of every page).

Recipients

We use technical service providers for the operation and maintenance of our website who act as our processors.

Storage period

Information on the storage period can be found in the information on the tools used listed below.

Transfer to third countries

The collected data may be transferred to the following third countries: USA

The following data protection safeguards are in place: adequacy decision of the EU Commission (EU-US Data Privacy Framework)

Whether provision is required by law or contract

The provision of the data is neither legally nor contractually required.

Objection

Please read the information on your right to object under Art. 21 GDPR below.

Tools used for audience measurement

Use of the tracking tool Google Analytics

Type and purpose of processing

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses cookies that enable an analysis of your use of the website. The information collected is usually transferred to a Google server in the USA and stored there.

Google Analytics has automatic IP address anonymisation enabled by default. Due to the activation of IP anonymisation on this website, your IP address is shortened by Google within member states of the EU or the EEA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

During your visit to our website, your user behaviour is recorded in the form of so-called events, such as:

• Page views
• Session start
• Time on site
• User engagement
• First visit to a website
• Scrolls (when a visitor scrolls 90% down the page)
• Clicks on external links
• Ads viewed or clicked
• Internal searches
• Interaction with video content
• Downloads
• Language settings

In addition, the following information is recorded:

• Your approximate location (region)
• Your IP address (in shortened form)
• Technical information such as browser, internet provider, device and screen resolution
• Source (referrer URL) of your visit (i.e. via which website or advertisement you came to us)

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet use.

Legal basis

The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) GDPR.

Recipients

We use technical service providers who act as our processors for the operation and maintenance of our website and for the evaluation of cookies.

A further recipient of the data is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

Storage period

The data we send that is linked to cookies is automatically deleted after 14 months.

The maximum lifetime of Google Analytics cookies is two years. Data whose retention period has been reached is deleted automatically once a month.

Transfer to third countries

As Google is headquartered in the USA, it cannot be ruled out that the data is processed on Google servers in the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.

Further information can be found at: https://www.dataprivacyframework.gov/

Withdrawal of consent

You can withdraw your consent at any time with effect for the future in the cookie settings.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: Browser add-on to deactivate Google Analytics.

Microsoft Clarity

Type and purpose of processing

If you have given your consent, we use Microsoft Clarity, an analytics service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Clarity helps us understand how visitors use our website so that we can improve content and usability.

Mouse movements, clicks, scrolling behaviour and page views are recorded and evaluated in the form of heatmaps and pseudonymised session recordings. In addition, technical information such as browser, operating system, device, screen resolution, approximate location (country) and the shortened IP address is processed. Entries in form fields are masked by Clarity by default and are not recorded.

For this purpose, Clarity uses cookies or similar technologies (e.g. _clck, _clsk, CLID, MUID).

Legal basis

Processing is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Clarity is only loaded after you have agreed in the cookie banner.

Recipients

The recipient of the data is Microsoft Ireland Operations Limited. Microsoft uses Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA) as a sub-processor.

Storage period

Clarity cookies have a lifetime of up to 13 months (_clck: 1 year, _clsk: 1 day). The collected data is deleted by Microsoft after 13 months.

Transfer to third countries

Data may be transferred to the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection. Further information: https://privacy.microsoft.com/de-de/privacystatement and https://learn.microsoft.com/de-de/clarity/setup-and-installation/privacy-disclosure

Withdrawal of consent

You can withdraw your consent at any time with effect for the future in the privacy settings.

Google Tag Manager

Type and purpose of processing

We use Google Tag Manager, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager allows us to manage and integrate various tracking tools and marketing services centrally via a single interface.

Google Tag Manager itself does not store cookies or collect personal data. It is used solely for the technical management of other tags and tools. However, the services integrated via the Tag Manager may set cookies and process personal data.

When Google Tag Manager is used, the user’s IP address is transmitted to Google. This is technically necessary to provide the managed services.

Legal basis

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR, insofar as services requiring consent are integrated via the Tag Manager.

Recipients

The recipient of the data is Google Ireland Limited. Google Ireland Limited uses Google LLC in the USA as a sub-processor.

Storage period

Google Tag Manager itself does not store any data. The storage period depends on the services managed via the Tag Manager.

Transfer to third countries

As Google is headquartered in the USA, it cannot be ruled out that data is processed on servers in the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.

Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

Withdrawal of consent

You can withdraw your consent at any time with effect for the future in the cookie settings.

Google Ads and conversion tracking

Type and purpose of processing

We use Google Ads, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to place advertisements in the Google advertising network. Google Ads uses cookies and similar technologies to measure the effectiveness of advertising campaigns.

If you reach our website via a Google ad, a cookie is stored on your device. With the help of conversion cookies we can track whether certain actions were carried out on our website (e.g. workshop bookings, newsletter sign-ups). This information is used exclusively for the statistical evaluation of advertising campaigns.

The information generated by the cookie is usually transferred to a Google server in the USA and stored there. Among other things, Google records:

• Pages visited on our website
• Date and time of the page view
• Your IP address (in shortened form)
• Referrer URL (the page you came from)
• Browser and device information

Legal basis

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Recipients

The recipient of the data is Google Ireland Limited. Google Ireland Limited uses Google LLC in the USA as a sub-processor.

Storage period

Google Ads cookies have a storage period of up to 90 days. The collected data is automatically deleted or anonymised after 14 months at the latest.

Transfer to third countries

Google processes data partly in the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.

Further information on data protection at Google Ads can be found at: https://policies.google.com/privacy and https://business.safety.google/adsservices/

Withdrawal of consent

You can withdraw your consent at any time with effect for the future in the cookie settings.

You can also deactivate interest-based advertising by Google in the ad settings: https://myadcenter.google.com/personalizationoff

Cookies

A cookie is a small data record that is created when you visit a website and is temporarily stored on the website visitor’s system. If the user calls up the server of this website again, the user’s browser sends the previously received cookie back to the server. The server can evaluate the information obtained in this way. Cookies can, in particular, make it easier to navigate a website.

Detailed information on cookies, and on which cookies are used on this website and for what purpose, can be found at any time in the cookie settings.

Deleting cookies

You can delete individual cookies or all cookies. You can also obtain information and instructions on how to delete these cookies or block them from being stored in advance. Depending on your browser provider, you will find the necessary information at the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Microsoft Edge: https://support.microsoft.com/de-de/windows/verwalten-von-cookies-in-microsoft-edge
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191

You can also prevent scripts from loading by default. NoScript allows JavaScript, Java and other plug-ins to run only on trusted domains of your choice.

Information and instructions on how to change this setting can be obtained from your browser provider (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

Cookie management with Real Cookie Banner

Type and purpose of processing

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”.

Real Cookie Banner allows us to obtain and manage users’ consent to the use of cookies. The tool logs which cookies the user has accepted or rejected and documents this decision in a legally compliant manner.

Details on how Real Cookie Banner works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

Legal basis

Processing is based on Art. 6(1)(c) GDPR (legal obligation to obtain consent) and Art. 6(1)(f) GDPR (legitimate interest in the legally compliant management of cookie consents).

Recipients

The tool is provided by devowl.io GmbH & Co. KG. Consent data is stored on servers within the EU.

Storage period

Consent declarations are stored for up to two years. A pseudonymous user identifier is stored together with the time of consent, the selected settings and information about the browser and device.

Whether provision is required by law or contract

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the data, we cannot manage your consents.

Technically necessary cookies

Type and purpose of processing

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

An overview of the cookies used can be found in our cookie consent tool.

Legal basis and legitimate interest

In this respect, data processing is based solely on our legitimate interest in a user-friendly design of our website and in documenting consent pursuant to Art. 6(1)(f) GDPR in conjunction with a balancing of interests under § 25(2) TDDDG.

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period

The respective storage period of the cookies can be found in the cookie consent tool.

Whether provision is required by law or contract

The provision of the aforementioned personal data is neither legally nor contractually required. Without this data, however, the service and the functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.

Objection

Please read the information on your right to object under Art. 21 GDPR below.

Technically non-essential cookies

Type and purpose of processing

Technically non-essential cookies are used, for example, for analysis and marketing. They can evaluate the behaviour of website visitors and analyse interests. For this purpose, we may create a pseudonymous user profile.

Legal basis

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Recipients

Recipients of the data may be providers of marketing and analysis tools that we use (e.g. Google Analytics, Google Ads).

Transfer to third countries

The collected data may be transferred to the following third countries: USA

The following data protection safeguards are in place: adequacy decision of the EU Commission (EU-US Data Privacy Framework)

Whether provision is required by law or contract

The provision of your data is voluntary and based solely on your consent. Please note, however, that in this case you may not be able to use all functions of this website to their full extent.

Withdrawal of consent

You can withdraw your consent for the future in the cookie consent tool.

Social media presences

General information on social media

Type and purpose of processing

We maintain publicly accessible profiles on social networks. We use these platforms to communicate with interested parties and customers and to provide information about our services and offers.

When you visit our profiles on social networks, the operators of these networks may record your usage behaviour. This may also happen if you are not logged in to the respective network. The data collected is processed by the network operators for their own purposes, in particular for market research and advertising purposes.

We have no influence on data processing by the network operators. For details, please refer to the privacy policies of the respective providers.

Legal basis

Processing is carried out on the basis of Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective information and communication with users and interested parties.

Recipients

The operators of the respective social networks receive your data as controllers. In some cases, this data is also processed outside the European Union.

Storage period

The storage period depends on the specifications of the respective platform operators.

Facebook page

Type and purpose of processing

We maintain a publicly accessible Facebook page (fan page). The provider is Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland).

When you visit our Facebook page, Facebook collects various information about your usage behaviour. This data is made available to us in anonymised form as so-called “Page Insights” so that we can view statistics on the use of our page.

We and Meta Platforms Ireland Limited are joint controllers for the processing of data to create Page Insights. The relevant agreement can be found at: https://www.facebook.com/legal/terms/page_controller_addendum

Recipients and transfer to third countries

Facebook’s privacy policy: https://www.facebook.com/privacy/policy/

Meta processes data partly in the USA. Meta is certified under the EU-US Data Privacy Framework.

Instagram

Type and purpose of processing

We maintain a publicly accessible Instagram profile. The provider is Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland).

Instagram collects various information about your usage behaviour on our profile and combines it with other data that Instagram has collected about you.

Recipients and transfer to third countries

Instagram’s privacy policy: https://privacycenter.instagram.com/policy/

Meta processes data partly in the USA. Meta is certified under the EU-US Data Privacy Framework.

YouTube

Type and purpose of processing

We maintain a publicly accessible YouTube channel. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

When you visit our YouTube channel, YouTube collects information about your usage behaviour. YouTube uses this information, among other things, to show you personalised content and advertising.

Recipients and transfer to third countries

YouTube’s privacy policy: https://policies.google.com/privacy

Google processes data partly in the USA. Google is certified under the EU-US Data Privacy Framework.

Option to object: https://myadcenter.google.com/personalizationoff

Embedded content and external services

Type and purpose of processing

We embed content and functions from third-party providers on our website. These may be, for example, videos, maps, fonts or other elements. Embedding this content technically requires the respective third-party provider to process the user’s IP address, as the content cannot be transmitted to the browser without this address.

The third-party providers may also use cookies or similar technologies to analyse the use of their services or to deliver personalised content.

Legal basis

Embedding is based on your consent pursuant to Art. 6(1)(a) GDPR or, where no consent is required, on the basis of our legitimate interest in an appealing design of our website pursuant to Art. 6(1)(f) GDPR.

YouTube videos

Type and purpose of processing

We embed videos from the YouTube platform. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

When you visit a page with an embedded YouTube video, a connection to YouTube’s servers is established. YouTube learns which of our pages you have visited. If you are logged in to your YouTube account, YouTube can assign your browsing behaviour to your personal profile.

YouTube uses cookies and similar technologies to collect information about user behaviour.

Recipients and transfer to third countries

YouTube’s privacy policy: https://policies.google.com/privacy

Google processes data partly in the USA. Google is certified under the EU-US Data Privacy Framework.

Withdrawal of consent

You can withdraw your consent at any time in the cookie settings.

Google Maps

Type and purpose of processing

We embed maps from the Google Maps service. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

To use Google Maps, it is necessary to store and process your IP address. Google Maps also uses cookies to provide the map functions and to analyse user behaviour.

Recipients and transfer to third countries

Google Maps privacy policy: https://policies.google.com/privacy

Google processes data partly in the USA. Google is certified under the EU-US Data Privacy Framework.

Withdrawal of consent

You can withdraw your consent at any time in the cookie settings.

Fonts and scripts (hosted locally)

Type and purpose of processing

The fonts used on our website (including Google Fonts) and scripts such as the video lightbox are delivered locally from our own server or that of our hosting provider. No connection to servers of Google or other third-party providers (e.g. content delivery networks) is established for this when you access our website; to this extent, no personal data is transmitted to third parties.

Legal basis

This is based on our legitimate interest in a consistent and technically error-free presentation of our website (Art. 6(1)(f) GDPR). The connection data generated in the process is processed exclusively as part of web hosting (see above).

Information on your right to object under Art. 21 GDPR

Right to object in individual cases

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send an email to the controller named above.

Last updated: September 2026