Privacy policy

Preamble

With the following data protection Declaration we would like to inform you which types of your personal data (hereinafter also abbreviated as “data”) we process for which purposes and in which scope. The privacy policy applies to all of us carried out the processing of personal data, both in the framework of the provision of our services as well as, in particular, on our websites, in mobile applications and within external online presences, e.g. our Social Media Profile (hereinafter collectively referred to as “online offer”).

The terms used are not gender-specific.

Last update: February 17, 2024

Responsible

Hope House Gifhorn – a business segment of the Evangelischen Gemeinschaft Gifhorn e.V.
Ev. Gemeinschaft Gifhorn e.V. Websites Administration
Calberlaher Damm 112
38518 Gifhorn
Germany
E-Mail Address: web-admin@evg-gifhorn.de

Contact Data Protection Officer

E-Mail Address: datenschutz@evg-gifhorn.de

Overview of processing

The following Overview summarizes the types of data processed and the purposes of its processing and refers to the persons concerned.

Types of data processed

• Inventory data.
• Payment data.
• Location data.
• Contact information.
• Content data.
• Contract data.
• Usage data.
• Meta, communication, and process data.

Categories of affected persons

• Communication partner.
• Users.
• Members.
• Business and contract partners.

Purposes of the processing

• Provision of contractual services and performance of contractual obligations.
• Contact requests and communication.
• Security measures.
• Direct marketing.
• Range measurement.
• Office and organization procedures.
• Managing and responding to requests.
• Firewall.
• Feedback.
• Marketing.
• Profiles with user-related information.
• Provision of our online offer and user-friendliness.
• Information Technology Infrastructure.

Relevant Legal Bases

Relevant legal bases in accordance with the DSGVO: In the Following you get an Overview of the legal foundations of the DSGVO on the Basis of which we process personal data. Please note that in addition to the provisions of the DSGVO national data protection may apply presets in your or in our living room or country of residence. Furthermore, in individual cases, more specific legal basis, should be governed, we will inform you of this in the privacy statement.

• Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO) – The Person concerned has given his / her consent to the processing of their personal data for a specific purpose or more specific purposes.
• Fulfilment of the contract and pre-contractual requests (article 6, Para. 1 S. 1 lit. b) DSGVO) – The processing is necessary for the performance of a contract whose contractual party is the data subject, or for the execution of pre-contractual measures will be required, at the request of the Person concerned.
• Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO) – The processing is necessary to safeguard the legitimate interests of the controller or of a third party is required, unless the interests or fundamental rights and freedoms of the data subject which require protection of personal data, prevail.

National data protection regulations in Germany: In addition to the data protection provisions of the DSGVO national data protection regulations in Germany. In particular, the law on protection against misuse of personal data in data processing (Federal data protection act – BDSG) belongs to. The data protection act contains special provisions on the right to information, the right to Erasure, the right to object to the processing of special categories of personal data, processing for other purposes and for Transmission as well as automated decision making in individual cases, including Profiling. Furthermore, the country's data protection laws of the individual States can move to the application.

Note on the validity of the DSGVO and the Swiss DSG: This data protection information of both the information in accordance with the Swiss Federal act on data protection (Swiss DSG) as well as to the data protection basic regulation (DSGVO). For this reason we kindly ask you to note that due to the larger spatial application and understanding the terms of the DSGVO be used. In particular, instead of the in the Swiss DSG, the terms "processing" of "personal data", "overriding interest" and "sensitive personal information" to protect the DSGVO, the terms "processing" of "personal data" as well as "legitimate interest" and "special categories of data". The legal meaning of the terms is determined in the framework of the applicability of Swiss DSG furthermore, in accordance with the Swiss data protection act.

Security measures

We meet in accordance with the legal requirements, taking into account the State of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the different probability of Occurrence and the extent of the threat to the rights and freedoms of natural persons take appropriate technical and organizational measures to ensure the level of risk appropriate level of protection.

The measures include in particular the securing of confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as the access, input, transmission, the securing of availability and its separation. Furthermore, we have established procedures to ensure that users ' rights, the deletion of data and reaction to endangerment of the data. In addition, we take into account the protection of personal data already in the development or Selection of Hardware, Software and procedures, in accordance with the principle of data protection by technology design and by privacy-friendly default settings.

Reduction of IP-address: If the IP addresses from us, or by the performance of the service providers and technologies are being processed, and the processing of a full IP-address is not required, it is truncated IP address (also known as “IP Masking” refers to). Here, the last two digits, or the last part of the IP address are removed after a point, or a placeholder to be replaced. With the shortening of the IP address is the identification of a Person is to be prevented on the basis of their IP address or significantly more difficult.

TLS/SSL encryption (https): to protect the user data transmitted via our Online services, we use TLS/SSL encryption. Secure Sockets Layer (SSL) is the standard technology for secure Internet connections through the use of encryption between a web site or App and a Browser (or between two servers), and transmitted data. Transport Layer Security (TLS) is an updated and more secure Version of SSL. Hyper Text Transfer Protocol Secure (HTTPS) is displayed in the URL when a Website is secured by an SSL/TLS certificate.

Transfer of personal data

In the context of our processing of personal data that the data can be transmitted to other Bodies, enterprises, legally independent organizational units or individuals, or they will be disclosed to. The recipients of this data include, for example, with IT tasks commissioned service providers or providers of services and content that are embedded in a website,. In such cases, we comply with the statutory requirements and include, in particular, appropriate contracts or Agreements, which serve the protection of your data, with the recipients of your data.

Transmission of data within the organization: We may transfer personal data to other entities within our organization or provide you with access to this information. Provided that such disclosure shall be made for administrative purposes, the transfer of data on our legitimate business and economic interests or, if you are the fulfillment of our contract-related obligations, or if a data subject's consent or a legal permission.

International Data Transfers

Data processing in third countries: If we i.e., data in a third country (outside the European Union (EU), the European economic area (EEA)) or the processing in the context of the use of third-party services or disclosure or Transmission of data to other persons, Bodies or companies, this will only be done in accordance with the statutory requirements. If the level of data protection in the third country has been recognised by means of an adequacy decision (art. 45 DSGVO), it serves as a basis of data transfers. In the Rest of the data transfer, if the data protection is assured level otherwise, in particular due to standard contractual clauses (article 46, Para. 2 lit. c) DSGVO), explicit consent, or, in the case of a contractual or legally required Transmission (article 49, Para. 1 DSGVO). In addition, we will share with you the fundamentals of third-country transmission at the individual providers in the third country where the adequacy decisions are considered foundations of a priority. Information to a third country transfers and the present adequacy decisions can be found in the offer of information by the EU Commission: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en?prefLang=de.

EU-US Trans-Atlantic Data Privacy Framework: In the framework of the so-called "Data Privacy Framework" (DPF) has been recognised by the EU Commission, the level of data protection for certain of the company from the United States in the context of the adequacy decision from the 10.07.2023 as safe. The list of certified companies as well as further information to the DPF, you can consult the website of the Ministry of Commerce of the United States https://www.dataprivacyframework.gov/ (in English) can be found. We will inform you in the framework of the privacy notice, which one of us used the service are certified providers under the Data Privacy Framework.

Rights of persons concerned

Rights of the affected persons from the DSGVO: you have various rights as a data subject according to the DSGVO, which arise in particular from art. from 15 to 21 DSGVO:

• Right to object: you have the right for reasons arising from your particular Situation, at any time, to the processing of personal data relating to them, on the basis of article 6 Para. 1 lit. e or f DSGVO takes to submit an objection; this also applies to a rules-based Profiling. The personal data shall be processed in order to operate direct advertising, you have the right to at any time object to the processing of personal data concerning them for the purpose of appeal of such advertising; this also applies to Profiling, insofar as it relates to such direct advertising.
• Right of revocation in case of consent: You have the right to withdraw consent at any time.
• Right to information: You have the right to request confirmation as to whether data to be processed and to request information about these data as well as further information and a copy of the data in accordance with legal requirements.
• Right to rectification: They have, in accordance with the statutory requirements, the right to request the completion of data concerning you or the rectification of the inaccurate data.
• Right to Erasure and to restriction of processing: They have, in accordance with the statutory requirements, the right to request that you delete data in question without delay, or, alternatively, in accordance with the statutory requirements, a restriction of the processing of the data.
• Right to data portability: You have the right to receive data you have provided to us, in accordance with the statutory requirements in a structured, common and machine-readable Format or to request its Transfer to another person responsible.
• Complaint with Supervisory authority: You have without prejudice to any other administrative or judicial remedy, the right to Lodge a complaint with a Supervisory authority, in particular in the member state of your habitual residence, your workplace or the place of the suspected infringement if you are of the opinion that the processing of their personal data breaches the provisions of the DSGVO.

Use of Cookies

Cookies are endorsements are small text files or other Storage, the information on the devices, save, and information from the devices to read. For example, the Login Status of a user's account, a basket content in a E-Shop, the type of content accessed or used functions of the online offer. Cookies can also be used for different purposes, to be offered, for example, for the purposes of functionality, safety and comfort of online as well as the creation of an analysis of the visitor flows.

Instructions for consent: We use Cookies, in accordance with the statutory provisions. Therefore, we get by the users prior consent, except when this is required by law. A consent is not necessary if the Saving and reading of the information, including Cookies that are strictly necessary to provide the users expressly requested by you of the tele-media services (i.e. online) available. To the strictly necessary Cookies, Cookies with features that serve to display and operability of the website, load balancing , security, storage of preferences and choices of the users or similar with the provision of the primary and secondary functions of the users requested online publication - related purposes in the rule. The revocable consent is communicated to the users and provides the information to the Cookie usage.

Privacy legal legal bases: Which data protection legislation, the legal basis, we process the personal data of the users with the help of the Cookies depends on whether we ask users to consent. If the users consent is the legal basis for the processing of your data is the consent. Otherwise, by using Cookies data processed on the basis of our legitimate interests (for example, in a business operation of our online offer and to improve its usability), processed, or, if this is done in the framework of the fulfilment of our contractual obligations, if the use of Cookies is necessary to comply with our contractual obligations. The purposes for which Cookies we process, we clarify in the course of this data protection Declaration, or in the context of our Opt - in and processing processes.

Storage duration: With regard to the duration of storage of the following types of Cookies can be distinguished:

• Temporary Cookies (also known as a Session or "session Cookies"): Temporary Cookies are deleted after a user has left a quote Online and be a terminal device (such as a Browser or mobile application) is closed.
• Permanent Cookies: Permanent Cookies remain after the Closing of the terminal is stored. The Login can be, for example, Status or preferred content displayed directly saved when the user visits a Website. Also, the can be with the help of Cookies, the user's data collected for the range measurement is used. Unless we notify users have no explicit information about the type and duration of storage of the Cookies (e.g., in the context of obtaining consent), users should assume that Cookies are permanent, and the storage period can be up to two years.

General instructions for revocation and objection (so-called “Opt-Out”): Users which you have given consent can be revoked at any time and the workmanship are in accordance with the statutory requirements. For this purpose, the user can restrict, among other things, to the use of Cookies in the settings of your browser (where this the functionality of our online offer may be limited). An objection to the use of Cookies for Online Marketing purposes can also through the Websites https://optout.aboutads.info and https://www.youronlinechoices.com/ be explained.

• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Complianz: Consent management: procedures for the collection, logging, management, and revocation of consent, in particular to the use of Cookies and similar technologies for the storage, readout and processing of information devices of the users, as well as their processing; Service provider: Execution on servers and/or computers under their own privacy and legal accountability; Website: https://complianz.io/; Privacy policy: https://complianz.io/legal/. For More Information: It is an individual user ID, language, and types of consent and the date of their submission are stored on the server and in the Cookie on the device of the user.

Perception of tasks in accordance with the articles of Association or the rules of procedure

We process the data of our members, supporters, prospective customers, business partners or other persons (Collectively, “Affected”), if we are in a membership or other business relationship, and our responsibilities as well as recipients of services and benefits are. In addition, we will process the data Concerned on the basis of our legitimate interests, e.g. if it is administrative tasks, or public Relations.

The processed data, the type, scope and purpose and necessity of their processing are determined by the underlying membership or contractual relationship, including the necessity of any data, information (in addition, we indicate required data).

We will delete data for the provision of our articles of Association and business purposes are no longer required. This will be determined according to the respective tasks and contractual relationships. We will retain the data for as long as you for the transaction of business, as well as in terms of any warranty or liability obligations based on our legitimate interest in its regulation may be relevant. The necessity of the storage of the data is checked regularly; otherwise the statutory storage obligations apply.

• Types Of Data Processed: Inventory data (e.g. names, addresses); - payment data (e.g. Bank details, invoices, payment history); contact information (e.g. E-Mail, telephone numbers); contract data (e .B. Subject Of Contract, Duration, Customer Category).
• Affected Persons: Users (e.g. website visitors, users of online services); members. Business and contract partners.
• Purposes of the processing: Provision of contractual services and fulfillment of contractual obligations; contact requests and communication. Managing and responding to requests.
• Legal basis: Fulfilment of the contract and pre-contractual requests (article 6, Para. 1 S. 1 lit. b) DSGVO). Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

Provision of the online offer and Webhosting

We process the data of users to be able to offer you our Online services. For this purpose we process the IP address of the user is necessary in order to transmit the content and functionality of our Online services to the Browser or the terminal device of the user.

• Types Of Data Processed: Usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and process data (e.g., IP-addresses, time information, identification numbers, consent status); content data (for example,.B. Entries in online forms).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Provision of our online offer and user-friendliness; Information technology infrastructure (operation and deployment of information systems and technical equipment (computers, servers, etc.).); Security measures. Firewall.
• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Provision of the online offer to rent a space: For the provision of our online offer, we make use of storage space, processing capacity, and Software that we rent from a corresponding server provider (also known as “web host”) or otherwise relate; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Provision of the online offer to private/ dedicated server hardware: For the provision of our online offer, we make use of us-operated server hardware, as well as the associated storage, computing capacity, and the Software; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Collection of access data and log files: To access our online offering is logged in the Form of so-called “Server log files”. The Server log files, the address and Name of the accessed web pages and files, date and time of the retrieval, amount of data transferred, message about successful retrieval, browser type and Version, the operating system of the user, Referrer URL (the previously visited page), and as a rule, IP address and the requesting Provider belong. The Server log files, for example, can be used for the purposes of safety, B. to avoid Congestion on the Server (especially in the case of abusive attacks, so-called DDoS attacks), and secondly, the utilization of the servers and ensure stability; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO). Deletion of data: Logfile information is stored for a maximum period of 30 days and thereafter deleted or anonymized. Data whose further retention is, for purposes of proof required, are excluded until the final clarification of the respective incident of the deletion.
• E-Mail-sending and Hosting: We used web hosting services also include sending, receiving and storing E-Mails. For these purposes, the addresses of the recipient and sender, as well as further information regarding the E-mail sending (e.g., the participating Provider), as well as the contents of the respective emails processed. The above data can be processed further, for the purposes of the detection of SPAM. We kindly ask you to note that E-Mails on the Internet are generally not sent in encrypted form. As a rule, E to be encrypted emails while in transit, but (unless there is a so-called end-to-end encryption is the method used) not on the servers from which you sent and received. We can therefore assume for the Transmission of E-Mails between the sender and the reception on our Server and no responsibility; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Wordfence: Firewall - and security - as well as error detection functions to unauthorized access attempts, as well as technical vulnerabilities, which could allow such access, detect and prevent. For these purposes, Cookies, and similar, is necessary for that purpose memory used procedures and safety protocols during the audit and, in particular, in the case of unauthorized access are created. In this respect, the IP addresses of the users, a user identification number and their activities, including the time of access, processed and stored, as well as with the provider of the Firewall, and security of the data provided matched and delivered to you; Service provider: Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://www.wordfence.com; Privacy policy: https://www.wordfence.com/privacy-policy/; Basis Of Land Transfers To Third: Standard contractual clauses (https://www.wordfence.com/standard-contractual-clauses/). For More Information: https://www.wordfence.com/help/general-data-protection-regulation/.

Blogs and publication media

We use Blogs, or other comparable means of online communication and publication (hereinafter referred to as “publication media”). The data of the reader will be processed for the purposes of the publication medium only to the extent that it is for the representation and communication between authors and readers, or for reasons of security required. In addition, we refer to the information on the processing of the visitors to our publication medium in the framework of this privacy policy.

• Types Of Data Processed: Inventory data (e.g. names, addresses); contact information (e.g. E-Mail, telephone numbers), content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Provision of contractual services and fulfillment of contractual obligations; Feedback (e.g., Collect Feedback via Online form); provision of our online offer and user-friendliness. Security measures.
• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Updraft plus: Backup Software and Backup storage; Service provider: Simba Hosting Ltd., 11, Barringer Way, St. Neots, Cambs., PE19 1LW, UK; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://updraftplus.com/; Privacy policy: https://updraftplus.com/data-protection-and-privacy-centre/. Basis Of Land Transfers To Third: The adequacy decision (GB).

Newsletter and electronic notifications

We send newsletters, E-Mails and further electronic notifications (hereinafter referred to as “Newsletter”) only with the consent of the recipients or a legal permission. Provided that, in the context of a registration for the Newsletter, whose contents are concretely described, they are for the consent of the users significantly. Incidentally, our newsletters contain information about our services and us.

To opt-in to our newsletter, it is sufficient in principle, if you specify your E-Mail address. We can, however, ask you to make a name, for the purpose of personal address in the Newsletter, or other information, unless they are for the purpose of the newsletter is required.

The Double-Opt-In Procedure: The registration to our Newsletter takes place in a so-called Double-Opt-In procedure. I.e., you received after the registration, an E-Mail to confirm your registration asked. This confirmation is necessary so that nobody can register with strangers E-Mail addresses. The registrations for the Newsletter are logged in order to be able to sign-in process according to the legal requirements to prove. For this purpose, the storage of the login and confirmation time as well as the IP address. Similarly, the Changes of the shipping service provider stored data is logged.

Cancellation and limitation of processing: We can use the term E-Mail addresses of up to three years on the basis of our legitimate interests before we delete them to be able to a previously given consent prove. The processing of these data is limited to the purpose of a possible defence against claims. An individual application for cancellation is possible at any time, provided that at the same time the former Existence of a consent is confirmed. In the case of obligations for the permanent attention of discrepancies we reserve the right to store the E-Mail address for this purpose in a revocation list (so-called “Blocklist”).

The logging of the registration process is carried out on the basis of our legitimate interests for the purposes of the proof to its proper performance. As far as we mail appoint a service provider with sending E -, this is done on the basis of our legitimate interests in an efficient and safe delivery system.

Content:

Information about us, our services, promotions and Offers.

• Types Of Data Processed: Inventory data (e.g. names, addresses); contact information (e.g. E-Mail, telephone numbers); Meta-, communication -, and process data (e.g., IP-addresses, time information, identification numbers, consent status); usage data (e .B. websites visited, interest in content, access times).
• Affected Persons: Communication partner.
• Purposes of the processing: Direct marketing (e .B. by E-Mail or by post).
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO).
• Objection Option (Opt-Out): You can terminate the receipt of our newsletter at any time, that is .h. Your consent is revoked, and the other receiving contradict. A Link to cancel the newsletter can be found either at the end of every newsletter or otherwise use any of the above contact methods, preferable E-Mail, to do so.

For more information about processing processes, procedures and services:

• The measurement of the Opening and click-through rates: The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved when Opening the newsletter from our Server, or, if we use a delivery service from the Server. As part of this retrieval, technical information is collected, such as information about the Browser and your System, as well as your IP address and time of retrieval,.
  
  This information is used for technical improvement of our newsletter on the basis of the technical data or the target groups and their reading behaviour based on their retrieval locations (which are using the IP address can be determined) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which Links are clicked. This information will be assigned to the individual newsletter recipients and their profiles up to the deletion of saved. The evaluations help us recognize the reading habits of our users and our content and to adapt them or to send different contents according to the interests of our users. Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO).

Promotional communications via E-Mail, Post, Fax, or phone

We process personal data for the purposes of commercial communications can be done through various channels, such as E-Mail, telephone, Postal mail or Fax, in accordance with the legal requirements.

The receiver shall have the right, granted to revoke the consent at any time, or to speak of promotional communications at any time.

After the revocation or objection, we will store the proof of the previous authorization data necessary to contact you or sending up to three years after the end of the year of the revocation or objection, on the basis of our legitimate interests. The processing of these data is limited to the purpose of a possible defence against claims. On the basis of the legitimate interest is to observe the revocation and contradiction of the user permanently, we will store also to prevent re-contacting the data required (e.g., depending on the communication channel, the E-Mail address, phone number, Name).

• Types Of Data Processed: Inventory data (e.g. names, addresses); contact information (e .B. E-Mail, Telephone Numbers).
• Affected Persons: Communication partner.
• Purposes of the processing: Direct marketing (e .B. by E-Mail or by post).
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO). Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

Web Analytics, Monitoring, and optimization

The web Analytics (also known as the “audience measurement” means) is used for the analysis of the visitor flows of our online offer and behavior, interests, or includes demographic information about the visitors such as the age or gender, as a pseudonymous values. With the help of range analysis, we can detect, for example, to be used at which time our online offer, or whose functions or content go to most often, or for re-use invite. Similarly, we can see which areas of optimization is required.

In addition to web Analytics, we can also use the test procedure, for example, to test different versions of our online offer or that of its components, and optimize.

Unless otherwise specified, can these purposes, Profiles, i.e., applied to a usage process aggregated data and information in a Browser, or in a terminal and this read will be stored. Among the collected information, in particular, visited websites, and there used elements as well as technical information, such as the Browser used, the computer system used and information on use of time. If users are in the collection of their location data to us or to the providers of the services agreement, may also use location data to be processed.

It is also the IP addresses are stored to the user. However, we use an IP-Masking procedure (i.e. Pseudonymisation by shortening the IP-address) in order to protect the user. In General, the will be saved in the context of web Analytics, A/B testing and optimization, there is no clear data of the user (such as E-Mail addresses or names), but pseudonyms. Which means that we as the provider of the Software used to know the actual identity of the users, but only for the purposes of the respective procedure in the profiles stored information.

• Types Of Data Processed: Usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Range measurement (e.g. access statistics, recognition of returning visitors); Profiles with user-related information (creation of user profiles). Provision of our online offer and user-friendliness.
• Safety measures: IP-Masking (Pseudonymization of the IP address).
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO).

For more information about processing processes, procedures and services:

• Google Analytics: We use Google Analytics to measure and analyze the use of our online offer on the basis of a pseudonymous user ID. This identification number contains no clear data, such as names or E-Mail addresses. It is used, analysis of information, a terminal map to see which content is accessed by the users within one or different Use, which search terms you've used, re-called or using our online offer in their interactions. Similarly, the time of use and the duration of which will be stored, as well as the sources of the users, refer to our online offer and the technical aspects of your devices and browsers.
  In pseudonymous Profiles of users will be created with information from the use of various devices, where Cookies can be used. Google Analytics tracks and stores individual IP addresses for EU users. Analytics provides, however, a rough geographical location data, by deriving the following metadata of IP addresses: the city (and the derived latitude and longitude of the city), continent, country, Region, sub-continent (and ID-based counterparts). The EU data traffic, the IP-address data will be used exclusively for this derivation of geolocation data, before they are deleted immediately. You are not logged, are not accessible and will not be used for other purposes. If Google Analytics measurement to collect data, all IP queries on EU based servers, before the traffic is forwarded for processing to Analytics Server; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO); Website: https://marketingplatform.google.com/intl/de/about/analytics/; Safety measures: IP-Masking (Pseudonymization of the IP address); Privacy policy: https://policies.google.com/privacy; Order processing contract: https://business.safety.google/adsprocessorterms/; Basis Of Land Transfers To Third: Data Privacy Framework (DPF); Objection Option (Opt-Out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=deSettings for the display of advertisements: https://myadcenter.google.com/personalizationoff. For More Information: https://business.safety.google/adsservices/ (Types of processing, and the processed data).
• Jetpack (WordPress Stats): Jetpack provides analysis functions for WordPress Software; Service provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, a 25-Herbert Pl, Dublin, D02 AY86, Ireland; Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO); Website: https://automattic.com; Privacy policy: https://automattic.com/privacy; Basis Of Land Transfers To Third: Data Privacy Framework (DPF).

Presence in social networks (Social Media)

We maintain online presences within social networks and processed in this context, data of the user in order to communicate with active users, or information about us can offer.

We point out that data of the users outside the area of the European Union can be processed. This may result to the users of the risks, because, for example, the enforcement of the rights of the users, it may be more difficult.

Furthermore, the data of the users within social networks for market research and promotional purposes. For example, on the basis of user behavior and the resulting interests of the users, user profiles inferred to be created. The usage profiles can in turn be used to switch to for example, to display both inside and outside of the ad networks, corresponding presumably to the interests of the user. For these purposes, stored in a rule, Cookies on the computers of the users, in which the user behavior and the interests of the users are stored. Further, in the use of data profiles are saved regardless of the users used devices (in particular if the users are members of the respective platforms and these are logged in).

For a detailed description of the respective Processing and the options to object (Opt-Out), we refer to the privacy statements and information provided by the operator of the respective networks.

Also, in the case of requests for information and the assertion of rights, we point out that these can be effectively made in the vendors claim. Only the providers have access to the data of the users and can directly take appropriate measures and information. If you still need help, then you can contact us.

• Types Of Data Processed: Contact information (e.g. E-Mail, telephone numbers), content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Contact requests and communication; Feedback (e.g., Collect Feedback via the Online form). Marketing.
• Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Instagram: Social Network; Service provider: Meta-Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://www.instagram.com; Privacy policy: https://instagram.com/about/legal/privacy. Basis Of Land Transfers To Third: Data Privacy Framework (DPF).
• Facebook Pages: Profiles within the social network Facebook; Service provider: Meta-Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO); Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy; Basis Of Land Transfers To Third: Data Privacy Framework (DPF); For More Information: We are together with Meta-Platforms Ireland Limited for the collection (but not the further processing) of the data of visitors to our Facebook page (so-called “fan page”) is responsible. These data include information on the types of content that users will see or interact with, or the actions performed (see below under "From you and the others made and provided things" in the Facebook data policy: https://www.facebook.com/policy), as well as information on the users devices (e.g., IP addresses, operating system, browser type, language settings, Cookie-data; see under "device info" in the Facebook data policy: https://www.facebook.com/policy). As in the Facebook data policy under "How we use this information?" explains, collects and uses Facebook information, analysis services, so-called "page Insights", for site operators to deliver these insights about how people with their pages and associated content interact. We have concluded with Facebook, a special agreement (“information about page Insights”, https://www.facebook.com/legal/terms/page_controller_addendum), in particular, is regulated, what security is necessary to observe measures of Facebook and the Facebook ready has to fulfill explains the rights of the data subject (i.e. the user can, for example .B. Information or deletion requests directly to Facebook address). The rights of users (and in particular the right to information, cancellation, opposition and complaint with the competent Supervisory authority), is not to be limited by the agreements with Facebook. Additional information may be found in the “information about page Insights” (https://www.facebook.com/legal/terms/information_about_page_insights_data). Is the joint responsibility by not limited to the collection and Transmission of data to the Meta-Platforms Ireland Limited, a company based in the EU. The further processing of the data is the sole responsibility of Meta-Platforms Ireland Limited, which, in particular, the Transmission of data to the parent Meta-Platforms, Inc. in the United States relates.

Plugins and embedded functions and content

We tie in our online offer function and content elements, which are obtained from the servers of their respective providers (hereinafter referred to as “third-party”). This can be, for example, graphics, Videos, or maps of the city (hereinafter jointly referred to as the “content”).

The integration always presupposes that the third-party provider of this content, and process the IP address of the users, since they could not send the IP address of the content to their Browser. The IP address for the presentation of this content or functions required. We endeavor to use only content whose respective providers use the IP address only for distributing the content. Third-party providers may also use so-called Pixel Tags (invisible graphics, also known as “Web Beacons”) for statistical or marketing purposes. The “Pixel Tags” information, such as visitor traffic on the pages of this website, is evaluated. The pseudonymous information may also be Cookies on the device of the user is stored and, among other things, technical information about the Browser and operating system, referral websites, visiting time as well as further information on use of our online offer included with such information from other sources to be connected.

• Types Of Data Processed: Usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and process data (e.g., IP-addresses, time information, identification numbers, consent status). Location data (information on the geographical Position of a device or a Person).
• Affected Persons: Users (e .B. Website visitors, users of online services).
• Purposes of the processing: Provision of our online offer and user-friendliness.
• Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO). Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).

For more information about processing processes, procedures and services:

• Google Fonts (deploy on your own Server): Provision of font files to a user-friendly presentation of our online offer; Service provider: The Google Fonts are hosted on our Server, it will not transmit data to Google; Legal basis: Legitimate Interests (Art. 6, Para. 1 S. 1 lit. f) DSGVO).
• Google Maps: We integrate the maps of the service “Google Maps” of the provider Google. To the processed data, in particular IP addresses and location data of the user; Service provider: Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland; Legal basis: Consent (Art. 6, Para. 1 S. 1 lit. a) DSGVO); Website: https://mapsplatform.google.com/; Privacy policy: https://policies.google.com/privacy. Basis Of Land Transfers To Third: Data Privacy Framework (DPF).

The Management, organization and tools

We use the services, platforms, and Software from other providers (hereinafter referred to as “third-party”) for the purposes of the organization, management, planning, and the provision of our services. In the selection of the third-party providers and their services, we comply with the legal requirements.

In this context, personal data may be processed and on the servers of the third-party provider. This data can be affected, which we process in accordance with this privacy statement. The data can include, in particular master data and contact details of the users, the data include transactions, contracts, and other processes and their contents.

If a user in the context of the communication, of business or other relations are referred to us on the third-party or that the Software or platforms, to be able to process the third-party use of data and meta-data for security purposes, the service optimization or marketing purposes. We ask, therefore, to refer to the privacy notices of the respective third-party provider.

• Types Of Data Processed: Content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times), Meta-, communication -, and procedure data (e .B. IP addresses, dates, ID numbers, consent status).
• Affected Persons: Communication partners, and users (for example,.B. Website visitors, users of online services).
• Purposes of the processing: Provision of contractual services and performance of contractual obligations. Office and organization procedures.

Amendments and updates to this privacy statement

We ask you to inform yourself regularly about the contents of our privacy policy. We adapt the privacy policy as soon as the Changes of the data processing operations carried out this necessary. We will inform you as soon as by the Changes in an act of Cooperation on their part (e.g. consent) or other individual notification is required. When this privacy statement was last updated, please refer to the date specified in the preamble.

Unless we specify in this privacy statement addresses and contact information of the enterprises and organizations, please note that the addresses may change over time, and ask for the details, please contact to check.