1. An overview of data protection
The following information will provide you with an easy to navigate
overview of what will happen with your personal data when you visit our
website. The term “personal data” comprises all data that can be used to
personally identify you. For detailed information about the subject
matter of data protection, please consult our Data Protection
Declaration, which we have included beneath this copy.
Data recording on our website
Who is the responsible party for the recording of data on this website (i.e. the “controller”)?
The data on this website is processed by the operator of the website,
whose contact information is available under section “Information
Required by Law” on this website.
How do we record your data?
We collect your data as a result of your sharing of your data with
us. This may, for instance be information you enter into our contact
Our IT systems automatically record other data when you visit our
website. This data comprises primarily technical information (e.g. web
browser, operating system or time the site was accessed). This
information is recorded automatically when you access our website.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free
provision of the website. Other data may be used to analyse your user
What rights do you have as far as your information is concerned?
You have the right to receive information about the source,
recipients and purposes of your archived personal data at any time
without having to pay a fee for such disclosures. You also have the
right to demand that your data are rectified, blocked or eradicated.
Please do not hesitate to contact us at any time under the address
disclosed in section “Information Required by Law” on this website if
you have questions about this or any other data protection related
issues. You also have the right to log a complaint with the competent
Moreover, under certain circumstances, you have the right to demand
the restriction of the processing of your personal data. For details,
please consult the Data Protection Declaration under section “Right to
Restriction of Data Processing.”
Analysis tools and tools provided by third parties
There is a possibility that your browsing patterns will be
statistically analysed when your visit our website. Such analyses are
performed primarily with cookies and with what we refer to as analysis
programmes. As a rule, the analyses of your browsing patterns are
conducted anonymously; i.e. the browsing patterns cannot be traced back
to you. You have the option to object to such analyses or you can
prevent their performance by not using certain tools. For detailed
information about this, please consult our Data Protection Declaration
You do have the option to object to such analyses. We will brief you
on the objection options in this Data Protection Declaration.
2. General information and mandatory information
The operators of this website and its pages take the protection of
your personal data very seriously. Hence, we handle your personal data
as confidential information and in compliance with the statutory data
protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will
be collected. Personal data comprises data that can be used to
personally identify you. This Data Protection Declaration explains which
data we collect as well as the purposes we use this data for. It also
explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the Internet
(i.e. through e-mail communications) may be prone to security gaps. It
is not possible to completely protect data against third party access.
Information about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller on this website is:
St. Martinsgrund 5
The controller is the natural person or legal entity that
single-handedly or jointly with others makes decisions as to the
purposes of and resources for the processing of personal data (e.g.
names, e-mail addresses, etc.).
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only
subject to your express consent. You can also revoke at any time any
consent you have already given us. To do so, all you are required to do
is sent us an informal notification via e-mail. This shall be without
prejudice to the lawfulness of any data collection that occurred prior
to your revocation.
Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
In the event that data are processed on the basis of Art. 6 Sect. 1
lit. e or f GDPR, you have the right to at any time object to the
processing of your personal data based on grounds arising from your
unique situation. This also applies to any profiling based on these
provisions. To determine the legal basis, on which any processing of
data is based, please consult this Data Protection Declaration. If you
log an objection, we will no longer process your affected personal data,
unless we are in a position to present compelling protection worthy
grounds for the processing of your data, that outweigh your interests,
rights and freedoms or if the purpose of the processing is the claiming,
exercising or defence of legal entitlements (objection pursuant to Art.
21 Sect. 1 GDPR).
If your personal data is being processed in order to engage in direct
advertising, you have the right to at any time object to the processing
of your affected personal data for the purposes of such advertising.
This also applies to profiling to the extent that it is affiliated with
such direct advertising. If you object, your personal data will
subsequently no longer be used for direct advertising purposes
(objection pursuant to Art. 21 Sect. 2 GDPR).
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to
log a complaint with a supervisory agency, in particular in the member
state where they usually maintain their domicile, place of work or at
the place where the alleged violation occurred. The right to log a
complaint is in effect regardless of any other administrative or court
proceedings available as legal recourses.
Right to data portability
You have the right to demand that we hand over any data we
automatically process on the basis of your consent or in order to fulfil
a contract be handed over to you or a third party in a commonly used,
machine readable format. If you should demand the direct transfer of the
data to another controller, this will be done only if it is technically
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential
content, such as purchase orders or inquiries you submit to us as the
website operator, this website uses either an SSL or a TLS encryption
programme. You can recognise an encrypted connection by checking whether
the address line of the browser switches from “http://” to “https://”
and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If you are under an obligation to share your payment information
(e.g. account number if you give us the authority to debit your bank
account) with us after you have entered into a fee-based contract with
us, this information is required to process payments.
Payment transactions using common modes of paying (Visa/MasterCard,
debit to your bank account) are processed exclusively via encrypted SSL
or TLS connections. You can recognise an encrypted connection by
checking whether the address line of the browser switches from “http://”
to “https://” and also by the appearance of the lock icon in the
If the communication with us is encrypted, third parties will not be able to read the payment information you share with us.
Information about, blockage, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the
right to at any time demand information about your archived personal
data, their source and recipients as well as the purpose of the
processing of your data. You may also have a right to have your data
rectified, blocked or eradicated. If you have questions about this
subject matter or any other questions about personal data, please do not
hesitate to contact us at any time at the address provided in section
“Information Required by Law.”
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as
the processing of your personal data is concerned. To do so, you may
contact us at any time at the address provided in section “Information
Required by Law.” The right to demand restriction of processing applies
in the following cases:
In the event that you should dispute the correctness of your data
archived by us, we will usually need some time to verify this claim.
During the time that this investigation is ongoing, you have the right
to demand that we restrict the processing of your personal data.
If the processing of your personal data was/is conducted in an
unlawful manner, you have the option to demand the restriction of the
processing of your data in lieu of demanding the eradication of this
If we do not need your personal data any longer and you need it to
exercise, defend or claim legal entitlements, you have the right to
demand the restriction of the processing of your personal data instead
of its eradication.
If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR,
your rights and our rights will have to be weighed against each other.
As long as it has not been determined whose interests prevail, you have
the right to demand a restriction of the processing of your personal
If you have restricted the processing of your personal data, these
data – with the exception of their archiving – may be processed only
subject to your consent or to claim, exercise or defend legal
entitlements or to protect the rights of other natural persons or legal
entities or for important public interest reasons cited by the European
Union or a member state of the EU.
Rejection of unsolicited e-mails
We herewith object to the use of contact information published in
conjunction with the mandatory information to be provided in section
“Information Required by Law” to send us promotional and information
material that we have not expressly requested. The operators of this
website and its pages reserve the express right to take legal action in
the event of the unsolicited sending of promotional information, for
instance via SPAM messages.
3. Recording of data on our website
In some instances, our website and its pages use so-called cookies.
Cookies do not cause any damage to your computer and do not contain
viruses. The purpose of cookies is to make our website more user
friendly, effective and more secure. Cookies are small text files that
are placed on your computer and stored by your browser.
Most of the cookies we use are so-called “session cookies.” They are
automatically deleted after your leave our site. Other cookies will
remain archived on your device until you delete them. These cookies
enable us to recognise your browser the next time you visit our website.
You can adjust the settings of your browser to make sure that you are
notified every time cookies are placed and to enable you to accept
cookies only in specific cases or to exclude the acceptance of cookies
for specific situations or in general and to activate the automatic
deletion of cookies when you close your browser. If you deactivate
cookies, the functions of this website may be limited.
Cookies that are required for the performance of the electronic
communications transaction or to provide certain functions you want to
use (e.g. the shopping cart function), are stored on the basis of Art. 6
Sect. 1 lit. f GDPR. The website operator has a legitimate interest in
storing cookies to ensure the technically error free and optimised
provision of the operator’s services. If other cookies (e.g. cookies for
the analysis of your browsing patterns) should be stored, they are
addressed separately in this Data Protection Declaration.
Server log files
The provider of this website and its pages automatically collects and
stores information in so-called server log files, which your browser
communicates to us automatically. The information comprises:
The type and version of browser used
The used operating system
The hostname of the accessing computer
The time of the server inquiry
The IP address
This data is not merged with other data sources.
This data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The
operator of the website has a legitimate interest in the technically
error free depiction and the optimization of the operator’s website. In
order to achieve this, server log files must be recorded.
If you submit inquiries to us via our contact form, the information
provided in the contact form as well as any contact information provided
therein will be stored by us in order to handle your inquiry and in the
event that we have further questions. We will not share this
information without your consent.
Hence, the processing of the data entered into the contact form
occurs exclusively based on your consent (Art. 6 Sect. 1 lit. a GDPR).
You have the right to revoke at any time any consent you have already
given us. To do so, all you are required to do is sent us an informal
notification via e-mail. This shall be without prejudice to the
lawfulness of any data collection that occurred prior to your
The information you have entered into the contact form shall remain
with us until you ask us to eradicate the data, revoke your consent to
the archiving of data or if the purpose for which the information is
being archived no longer exists (e.g. after we have concluded our
response to your inquiry). This shall be without prejudice to any
mandatory legal provisions – in particular retention periods.
Registration on this website
You have the option to register on our website to be able to use
additional website functions. We shall use the data you enter only for
the purpose of using the respective offer or service you have registered
for. The required information we request at the time of registration
must be entered in full. Otherwise we shall reject the registration.
To notify you of any important changes to the scope of our portfolio
or in the event of technical modifications, we shall use the e-mail
address provided during the registration process.
We shall process the data entered during the registration process on
the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You have the
right to revoke at any time any consent you have already given us. To do
so, all you are required to do is sent us an informal notification via
e-mail. This shall be without prejudice to the lawfulness of any data
collection that occurred prior to your revocation.
The data recorded during the registration process shall be stored by
us as long as you are registered on our website. Subsequently, such data
shall be deleted. This shall be without prejudice to mandatory
statutory retention obligations.
Registration with Facebook Connect
Instead of registering directly on our website, you also have the
option to register using Facebook Connect. The provider of this service
is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you decide to register via Facebook Connect and click on the
“Login with Facebook” / “Connect with Facebook” button, you will be
automatically connected to the Facebook platform. There, you can log in
using your username and password. As a result, your Facebook profile
will be linked to our website or our services. This link gives us access
to the data you have archived with Facebook. These data comprise
primarily the following:
Facebook profile photo and cover photo
Facebook cover photo
E-mail address archived with Facebook
Facebook friends lists
Facebook Likes (“Likes” information)
Date of birth
This information will be used to set up, provide and customise your account.
The registration via Facebook Connect and the affiliated data
processing transactions are implemented on the basis of your consent
(Art. 6 Sect. 1 lit. a GDPR). You may revoke this consent at any time,
which shall affect all future transactions thereafter.
the Facebook Data Privacy Policies. Use these links to access this
information: https://www.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.
Processing of data (customer and contract data)
We collect, process and use personal data only to the extent
necessary for the establishment, content organization or change of the
legal relationship (data inventory). These actions are taken on the
basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of
data for the fulfilment of a contract or pre-contractual actions. We
collect, process and use personal data concerning the use of our website
(usage data) only to the extent that this is necessary to make it
possible for users to utilize the services and to bill for them.
The collected customer data shall be eradicated upon completion of
the order or the termination of the business relationship. This shall be
without prejudice to any statutory retention mandates.
Data transfer upon closing of contracts for services and digital content
We share personal data with third parties only if this is necessary
in conjunction with the handling of the contract; for instance, with the
financial institution tasked with the processing of payments.
Any further transfer of data shall not occur or shall only occur if
you have expressly consented to the transfer. Any sharing of your data
with third parties in the absence of your express consent, for instance
for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR,
which permits the processing of data for the fulfilment of a contract or
for pre-contractual actions.
4. Social media
eRecht24 Safe Sharing Tool
Users may share the content of our website and its pages in a data
protection law compliant manner on social networks, such as Facebook,
Twitter or Google+. For this purpose, this website uses the eRecht24 Safe Sharing Tool.
This tool does not establish a direct connection between the network
and the user until the user has actively clicked on one of the buttons.
The click on this button constitutes content as defined in Art. 6 Sect. 1
lit. a GDPR. This consent may be revoked by the user at any time, which
shall affect all future actions.
This tool does not automatically transfer user data to the operators
of these platforms. If the user is registered with one of the social
networks, an information window will pop up as soon as the social button
of Facebook, Google+1, Twitter et al is used, which allows the user to
confirm the text prior to sending it.
Our users have the option to share the content of this website and
its page in a data protection law compliant manner on social networks,
without entire browsing histories are being generated by the operators
of these networks.
Social media plug-ins with Shariff
We do use plug-ins of social media networks on our website and its
pages (e.g. Facebook, Twitter, Google+, Instagram, Pinterest, XING,
As a rule, you will be able to recognise these plug-ins because of
the respective social media logos that appear. To warrant the protection
of data on our website, we use these plug-ins only in combination with
the so-called “Shariff” solution. This application prevents the plug-ins
that have been integrated into our website from transferring data to
the respective provider as soon as you enter our website.
A direct connection to the provider’s server shall not be established
until you have activated the respective plug-in by clicking on the
affiliated button (which indicates your consent). As soon as you
activate the plug-in, the respective provider receives the information
that you have visited our website with your IP address. If you are
simultaneously logged into your respective social media account (e.g.
Facebook), the respective provider will be able to allocate your visit
to our website to your user account.
The activation of the plug-in constitutes a declaration of consent as
defined in Art. 6 Sect. 1 lit. a GDPR. You have the option to revoke
this consent at any time, which shall affect all future transactions.
Facebook plug-ins (Like & Share button)
We have integrated plug-ins of the social network Facebook, provided
by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, on
our website. You will be able to recognise Facebook plug-ins by the
Facebook logo or the “Like” button on our website. An overview of the
Facebook plug-ins is available under the following link: https://developers.facebook.com/docs/plugins/.
Whenever you visit our website and its pages, the plug-in will
establish a direct connection between your browser and the Facebook
server. As a result, Facebook will receive the information that you have
visited our website with your plug-in. However, if you click the
Facebook “Like” button while you are logged into your Facebook account,
you can link the content of our website and its pages with your Facebook
profile. As a result, Facebook will be able to allocate the visit to
our website and its pages to your Facebook user account. We have to
point out, that we as the provider of the website do not have any
knowledge of the transferred data and its use by Facebook. For more
detailed information, please consult the Data Privacy Declaration of
Facebook at: https://www.facebook.com/privacy/explanation.
If you do not want Facebook to be able to allocate your visit to our
website and its pages to your Facebook user account, please log out of
your Facebook account while you are on our website.
The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f
GDPR. The operator of the website has a legitimate interest in being as
visible as possible on social media.
Our website and its pages use functions of Google+; the provider is
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Recording and sharing of information: With the assistance of the
Google+ button, you can publish information worldwide. The Google+
button provides you and other users with custom tailored Google content
as well as content of our partners. Google saves the information you
have entered for content with +1 as well as information about the
website/page you viewed when you clicked on +1. Your +1 entries may
appear as information along with your profile name and your photo on
Google services, such as in search results or in your Google profile or
in other locations on websites and ads on the Internet.
Google records information about your +1 activities to improve
Google’s services for you and others. To be able to use the Google+
button, you will need a public Google profile, which is visible around
the world, which must contain at least the name you have chosen for your
profile. This name is used in conjunction with all Google services. In
some cases, this name may also replace another name you have used when
sharing content via your Google account. The identity of your Google
profile may be displayed to users who know your e-mail address or are in
possession of other information related to you that identifies you.
Use of the recorded information: Besides the abovementioned purposes
of use, the information you provide is also used in compliance with the
applicable Google Data Privacy Policies. Google may potentially publish
summary statistics about the +1 activities of its users or shares this
information with users and partners, such as publishers, prospective
customers or affiliated websites.
The use of the Google+ plug-in is based on Art. 6 Sect. 1 lit. f
GDPR. The operator of the website has a legitimate interest in being as
visible as possible on social media.
We have integrated functions of the public media platform Instagram
into our website. These functions are being offered by Instagram Inc.,
1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you may click the
Instagram button to link contents from our website to your Instagram
profile. This enables Instagram to allocate your visit to our website to
your user account. We have to point out that we as the provider of the
website and its pages do not have any knowledge of the content of the
data transferred and its use by Instagram.
The use of the Instagram plug-in is based on Art. 6 Sect. 1 lit. f
GDPR. The operator of the website has a legitimate interest in being as
visible as possible on social media.
For more information on this subject, please consult Instagram’s Data Privacy Declaration at: https://instagram.com/about/legal/privacy/.
5. Analysis tools and advertising
This website uses functions of the web analysis service Google
Analytics. The provider of this service is Google Inc., 1600
Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called cookies. Cookies are text files,
which are stored on your computer and that enable an analysis of the use
of the website by users. The information generated by cookies on your
use of this website is usually transferred to a Google server in the
United States, where it is stored.
The storage of Google Analytics cookies and the utilization of this
analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of
this website has a legitimate interest in the analysis of user patterns
to optimize both, the services offered online and the operator’s
You do have the option to prevent the archiving of cookies by making
pertinent changes to the settings of your browser software. However, we
have to point out that in this case you may not be able to use all of
the functions of this website to their fullest extent. Moreover, you
have the option prevent the recording of the data generated by the
cookie and affiliated with your use of the website (including your IP
address) by Google as well as the processing of this data by Google by
downloading and installing the browser plug-in available under the
following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to the recording of data
You have the option to prevent the recording of your data by Google
Analytics by clicking on the following link. This will result in the
placement of an opt out cookie, which prevents the recording of your
data during future visits to this website: Google Analytics
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
To measure our conversion rates, our website uses the visitor
activity pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo
Alto, CA 94304, USA (“Facebook”).
This tool allows the tracking of page visitors after they have been
linked to the website of the provider after clicking on a Facebook ad.
This makes it possible to analyse the effectiveness of Facebook ads for
statistical and market research purposes and to optimize future
For us as the operators of this website, the collected data is
anonymous. We are not in a position to arrive at any conclusions as to
the identity of users. However, Facebook archives the information and
processes it, so that it is possible to make a connection to the
respective user profile and Facebook is in a position to use the data
for its own promotional purposes in compliance with the Facebook Data Usage Policy.
This enables Facebook to display ads on Facebook pages as well as in
locations outside of Facebook. We as the operator of this website have
no control over the use of such data.
The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The
operator of the website has a legitimate interest in effective
advertising campaigns, which also include social media.
In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/.
You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.
If you do not have a Facebook account, you can deactivate any user
based advertising by Facebook on the website of the European Interactive
Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
If you would like to subscribe to the newsletter offered on this
website, we will need from you an e-mail address as well as information
that allow us to verify that you are the owner of the e-mail address
provided and consent to the receipt of the newsletter. No further data
shall be collected or shall be collected only on a voluntary basis. We
shall use such data only for the sending of the requested information
and shall not share such data with any third parties.
The processing of the information entered into the newsletter
subscription form shall occur exclusively on the basis of your consent
(Art. 6 Sect. 1 lit. a GDPR). You may revoke the consent you have given
to the archiving of data, the e-mail address and the use of this
information for the sending of the newsletter at any time, for instance
by clicking on the “Unsubscribe” link in the newsletter. This shall be
without prejudice to the lawfulness of any data processing transactions
that have taken place to date.
The data you archive with us for the purpose of the newsletter
subscription shall be archived by us until you unsubscribe from the
newsletter. Once you cancel your subscription to the newsletter, the
data shall be deleted. This shall not affect data we have been archiving
for other purposes.
7. Plug-ins and Tools
Our website uses plug-ins of the YouTube platform, which is operated
by Google. The website operator is YouTube, LLC, 901 Cherry Ave., San
Bruno, CA 94066, USA.
If you visit a page on our website into which a YouTube plug-in has
been integrated, a connection with YouTube’s servers will be
established. As a result, the YouTube server will be notified, which of
our pages you have visited.
Furthermore, YouTube will be able to place various cookies on your
device. With the assistance of these cookies, YouTube will be able to
obtain information about our website visitor. Among other things, this
information will be used to generate video statistics with the aim of
improving the user friendliness of the site and to prevent attempts to
commit fraud. These cookies will stay on your device until you delete
If you are logged into your YouTube account while you visit our site,
you enable YouTube to directly allocate your browsing patterns to your
personal profile. You have the option to prevent this by logging out of
your YouTube account.
The use of YouTube is based on our interest in presenting our online
content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR,
this is a legitimate interest.
Our website uses plug-ins of the video portal Vimeo. The provider is
Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of the pages on our website into which a Vimeo
plug-in has been integrated, a connection to Vimeo’s servers will be
established. As a consequence, the Vimeo server will receive information
as to which of our pages you have visited. Moreover, Vimeo will receive
your IP address. This will also happen if you are not logged into Vimeo
or do not have an account with Vimeo. The information recorded by Vimeo
will be transmitted to Vimeo’s server in the United States.
If you are logged into your Vimeo account, you enable Vimeo to
directly allocate your browsing patterns to your personal profile. You
can prevent this by logging out of your Vimeo account.
The use of Vimeo is based on our interest in presenting our online
content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR,
this is a legitimate interest.
8. Payment service providers and resellers
Among other options, we offer payment via PayPal on our website. The
provider of this payment processing service is PayPal (Europe) S.à.r.l.
et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter
referred to as “PayPal”).
If you choose payment via PayPal, we will share the payment information you enter with PayPal.
The legal basis for the sharing of your data with PayPal is Art. 6
Sect. 1 lit. a GDPR (consent) as well as Art. 6 Sect. 1 lit. b GDPR
(processing for the fulfilment of a contract). You have the option to at
any time revoke your consent to the processing of your data. Such a
revocation shall not have any impact on the effectiveness of data
processing transactions that occurred in the past.