General information

Compliance with data protection laws is not only a legal obligation for Ketschauer Hof Hotel & Restaurant GmbH, but also an important trust factor. With the following data protection provisions, we would therefore like to inform you transparently about the type, scope and purpose of the personal data collected and processed from you within this website, as well as your rights.

Responsibility for data processing

Ketschauer Hof Hotel & Restaurant GmbH, Ketschauerhofstraße 1, 67146 Deidesheim, Germany (hereinafter referred to as “we”) is the operator of the website www.ketschauer-hof.com, responsible pursuant to Art. 6 para. 1 lit. f GDPR. Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR). If you have any questions, please contact info@ketschauer-hof.com.

Data Protection Officer

The responsible data protection officer is

Süddeutsche Datenschutzgesellschaft mbH
Contact Maximilian Mayer
Von-Brettreich-Straße 4
93049 Regensburg
Tel: +49 (0) 941 – 38177070
Mail: verwaltung@sddsg.de

Rights of data subjects

Your rights as a data subject

As a data subject, you have the following rights with regard to your personal data. You have:

• A right to information about, among other things, the categories of data processed, the purposes of processing, the storage period and any recipients, in accordance with Art. 15 GDPR and Section 34 BDSG.
• A right to rectification or erasure of incorrect or incomplete data, in accordance with Art. 16 and 17 GDPR and Section 35 BDSG.
• Under the conditions of Art. 18 GDPR or Section 35 para. 1 sentence 2 BDSG a right to restriction of processing.
• A right to object to the processing pursuant to Art. 21 para. 1 GDPR, insofar as the data processing was carried out on the basis of a legitimate interest.
• A right to revoke consent given with effect for the future pursuant to Art. 7 para. 3 GDPR.
• A right to data portability in a commonly used format pursuant to Art. 20 GDPR.
• In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. This also includes profiling within the meaning of Art. 4 No. 4 GDPR.
• You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us in accordance with Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

Procedure

If you assert your rights under the GDPR and the BDSG against us, we will process the data you provide to us in order to fulfill your claim.

We then store the data you have transmitted to us and the data we have transmitted to you in return for the purpose of documentation until the expiry of the statute of limitations under regulatory offense law (3 years).

The legal basis for the processing and storage of data is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our obligation to comply with your request and the need to be able to exonerate ourselves in possible fine proceedings by proving that we have properly complied with your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint. However, we would like to point out that the processing of your data to prove compliance with the rights of the data subject is mandatory within the meaning of Art. 21 para. 1 GDPR, as other means of proof do not exist or are not equally suitable.

Data protection measures

We use technical and organizational measures to protect our website and other systems – and therefore also your data – against loss, destruction, access, modification or dissemination by unauthorized persons. In particular, your personal data is transmitted encrypted via the Internet. We use the TLS (Transport Layer Security) coding system.

However, the transmission of information via the Internet is never completely secure, which is why we cannot guarantee the security of the data transmitted from our website 100%.

Modalities of data processing

Sources and categories of personal data

We process your personal data insofar as it is necessary for the establishment, content or amendment of a contractual relationship between us and you (inventory data). Inventory data can be in particular Name, title, contact details (postal address, telephone, e-mail address), date of birth, etc.

We also process your usage data. Usage data is data that is generated by your behavior when using our website and our services, in particular your IP address, the start and end of your visit to our website and information about what content you have accessed on our website.

We collect the aforementioned data either directly from you (e.g. by visiting the website) or, to the extent permitted by data protection laws, from third parties or publicly accessible sources (e.g. commercial and association registers, press, media, Internet).

Data transfer to third countries outside the EU

All information that we receive from you or about you is generally processed on servers within the European Union. Your data will only be transferred to or processed in third countries without your express consent if this is provided for or permitted by law, if an adequate level of data protection is ensured in the third country or if contractual obligations exist through so-called standard data protection clauses of the EU.

With regard to data transfers to the USA, the European Commission has issued an adequacy decision called the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection for the transfer of personal data by companies participating in the EU-U.S. Data Privacy Framework. Insofar as we use services that transfer personal data to the USA, the respective service states whether the company is certified by the EU-U.S. data protection framework.

Forwarding of data, order processing

We never pass on your personal data to third parties without authorization. However, we may disclose your data to third parties in particular if you have consented to the disclosure of data, if the disclosure is necessary to fulfill our legal obligations or if we are entitled or obliged to disclose data due to legal provisions or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

We may also transfer your data to external service providers who process data on our behalf and in accordance with our instructions (processors) in order to simplify or relieve our own data processing. Each processor is bound by a contract in accordance with Art. 28 GDPR. In particular, this means that the processor must provide sufficient guarantees that appropriate technical and organizational measures are implemented by the processor in such a way that the processing is carried out in accordance with the requirements of the GDPR and the protection of your rights as a data subject is guaranteed. Despite commissioning processors, we remain the controller for the processing of your personal data within the meaning of the data protection laws.

Purpose of data processing

We only use the data for the purpose for which it was collected from you. We may further process the data for another purpose, unless this other purpose is incompatible with the original purpose (Art. 5 para. 1 lit. c) GDPR).

Storage duration

Unless otherwise specified in detail, we will only store the data collected from you for as long as is necessary for the respective purpose, unless statutory retention obligations prevent deletion, e.g. under commercial law or tax law.

Individual processing activities

In the following, we would like to show you as transparently as possible what data we process from you, on what occasion, on what basis and for what purpose.

Server log files

Each time a website is accessed and each time data is retrieved from a server, general information is automatically transmitted to the providing server. This data transfer takes place automatically and is a fundamental component of communication between devices on the Internet.

The data transmitted by default includes the following information: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referer), date and time of the request (so-called timestamp). In addition, the http status and the amount of data transferred are recorded as part of this request.

This information is logged by the server, stored in a table and saved there for a short time (so-called server log files). By analyzing these log files, we can detect and subsequently eliminate website errors, determine the website’s capacity utilization at certain times and make adjustments or improvements based on this, and ensure the security of the server by being able to trace the IP address from which attacks on our server were carried out.

Your IP address is only stored for the duration of your use of the website and is then immediately deleted or made partially unrecognizable by shortening it. The remaining data is stored for a limited period of time (usually 7 days).

The legal basis for the use of the server log files is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from the necessity for the operation and maintenance of our website, as we have explained above. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint. However, we would like to point out in advance that the processing of your data in server log files is mandatory within the meaning of Art. 21 para. 1 GDPR, as otherwise the website cannot be operated at all.

Cookies and web storage

We use so-called “cookies” or the “web storage” of your browser to improve the user-friendliness of our website.

Cookies

What cookies are

Put very simply, a cookie is a small text file that stores data about websites visited. Cookies can be used in many different ways. For example, you can save a kind of “user profile”, i.e. things like your preferred language and other page settings that are required by our website in order to be able to offer you certain services. The cookie file is stored on your end device and can also help to recognize you when you visit our website again.

We may also be able to use cookies to obtain information about your preferred activities on our website and thus tailor our website to your individual interests or even increase the speed of navigation on our website.

How you can avoid cookies

You can delete cookies manually at any time in the security settings of your browser.

However, you can also prevent the storage of cookies from the outset by setting your browser accordingly. Please note, however, that you may then not be able to use all the functions of our website to their full extent or that there may be errors in the presentation and use of the website.

Cookies from third-party providers

It is possible that third-party providers, with the help of which we design and operate our website, in particular through so-called plugins (see below in the section “Third-party services”), may independently store their own cookies on your end device. If you only wish to accept our own cookies, but not cookies from these third parties, you can prevent the storage of these cookies by selecting the appropriate browser setting “Block third-party cookies”.

Which cookies are used

Specifically, our website uses the following cookies:

Name	Explanation	Origin (Domain)	Validity/ Storage duration	Third party access
_ga_<ID>, _ga	This cookie is required by the Google Analytics service. It is used to recognize individual website visitors by using an identifier consisting of two randomly generated 32-bit numbers (e.g. 12345.67890). Information on how you can prevent the storage of this cookie can be found below under “Google Analytics”.	.ketschauer-hof.com	2 years	Yes, Google
borlabs-cookie	This cookie is used to recognize whether you have already been shown the consent notice and whether you have fully accepted or rejected it, or which specific settings you have selected. It does not contain any personal data.	.ketschauer-hof.com	6 months	No
ppc_last_visited_page	This cookie determines when the user last visited another subpage.	.ketschauer-hof.com	1 hour	No

Legal basis

The legal basis for the use of cookies that are absolutely necessary for the function of the website (e.g. shopping cart cookie, session cookie) is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing) and § 25 Abs.
2 No. 2 TDDDG (absolute necessity for the provision of a digital service expressly requested by the user). The legitimate interest arises from our need to be able to offer you a functioning website. Cookies are necessary because they are an integral part of current Internet technology and many functions of current websites would not be available without cookies. We therefore need cookies to be able to provide you with the website at your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

However, we would like to point out that the processing of your data in certain cookies is mandatory within the meaning of Art. 21 para. 1 GDPR, as otherwise the website cannot be operated at all and we do not have the technical possibility to prevent the setting of cookies on certain individual end devices. However, you may be able to do this yourself in your browser. For more information, please refer to the instructions for your browser.

The legal basis for the use of cookies that are not absolutely necessary for the function of the website is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). When you access the website for the first time, we ask you for your consent to the use of non-essential cookies via an information text that appears. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Web Storage

What is Web Storage

Web storage is a technology for web applications that is used to store data in a web browser. In simple terms, web storage can be seen as a further development of cookies, but differs from them in a number of ways.

In contrast to cookies, which can be accessed by both server and client, web storage is controlled entirely by the client. This means that data is not transferred to the server every time the website is accessed. Access takes place exclusively locally via scripts on the website. In concrete terms, this means that third parties cannot access the information stored on the website. Only you and we can access the locally stored data.

Legal basis

The legal basis for the use of web storage, which is absolutely necessary for the function of the website, is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing) and § 25 Abs.
2 No. 2 TDDDG (absolute necessity for the provision of a digital service expressly requested by the user). The legitimate interest arises from our need to be able to offer you a functioning website. Web storage is necessary because it is an integral part of current Internet technology and many functions of current websites would not be available without it. We therefore need the web storage to be able to provide you with the website at your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

However, we would like to point out that the processing of your data in web storage may be mandatory within the meaning of Art. 21 para. 1 GDPR, as otherwise the website cannot be operated at all and we do not have the technical possibility to prevent its use on certain individual end devices. However, you may be able to do this yourself in your browser. For more information, please refer to the instructions for your browser.

The legal basis for the use of web storage, which is not absolutely necessary for the function of the website, is Art. 6 para. 1 S.1 point (a) GDPR (consent of the data subject). When you first access the website, we will ask you for your consent to use it by displaying a message. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Contact us

Our website offers opportunities to contact us directly.

We process the data you transmit to us exclusively until the respective purpose of your contact has been achieved, unless statutory retention periods prevent this. If the purpose of your contact is to assert your rights as a data subject, the information in the section “Your rights as a data subject” applies.

The following data is processed as part of the contact form:

Name, e-mail address, address if applicable, telephone number and the content of the message.

The legal basis for the use of the data you provide to us by contacting us in the context of contractual or pre-contractual relationships or for responding to (pre)contractual inquiries is Art. 6 para. 1 sentence 1 letter b) GDPR (data processing for the performance of a contract).

The legal basis for the processing of the data transmitted to us by you by contacting us in cases other than for contractual or pre-contractual purposes or inquiries is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). Our legitimate interest in processing arises from our interest in responding to inquiries and maintaining user relationships.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

Newsletter

We offer to keep you regularly up to date with our newsletter and inform you about special offers. To subscribe to the newsletter, you can add your e-mail address to our mailing list. You must then confirm your registration again (double opt-in procedure). We only use the data you send us for the purpose of sending the newsletter and do not pass it on to third parties for any other purpose.

Our newsletter uses so-called web beacons or tracking pixels to analyze your reading behavior. Tracking pixels are extremely small image files that are integrated into the newsletter e-mail and thus allow log file recording and log file analysis.

When you open the newsletter email, the tracking pixel is loaded from the server of the newsletter service and at the same time some information about you is transmitted, such as whether the email was opened, the time of the call and the corresponding IP address.

In addition, links in the email can provide information about which products are more interesting – i.e. clicked on more frequently than others.

Both the respective web beacon/counter pixel and the links in the email can be clearly assigned to the email address used for sending the newsletter and thus allow conclusions to be drawn about the respective newsletter recipient.

The legal basis for the use of your email address is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). You can revoke your consent at any time with effect for the future. Please use the link in every newsletter email or contact us using the contact details given in the legal notice.

Online applications

Our website offers you the opportunity to apply online using an application form. Please note that you will be asked to provide mandatory information, without which you will not be able to submit your application.

We require the following information from you:

• Name: It is necessary for us to know your name because we attach great importance to a personal address in the context of professional correspondence. We will use your data exclusively for this purpose.
• Date of birth: It is necessary for us to know your date of birth so that we can better assess your experience and qualifications. We will use your data exclusively for this purpose.
• Curriculum vitae: The CV is necessary for us to assess your skills, formal qualifications and suitability for the position you are applying for. We will use your data exclusively for this purpose.
• Telephone number: It is necessary to provide your telephone number in order to contact us, as it is much easier and quicker to contact us by telephone than to communicate exclusively by email. It also allows us to reach you quickly in the event of last-minute changes. We will use your data exclusively for this purpose.
• Email address: It is necessary for us to have your e-mail address because we need an uncomplicated way to process your request and then get in touch with you. We will use your data exclusively for this purpose.

All other information is voluntary. This allows you to send us additional information and documents that you consider important and useful for your application.

Overall, use of the online form is voluntary. You can also send us your application by e-mail or post at any time. As applications generally contain particularly sensitive information, we would like to point out that there are risks involved in transmitting such data via the Internet, in particular due to data interception/spying. If you are unsure about this, we advise you to contact us by post.

We use your data to process your application and to communicate with you, in particular to assess your suitability for current or future employment in our company.

If your application is successful, our HR department will add your data to your personnel file when you are hired. If your application is unsuccessful, we will store your data for a period of six months from the date you receive the decision. Your data will only be accessed during this period if you wish us to justify our decision or to defend ourselves against legal claims.

After this period has expired, we will delete or destroy your data unless we are required by law to store your data for longer. If you have applied by letter post, we will return your application documents to you by letter post, provided you have given us a domestic postal address and wish them to be returned. Otherwise your documents will be destroyed if the application process is unsuccessful.

The legal basis for the data voluntarily provided by you in the application form is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). Obviously irrelevant data will be deleted by us. Our legitimate interest arises from our need to process applications and information about the applicant. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

The legal basis for the processing of mandatory data is Art. 88 para. 1 GDPR in conjunction with Section 26 BDSG (data processing in the employment context) and Art. 6 para. 1 lit. b) GDPR (data processing for the performance of a contract and for the implementation of pre-contractual measures).

We reserve the right to anonymize applicant data so that it is no longer possible to draw conclusions about your person and to subsequently evaluate it for internal statistical purposes. We will not carry out any further analysis without your consent.

Hosting services

Our website is hosted on servers of external providers in order to ensure the efficient and secure provision of the website.

Each time you visit the website, general information is automatically transmitted from your browser to the server (so-called server log files). For more information, see above under “Server log files”.

The legal basis for the use of hosting services and the associated processing of your data is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing), unless otherwise stated for the respective service. The legitimate interest arises from our need for a technically flawless presentation of our website without requiring in-depth knowledge of website programming and IT system maintenance. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

Third party services

We use third-party services/resources, such as plugins, external content, software or other external service providers (services), to simplify our data processing and to expand the functionality of our website. Personal data may also be transmitted to the service provider. In order to protect your data, we have informed the service providers, if necessary, in accordance with. Art. 28 GDPR, we are contractually obliged to process your data only in accordance with our instructions.

We expressly point out that we are regularly only responsible for the data collection and transmission by the service within the meaning of the GDPR, but not for any subsequent processing by the respective service provider.

Specifically, we use the following services:

Google services

Our website uses the following services of Google Ireland Limited (“Google EU”), Gordon House, Barrow Street, Dublin 4, Ireland. In the EU, this company represents Google LLC (“Google US”), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

By using the services, data is transmitted to Google EU and, under certain circumstances, from Google EU to Google US. The Google Group may process the transmitted data in order to create anonymized user profiles for statistical purposes. If you also have a Google account and are logged into it, Google can assign the transmitted data to your account – even across devices. In principle, we have no influence on this data processing. Google EU is therefore responsible for this data processing.

The company Google LLC fulfills the requirements of the “EU-U.S. Data Privacy Framework”. The Privacy Framework Agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that in the European Union. You can access the list of certified companies here: https://www.dataprivacyframework.gov/s/participant-search.

You can find more information on the handling of user data in Google’s privacy policy: https://policies.google.com/privacy.

The details of the standard contractual clauses concluded (guaranteeing the level of data protection in third countries) can be found here: https://support.google.com/adspolicy/answer/10042247?hl=de

You can manage your Google advertising settings on the following website: https://adssettings.google.com/?hl=de (This setting will be deleted if you delete your cookies)

We use:

Google Analytics

Our website uses the “Google Analytics” service from Google. Google Analytics uses cookies (see above under “Cookies”) to enable us to analyze the use of the website by website visitors. The information generated by the cookie about the use of this website by users is usually transferred to a Google server in the USA and stored there. Among other things, the following may be transmitted Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), the date and time of the request and possibly your Internet service provider.

IP anonymization has been activated on our website, so that your transmitted IP address is shortened before transmission outside the scope of the GDPR and thus made partially unrecognizable, i.e. anonymized. Only in exceptional cases is the full IP address first transmitted to a Google server in the USA and shortened there immediately.

On our behalf, Google will use the information transmitted to evaluate your use of our website, compile reports on website activity and provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can find more information on the terms of use and data protection at Google Analytics at http://www.google.com/analytics/terms/de.html or at https://policies.google.com/technologies/partner-sites?hl=de

You can prevent the data generated by the cookie and related to the use of the website (including IP address) from being transmitted to Google or processed by Google by downloading and installing the browser plug-in available under the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent the setting of cookies altogether (see above “How you can avoid cookies”).

The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask you for your consent to use the service when you access the website for the first time by displaying a message. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Google Tag Manager

Our website uses the “Google Tag Manager” support service from Google. This service itself does not process any personal data. However, the Google Tag Manager triggers scripts that are required by other services to collect data. It is not possible for Google Tag Manager to access this data.

The legal basis for the use of Google Tag Manager is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for a technically flawless and fast presentation of our website and the relief of our IT infrastructure. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

Content Delivery Networks

Our website uses so-called Content Delivery Networks (CDN). A CDN is a network of high-performance servers that cache content at various locations around the world. A CDN essentially has two tasks: firstly, to provide content in the shortest possible time and secondly, to relieve the web host by distributing the data traffic.

CDNs transmit two types of content: Static and dynamic content. All website visitors receive static content in the same form, such as video content from streaming services or code frameworks (e.g. Javascript, jQuery). Dynamic content is first adapted to the user and only created at the moment of the request. This includes content that takes place via web applications, e-mail or online stores and is personalized. In order to be able to use the latter, information about the website visitor must first be transmitted to the CDN. Your personal data may also be transmitted in the process.

Each time you access the application, general information is automatically transmitted from your browser to the server (so-called server log files). For more information, see above under “Server log files”.

The legal basis for the use of CDNs and the transfer of your data to them is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing), unless otherwise stated for the respective service. The legitimate interest arises from our need for a technically flawless and fast presentation of our website and the relief of our IT infrastructure. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

We use:

Cloudflare

We use the CDN service of the company Cloudflare Inc. (“Cloudflare”), 101 Townsend St., San Francisco, California 94107, USA.

The company Cloudflare Inc. meets the requirements of the “EU-U.S. Data Privacy Framework”. The Privacy Framework Agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that in the European Union. You can access the list of certified companies here: https://www.dataprivacyframework.gov/s/participant-search.

You can find more information on the handling of user data in Cloudflare’s privacy policy: https://www.cloudflare.com/security-policy/.

Other services

Social media fan pages

In addition to our website, we maintain online presences on social platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services.

If you visit our presence on a social platform, your data will generally be processed by the respective platform provider for our market research and advertising purposes. The provider may also process the data for its own purposes. Usage profiles can be created from your usage behavior and your resulting interests. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. For these purposes, cookies (see above) are usually stored on your end device, in which your usage behavior and interests are stored. In particular, if you are a member of the respective platforms and are logged in to them, additional data may be stored independently in the user profiles. For a detailed description of the respective data processing and the possibilities of objection, we refer to the following linked information from the providers, as only they know the exact processes of their data processing.

We would like to point out that your data may also be processed outside the European Union. This may result in risks, e.g. because it could make it more difficult to enforce your rights.

The legal basis for the use of the online presences and the associated data processing is generally Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to present ourselves to visitors and users of social networks and to introduce statements of all kinds to the media and opinion market. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

The use of statistical data of all visitors to our social media websites, which is collected, processed and made available to us by the respective site operators, is based on Art. 6 para. 1 lit. f GDPR. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for an anonymous evaluation of the visit and usage behavior on our websites in order to improve the design of our online offering and optimize our communication with interested parties. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

If you are asked by the respective providers for consent to data processing, the legal basis for processing is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). You can revoke this consent at any time with effect for the future. To do so, please contact the provider who asked for your consent.

In the event that you wish to assert your above-mentioned rights, we would like to point out that, despite possible joint responsibility, these can be asserted most effectively with the providers. As a rule, only the providers have direct access to your data and can take appropriate measures and provide information directly. If you still need help, you can contact us and we will support you at any time within the scope of our possibilities.

We are represented at:

Facebook

Facebook is a social network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Ireland Limited is the European subsidiary of Meta Platforms, Inc, 1601 Willow Road, Menlo Park, California 94025, USA.

You can find further information on data protection at Facebook at: https://www.facebook.com/about/privacy/. We inform you about our own data processing in this declaration.

We have concluded an additional agreement with Facebook as part of our user contract, which regulates the responsibility for data processing with regard to the Page Insights function in accordance with Art. 26 GDPR. The details of the agreement can be found here: https://www.facebook.com/legal/terms/page_controller_addendum.Among other things, Facebook has undertaken to inform you about data processing in the context of the Page Insights function. You can find this information here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Instagram

Instagram is a social network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Ireland Limited is the European subsidiary of Meta Platforms, Inc, 1601 Willow Road, Menlo Park, California 94025, USA.

You can find more information on data protection at Instagram at: http://instagram.com/about/legal/privacy/.

You can find further information on data protection at Facebook at: https://www.facebook.com/about/privacy/.

Kununu

Kununu is a professional network of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Further information on data protection at kununu can be found at:

https://privacy.xing.com/de/datenschutzerklaerung

Pinterest

Pinterest is a social network of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. In the EU, this company represents Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA.

Further information on data protection at Pinterest can be found at: https://about.pinterest.com/de/privacy-policy.

LinkedIn

LinkedIn is a professional network of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In the EU, this company represents LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085, USA.

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy.

You can configure LinkedIn’s data collection on the following page: https://www.linkedin.com/psettings/guest-controls/

Status of the privacy policy: 02.11.2023

Source: Süddeutsche Datenschutzgesellschaft mbH

Customer Alliance evaluation certificate

To display our ratings collected by Customer Alliance, a widget of CA Customer Alliance GmbH, Ullsteinstr. 130, Tower B, 12109 Berlin, Germany, is integrated on this website.

To collect reviews, Customer Alliance sends questionnaires to customers who have interacted with our company. The value given by the certificate is an average score based on all customer reviews. By providing the widget on our website, general information is automatically transmitted from your browser to Customer Alliance servers (so-called server log files). Among other things, the following may be transmitted Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), the date and time of the request and possibly your Internet service provider. For more information, see above under “Server log files.

Further information on data usage at Customer Alliance can be found in the provider’s privacy policy: https://www.customer-alliance.com/de/datenschutzerklarung/

The legal basis for the use of the widget is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to display information that makes our website more interesting for you and other potential customers and to optimize our advertising costs. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. Please use the contact details given in the imprint.

DialogShift GmbH

DialogShift chat application on our website

Our website uses the chat application of DialogShift GmbH, Torstr. 201, 10115 Berlin. This application processes and stores data for the purpose of web analysis, operating the chat application and responding to inquiries.

To operate the chat function, the chat texts are saved and a cookie with a unique ID is set – this is used to recognize you as a customer.

A cookie is a small text file that is stored locally in the cache on your device. is saved. With the help of this cookie, our application recognizes the device and can call up past chat logs. This cookie is stored for 90 days since the last

usage, stored. You can prevent the storage of cookies in your Deactivate browser settings. However, without the use of cookies, the Chat function cannot be executed.

The possible disclosure of e.g. name, e-mail address or telephone number is voluntary and with the consent to temporarily use and store this data for the purpose of establishing contact until the end of the contact. This personal data will be deleted after 90 days.

The legal basis for data processing is Art. 6 para. 1 lit. a GDPR, § 25 Para. 1 TDDDG on the basis of your consent.

DialogShift offers at https://www.dialogshift.com/datenschutz for further information on the collection and use of data as well as your rights and options for protecting your privacy.