Privacy policy

We protect your data

This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the websites, functions and contents connected with it as well as external online presences, such as our social media profile. (hereinafter jointly referred to as the “online offer”). With regard to the terms used, such as “processing” or “responsible party”, we refer to the definitions in Art. 4 of the Basic Data Protection Regulation (GDPR).

Responsible

Farbenhaut UG (haftungsbeschränkt)
Dr. Bernd Neidl (Managing director)
Hammer 6
92521 Schwarzenfeld
Germany
E-Mail: hello@simply-psoriasis.com
Telephone: 089 / 71682536
Here you will find our: Imprint

Types of data processed:

– inventory data (e.g., names, addresses).
– contact data (e.g., e-mail, telephone numbers).
– content data (e.g., text entries, photographs, videos).
– usage data (e.g., websites visited, interest in content, access times).
– meta/communication data (e.g., device information, IP addresses).

Purpose of the processing

– Provision of the online offer, its functions and contents.
– Answering of contact requests and communication with users.
– security measures.
– Reach measuring/marketing

Used terms

“personal data” shall mean any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an on-line identifier (e.g. a cookie) or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

“Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and covers virtually all processing of data.

“Controller” shall mean the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consents is Art. 6 Para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering enquiries is Art. 6 Para. 1 lit. b GDPR, the legal basis for processing for the purpose of fulfilling our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the legal basis for processing for the purpose of safeguarding our legitimate interests is Art. 6 Para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 paragraph 1 lit. d GDPR serves as the legal basis.

Security measures

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes make it necessary for you to cooperate (e.g. to give your consent) or to receive other individual notification.

Cooperation with contract processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transfer it to them or otherwise grant them access to the data, this is only done on the basis of a legal authorisation (e.g. if the data must be transferred to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 letter b GDPR to fulfil the contract), if you have given your consent, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosters, etc.).

If we commission third parties to process data on the basis of a so-called “contract processing agreement”, this is done on the basis of Art. 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer data to a third country if the special requirements of Art. 44 ff. GDPR. In other words, processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Rights of the persons concerned

You have the right to request confirmation as to whether or not data in question is being processed and to obtain information about this data and to receive further information and a copy of the data in accordance with Art. 15 GDPR.

You have accordingly. Art. 16 DPA, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.

Under Art. 17 GDPR, you have the right to demand that data concerning you be deleted immediately, or alternatively, under Art. 18 GDPR, to demand that the processing of the data be restricted.

You have the right to request that the data concerning you which you have made available to us be received in accordance with Art. 20 GDPR and to demand that it be passed on to other responsible parties.

You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.

Right of withdrawal

You have the right to revoke consents granted in accordance with Art. 7 para. 3 GDPR with effect for the future.

Right of objection

You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. In particular, you may object to processing for the purposes of direct advertising.

Cookies and right of objection for direct advertising

Cookies” are small files that are stored on the user’s computer. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online shop or a login jam can be stored. Cookies are described as “permanent” or “persistent” if they remain stored even after the browser is closed. For example, the login status can be saved if the user visits it after several days. Likewise, the interests of the users can be stored in such a cookie, which are used for range measurement or marketing purposes. Third-party cookies” are cookies that are offered by providers other than the person responsible for operating the online service (otherwise, if they are only the cookies of this person, they are called “first-party cookies”).

We may use temporary and permanent cookies and provide information about this in our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

A general objection to the use of cookies used for online marketing purposes can be declared for many of the services, especially in the case of tracking, via the US site https://www.aboutads.info/choices/ or the EU site https://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that not all functions of this online offer can be used then.

Deletion of data

The data processed by us will be deleted or restricted in their processing in accordance with articles 17 and 18 GDPR. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to the legal requirements in Germany, the storage takes place in particular for 10 years according to §§ 147 para. 1 AO, 257 para. 1 nos. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years according to § 257 para. 1 nos. 2 and 3, para. 4 HGB (commercial letters).

In accordance with legal requirements in Austria, the retention is in particular for 7 J in accordance with § 132 para. 1 BAO (accounting documents, vouchers/invoices, accounts, vouchers, commercial documents, statement of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years for documents in connection with electronically provided services, telecommunications, radio and television services which are provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used.

Business-related processing

Additionally we process
– contract data (e.g., subject matter of the contract, duration, customer category).
– payment data (e.g., bank details, payment history)
from our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services which we use for the purpose of operating this online offer.

For this purpose, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of contract processing agreement).

Hosting provider: ALL-INKL.COM – New Media Münnich, Hauptstraße 68, D-02742 Friedersdorf. According to the contractual agreement with the provider, all servers and thus also customer data are located in Germany.

Content delivery network CloudFlare

Our pages use functions of CloudFlare. Provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. CloudFlare offers a worldwide distributed content delivery network with DNS. Technically, the information transfer between your browser and our website is routed through CloudFlare’s network. CloudFlare is thus able to analyze the data traffic between users and our website, for example to detect and fend off attacks on our services. In addition, CloudFlare may store cookies on your computer for optimization and analysis purposes. This serves the purpose of safeguarding our legitimate interests in an optimal marketing of our services in accordance with article 6 paragraph 1 sentence 1 lit. b GDPR.

We have concluded a corresponding agreement with Cloudflare on the basis of the GDPR for order processing. Cloudflare is a certified participant of the EU-US Privacy Shield Framework. Cloudflare has committed itself to handle all personal data contained in the member states of the European Union (EU) in accordance with the Privacy Shield Framework and its applicable principles. Further information about the Privacy Shield Framework can be found on the Privacy Shield List of the US Department of Commerce at https://www.privacyshield.gov. Cloudflare collects statistical data about the visit of this website. Access data includes: Name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses the log data for statistical evaluations for the purpose of operation, security and optimization of the offer.

Here you will find information about the data collected there and about the security & privacy at CloudFlare.

Administration, financial accounting, office organization, contact management

We process data within the framework of administrative tasks as well as the organisation of our operations, financial accounting and compliance with legal obligations, such as archiving. In the process, we process the same data that we process within the scope of providing our contractual services. The basis for processing is Art. 6 Par. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose of and our interest in the processing lies in the administration, financial accounting, office organisation, archiving of data, i.e. tasks which serve to maintain our business activities, perform our tasks and provide our services. The deletion of data in relation to contractual services and contractual communication corresponds to the information mentioned in these processing activities.

In doing so, we disclose or transfer data to the financial administration, consultants, such as tax consultants or auditors, as well as other fee agencies and payment service providers.

Furthermore, we store information on suppliers, event organisers and other business partners on the basis of our business interests, e.g. for the purpose of contacting them at a later date. This data, which is mainly company-related, is stored permanently.

Data protection notices in the application procedure

We process the applicant data only for the purpose and within the scope of the application procedure in accordance with the legal requirements. Candidate data is processed for the purpose of fulfilling our (pre-)contractual obligations within the framework of the application procedure within the meaning of Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR if the data processing becomes necessary for us, e.g. within the framework of legal procedures (in Germany, § 26 BDSG also applies).

The application procedure requires that applicants provide us with their application data. If we offer an online form, the necessary applicant data are marked as such, otherwise they result from the job descriptions and basically include personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. In addition, applicants can voluntarily provide us with additional information.

By submitting their application to us, applicants agree to the processing of their data for the purposes of the application procedure in accordance with the type and scope described in this data protection declaration.

Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are voluntarily communicated as part of the application procedure, their processing is additionally carried out in accordance with Art. 9 Para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are requested from applicants within the framework of the application procedure, their processing is additionally carried out in accordance with Art. 9 Para. 2 letter a GDPR (e.g. health data if these are necessary for the exercise of the profession).

If made available, applicants can submit their applications to us by means of an online form on our website. The data will be transmitted to us in encrypted form according to the state of the art.
Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not encrypted and that applicants must ensure that they are encrypted themselves. We can therefore not assume any responsibility for the transmission path of the application between the sender and the receipt on our server and therefore recommend rather to use an online form or the postal dispatch. This is because instead of applying via the online form and e-mail, applicants still have the option of sending us their application by post.

In the event of a successful application, the data provided by the applicants can be processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicants’ data is deleted. Applicants’ data is also deleted if an application is withdrawn, which applicants are entitled to do at any time.

Subject to a justified revocation by the applicants, the data will be deleted after the expiry of a period of six months so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.

Amazon Partner Program

We are entitled to make use of our online offer on the basis of our legitimate interests (i.e. interest in the economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we are participants in the Amazon EU partner programme, which was designed to provide a medium for websites, by means of which advertising costs can be earned by placing advertisements and links to Amazon.de (so-called affiliate system). Amazon uses cookies to track the origin of orders. Among other things, Amazon can recognize that you clicked the affiliate link on this website and then purchased a product from Amazon.

Further information on Amazon’s use of data and the possibility of objection can be found in the company’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.

Establishment of contact – contact us

When contacting us (e.g. via contact form, e-mail, telephone or social media), the user’s details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) GDPR. The user’s details may be stored in a customer relationship management system (“CRM system”) or comparable enquiry organisation.

We delete the enquiries if they are no longer required. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

Comments and contributions

If users leave comments or other contributions, their IP addresses may be changed on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR for 7 days. This is done for our security if someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.

Furthermore, we reserve the right, on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f. GDPR, we reserve the right to process the information provided by users for the purpose of spam detection. Users are welcome to use pseudonyms or to refrain from entering their name or email address. You can completely prevent the transmission of data by not using our comment system. That would be a pity, but unfortunately we do not see any other alternatives that work just as effectively.

Retrieval of profile pictures from Gravatar

We use within our online offer and especially in our blog the service Gravatar of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.

Gravatar is a service where users can register and store profile pictures and their e-mail addresses. If users leave contributions or comments on other websites (especially blogs) using their e-mail address, their profile pictures can be displayed alongside the contributions or comments. For this purpose, the e-mail address provided by the user is transmitted in encrypted form to Gravatar for the purpose of checking whether a profile is stored for it. This is the sole purpose of transmitting the e-mail address and it will not be used for other purposes, but will be deleted afterwards.

The use of Gravatar is based on our legitimate interests in the sense of Art. 6 para. 1 lit. f) GDPR, because with the help of Gravatar we offer the possibility to personalise the contributions and comments of the authors with a profile picture.

By displaying the images, Gravatar can find out the IP address of the user, as this is necessary for communication between a browser and an online service. For more information about Gravatar’s collection and use of data, please see Automattic’s privacy policy: https://automattic.com/privacy/.

If users do not want a user picture linked to their email address to appear in their comments, they should use an email address that is not registered with Gravatar. We would also like to point out that it is also possible to use an anonymous e-mail address or no e-mail address at all, if users do not want their own e-mail address to be sent to Gravatar. Users can completely prevent the transmission of data by not using our comment system.

With the following notes we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.
Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter “newsletter”) only with the consent of the recipients or a legal permission. Insofar as the contents of the newsletter are specifically described in the context of a registration for the newsletter, they are decisive for the consent of the users. Furthermore, our newsletters contain information about our services and us.
Double-Opt-In and logging: The registration for our newsletter is done in a so-called Double-Opt-In procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with foreign e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Registration data: To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name for personal contact in the newsletter.

Germany: The dispatch of the newsletter and the associated measurement of success is based on the consent of the recipients in accordance with Art. 6 Para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 Para. 2 No. 3 UWG or on the basis of legal permission in accordance with § 7 Para. 3 UWG.

The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR. We are interested in the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and also allows us to prove consent.

Cancellation/revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.

The newsletters are sent via the mailing service provider “MailChimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection regulations of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The mail order service provider is used on the basis of our legitimate interests according to art. 6 para. 1 lit. f GDPR and an order processing contract according to art. 28 para. 3 sentence 1 GDPR.

The mail-order service provider may use the recipient’s data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for technical optimisation of the dispatch and presentation of the newsletters or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from their server. Within the scope of this retrieval, technical information such as information on the browser and your system, as well as your IP address and time of retrieval are initially collected.

This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined by means of the IP address) or the access times. Statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Google Fonts

We integrate the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, unsubscribe (Opt-Out) works here: https://adssettings.google.com/authenticated.

Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the website by the user is usually transferred to a Google server in the USA and stored there.

Google is certified under the Privacy-Shield-Agreement and thus offers a guarantee to comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.

We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

The IP address transmitted by the user’s browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google’s use of data, settings and opt-out options, please see Google’s privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of ads by Google (https://adssettings.google.com/authenticated).

The personal data of users will be deleted or made anonymous after 14 months.

Social media online presences

We maintain online presences within social networks in order to communicate with the users active there or to offer information about us there.

Please note that user data may be processed outside the European Union. This can result in risks for the users, because the enforcement of the users’ rights could be made more difficult. With regard to US providers that are certified under the Privacy Shield or offer comparable guarantees of a secure level of data protection, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.

Furthermore, user data within social networks are generally processed for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data may also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to these).

For a detailed description of the respective forms of processing and the possibilities of objection (opt-out), please refer to the data protection declarations and information provided by the operators of the respective networks.

Also in the case of requests for information and the assertion of data subject rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information directly. Should you nevertheless require assistance, please contact us.

Processed data types: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Persons concerned: Users (e.g. website visitors, users of online services).
Purposes of processing: contact requests and communication, tracking (e.g. interest/behavioural profiling, use of cookies), remarketing, range measurement (e.g. access statistics, recognition of returning visitors).
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

Used services and service providers:

Instagram: Social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; website: https://www.instagram.com; Privacy Policy: http://instagram.com/about/legal/privacy.
Facebook: Social network; service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Privacy Shield (guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Opt-out: Settings for advertisements: https://www.facebook.com/settings?tab=ads; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, Privacy notices for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data. Note: If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. For example, when users click the Like button or post a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out his or her IP address and store it. According to Facebook, only an anonymized IP address is stored in Germany.
Pinterest: Social network; service provider: Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA; website: https://www.pinterest.com; Privacy Policy: https://about.pinterest.com/de/privacy-policy; Possibility of appeal (opt-out): https://about.pinterest.com/de/privacy-policy.
Twitter: Social network; service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy Policy: https://twitter.com/de/privacy, (settings) https://twitter.com/personalization; Privacy Shield (guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
YouTube: Social network; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Possibility of appeal (opt-out):https://adssettings.google.com/authenticated.
Xing: Social network; service provider: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany; Website: https://www.xing.de; Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

Facebook-Pixel

Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used.

With the help of the Facebook pixel, Facebook is on the one hand able to determine the visitors of our online offer as a target group for the presentation of ads (so-called “Facebook ads”). Accordingly, we use the Facebook Pixel in order to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and do not appear annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The processing of data by Facebook takes place within the framework of Facebook’s data usage guidelines. Accordingly, general information on the display of Facebook ads is provided in the Facebook Data Usage Policy: https://www.facebook.com/policy. Specific information and details about the Facebook pixel and how it works can be found in the help section of Facebook: https://www.facebook.com/business/help/651294705016616.

Where we ask users to give their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Article 6(1)(a). GDPR. Otherwise, the personal data of the users will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) will be processed.

Facebook is certified under the Privacy-Shield-Agreement and thereby assures to comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

You may object to the collection by the Facebook pixel and use of your data to display Facebook ads. To control what types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on usage-based advertising settings: https://www.facebook.com/settings?tab=ads.

The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can prevent the use of cookies, which are used for reach measurement and advertising purposes, by using the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) to contradict.

Facebook pixel; service provider: https://www.facebook.com, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland, Mutterunternehmen: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Privacy Shield (guarantee of data protection level when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Possibility to appeal (opt-out): https://www.facebook.com/settings?tab=ads.

Raffles, product tests and competitions

We process personal data of participants in competitions and contests only in compliance with the relevant data protection regulations, insofar as the processing is contractually required for the provision, implementation and handling of the competition, the participants have consented to the processing or the processing serves our legitimate interests (e.g. in the security of the competition or the protection of our interests from misuse by possible collection of IP addresses when submitting competition entries).

If contributions of the participants are published in the context of the competitions (e.g. in the context of a vote or presentation of the competition contributions or the winners or the reporting on the competition), we point out that the names of the participants may also be published in this context. The participants can object to this at any time.

If the competition takes place within an online platform or a social network (e.g. Facebook or Instagram, hereinafter referred to as “online platform”), the terms of use and data protection provisions of the respective platforms shall apply additionally. In these cases, we would like to point out that we are responsible for the information provided by the participants in the course of the competition and that enquiries regarding the competition should be addressed to us.

The participants’ data will be deleted as soon as the competition or contest has ended and the data is no longer required to inform the winners or because queries regarding the competition can be expected. In principle, the participants’ data will be deleted at the latest 6 months after the end of the competition. Data of the winners may be retained for a longer period of time, e.g. in order to be able to answer questions about the prizes or to be able to fulfil the services of the prize; in this case the retention period depends on the type of prize and is up to three years, e.g. in the case of items or services, in order to be able to process warranty claims. Furthermore, the participants’ data may be stored for longer, e.g. in the form of reports on the competition in online and offline media.

If data has also been collected for other purposes within the scope of the competition, its processing and the duration of storage are governed by the data protection information for this use (e.g. in the case of registration for the newsletter within the scope of a competition).

- - Processed data types: inventory data (e.g. names, addresses), content data (e.g. text entries, photographs, videos).
  - Persons concerned: raffle and competition participants.
  - Purposes of the processing: organisation of competitions and contests.
Legal basis: Fulfilment of contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR).

Music and podcast

We use the hosting and analysis services of the service providers listed below to offer our audio content for listening or downloading and to obtain statistical information on the retrieval of audio content.

Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Persons concerned: Users (e.g. website visitors, users of online services).
Purposes of processing: range measurement (e.g. access statistics, recognition of returning visitors), visitor action evaluation, profiling (creation of user profiles).