Datenschutzrichtlinie

1. Introduction and Contact Information of the Data Controller

1.1 We are delighted that you are visiting our website and appreciate your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data includes all data that can personally identify you.

1.2 The data controller for the processing of data on this website, in accordance with the General Data Protection Regulation (GDPR), is Deborah Reuter, Isestr. 30, 20144 Hamburg, Germany, Tel.: +4917662060344, Email: debbyreuter@icloud.com. The data controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2. Data Collection When Visiting Our Website

2.1 During the mere informative use of our website, i.e., if you do not register or otherwise provide information to us, we only collect data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

Our visited website
Date and time of the access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable, in anonymized form)

The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no further disclosure or other use of the data. However, we reserve the right to retrospectively check the server log files should concrete indications point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock symbol in your browser address bar.

3. Cookies

To make your visit to our website attractive and enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after closing your browser (so-called “session cookies”), while others remain on your device for a longer period and allow the storage of page settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.

If personal data is processed by some of the cookies we use, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website, as well as a user-friendly and effective design of the site visit.

You can configure your browser settings to inform you about the placement of cookies, allowing you to decide on acceptance individually or exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4. Contact

As part of contacting us (e.g., via contact form or email), personal data is collected. The specific data collected when using a contact form is evident from the respective contact form. These data are exclusively stored and used for the purpose of responding to your inquiry or for contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after the final processing of your inquiry. This is the case when it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that no legal retention obligations oppose this.

5. Comment Function

As part of the comment function on this website, in addition to your comment, information about the time of the comment’s creation and the commentator name you chose will be stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is carried out for security reasons and in the event that the person concerned violates the rights of third parties or posts unlawful content through a submitted comment. We require your email address to get in touch with you if a third party should object to your published content as unlawful.

The legal bases for storing your data are Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

6. Use of Customer Data for Direct Advertising

6.1 Registration for our Email Newsletter

When you subscribe to our email newsletter, we regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter after you have expressly confirmed that you consent to receive newsletters. We will then send you a confirmation email asking you to confirm that you want to receive the newsletter by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address, as entered by the Internet Service Provider (ISP), as well as the date and time of registration to trace any potential misuse of your email address at a later time. The data collected during the newsletter registration is used exclusively for advertising purposes through the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the responsible party mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data, or we reserve the right to use the data beyond what is legally permitted and inform you accordingly in this statement.

6.2 MailerLite

The dispatch of our email newsletters is carried out by this provider: UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we provide the data you provided during newsletter registration in accordance with Art. 6 Para. 1 lit. f GDPR to this provider, so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider also conducts a statistical success analysis of newsletter campaigns using web beacons or counting pixels in the emails sent, which can measure opening rates and specific interactions with the contents of the newsletter. In this process, device information (e.g., time of access, IP address, browser type, and operating system) is collected and evaluated, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits disclosure to third parties.

7. Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which allows an analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These cookies are small text snippets placed on your device, collecting certain information. This information includes your IP address, which is, however, shortened by Google to exclude direct identifiability.

The information is transmitted to and processed on Google’s servers, including possible transfers to Google LLC based in the United States.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected during the use of Google Analytics 4 is stored for a period of two months and then deleted.

All the processing described above, especially the setting of cookies on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Without your consent, the use of Google Analytics 4 will be suspended during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right to revoke, please disable this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google to ensure the protection of the data of our site visitors and prohibit unauthorized disclosure to third parties.

For further legal information on Google Analytics 4, please visit https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features

Google Analytics 4 uses the special function “demographic features” to create statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows the identification of target groups for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after a storage period of two months.

Google Signals

As an extension to Google Analytics 4, this website may use Google Signals to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the “Personalized Advertising” feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en. More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs

As an extension to Google Analytics 4, this website may use the “UserIDs” function. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 Para. 1 lit. a GDPR, have set up an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.

8. Site Functionalities

8.1 Instagram Plugins

On our website, plugins from the social network of the following provider are used: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated using the so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our web presence containing such plugins is called up, no connection is initially established with the provider’s servers.

Only when you activate the plugins and thereby, in accordance with Art. 6 Para. 1 lit. a GDPR, give your consent to data transmission, does your browser establish a direct connection to the servers of the provider. In this process, certain information about your device (including your IP address), your browser, and your page history is transmitted to the provider, regardless of whether you are logged into an existing user profile, and may be processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions performed through the plugins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin through a renewed click. However, the revocation does not affect data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider to ensure the protection of our site visitors’ data and prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider adheres to the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

8.2 LinkedIn Plugins

On our website, plugins from the social network of the following provider are used: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated using the so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our web presence containing such plugins is called up, no connection is initially established with the provider’s servers.

You can revoke your consent at any time by deactivating the activated plugin through a renewed click. However, the revocation does not affect data that has already been transmitted to the provider.

Data may also be transferred to: LinkedIn Inc., USA

We have concluded a data processing agreement with the provider to ensure the protection of our site visitors’ data and prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

8.3 hCaptcha

On this website, we use the CAPTCHA service from the following provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA.

The service checks whether an input is made by a natural person or is abusive through machine and automated processing, and it blocks spam, DDoS attacks, and similar automated malicious access attempts. To ensure that an action is taken by a human and not by an automated bot, the provider collects the IP address of the used device, recognition data of the used browser and operating system type, as well as the date and duration of the visit, and transmits this information for evaluation to the provider’s servers.

The legal basis is our legitimate interest in determining individual responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider to ensure the protection of our site visitors’ data and prohibit unauthorized disclosure to third parties.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.

9. Tools und Sonstiges

Cookie-Consent-Tool

This website uses a “Cookie-Consent-Tool” to obtain effective user consent for consent-required cookies and cookie-based applications. The “Cookie-Consent-Tool” is displayed to users as an interactive user interface when the page is accessed. Users can grant consent for specific cookies and/or cookie-based applications by checking the appropriate boxes. Through the use of the tool, all consent-required cookies/services are only loaded if the respective user has given consent by checking the corresponding boxes. This ensures that such cookies are only set on the user’s device in case of granted consent.

The tool uses technically necessary cookies to store your cookie preferences. In this process, personal user data is generally not processed.

If, in individual cases, the processing of personal data (such as the IP address) is carried out for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and, therefore, a legally compliant design of our online presence.

Another legal basis for the processing is also Art. 6 Para. 1 lit. c GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user’s consent.

If necessary, we have concluded a data processing agreement with the provider to ensure the protection of our site visitors’ data and to prohibit unauthorized disclosure to third parties.

Further information about the operator and the settings of the Cookie-Consent-Tool can be found directly in the corresponding user interface on our website.

10. Data Subject Rights

10.1 Rights of the Data Subject:

Under the applicable data protection law, you have the following rights concerning the processing of your personal data by the data controller. The legal basis for exercising these rights is indicated:

Right to information according to Article 15 GDPR
Right to rectification according to Article 16 GDPR
Right to erasure according to Article 17 GDPR
Right to restriction of processing according to Article 18 GDPR
Right to notification according to Article 19 GDPR
Right to data portability according to Article 20 GDPR
Right to revoke granted consents according to Article 7(3) GDPR
Right to lodge a complaint according to Article 77 GDPR

10.2 Right to Object:

If we process your personal data based on our legitimate interest within the scope of a balance of interests, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will terminate the processing of the affected data. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If we process your personal data to conduct direct marketing, you have the right to object to the processing of personal data concerning you for the purpose of such advertising at any time. You can exercise your objection as described above.

If you make use of your right to object, we will terminate the processing of the affected data for direct marketing purposes.

11. Duration of Personal Data Storage

The duration of personal data storage depends on the respective legal basis, the purpose of processing, and, if applicable, the relevant legal retention period (e.g., commercial and tax-related retention periods).

For processing personal data based on explicit consent under Article 6(1)(a) of the GDPR, the data will be stored until you revoke your consent.
If there are legal retention periods for data processed in the context of contractual or contract-like obligations based on Article 6(1)(b) of the GDPR, these data will be routinely deleted after the expiration of the retention periods, provided they are no longer necessary for contract fulfillment or initiation, and/or there is no legitimate interest on our part to continue storing them.
For processing personal data based on Article 6(1)(f) of the GDPR, the data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
For processing personal data for the purpose of direct marketing based on Article 6(1)(f) of the GDPR, the data will be stored until you exercise your right to object under Article 21(2) of the GDPR.

Unless specified otherwise in the other sections of this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.