1. Name and address of the data controller

Authorized person, in the sense of the data protection directive, other laws on data protection valid in the member states of the European Union and other data protection regulations, is the company specified in the identification data chapter (hereinafter: “we” , respectively “our” or “our”).

2. Name and address of the data protection officer

The data protection officer responsible for the processing is:

OLIMPIA BICA
Email: bica.stahl@gmail.com,
Tel: +40 757-265.388

Any data subject can address all questions and proposals directly to us or our data protection officer.

3. Definition of terms

Our data protection declaration is based on the terms defined in the data protection directive (GDPR). Our data protection declaration should be easy to read and understand. To ensure this, we will explain in advance the terms used:

• Personal data

Personal data is all information that refers to an identified or identifiable natural person (hereinafter “data subject”). A natural person is regarded as identifiable when he can be identified, directly or indirectly, in particular by joining an identification such as: a name, an identification number, location data, to an online identification or to one or more characteristics , which are the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

• The person concerned

Data subject is any identified or identifiable natural person, whose personal data is processed by the controller.

• processing

Processing is any operation carried out, with or without the help of automated processes, or any series of such operations in relation to personal data, such as: collection, registration, organization, ordering, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.

• Restriction of processing

Restriction of processing is the marking of stored personal data in order to restrict their future processing.

• Creating profiles

Profiling means any form of automatic processing of personal data that consists in the use of personal data to assess certain personal aspects relating to a natural person, in particular to analyze or predict aspects of work performance, situation economic, health, personal preferences, interests, reliability, behavior, location or movements of that natural person.

• Pseudonymisation

Pseudonymization means the processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is stored separately and subject to technical measures and organizational to ensure the non-assignment of said personal data to an identified or identifiable natural person.

• Data controller or processor

Data operator is the natural or legal person, public authority, agency or other body that, alone or together with others, establishes the purposes and means of personal data processing; when the purposes and means of processing are established by European Union law or domestic law, the operator or the specific criteria for its designation may be provided for in European Union law or domestic law.

• Person authorized by the operator

Person authorized by the operator is the natural or legal person, public authority, agency or other body that processes personal data on behalf of the operator.

• Consignee

Recipient is the natural or legal person, public authority, agency or other body to whom (to whom) the personal data is disclosed, whether or not it is a third party. Public authorities to which personal data may be communicated in the context of a particular investigation in accordance with European Union law or national law are not, however, considered recipients.

• Third party

Third party is a natural or legal person, public authority, agency or body, other than the data subject, the operator, the person authorized by the operator and the persons who, under the direct authority of the operator or the person authorized by the operator, are authorized to process personal data personal.

• Consent

Consent of the data subject is any manifestation of free will, specific to the case, informed and unambiguous of the data subject, by which he accepts, by a statement or by an action of unequivocal confirmation, that the personal data concerning him to be processed.

4. General information about data processing

Data protection, data security and the protection of privacy are of high priority for us. The long-term protection of your personal data, your company data and company secrets is of particular importance to us.

In principle, you can visit our website without referring to yourself. If you still access services of our company through our website, this requires your personal data. As a rule, we use the data provided by you, which are collected and stored by the website, to use them exclusively for our own purposes, namely for the creation and preparation of our website and its initiation, for the realization and development of services/offers through the website- (fulfilment of the contract) and we do not pass this data on to external third parties, as long as there is no obligation imposed by the authorities in this regard. In all other cases we ask for your express permission.

The processing of your personal data takes place in accordance with the requirements of the Personal Data Directive and in accordance with the specific national legal data protection regulations applicable to us. Through this data protection statement we want to inform you about the type, volume and purpose of the personal data processed by us. In addition, we clarify your rights in this data protection declaration.

We have implemented technical and organizational measures to ensure adequate protection of personal data processed through this website. Thus, for security reasons and for the protection of the transmission of confidential contents, this website uses, for example for requests through a contact form that you send to us as a user of the page, an encryption of the SSL type. You recognize an encrypted connection by your browser’s address line changing from http:// to https:// and by the lock symbol in your browser line. When SSL encryption is enabled, the data we you send to us cannot be read by third parties. However, the transmission of data via the Internet can, in principle, have security cracks,

5. General information about the legal framework

If for the data processing procedures we request the consent of the data subject, the legal framework for the processing of personal data is represented by art. 6, par. 1, lit. a of the EU data protection directive (GDPR).

When processing personal data that is necessary for the performance of a contract, whose contracting party is the data subject, art. 6, par.1, letter b of the GDPR serves as the legal framework. This also applies to processing procedures that are necessary to carry out pre-contractual measures.

As long as the processing of personal data is necessary to fulfill a legal requirement to which our company is subject, art. 6, par. 1, lit. c of the GDPR serves as the legal framework.

In the event that the vital interests of the person concerned, or of another natural person, make it necessary to process personal data, the legal framework serves as art. 6, par. 1, lit. d of the GDPR.

If the processing is necessary to defend a legitimate interest of our company or a third party and if the interests, rights and fundamental freedoms of the person concerned do not prevail over the initially mentioned interest, then the legal framework for the processing is that of art. 6, par. 1, lit. f of the GDPR.

6. General data deletion and storage duration

The personal data of the persons concerned is deleted or blocked as soon as the purpose of storage ceases. A further storage may take place when this has been provided by the European or national legislator through European legal regulations, laws or other provisions to which the operator is subject. A blocking or deletion of data also takes place when a storage term stipulated by the above rules has expired, unless there is a need for further data storage for the conclusion or fulfillment of a contract.

7. Data Collection and General Information

Our website collects with each access by the data subject or an automated system a series of data and general information. This data and general information is stored in server log files. Can be collected (1) the types and versions of browsers used, (2) the operating system used by the accessing system, (3) the website from which the accessing system reaches our site (so-called referrer- i), (4) the sub-web pages that are directed to our website by means of an accessing system, (5) the date and time of accessing the website, (6) an IP address, (7) the service provider of the accessing system and (8) other similar data and information that serves to defend against the dangers of attacks on our information technology systems.

When using this data and general information, we do not draw any conclusions about the data subject. This information is more necessary to (1) correctly deliver the contents of our website, (2) to optimize the contents of our website and advertising, (3) to ensure the continued functionality of our information technology systems and of the technique of our website, (4) to make available to the criminal investigation bodies the information necessary for the criminal investigation in case of a cyber attack. These data and information collected anonymously are therefore evaluated by us, on the one hand statistically and, then, with the aim of raising security and data protection in our company in order to finally ensure an optimal level of data protection of a personal nature processed by us.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
Art. 6, par. 1, lit. f of the GDPR (legitimate interest)	The temporary storage of the IP address by the system is necessary to facilitate the export of the website to the user’s computer. For this, the user’s IP address must remain stored for the duration of the session.	The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for visiting the website, this happens when each session has ended. In the case of data storage in log files, this happens after a maximum of 7 days. A storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that a location of the visiting client is no longer possible.	No, because it is mandatory for the operation of the website.

8. Registration on the website

You can register on our website by providing personal data. What personal data is forwarded to the data processor from each data entry matrix that is used for registration. The personal data provided by the data subject are collected and stored exclusively for internal use and for own purposes at the authorized person for processing. We may decide to transmit them to one or more order processors, for example a provider of IT services, payment services or logistics services, who also use the personal data exclusively and specifically for the performance of their tasks towards us.

When you register on our website, we store the IP address assigned by your Internet provider (ISP), the date and time of your registration. Storing this data allows us, if necessary, to clarify criminal acts or violations of copyright. That, to the extent that the storage of this data is necessary for us for insurance and is found within the legitimate interest, in the sense of art. 6, par. 1, lit. f of the GDPR. A transfer of this data to a third party, in principle, does not take place as long as there is no legal obligation to transfer, or the transfer serves criminal or legal prosecution.

The personal data voluntarily communicated by you also serves us to provide you with content or services that, by nature, can only be provided to registered users.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
Art. 6, par. 1, lit. b of the GDPR (performance of the contract)	A user registration is necessary to fulfill a contract or to take pre-contractual measures.	This is the case for the fulfillment of a contract or the realization of pre-contractual measures, when during the registration process the data for the development of the contract are no longer necessary. Even after the conclusion of the contract, there may be a need to store the personal data of the contractual partner, in order to comply with contractual or legal obligations.	As a user you always have the possibility to cancel the registration. You can change the stored data about you at any time. If the data is necessary for the performance of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible if its deletion does not contravene contractual or legal obligations.

9. Contact form and email contact

Contact forms are included on our web page, which can be used for electronic contact. If a user uses this possibility, then the data entered in the form is transmitted to us and stored. These data are usually:

• address*
• the title
• first and last name*
• Company
• Postal adress
• email address*
• phone number*
• fax number
• URL
• Reference
• The message*

* mandatory data

At the time of sending the message, the following data are also stored:

• date and time of dispatch

Alternatively, it is possible to make contact via the e-mail address provided. In this case, the user’s personal data transmitted by e-mail will be stored.

In this context, there is no alienation to third parties. The data is used exclusively for the processing of the conversation.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
The legal framework for data processing in the case of requests via the contact form template and/or by e-mail is, as a rule, art. 6, par. 1, lit. b of the GDPR (Performance of the contract; pre-contractual measures) Art. 6, par. 1, lit. c of the GDPR (fulfilment of a legal obligation, e.g. answers to data protection questions) and otherwise art. 6, par. 1, lit. f of the GDPR (legitimate interest)	The processing of personal data from the contact form/e-mail serves us exclusively for processing the contact. The legitimate interest required for data processing is also found here. The other personal data processed during the dispatch process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.	The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. For personal data in the contact form template and for those sent by e-mail, this is the case when the conversation with the user ends. The conversation ends when, from the context, it can be deduced that the intended state of affairs is definitively clarified. The above does not apply if the correspondence is subject to a retention obligation generated by commercial law. Personal data collected additionally during the shipping operation are deleted, at the latest, after a period of seven days.	The user has the possibility to revoke the storage of his personal data at any time. In such a case the conversation can no longer be continued.

10. Advertising submissions

In addition, we reserve the right to use your personal data, which we have received from you within the contractual relationship, for example to send similar, interesting offers and information about our offers and services by post or, upon indicating your e-mail address and explicit consent, also by e-mail.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
The legal framework for advertising submissions is art. 6, par. 1, lit. f of the GDPR (legitimate interest)	The purpose of the collection is, in addition to the fulfillment of the contract, and to make the intended customer (corresponding to his interests) receive advertising material.	Data will be deleted no later than 6 years after the last order or last contact or blocked for advertising purposes (as long as a storage obligation persists).	General right of revocation (see the data subject’s rights).

11. Data protection when applying for a position and the application procedure

We collect and process personal data from applicants for the purpose of carrying out the application procedure. Processing may also take place electronically. This is especially the case when the applicant sends us the relevant documents electronically, for example by e-mail. If we conclude an employment contract with you as an applicant, the data transmitted will be stored for the purpose of developing the employment relationship, in compliance with the legal provisions. If no employment contract is concluded with the applicant, the application documents are automatically deleted six months after the communication of the decision, as long as the deletion does not conflict with any legitimate interest of the data controller. Such a legitimate interest in this sense is, for example, the obligation of proof in the case of a procedure according to the non-discrimination law.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
The legal framework for data processing in the case of questions via the contact form and/or by e-mail is art. 6, par. 1, letter b of the GDPR (fulfilment of an employment contract; pre-employment measures); Art. 6, par. 1, lit. c GDPR (fulfilment of a legal obligation, e.g. answering questions related to the application procedure) and otherwise art. 6, par. 1, lit. f of the GDPR (legitimate interest) as well as authorization rules from special laws, such as the branch collective agreement, the enterprise collective agreement, the income tax law, etc. Additionally, reference is made to the processing procedure of Departam. personnel/human resources.	If we conclude an employment contract with you as an applicant, the communicated data will be stored for the purpose of developing the employment relationship, in compliance with the legal provisions.	If an employment contract is not concluded by the data controller with the applicant, the application documents will be automatically deleted six months after the communication of the decision, as long as the deletion does not conflict with any legitimate interest of the data controller. Such a legitimate interest in this sense is, for example, the obligation of proof in the case of a procedure according to the non-discrimination law.	General revocation and removal possibilities only.

12. Cookies – description and volume of data processing

For our online offer – as on many web pages – cookies are used. Cookies are small data files, which are stored on your computer and which store certain settings and data via your browser for exchange with our online offer. A cookie usually contains the name of the domain from which the cookie file was transmitted, as well as information about the age of the cookie and an alphanumeric identifier.

Cookies make it easier for us to recognize your computer and immediately release any initial settings. Cookies help us to improve the online offer and provide you with a better and more individualized service based on your requirements.

The cookies we use are so-called session cookies, which are automatically deleted after the end of the browser session.

We also use cookies on our website that make it possible to analyze the surfing behavior of the user.

The user data obtained in this way is pseudonymized with the help of technical measures. Therefore, an assignment of data to the accessing user is no longer possible. The data is not stored together with the user’s other personal data.

When accessing our web page, users are informed, by means of an infobanner, about the use of cookies for analysis purposes and directed to this data protection statement. You can set your browser in such a way that you are informed about the use of cookies and decide whether you accept them, or accept cookies in certain cases or exclude them in general. If you do not accept cookies, the functionality of our page may be limited. Under the following links you can find information on how to activate or deactivate cookies in the most important browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mr. accept our cookies if you have activated or deactivated the cookie setting and you will continue to use this website.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
Art. 6, par. 1, lit. f of GDPR (legitimate interest) for cookies, technically mandatory Otherwise: art. 6, par. 1 lit. of the GDPR (accept)	The purpose of using technically mandatory cookies is to simplify the use of the website by the user. Certain functions of our website cannot be provided without the use of cookies. For these it is necessary that the browser is recognized even after a page change. The use of analysis cookies is done in order to improve the quality of the website and its contents. By means of analysis cookies we find out how the website is used and can thus permanently optimize our offer. These purposes include our legitimate interest in the processing of personal data according to Art. 6, par. 1, lit. f of the GDPR.	Cookies are stored on the user’s computer and are transmitted by him to our page. That is why you, as a user, have full control over the use of cookies.	By changing the settings in your internet browser you can disable or limit the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is probably not possible to use all the functions of the website in full volume. The transmission of flash cookies cannot be prevented through the browser settings, but it can be done by changing the Flash Player setting.

Apart from that, cookies from third parties are used when accessing our website.

13. Social Channels, Plugins and Tracking Tools

• Specifications for data protection when using and using the Linkedin plug-in

Our websites use a plug-in of the Linkedin social network. Linkedin is an offering of Linkedin Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as Linkedin). You can recognize the Linkedin plug-in by the corresponding logo or by the “recommend-button”. Please note that when you visit our website, the plug-in will establish a connection between your internet browser and the Linkedin server. Thus, Linkedin will be informed that our website has been visited with your IP address. If you click on the Linkedin “recommend-button” and, at the same time, you are also logged into your Linkedin account, you can link a content from our website to your Linkedin profile page . In this way, you enable Linkedin to attribute your visit to our websites to you, respectively to your user account. You should know that we do not obtain any knowledge from Linkedin about the content of the transmitted data and its use.

More details about data collection and your legal possibilities, as well as installation options, are available from Linkedin. These are made available to you at http://www.linkedin.com/static?key=privacy policy&trk=hb ft priv.

• Specifications for data protection on the use and use of the Facebook plug-in

This website uses social plug-ins (“plug-ins”) of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). Plug-ins can be recognized by one of the Facebook logos (“white f” on a blue circle or the “thumbs up”) or are marked with the addition “Facebook Social Plug-In”. The list and layout of Facebook Plug-Ins can be viewed here: http://developers.facebook.com/Plug-Ins .

If a participant accesses a website from this offer, which contains such a plug-in, his browser makes a direct connection to Facebook’s servers. The content of the plug-in is transmitted by Facebook directly to your browser and is incorporated by it into the website. Therefore, the provider has no influence on the volume of data that Facebook collects with the help of this plug-in and accordingly informs the participants accordingly about the state of its knowledge ( https://www.facebook.com/help /186325668085084 );

Through the integration of plug-ins, Facebook obtains the information that a participant has accessed the corresponding page of the offer. If the participant is logged in to Facebook, the visit can be assigned to their Facebook account. If participants interact with the plug-ins, for example by pressing the Like button or making a comment, the corresponding information is transmitted by your browser directly to Facebook and stored there. If a participant is not a member of Facebook, it is still possible for Facebook to find out their IP address and store it. According to Facebook, only an anonymized IP address is stored in Germany. The purpose and volume of the data collected and the subsequent processing and use of the data by Facebook, as well as the corresponding rights and setting possibilities for the protection of the private sphere of the participants,http://www.facebook.com/policy.php .

If a participant is a Facebook member and does not want Facebook, through this offer, to collect data about him and correlate it with his membership data stored on Facebook, he must log out of Facebook before visiting the Internet presence. It is also possible to block Facebook-Social-Plug-Ins with add-ons for your browser, for example with “Facebook Blocker”.

• Information on data processing on our Facebook fan page

Your personal data is not regularly collected and processed

When you visit our Facebook fan page, we do not regularly collect and process any personal data. Processing is usually done by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. You can access their data protection regulations at: https://www.facebook.com/privacy/explanation .

Collection and processing of your personal data in exceptional situations

If, in exceptional cases, we (outside Facebook) further process your personal data (e.g. from comments), then this happens exclusively for our own purposes, e.g. to respond to your requests or to notify you of winnings. In this case, we are the operator. Therefore, all the details in this data protection notice are valid.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
The legal framework of this processing is art. 6, par. 1, letter b of the GDPR. Otherwise, a processing takes place only for a legitimate interest, e.g. in the case of a concrete suspicion of a criminal act, according to art. 6, par. 1, lit. f of the GDPR.	Exclusively own purposes, e.g. running a contest with winnings and other actions.	Your data is deleted when the purpose is achieved, insofar as there is no storage obligation.	According to the conditions and technical possibilities of Facebook and to the retrieval of data in our system in exceptional cases according to the regulations in figure 9.

• Data protection information on the use and use of YouTube

We have integrated components from YouTube on this website. YouTube is an internet video portal that makes it easy for publishers to post videos for free and for other users to watch, rate and comment on these clips, also for free. YouTube allows the posting of all types of video images, which is why full broadcasts of movies or television, music videos, trailers or videos made by users themselves are accessible through the portal.

The administrator of YouTube is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

With each access to one of the individual pages of this website, which is administered by the authorized person for processing and on which a YouTube component (YouTube-Video) has been integrated, the internet browser on the IT system of the data subject is determined automatically, by to the YouTube component, to download a representation from YouTube of the corresponding YouTube component. Further information about YouTube can be accessed at: https://www.youtube.com/yt/about/de . As part of this technical procedure, YouTube and Google learn which specific subpage of our website has been visited by the data subject.

To the extent that the data subject is at the same time logged in to YouTube, when accessing a subpage containing a YouTube video, YouTube recognizes which specific subpage of our website is visited by the data subject. This information is collected by YouTube and Google and assigned to the relevant YouTube account of the data subject.

YouTube and Google always obtain information via the YouTube component that the data subject has visited our website when the data subject is also logged in to YouTube at the time of accessing our page. This happens regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not want such a transmission of information to YouTube and Google, he can prevent the transmission by logging out of his YouTube account before accessing a page on our website.

The data protection specifications published by YouTube, which can be accessed at: https://www.google.de/intl/de/policies/privacy , provide clarifications on the collection, processing and use of personal data by YouTube and Google.

• Specifications for data protection when using and using Google Analytics (with anonymization function)

We have integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analytics is the collection, gathering and evaluation of data about the behavior of website visitors. A web analysis service includes, among other things, data about which web page the data subject reached our website from (so-called referrer), which subpage was accessed or how often and for what length of stay a subpage has been visited. A web analysis is mainly used for website optimization and cost-benefit analysis of internet advertising.

The company that administers the Google Analytics components is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The processor uses the extension “_gat._anonymizelp” for web analysis with Google Analytics. With its help, the IP address of the data subject’s internet connection is shortened and anonymized by Google, when our website is accessed from an EU member state or from another member state of the Convention on the European Economic Area .

The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to create for us online reports that show the activities on our website and to provide other services in connection with the use of our website.

Google Analytics places a cookie on the data subject’s information technology system. What cookies are has already been explained above. By posting cookies, an analysis of the use of our website is allowed. With each access to one of the individual pages of this website, which is managed by the processor and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is determined automatically, through the Google Analytics component, to transmit data to Google for the purpose of online analysis. In the course of this technical procedure, Google acquires knowledge of personal data such as the IP address of the data subject, which Google uses, among other things,

By means of cookies, personal information is stored, for example the time of access, the locality where it was activated and the frequency of visits to our website by the person concerned. With each visit to our website, these personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the USA. This personal data is stored by Google in the USA. Under certain conditions, Google retransmits this personal data obtained through the technical procedure to third parties.

The data subject can at any time prevent the posting of cookies by our website, as described above, by means of an appropriate setting of the internet browser used and thus permanently revoke the posting of cookies. Such a setting of the internet browser would also prevent Google from placing a cookie on the data subject’s information technology system. In addition, a cookie already posted by Google Analytics can be deleted at any time via your internet browser or other software.

There is also the possibility for the data subject to revoke the collection of data from visiting this website collected through Google Analytics and to prevent it. For this, the data subject must download and install a browser add-on from the address: https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics, via JavaScript, that the transmission of website visitor data and information to Google Analytics is not permitted. The installation of the browser add-on is evaluated by Google Analytics as a revocation. If the data subject’s IT system is deleted, formatted or reinstalled at a later date, the data subject must perform a new installation of the browser add-on to disable Google Analytics.

You can get further information and data protection statements from Google at:

https://www.google.de?intl/de/policies/privacy/ and from: www.google.com/analytics/terms/de.html

Google Analytics is explained in more detail at the link: https://www.google.com/intl/de_de/analytics .

• Data protection regulations in the introduction and use of Google AdWords

We have integrated Google AdWords on this website. Google Ads is an Internet advertising service that allows the advertiser to place an advertisement not only in the results of the Google search engine, but also in the Google advertising network. Google Ads allows an advertiser to pre-determine certain keywords with the help of which an advertisement will only be displayed in the Google search engine results when the user calls a search engine a search result relevant to the keywords. In the Google advertising network, advertisements are distributed on relevant thematic websites with the help of an automatic algorithm and subject to the observation of previously defined keywords.

The operating company for Google Ads services is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Ads is the advertising of our website by overlaying interest-relevant advertising on third-party websites and in the search engine results of the Google search engine and an overlay of third-party advertising on our website.

If a data subject reaches our website via a Google advertisement, a so-called conversion cookie is stored on the data subject’s IT system by Google. What cookies are has already been described above. A conversion cookie loses its validity after 30 days and does not serve to identify the data subject. The conversion cookie – to the extent that it has not expired – enables it to be determined whether a specific subsite, for example the shopping cart of an online store system, has been called up on our website. With the help of conversion cookies, not only we but also Google can deduce whether a data subject, who reaches our website via an AdWords advertisement, has generated a turnover, i.e. completed a purchase or he interrupted.

The data and information collected through the use of conversion cookies are used by Google to prepare visit statistics for our website. These visit statistics are used by us to determine the total number of visitors sent to us through AdWords advertisements, i.e. to determine the success or lack of success of the specific AdWords advertisement and to optimize our AdWords advertisements for the future. Neither our company nor other advertising customers of Google AdWords receive any personally identifiable information from Google.

With the help of conversion cookies, personal data are, for example, the websites visited by the data subject. Accordingly, personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the United States of America with each visit to our websites. This personal data is stored by Google in the USA, under certain circumstances Google transmits some personal data collected through the technical process to third parties.

As already described above, the data subject can prevent the setting of cookies by our website at any time by making an appropriate setting in the Internet browser used and thus oppose the setting of cookies in -a sustainable way. Such a setting in the internet browser used would also prevent Google from setting a conversion cookie in the data subject’s computer system. In addition, a cookie that has already been set by Google AdWords can be deleted at any time via the Internet browser or a software program.

Moreover, the data subject has the possibility to object to the advertising of interests. For this, the data subject must call from each of the Internet browsers, he / she uses the link www.google.de/settings/ads and to make the desired settings.

Additional information and valid Google data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/

14. Newsletter

When signing up for our newsletter, your email address will be used for our own advertising purposes, until you opt out. You will receive regular email updates on current topics, as well as emails on special occasions, such as special promotions. Emails may be personalized and individualized based on our information about you.

For subscribing to our newsletter, we use, to the extent that you have not given us your written consent, the so-called Double-Opt-In procedure, this means that we will send you a newsletter by e-mail only when you have clearly confirmed to activate the sending of the newsletter. We will then send you an introductory e-mail and ask you to confirm that you want to receive our newsletter by clicking on an activation link contained in this e-mail.

If you no longer wish to receive newsletters from us, you can revoke this at any time, without incurring costs other than the basic remittance. Simply use the existing revocation link in each newsletter or send a new communication to us or the data protection officer.

The legal framework	Purpose of storage	Duration of storage	Possibilities of removal/revocation
The legal framework for the processing of data after the user’s subscription to the newsletter is the presentation of an acceptance by the user, art. 6, par. 1, lit. a of the GDPR (I accept)	The collection of the user’s e-mail address is used to send the newsletter. The collection of other personal data during the registration process serves to prevent an abuse of the services or the email address used.	The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. The user’s e-mail address will therefore be blocked during the period in which the subscription to the newsletter is active. The other personal data collected during the registration process (such as the IP address and the time of registration) are usually deleted after a period of seven days.	The subscription to the newsletter can be revoked at any time by the concerned user. For this purpose, a corresponding deactivation link is found in each newsletter. Canceling the subscription also represents a revocation of the consent to the storage of personal data collected during the registration process.

15. Awards

We regularly organize free draws where participants can win various prizes. Details of the type and scope of the prize draw and the prizes, as well as the prerequisites for participation, can be found in the respective conditions of participation. To participate in the draw, personal data must be provided. What data needs to be provided can be found on the draw registration page. In the minimum case, the following personal data of the participant will be processed:

• Name and surname
• Date of birth
• Title and/or gender
• Email address

In addition, participants may voluntarily provide other personal data, such as address data.

Legal terms	Purpose of storage	Duration of storage	Objections / possibility of removal
Article 6 para. 1 lit. b GDPR (Steps before the conclusion of a contract) for the execution of the prize draw Article 6 para. 1 lit. b GDPR (consent) for sending advertising Article 6 para. 1 lit. b GDPR (Steps before concluding a contract) for the delivery of prices	This data is necessary for the correct conduct of the prize draw, for example to verify the identity of the participants, to respect the age limit for participation in the prize draw, to contact the participants with the appropriate designation or to notify them in this case. of a gain. In addition, your personal data may be stored for the purpose of sending advertising or delivering prices. If, in the event of winning, the prizes are delivered or made available by a specialist retailer, an affiliated company or another third party (cooperation partner), the entrant’s data must be transmitted to such cooperation partner for the purpose of delivery or provision of the prize(s).	The data provided on the registration page will be processed exclusively for the purpose of the draw and will be deleted by the responsible organizer after the draw is completed.	In connection with questions or suggestions regarding the processing of your personal data in the draw, you have the right at any time to contact the responsible person in this data protection notice or his data protection officer. Your rights listed in this data protection notice also apply fully to participation in the draw.

16. Your rights

If your personal data is processed, you are a data subject within the meaning of the DSGVO and have the following rights vis-à-vis the operator:

• The right to information

You can ask the operator for confirmation if personal data concerning you is being processed by us.

If such processing exists, you can request from the operator clarifications about the following information:

• The purposes for which personal data are processed; the categories of personal data that are processed
• The recipients, respectively the categories of recipients to whom the personal data concerning you have been disclosed or will be disclosed
• The planned duration of the storage of personal data concerning you or, if concrete clarifications in this regard are not possible, the criteria for determining the duration of the storage
• Existence of the right to correction or deletion of personal data concerning you, a right to limit processing by the operator or the right to revoke against this processing
• Existence of the right to lodge a complaint with a supervisory authority
• All available information about the origin of the data when the personal data was not collected from the data subject
• The existence of an automated identification of decision-making, including profiling according to art. 22, par. 1 and 4 of the GDPR and, at least in these cases, relevant information about the logic involved as well as the proportion of the expected effects of such processing for the data subject

Mr. you have the right to request clarification about whether your personal data is being transferred to a third country or an international organization. In this sense, you can request to be informed about the appropriate guarantees in connection with the transmission, according to art. 46 GDPR.

• The right to rectification

You have the right to rectification and/or completion vis-à-vis the operator, to the extent that the personal data processed are incorrect or incomplete. The operator must carry out the rectification immediately.

• The right to limit processing

Under the following conditions, you can request the limitation of the processing of your personal data:

• If you dispute the correctness of your personal data for a period that allows the operator to verify the correctness of the personal data
• When the processing is illegitimate and you refuse the erasure of the personal data by requesting, instead, the limitation of the use of the personal data
• The operator no longer needs the personal data to fulfill the purposes, but you need them to assert, exercise or defend legal claims or
• If you objected to the processing according to art. 21, par. 1 GDPR and it has not yet been established whether the legitimate reasons of the operator prevail over your reasons.

If the processing of personal data concerning you has been limited, excluding their storage, these data may be processed only with your consent or for the purpose of asserting, exercising or defending legal rights or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the EU or a member state.

If the processing has been limited under the conditions invoked above, you will be informed by the operator before the limitation is cancelled.

• The right to erasure
• Obligation to delete

You can request the operator to delete the personal data concerning you immediately and the operator is obliged to delete this data immediately, to the extent that one of the following reasons is the case:

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• Mr. revoke the acceptance on which the agreement was based according to art. 6, par. 1, lit. of or art. 9, par. 2 lit. a of the GDPR and there is no other legislative framework for processing.
• Mr. you object to the processing according to art. 21, par. 1 GDPR and there are no other justified priority reasons or you object to the processing according to art. 21, par. 2 of the GDPR.
• Your personal data has been processed illegitimately.
• The deletion of your personal data is necessary to fulfill a legal obligation under EU law, or the law of a member state to which the operator belongs.
• The personal data concerning you were collected with reference to the services offered by the information society according to art. 8, par. 1 of the GDPR.
• Information to third parties

If the operator has made public your personal data and he is obliged to delete them according to art. 17, par. 1 of the GDPR, then the operator will take all the appropriate and technical measures, taking into account the technology available and the implementation costs, to inform those authorized for data protection who process personal data that you, as a data subject , you have requested from them the deletion of all links to such personal data or copies or replicas of such personal data.

• Exceptions

The right to erasure does not exist to the extent that the processing is necessary for:

• Exercising the right to free expression and information;
• For the fulfillment of a legal obligation that requires processing according to the law of the EU or of the member states to which the operator is subject, or for the fulfillment of a task of public interest or exercise of public authority, which has been transmitted to the operator;
• For reasons of public interest in the field of public health according to art. 9, par. 2, lit. h and i, as well as art. 9, par. 3 of the GDPR.
• For the purpose of storage in the public interest, scientific or historical research purposes or for statistical purposes according to art. 89, par. 1 GDPR, insofar as the right from par. a) intentionally makes it impossible to achieve the purposes of this processing or seriously affects it, or
• For asserting, exercising or defending legal claims.

There is also no right to erasure to the extent that personal data must be stored with the operator based on legal retention obligations and terms. In such a case, a blocking of personal data is valid instead of a deletion.

• The right to information

If you have made use of the operator’s right to rectification, deletion or restriction, it is obliged to communicate these rectifications or deletions of data or restriction of processing to all recipients, to whom your personal data has been disclosed, except if this proves to be impossible or is related to inadequate efforts.

You have the right to be informed about these recipients from the operator.

• The right to portability

You have the right to receive the personal data concerning you that you have made available to the operator in a structured, common, machine-readable and interoperable form. In addition, you have the right to transmit this data to another operator, without restriction, through the operator to whom the personal data was made available, insofar as

1. The processing is based on an acceptance according to art. 6, par. 1, lit. a from the GDPR or art. 9, par. 2, lit. of the GDPR or on a contract according to art. 6, par. 1, letter b of the GDPR.
2. The processing takes place with the help of automated procedures.

In exercising this right of yours, you also have the right to determine the transmission of personal data directly concerning you by one operator to another operator, to the extent technically possible.

The right to data portability is not valid for the processing of personal data that is necessary to fulfill a requirement of public interest or in the exercise of public authority that has been transmitted to the operator.

• The right to opposition

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is done according to art. 6, para. 1, lit. e or f of the GDPR; this also applies to profiling based on these provisions.

The operator no longer processes your personal data, unless he can prove the existence of well-founded, mandatory protection reasons that prevail over your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is related to this direct advertising.

If you object to processing for direct advertising purposes, your personal data will no longer be processed for this purpose.

You have the possibility, in connection with the use of information society services – disregarding the Directive 2002/58/EC -, to activate your right to opposition by means of the automated procedure, which can use technical specifications.

• The right to revoke the declaration of acceptance regarding legal data protection

You have the right to revoke your consent to legal data protection at any time and without giving reasons. In the event of revocation, we will immediately delete your personal data and will no longer process them. By revoking the acceptance, the legality of the processing carried out on the basis of the acceptance until the date of revocation is not reached.

• Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning or similarly affects the data subject to a significant extent. This does not apply if the decision:

* is necessary for the conclusion or execution of a contract between the data subject and a data operator;
* is authorized by Union law or internal law that applies to the operator and that also provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or
* is based on the explicit consent of the person concerned

However, decisions are not allowed to be based on certain categories of personal data according to art. 9, par. 1 of the GDPR, insofar as art. 9, par. 2, lit. a or g is valid and appropriate measures have been taken to protect your rights and freedoms, as well as your legitimate interests.           

In the cases mentioned in paragraphs 1) and 3), the data operator implements appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, at least his right to obtain human intervention from the operator, to express his point view and appeal the decision.

• The right to complain to a supervisory authority

Without prejudice to other administrative or legal assistance measures, you have the right to complain to a supervisory authority, in particular in the Member State where you are domiciled, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the provisions of the GDPR.

The supervisory authority to which the complaint was submitted informs the complainant about the status and results of the complaint, including the possibility to benefit from legal assistance, according to art. 78 of the GDPR.

17. Modification of this data protection statement

The up-to-dateness of the data protection declaration is done by indicating the date (see below). We reserve the right to change this data protection statement at any time with effect for the future. An updated version can be accessed directly from our online offer. Please visit our online offer regularly and inform yourself about the applicable data protection declaration.

Update: April 2023

Operator: see identification data