Datenschutzerklärung

Introduction and Overview

We have prepared this Privacy Policy (version 10.02.2023-122403728) to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (referred to as "data" for short) we, as data controllers—and the processors we commission (e.g., service providers)—process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We are providing you with comprehensive information about the data we process about you.

Privacy policies usually sound very technical and use legal terminology. This Privacy Policy, however, is intended to describe the most important aspects as simply and transparently as possible. Where it aids transparency, technical terms are explained in a reader-friendly manner, links to further information are provided, and graphics are used. We aim to clearly and simply inform you that we only process personal data within the scope of our business activities when there is a corresponding legal basis for doing so. This would not be possible if we provided brief, unclear, and overly legalistic explanations, as is often the case with standard privacy policies found online.

We hope you find the following explanations interesting and informative, and perhaps you’ll discover some information you didn’t know before.
If you still have questions, please contact the responsible party listed below or in the legal notice, follow the provided links, and seek additional information from third-party sites. Our contact details can, of course, also be found in the legal notice.

Scope of Application

This Privacy Policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information as defined in Art. 4 No. 1 GDPR, such as a person's name, email address, and postal address. The processing of personal data enables us to offer and bill for our services and products, whether online or offline. The scope of this Privacy Policy includes:

all online platforms (websites, online shops) that we operate
social media profiles and email communication
mobile apps for smartphones and other devices

In short: This Privacy Policy applies to all areas where personal data is processed in a structured manner within the company through the channels mentioned above. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal Bases

In the following Privacy Policy, we provide you with transparent information about the legal principles and regulations—i.e., the legal bases under the General Data Protection Regulation (GDPR)—that allow us to process personal data.

Regarding EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can, of course, read this EU General Data Protection Regulation online on EUR-Lex, the access point to EU law, at: https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=celex%3A32016R0679.

We process your data only if at least one of the following conditions applies:

Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you entered in a contact form.
Contract (Article 6(1)(b) GDPR): We process your data to fulfill a contract or pre-contractual obligations with you. For example, if we enter into a purchase agreement with you, we require personal information in advance.
Legal Obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For instance, we are legally required to retain invoices for accounting purposes, which generally contain personal data.
Legitimate Interests (Article 6(1)(f) GDPR): In cases of legitimate interests that do not override your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data to operate our website securely and efficiently. This processing constitutes a legitimate interest.

Other legal bases, such as processing for tasks carried out in the public interest, the exercise of official authority, or the protection of vital interests, generally do not apply to us. If such a legal basis becomes relevant, it will be explicitly stated where applicable.

In addition to the EU Regulation, national laws also apply:

In Austria, this is the Federal Act concerning the Protection of Natural Persons in the Processing of Personal Data (Data Protection Act), abbreviated as DSG.
In Germany, the applicable law is the Federal Data Protection Act, abbreviated as BDSG.

If other regional or national laws apply, we will inform you accordingly in the following sections.

Contact Details of the Data Controller

If you have any questions regarding data protection or the processing of personal data, you can find the contact details of the responsible person or entity below:

ef16 Gastronomiebetriebs GmbH
Fleischmarkt 16
Authorized Representative: Christoph Lamprecht
Email: email@ef16.at
Phone: +43 1 513 23 18
Legal Notice (Impressum): https://www.ef16.at/impressum

Retention Period

As a general rule, we only store personal data for as long as it is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for its processing no longer exists. In some cases, we are legally obligated to retain certain data even after the original purpose has ceased, for example, for accounting purposes.

If you request the deletion of your data or withdraw your consent to data processing, the data will be deleted as quickly as possible, provided there is no legal obligation to retain it.

We will inform you about the specific duration of data processing further below if we have additional information on this.

Rights Under the General Data Protection Regulation (GDPR

In accordance with Articles 13 and 14 of the GDPR, we inform you of the following rights you are entitled to, ensuring fair and transparent data processing:

Right of Access (Article 15 GDPR): You have the right to know whether we are processing your personal data. If this is the case, you are entitled to receive a copy of the data and the following information:
- The purpose of the data processing
- The categories (types) of data being processed
- The recipients of the data and, if the data is transferred to third countries, how security is ensured
- The duration for which the data will be stored
- The existence of the right to rectification, deletion, restriction of processing, and the right to object to processing
- The right to lodge a complaint with a supervisory authority (links to these authorities are provided below)
- The origin of the data if it was not collected from you directly
- Whether automated decision-making, including profiling, is used to create a personal profile about you
Right to Rectification (Article 16 GDPR): You have the right to have inaccurate data corrected. We must rectify any errors you identify.
Right to Erasure (“Right to be Forgotten”) (Article 17 GDPR): You have the right to request the deletion of your personal data.
Right to Restriction of Processing (Article 18 GDPR): You can request that we restrict the processing of your data, meaning we may only store the data without using it further.
Right to Data Portability (Article 20 GDPR): You have the right to receive your personal data in a commonly used, machine-readable format upon request.
Right to Object (Article 21 GDPR): You have the right to object to the processing of your data, which may lead to changes in how we process your information.
- If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interests), you can object to the processing. We will promptly review whether we can legally comply with your objection.
- If your data is processed for direct marketing purposes, you can object at any time. We will then no longer use your data for direct marketing.
- If your data is processed for profiling purposes, you can also object at any time. We will then cease processing your data for profiling.
Right Not to Be Subject to Automated Decision-Making (Article 22 GDPR): Under certain circumstances, you have the right not to be subject to decisions based solely on automated processing, including profiling.
Right to Lodge a Complaint (Article 77 GDPR): You have the right to file a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

In short: You have rights—don’t hesitate to contact the responsible party listed above!

If you believe that the processing of your data violates data protection laws or if your data protection rights have been infringed in any way, you can file a complaint with the relevant supervisory authority.

For Austria: The supervisory authority is the Austrian Data Protection Authority, which you can find at https://www.dsb.gv.at/.
For Germany: Each federal state has its own data protection officer. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

For our company, the following local data protection authority is responsible: [Insert relevant authority here if applicable].

Cookies

Cookies Summary
👥 Data Subjects: Visitors of the website
🤝 Purpose: Depends on the specific cookie. More details can be found below or from the software provider that sets the cookie.
📓 Processed Data: Varies depending on the cookie used. More details are provided below or by the software provider that sets the cookie.
📅 Retention Period: Depends on the specific cookie, ranging from a few hours to several years
⚖️ Legal Bases: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What are Cookies?

Our website uses HTTP cookies to store user-specific data.
In the following section, we explain what cookies are and why they are used, so you can better understand this privacy policy.

Whenever you browse the internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser—these files are called cookies.

There’s no denying it: cookies are incredibly useful. Almost all websites use cookies. More specifically, they are called HTTP cookies because there are other types of cookies used for different purposes. HTTP cookies are small files stored on your computer by our website. These cookie files are automatically placed in the cookie folder, which acts as the “brain” of your browser. A cookie consists of a name and a value, and when defining a cookie, one or more attributes must also be specified.

Cookies store certain user data, such as your language preferences or personal site settings. When you revisit our website, your browser sends the "user-related" information back to our site. Thanks to cookies, our website knows who you are and can offer you the settings you’re accustomed to. In some browsers, each cookie is stored as a separate file, while in others, like Firefox, all cookies are stored in a single file.

The following graphic illustrates a possible interaction between a web browser (e.g., Chrome) and a web server. The browser requests a website, and the server responds with a cookie, which the browser then reuses when requesting another page.

First-Party and Third-Party Cookies

There are both first-party cookies and third-party cookies.

First-party cookies are created directly by our website.
Third-party cookies are created by partner websites (e.g., Google Analytics).

Each cookie must be evaluated individually because each one stores different data. Additionally, the expiration date of a cookie can vary—from just a few minutes to several years.

Cookies are not software programs and do not contain viruses, trojans, or other malicious software. They also cannot access information on your computer.

Here’s an example of what cookie data might look like:

Name: _ga
Value: GA1.2.1326744211.152122403728-9
Purpose: Distinguishes website visitors
Expiration Date: After 2 years

Minimum Requirements Supported by Browsers:

At least 4,096 bytes per cookie
At least 50 cookies per domain
A total of at least 3,000 cookies

Types of Cookies

The specific cookies we use depend on the services we employ, which will be detailed in the following sections of this privacy policy. For now, we’d like to briefly explain the different types of HTTP cookies.

There are four types of cookies:

Essential Cookies
These cookies are necessary to ensure the basic functions of the website. For example, they are required when a user adds a product to the shopping cart, continues browsing other pages, and later returns to complete the purchase. These cookies ensure that the cart is not cleared, even if the user closes the browser window.
Functional Cookies
These cookies collect information about user behavior and any error messages the user might encounter. They also help measure loading times and the website’s performance across different browsers.
Performance Cookies
These cookies enhance user experience. They store user preferences such as location data, font sizes, or form inputs to provide a more personalized browsing experience.
Advertising Cookies
Also known as targeting cookies, these are used to deliver personalized advertisements to users. While they can be helpful, they may also be perceived as intrusive.

Typically, when you first visit a website, you’ll be asked which of these cookie types you’d like to allow. Naturally, your choice will also be saved in a cookie.

If you’d like to learn more about cookies and don’t mind technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the “HTTP State Management Mechanism” Request for Comments (RFC) from the Internet Engineering Task Force (IETF).

Purpose of Processing via Cookies

The purpose of using cookies ultimately depends on the specific cookie. More detailed information can be found in the sections below or from the software provider that sets the cookie.

What Data Is Processed?

Cookies serve as small helpers for a variety of tasks. Unfortunately, it’s not possible to generalize which data is stored in cookies. However, we will inform you about the data processed or stored within cookies as part of this privacy policy.

Cookie Storage Duration

The storage duration depends on the specific cookie and will be specified further below. Some cookies are deleted within less than an hour, while others can remain stored on your device for several years.

You also have control over the storage duration. You can manually delete all cookies at any time through your browser settings (see also the section below on “Right to Object”). Additionally, cookies based on consent will be deleted as soon as you withdraw your consent, although the legality of the storage up until that point remains unaffected.

Right to Object – How Can I Delete Cookies?

You have full control over whether and how cookies are used. Regardless of the service or website from which the cookies originate, you can always delete, disable, or selectively allow cookies. For example, you may choose to block third-party cookies while allowing all others.

If you’d like to check which cookies are stored in your browser, modify cookie settings, or delete cookies, you can do this through your browser settings:

Chrome: Manage and delete cookies in Chrome
Safari: Manage cookies and website data in Safari
Firefox: Clear cookies and site data in Firefox
Internet Explorer: Delete and manage cookies in Internet Explorer
Microsoft Edge: Manage cookies in Microsoft Edge

If you prefer not to have cookies at all, you can configure your browser to notify you whenever a cookie is about to be set. This allows you to decide on a case-by-case basis whether to allow the cookie. The process differs from browser to browser, so it’s best to search online for instructions specific to your browser, such as “delete cookies Chrome” or “disable cookies Chrome” if you’re using Google Chrome.

Legal Basis for Cookies

Since 2009, the so-called "Cookie Directives" have been in place, requiring user consent (Article 6(1)(a) GDPR) for storing cookies. However, EU countries have implemented these directives differently. In Austria, they were incorporated into § 96(3) of the Telecommunications Act (TKG). In Germany, the directives were not implemented as national law but were largely incorporated into § 15(3) of the Telemedia Act (TMG).

For essential cookies, even in the absence of consent, legitimate interests (Article 6(1)(f) GDPR) often apply, usually of an economic nature. Providing a smooth user experience often necessitates these cookies.

Non-essential cookies are only used with your consent, based on Article 6(1)(a) GDPR. In the sections below, you will find further details on the use of cookies if applied software utilizes them.

Web Hosting Overview

👥 Affected parties: Visitors to the website
🤝 Purpose: Professional hosting and ensuring website operation
📓 Processed data: IP address, time of visit, browser used, and other details provided below or by the web hosting provider
📅 Storage duration: Depends on the provider but usually about 2 weeks
⚖️ Legal basis: Article 6(1)(f) GDPR (Legitimate Interests)

What is Web Hosting?

When visiting websites, certain information—including personal data—is automatically generated and stored. The goal is to process these data as minimally and justifiably as possible. A website includes all pages under a domain, from the homepage to subpages.

To view a website on a device, you use a web browser such as Google Chrome, Mozilla Firefox, Microsoft Edge, or Safari. The browser connects to another computer, known as a web server, where the website's data is stored. Running a web server is complex and is usually handled by professional web hosting providers who ensure reliable and error-free data storage.

When your browser connects to a website, personal data may be processed. Your computer stores data, and the web server must temporarily store some data to maintain website functionality.

A visual representation of this interaction between your browser, the internet, and the hosting provider can help illustrate this process.

Warum verarbeiten wir personenbezogene Daten?

Die Zwecke der Datenverarbeitung sind:

Professionelles Hosting der Website und Absicherung des Betriebs
zur Aufrechterhaltung der Betriebs- und IT-Sicherheit
Anonyme Auswertung des Zugriffsverhaltens zur Verbesserung unseres Angebots und ggf. zur Strafverfolgung bzw. Verfolgung von Ansprüchen

Which Data is Processed?

Even while you are currently visiting our website, our web server—the computer on which this website is hosted—typically stores data automatically, such as:

The complete internet address (URL) of the accessed webpage
Browser and browser version (e.g., Chrome 87)
The operating system used (e.g., Windows 10)
The address (URL) of the previously visited page (referrer URL) (e.g., https://www.example-source-site.com/whereicamefrom/)
The hostname and IP address of the device from which access occurs (e.g., COMPUTERNAME and 194.23.43.121)
Date and time

This data is stored in files called web server log files.

How Long is the Data Stored?

As a rule, the aforementioned data is stored for two weeks and then automatically deleted. We do not share this data, but we cannot rule out the possibility that it may be accessed by authorities in the event of unlawful behavior.

In short: Your visit is logged by our provider (the company that runs our website on specialized computers, known as servers), but we do not share your data without your consent.

Legal Basis

The legality of processing personal data within the scope of web hosting is based on Art. 6 (1) (f) GDPR (legitimate interests), as the use of professional hosting by a provider is necessary to securely and user-friendly present the company on the internet and, if necessary, to pursue attacks and claims arising therefrom.

Typically, there is a data processing agreement (DPA) between us and the hosting provider in accordance with Art. 28 GDPR, which ensures compliance with data protection regulations and guarantees data security.

er die Auftragsverarbeitung gemäß Art. 28 f. DSGVO, der die Einhaltung von Datenschutz gewährleistet und Datensicherheit garantiert.

1&1 IONOS Web Hosting Privacy Policy

We use IONOS by 1&1 to host our website. In Germany, 1&1 IONOS SE is headquartered at Elgendorfer Str. 57, 56410 Montabaur, and in Austria, you can find 1&1 IONOS SE at Gumpendorfer Straße 142/PF 266, 1060 Vienna. IONOS offers the following web hosting services: domain, website & shop, hosting & WordPress, marketing, email & office, IONOS cloud, and servers.

If you would like to learn more about data protection for IONOS websites, please visit the privacy policy on ionos.de.

Website Builder Systems Introduction

Website Builder Systems Privacy Policy Summary
👥 Data Subjects: Visitors to the website
🤝 Purpose: Optimization of our service
📓 Processed Data: Data such as technical usage information like browser activity, clickstream activities, session heatmaps, as well as contact details, IP address, or your geographical location. More details can be found further below in this privacy policy and in the provider's privacy policy.
📅 Storage Duration: Depends on the provider
⚖️ Legal Basis: Art. 6 (1) lit. f GDPR (Legitimate Interests), Art. 6 (1) lit. a GDPR (Consent)

What Are Website Builder Systems?

We use a website builder system for our website. Website builder systems are special forms of content management systems (CMS). With a website builder system, website operators can easily create a website without any programming knowledge. In many cases, web hosting providers also offer website builder systems. The use of a website builder system may involve the collection, storage, and processing of personal data. In this privacy text, we provide general information about data processing through website builder systems. More detailed information can be found in the privacy policies of the respective providers.

Why Do We Use Website Builder Systems for Our Website?

The biggest advantage of a website builder system is its ease of use. We aim to provide you with a clear, simple, and well-structured website that we can manage and maintain ourselves without external support. A website builder system offers many helpful features that we can utilize without programming knowledge. This allows us to design our web presence according to our preferences and provide you with an informative and pleasant experience on our website.

What Data Is Stored by a Website Builder System

The specific data stored depends on the website builder system used. Each provider collects and processes different data from website visitors. Generally, technical usage information such as the operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your website visit is collected. Additionally, tracking data (e.g., browser activity, clickstream activities, session heatmaps, etc.) may be processed. Personal data such as contact details (email address, phone number if provided), IP address, and geographical location data may also be collected and stored. For precise details on the data stored, please refer to the provider’s privacy policy.

How Long and Where Is the Data Stored?

We will inform you about the duration of data processing below in connection with the specific website builder system used, provided we have further information. Detailed information can be found in the provider’s privacy policy. In general, we process personal data only as long as it is absolutely necessary for providing our services and products. The provider may store your data according to its own policies, over which we have no control.

Right to Object

You always have the right to access, correct, and delete your personal data. If you have any questions, you can contact the responsible parties of the website builder system at any time. Contact details can be found either in our privacy policy or on the provider’s website.

You can delete, disable, or manage cookies used by providers for their functions in your browser. The process varies depending on the browser you use. However, please note that some functions may no longer work as expected if you disable cookies.

Legal Basis

We have a legitimate interest in using a website builder system to optimize our online service and present it efficiently and appealingly to you. The corresponding legal basis is Art. 6 (1) lit. f GDPR (Legitimate Interests). However, we only use the builder system if you have provided your consent.

If the processing of data is not absolutely necessary for the operation of the website, data will only be processed based on your consent. This particularly applies to tracking activities. The legal basis in this regard is Art. 6 (1) lit. a GDPR.

With this privacy policy, we have provided you with the most important general information about data processing. If you would like more detailed information, you can find further details—if available—in the following section or in the provider’s privacy policy.

Email Marketing Introduction

Email Marketing Summary
👥 Data Subjects: Newsletter subscribers
🤝 Purpose: Direct advertising via email, notification of system-relevant events
📓 Processed Data: Data entered during registration, at a minimum the email address. More details can be found in the privacy policy of the respective email marketing tool.
📅 Storage Duration: Duration of the subscription
⚖️ Legal Bases: Art. 6 (1) lit. a GDPR (Consent), Art. 6 (1) lit. f GDPR (Legitimate Interests)

What Is Email Marketing?

To keep you up to date, we also use the option of email marketing. If you have agreed to receive our emails or newsletters, your data will be processed and stored. Email marketing is a subcategory of online marketing, where news or general information about a company, its products, or services is sent via email to a specific group of interested people.

If you want to participate in our email marketing (usually via newsletter), you generally only need to register with your email address. To do this, you fill out an online form and submit it. Sometimes we may also ask for your salutation and name to address you personally.

In general, newsletter sign-ups work through the so-called “double opt-in procedure.” After registering for our newsletter on our website, you will receive an email asking you to confirm your subscription. This ensures that the email address belongs to you and that no one has registered with someone else’s email address. We or the notification tool we use log each individual registration. This is necessary to prove that the registration process was legally compliant. Typically, the date and time of registration, the time of confirmation, and your IP address are stored. Additionally, any changes you make to your stored data are also logged.

Why Do We Use Email Marketing?

We want to stay in touch with you and keep you updated with the most important news about our company. For this purpose, we use email marketing—often simply referred to as a “newsletter”—as an essential part of our online marketing. Provided you agree to it or it is legally permitted, we will send you newsletters, system emails, or other notifications via email. When we mention “newsletter” in the following text, we primarily mean regularly sent emails.

Of course, we have no intention of bothering you with our newsletters. That’s why we are always committed to providing only relevant and interesting content. This way, you’ll learn more about our company, our services, or our products. Since we constantly strive to improve our offerings, our newsletters will also keep you informed about new developments or special promotional deals.

If we use a service provider that offers a professional email delivery tool for our email marketing, we do so to provide you with fast and secure newsletters. The primary purpose of our email marketing is to inform you about new offers and to support our business goals.

What Data Is Processed?

When you subscribe to our newsletter via our website, you confirm your membership in an email list through an email confirmation. In addition to your IP address and email address, your salutation, name, address, and telephone number may also be stored—but only if you consent to this data storage. The data marked as mandatory is required for you to participate in the offered service. Providing this information is voluntary, but not providing it may result in you being unable to use the service. Additionally, information about your device or your preferred content on our website may also be stored. For more details about data storage when visiting a website, please refer to the section “Automatic Data Storage.”
We record your consent declaration to ensure we can always prove that it complies with legal requirements.

Duration of Data Processing

If you unsubscribe your email address from our email/newsletter distribution list, we may retain your address for up to three years based on our legitimate interests to demonstrate that you previously gave consent. We will only process this data if we need to defend against potential legal claims.

However, if you confirm that you provided consent for newsletter registration, you can request the deletion of your data at any time. If you permanently withdraw your consent, we reserve the right to add your email address to a suppression list to prevent further contact. As long as you voluntarily subscribe to our newsletter, we will, of course, continue to retain your email address.

Right to Object

You can unsubscribe from our newsletter at any time. To do so, you simply need to revoke your consent for receiving the newsletter. This usually takes just a few seconds or one or two clicks. Most of the time, you will find an unsubscribe link at the bottom of each email. If you cannot find the link in the newsletter, please contact us via email, and we will cancel your subscription immediately.

Legal Basis

he sending of our newsletter is based on your consent (Article 6 (1) lit. a GDPR). This means we are only allowed to send you newsletters if you have actively registered for them in advance. We may also send you promotional messages if you have become our customer and have not objected to the use of your email address for direct marketing purposes.

For information about specific email marketing services and how they process personal data, please refer to the following section (if available).

Social Media Introduction

Social Media Privacy Policy Summary👥 Data Subjects: Visitors of the website
🤝 Purpose: Presentation and optimization of our services, communication with visitors and interested parties, advertising
📓 Processed Data: Data such as phone numbers, email addresses, contact details, user behavior data, device information, and IP addresses.
More details can be found in the privacy policies of the respective social media tools.
📅 Storage Duration: Depends on the social media platforms used
⚖️ Legal Basis: Article 6 (1) lit. a GDPR (Consent), Article 6 (1) lit. f GDPR (Legitimate Interests)

What Is Social Media?

In addition to our website, we are also active on various social media platforms. User data may be processed to allow us to specifically target users who are interested in our services via social networks. Moreover, elements of social media platforms may be embedded directly into our website. This occurs, for example, when you click a so-called social button on our website, which redirects you directly to our social media presence.

Social media, or social networks, refer to websites and apps where registered members can create content, share it publicly or within specific groups, and connect with other members.

Why Do We Use Social Media?

For years, social media platforms have been the primary places where people communicate and connect online. Through our social media presences, we can showcase our products and services to potential customers. The social media elements embedded on our website help you quickly and conveniently access our social media content.

The data stored and processed through your use of a social media channel primarily serves the purpose of conducting web analytics. The goal of these analyses is to develop more precise and personalized marketing and advertising strategies. Based on your behavior on a social media platform, the analyzed data can help draw conclusions about your interests, leading to the creation of so-called user profiles. This allows the platforms to display personalized advertisements tailored to your preferences. Cookies are typically used in your browser to store data about your user behavior for this purpose.

We generally assume that we remain legally responsible for data protection, even when using services provided by a social media platform. However, the European Court of Justice (ECJ) has determined that, in certain cases, the operator of the social media platform may be considered a joint data controller alongside us within the meaning of Article 26 GDPR. Where this applies, we will explicitly indicate it and operate based on an appropriate agreement. The essential details of such agreements will be outlined below for the relevant platform.

Please Note:

When using social media platforms or the embedded elements on our website, your data may also be processed outside the European Union. Many social media providers, such as Facebook or Twitter, are U.S.-based companies. As a result, you may not be able to assert or enforce your rights regarding your personal data as easily.

Which Data Is Processed?

The specific data that is stored and processed depends on the respective social media platform provider. Generally, this includes information such as:

Phone numbers
Email addresses
Data entered in contact forms
User activity data (e.g., which buttons you click, who you like or follow, the pages you visit and when)
Device information and your IP address

Most of this data is stored in cookies. If you have an account with the social media platform and are logged in, the data collected can often be linked to your profile.

All data collected through social media platforms is stored on the providers' servers. This means that only the respective providers have access to this data and can provide information or make changes upon request.

If you want to know exactly which data is stored and processed by social media providers, or how you can object to data processing, we recommend reading the privacy policies of the respective companies carefully. For questions about data storage and processing or to assert your rights, please contact the provider directly.

Duration of Data Processing

We will inform you about the duration of data processing below, provided we have more specific information. For example:

Facebook stores data as long as it is needed for its purposes.
Customer data linked to user data is usually deleted within two days.

In general, we process personal data only as long as it is necessary to provide our services and products. If required by law (e.g., for accounting purposes), the storage period may be extended accordingly.

Right to Object

You have the right to withdraw your consent to the use of cookies or third-party services (such as embedded social media elements) at any time. This can be done through:

Our cookie management tool
Other opt-out features provided by the platforms

You can also prevent data collection through cookies by managing, disabling, or deleting cookies in your browser settings.

Since social media tools may use cookies, we also recommend reading our general privacy policy on cookies. To understand exactly what data about you is stored and processed, please refer to the privacy policies of the respective tools.

Legal Basis

If you have consented to the processing and storage of your data via embedded social media elements, this consent serves as the legal basis for data processing (Article 6(1)(a) GDPR). Additionally, data may be processed based on our legitimate interest (Article 6(1)(f) GDPR) in ensuring efficient communication with you and other customers or business partners.

However, we only use such tools if you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend reviewing both:

Our cookie policy
The privacy policies or cookie guidelines of the respective service providers

Facebook Privacy Policy

Facebook Privacy Policy Summary

👥 Data Subjects: Visitors of the website
🤝 Purpose: Optimization of our services
📓 Processed Data: Customer data, user behavior data, device information, and IP address
More details can be found in the full privacy policy below.
📅 Storage Duration: Until the data is no longer useful for Facebook’s purposes
⚖️ Legal Basis: Article 6(1)(a) GDPR (Consent), Article 6(1)(f) GDPR (Legitimate Interests)

What Are Facebook Tools?

We use selected tools from Facebook on our website. Facebook is a social media network owned by Meta Platforms Inc., or for the European region, by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With the help of these tools, we can offer you and people interested in our products and services the best possible experience.

When data is collected and transmitted via our embedded Facebook elements or our Facebook page (fan page), both we and Facebook Ireland Ltd. are responsible. However, Facebook alone is responsible for the further processing of this data. Our joint obligations are also anchored in a publicly accessible agreement at https://www.facebook.com/legal/controller_addendum. This agreement stipulates that we must clearly inform you about the use of Facebook tools on our site. Furthermore, we are responsible for ensuring that the tools are securely integrated into our website in compliance with data protection laws. Facebook, on the other hand, is responsible for the data security of its products. If you have any questions about data collection and processing by Facebook, you can contact the company directly. If you address the question to us, we are obligated to forward it to Facebook.

Below, we provide an overview of the different Facebook tools, what data is sent to Facebook, and how you can delete this data.

In addition to many other products, Facebook also offers the so-called "Facebook Business Tools." This is Facebook's official term. Since this term is hardly known, we have decided to refer to them simply as Facebook tools. These include, among others:

Facebook Pixel
Social plug-ins (such as the "Like" or "Share" button)
Facebook Login
Account Kit
APIs (Application Programming Interfaces)
SDKs (Software Development Kits)
Platform integrations
Plugins
Codes
Specifications
Documentation
Technologies and services

Through these tools, Facebook expands its services and has the ability to obtain information about user activities outside of Facebook.

Why Do We Use Facebook Tools on Our Website?

We want to show our services and products only to people who are truly interested in them. With the help of advertisements (Facebook Ads), we can reach exactly these people. To show users relevant ads, Facebook needs information about people's desires and needs. This way, the company receives information about user behavior (and contact data) on our website. As a result, Facebook collects better user data and can display suitable advertisements about our products or services to interested people. The tools thus enable customized advertising campaigns on Facebook.

Facebook refers to data about your behavior on our website as "event data." This data is also used for measurement and analysis services. In this way, Facebook can create "campaign reports" for us on the effectiveness of our advertising campaigns. Furthermore, through analyses, we gain better insights into how you use our services, website, or products. As a result, we can optimize your user experience on our website with some of these tools. For example, you can share content from our site directly on Facebook using social plug-ins.

What Data Is Stored by Facebook Tools?

By using individual Facebook tools, personal data (customer data) may be sent to Facebook. Depending on the tools used, customer data such as name, address, phone number, and IP address may be transmitted.

Facebook uses this information to match the data with the data it already has about you (if you are a Facebook member). Before customer data is transmitted to Facebook, a process called "hashing" takes place. This means that a dataset of any size is transformed into a string. This also serves to encrypt the data.

In addition to contact data, "event data" is also transmitted. "Event data" refers to the information we receive about you on our website, such as which subpages you visit or which products you purchase from us. Facebook does not share the received information with third parties (such as advertisers) unless the company has explicit permission or is legally required to do so. "Event data" can also be linked to contact data, allowing Facebook to offer better personalized advertising. After the matching process mentioned earlier, Facebook deletes the contact data.

To deliver advertisements in an optimized way, Facebook uses event data only when it is combined with other data collected by Facebook through other means. Facebook also uses this event data for security, protection, development, and research purposes. Much of this data is transmitted to Facebook via cookies. Cookies are small text files used to store data or information in browsers. Depending on the tools used and whether you are a Facebook member, varying numbers of cookies are placed in your browser. In the descriptions of individual Facebook tools, we go into more detail about specific Facebook cookies. You can also find general information about the use of Facebook cookies at

How long and where is the data stored?

In principle, Facebook stores data until it is no longer needed for its own services and Facebook products. Facebook has servers distributed all over the world where its data is stored. However, customer data is deleted within 48 hours after it has been matched with its own user data.

How can I delete my data or prevent data storage?

According to the General Data Protection Regulation (GDPR), you have the right to access, rectify, transfer, and delete your data.

A complete deletion of the data only occurs if you fully delete your Facebook account. Here’s how to delete your Facebook account:

Click on Settings on the right side of Facebook.
Then click on Your Facebook Information in the left column.
Now click on Deactivation and Deletion.
Select Delete Account and then click Continue to Account Deletion.
Enter your password, click Continue, and then click Delete Account.

The storage of data that Facebook receives through our page also occurs via cookies (e.g., with social plugins). In your browser, you can deactivate, delete, or manage individual or all cookies. Depending on the browser you use, this works in different ways. In the Cookies section, you will find the relevant links to the instructions for the most common browsers.

If you generally do not want to allow cookies, you can set up your browser to notify you whenever a cookie is about to be set. This way, you can decide whether to allow each individual cookie.

Legal Basis

If you have consented to the processing and storage of your data through embedded Facebook tools, this consent serves as the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). Your data is also processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in fast and effective communication with you or other customers and business partners. However, we only use these tools if you have given your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend that you carefully read our privacy policy regarding cookies and review Facebook’s privacy policy or cookie guidelines.

Facebook also processes your data in the USA, among other countries. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may involve various risks concerning the legality and security of data processing.

As the basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway—especially in the USA) or for data transfers to such countries, Facebook uses so-called Standard Contractual Clauses (Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCCs) are templates provided by the European Commission designed to ensure that your data complies with European data protection standards even when transferred to third countries (such as the USA) and stored there. Through these clauses, Facebook commits to maintaining the European level of data protection when processing your relevant data, even if it is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the relevant Standard Contractual Clauses here:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

Facebook’s Data Processing Terms, which comply with the Standard Contractual Clauses, can be found at:
https://www.facebook.com/legal/terms/dataprocessing

We hope this has provided you with the key information about the use and processing of data through Facebook tools. If you would like to learn more about how Facebook handles your data, we recommend reviewing their Data Policy at:
https://www.facebook.com/about/privacy/update

Instagram Privacy Policy

Instagram Privacy Policy Summary👥 Data Subjects: Visitors of the website
🤝 Purpose: Optimization of our service performance
📓 Processed Data: Data such as user behavior, information about your device, and your IP address.
More details can be found below in the privacy policy.
📅 Storage Duration: Until Instagram no longer needs the data for its purposes
⚖️ Legal Basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate Interests)

What is Instagram?

We have integrated features of Instagram on our website. Instagram is a social media platform owned by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. Since 2012, Instagram has been a subsidiary of Meta Platforms Inc. and is part of the Facebook family of products. Embedding Instagram content on our website is referred to as embedding. This allows us to display content such as buttons, photos, or videos from Instagram directly on our site.

When you visit pages on our website that include an Instagram feature, data is transmitted to Instagram, stored, and processed. Instagram uses the same systems and technologies as Facebook, meaning your data is processed across all Meta companies.

Below, we will provide you with more detailed information on why Instagram collects data, what data is collected, and how you can control data processing as much as possible. Since Instagram is part of Meta Platforms Inc., we base our information both on Instagram’s policies and Meta’s privacy guidelines.

Instagram is one of the most well-known social media networks worldwide. It combines the benefits of a blog with audiovisual platforms like YouTube or Vimeo. On Insta (as many users casually call the platform), you can upload photos and short videos, edit them with various filters, and share them on other social networks. Even if you don’t actively post, you can follow other interesting users.

Why do we use Instagram on our website?

Instagram has experienced explosive growth in recent years, and of course, we’ve responded to this trend. We want you to feel as comfortable as possible when visiting our website. That’s why providing diverse and engaging content is important to us.

By embedding Instagram features, we can enrich our content with helpful, entertaining, or exciting material from the Instagram world. Since Instagram is a subsidiary of Facebook, the data collected can also be useful for personalized advertising on Facebook. This ensures our ads are shown only to people genuinely interested in our products or services.

Instagram also uses the collected data for measurement and analysis purposes. We receive aggregated statistics that give us more insight into your preferences and interests. It’s important to note that these reports do not personally identify you.

What Data is Stored by Instagram?

When you visit one of our pages that has Instagram features (such as Instagram images or plugins) embedded, your browser automatically connects to Instagram's servers. During this process, data is sent to, stored, and processed by Instagram—regardless of whether you have an Instagram account or not. This includes information about our website, your computer, purchases made, advertisements you view, and how you interact with our content. Additionally, the date and time of your interaction with Instagram are recorded. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.

Facebook differentiates between customer data and event data, and we assume this is the case with Instagram as well. Customer data includes information such as your name, address, phone number, and IP address. This customer data is only transmitted to Instagram after being “hashed.” Hashing means converting a data set into a string of characters, thereby encrypting the contact data.

In addition to customer data, the aforementioned event data is also transmitted. According to Facebook—and therefore likely Instagram—event data refers to data about your user behavior. In some cases, contact data may be combined with event data. The collected contact data is compared with the data Instagram already has about you.

The data collected is transmitted to Facebook through small text files (cookies), which are typically stored in your browser. Depending on the Instagram features you use and whether you have an Instagram account, different amounts of data may be stored.

We assume that Instagram processes data in the same way as Facebook. This means that if you have an Instagram account or have visited www.instagram.com, Instagram has likely set at least one cookie. In such cases, your browser sends information to Instagram via the cookie whenever you interact with an Instagram feature. After a maximum of 90 days (following data matching), this data is deleted or anonymized. Although we have thoroughly researched Instagram's data processing practices, we cannot state with complete certainty what exact data Instagram collects and stores.

Below are examples of cookies that are set in your browser when you click on an Instagram feature (e.g., a button or an Instagram image). For our test, we assumed that you do not have an Instagram account. If you are logged into Instagram, significantly more cookies will be stored in your browser.

Cookies Used During Our Test:

Name: csrftoken
Value: “”
Purpose: This cookie is most likely set for security reasons to prevent cross-site request forgery. However, we could not determine this with absolute certainty.
Expiration Date: After one year
Name: mid
Value: “”
Purpose: Instagram sets this cookie to optimize its services and offerings both within and outside of Instagram. The cookie assigns a unique user ID.
Expiration Date: At the end of the session
Name: fbsr_122403728124024
Value: Not specified
Purpose: This cookie stores the login request for users of the Instagram app.
Expiration Date: At the end of the session
Name: rur
Value: ATN
Purpose: This is an Instagram cookie that ensures the proper functionality of Instagram.
Expiration Date: At the end of the session
Name: urlgen
Value: {"194.96.75.33": 1901}:1iEtYv:Y833k2_UjKvXgYe122403728
Purpose: This cookie is used for Instagram’s marketing purposes.
Expiration Date: At the end of the session

Note: This list is not exhaustive. The specific cookies set in your case will depend on the embedded features and your usage of Instagram.

How Long and Where Are the Data Stored?

Instagram shares the information it receives with Facebook companies, external partners, and people you connect with worldwide. Data processing is carried out in compliance with Instagram’s data policy. Your data is distributed across Facebook servers worldwide for security reasons, among others. Most of these servers are located in the USA.

How Can I Delete My Data or Prevent Data Storage?

Thanks to the General Data Protection Regulation (GDPR), you have the right to:

Access your data
Data portability
Rectification of your data
Erasure of your data

📲 How to Delete Your Instagram Account:

Open the Instagram app.
Go to your profile page, scroll down, and click on “Help Center.”
This will redirect you to the company's website.
Click on “Managing Your Account” and then on “Delete Your Account.”

When you permanently delete your account, Instagram will delete posts such as your photos and status updates. However, information shared about you by other people does not belong to your account and will not be deleted.

Instagram primarily stores your data via cookies. You can manage, disable, or delete these cookies in your browser settings. The process varies slightly depending on your browser. In the "Cookies" section, you’ll find links to instructions for the most common browsers.

You can also configure your browser to notify you whenever a cookie is about to be set, allowing you to decide individually whether to accept it.

Legal Basis

If you have consented to the processing and storage of your data via embedded social media elements, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). Additionally, your data is processed based on our legitimate interest (Art. 6(1)(f) GDPR) in ensuring quick and effective communication with you, other customers, and business partners.

We only use embedded social media elements if you have provided your consent. Most social media platforms also set cookies in your browser to store data. Therefore, we recommend reading our cookie policy carefully and reviewing the privacy policies or cookie guidelines of the respective service providers.

Instagram (or Facebook) processes data in the USA, among other countries. We note that, according to the European Court of Justice, there is currently no adequate level of data protection for data transfers to the USA. This may entail various risks regarding the legality and security of data processing.

For data transfers to third countries (outside the EU, Iceland, Liechtenstein, Norway—especially the USA), Facebook uses Standard Contractual Clauses (SCCs) approved by the EU Commission (Art. 46(2) and (3) GDPR). These clauses obligate Facebook to comply with the EU data protection level even when processing data outside the EU. The clauses are based on an implementation decision by the EU Commission. You can find the decision and the clauses here: https://germany.representation.ec.europa.eu/index_de.

We have tried to provide you with the most important information about Instagram's data processing. For more details, visit: https://help.instagram.com/519522125107875.

Online Marketing Introduction

📊 Online Marketing Privacy Policy Summary

👥 Data Subjects: Website visitors
🤝 Purpose: Analysis of visitor information to optimize the web offering
📓 Processed Data: Access statistics, including data such as access locations, device information, duration and time of access, navigation behavior, click behavior, and IP addresses. Personal data such as names or email addresses may also be processed. More details can be found in the privacy policies of the respective online marketing tools.
📅 Storage Duration: Depends on the online marketing tools used
⚖️ Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What Is Online Marketing?

Online marketing refers to all measures carried out online to achieve marketing goals, such as increasing brand awareness or driving business transactions. Additionally, our online marketing activities aim to attract people to our website. To showcase our offerings to as many interested people as possible, we engage in online marketing. This typically includes online advertising, content marketing, or search engine optimization (SEO).

To use online marketing efficiently and effectively, personal data is stored and processed. This data helps us:

Target our content to people who are genuinely interested
Measure the success of our online marketing campaigns

Why Do We Use Online Marketing Tools?

We want to reach everyone who might be interested in our offerings. We understand that achieving this goal isn’t possible without deliberate strategies. That’s why we rely on online marketing.

There are various tools that:

Simplify our online marketing efforts
Provide data-driven insights for continuous improvement

This allows us to tailor our campaigns more precisely to our target audience. Ultimately, the purpose of using these online marketing tools is to optimize our offerings.

What Data Is Processed?

For online marketing to work and for us to measure its success, user profiles are created, and data is stored in cookies (small text files).

With this data, we can:

Display targeted ads beyond traditional advertising
Customize content directly on our website to suit your preferences

What Kind of Data Is Collected?

Pages visited on our website
Duration of visits to specific pages
Links and buttons clicked
Referring website (how you arrived at our site)
Technical data: IP address (stored in pseudonymized form), browser type, device used, time of visit, and exit time
Location data (only if you've given consent)

Personal data such as your name, address, or email address is stored in pseudonymized form, meaning we can’t identify you as an individual.

Third-Party Tools:

Some data may be:

Used on other websites working with the same marketing tools
Stored on the servers of advertising tool providers

In rare cases, identifiable data (e.g., name, email) may be linked to user profiles, especially if you're a member of a social media platform that connects your data with our marketing efforts.

However, we only receive aggregated data—never information that identifies you personally. This helps us analyze the effectiveness of campaigns (e.g., what led users to our site to purchase a product or service).

Data Processing Duration

We process personal data only as long as necessary to provide our services and products.

Cookies have varying storage durations:
- Some are deleted after you leave the website
- Others can remain in your browser for several years

For specific details, please refer to the privacy policies of the respective providers.

Right to Object

You have the right to withdraw your consent to the use of cookies or third-party tools at any time. This can be done via:

Our cookie management tool
Opt-out features provided by third parties
Your browser settings (managing, disabling, or deleting cookies)

Withdrawal does not affect the lawfulness of data processing prior to the withdrawal.

Since online marketing tools often rely on cookies, we recommend reviewing our general cookie policy. For detailed information about the data collected and processed, consult the privacy policies of each tool.

Legal Basis

If you have given consent to the use of third-party tools, the legal basis for data processing is your consent under Art. 6(1)(a) GDPR.

We also have a legitimate interest in analyzing online marketing activities in an anonymized form to improve our offerings and strategies. This is based on Art. 6(1)(f) GDPR (Legitimate Interests).

However, we only use these tools with your consent.

For information about specific online marketing tools, please refer to the following sections (if available).

Review Platforms Introduction

Summary of Review Platforms

👥 Data Subjects: Visitors to the website or a review platform
🤝 Purpose: To gather feedback on our products and/or services
📓 Processed Data: Includes IP address, email address, name. More details are provided below or in the privacy policies of the specific review platforms used.
📅 Data Retention Period: Depends on the respective platform
⚖️ Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What Are Review Platforms?

On various review platforms, you can rate our products or services. We participate in some of these platforms to receive feedback from you, helping us optimize our offerings.

When you leave a review on a platform, the privacy policy and terms of service of the respective review service apply. Often, you’ll need to register to submit a review. Additionally, review technologies (widgets) can be embedded on our website. Using such integrated tools means data is transferred, processed, and stored by the respective provider.

How Does It Work?

Most of these embedded programs follow a similar process:

After purchasing a product or using a service, you may receive an email invitation or see a prompt on our website to leave a review.
You’ll be directed via a link to a review page where you can quickly and easily submit your feedback.
Some review systems are connected to social media platforms, making it easier to share your feedback with a broader audience.

Why Do We Use Review Platforms?

Review platforms help us:

Collect feedback and ratings about our offerings
Receive quick responses to improve our products/services more efficiently
Optimize our offerings based on real user experiences

Additionally, your reviews provide valuable insights for future customers, giving them an overview of the quality of our products and services.

What Data Is Processed?

With your consent, we transmit information about you and the services you’ve used to the relevant review platform. This ensures that the feedback is authentic, as only actual customers can provide genuine reviews.

Data That May Be Processed Includes:

Personal Information: IP address, email address, name
Order Information: Such as the order number of a purchased product
Interaction Data: Information confirming you’ve visited our website

If your email address is shared, it’s typically for the review platform to send you a follow-up email after your purchase. We also share the fact that you’ve visited our website to integrate your review into our platform.

Important: The review platform is responsible for the collection and processing of personal data.

How Long and Where Is the Data Stored?

For specific details about data retention, refer to the privacy policies of the respective providers.

In general:

We process personal data only as long as necessary to provide our services and products.
Personal data included in reviews is usually anonymized by the platform’s staff, making it visible only to the company’s administrators.
Data is stored on the servers of the providers and deleted after the service contract ends in most cases.

Right to Object

You have the right to withdraw your consent to the use of cookies or third-party services at any time. This can be done through:

Our cookie management tool
Opt-out options provided by third parties
Your browser settings, where you can manage, disable, or delete cookies

Legal Basis

If you’ve consented to the use of a review platform, the legal basis for data processing is your consent according to Art. 6(1)(a) GDPR.

We also have a legitimate interest in using review platforms to optimize our online services, based on Art. 6(1)(f) GDPR (Legitimate Interests).

However, we only use review platforms with your consent.

Google Customer Reviews Privacy Policy

We also use the Google Customer Reviews platform on our website. The service provider is the American company Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.

Google processes your data, among other things, in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may involve various risks for the legality and security of data processing.

As a basis for data processing with recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfers there, Google uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCCs) are model templates provided by the EU Commission to ensure that your data complies with European data protection standards even when transferred to and stored in third countries (such as the USA). Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

The data processing terms for Google advertising products (Google Ads Controller-Controller Data Protection Terms), which refer to the Standard Contractual Clauses, can be found at https://business.safety.google/intl/en/adsprocessorterms/

For more information about the data processed by Google, please refer to their privacy policy at https://policies.google.com/privacy?hl=en.

Web Design Introduction

Web Design Privacy Policy Summary

👥 Data Subjects: Visitors to the website
🤝 Purpose: Improving user experience
📓 Processed Data: The data processed depends heavily on the tools used. This typically includes IP address, technical data, language settings, browser version, screen resolution, and browser name. More details can be found with the specific web design tools used.
🗕️ Storage Duration: Dependent on the tools used
⚖️ Legal Bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate Interests)

What is Web Design?

We use various tools on our website that serve our web design. Web design is not just about making our website look attractive but also about functionality and performance. Of course, the appropriate appearance of a website is one of the key goals of professional web design. Web design is a subfield of media design and deals with both the visual and structural-functional design of a website. The goal is to improve your experience on our website through web design. In web design jargon, this is referred to as User Experience (UX) and Usability. User Experience encompasses all the impressions and experiences a visitor has on a website. Usability, a subset of User Experience, focuses on user-friendliness. The emphasis here is on clear structuring of content, subpages, or products, making it easy and quick for you to find what you're looking for. To provide you with the best possible experience, we also use third-party web design tools. In this privacy policy, the term "web design" includes all services that enhance the design of our website, such as fonts, various plugins, or other integrated web design features.

Why Do We Use Web Design Tools?

How you perceive information on a website depends heavily on the structure, functionality, and visual appeal of the website. Therefore, good and professional web design has become increasingly important to us. We constantly work to improve our website, considering it an extended service for you as a visitor. Additionally, an attractive and functional website offers economic benefits for us, as you are more likely to visit and use our services if you feel comfortable.

What Data Is Stored by Web Design Tools?

When you visit our website, web design elements embedded in our pages may process data. The specific data involved depends on the tools used. Further below, you'll find details on the tools we use on our website. We recommend reading the privacy policies of these tools for detailed information about data processing. They typically explain which data is processed, whether cookies are used, and how long the data is stored. For example, fonts like Google Fonts automatically transfer information such as language settings, IP address, browser version, screen resolution, and browser name to Google's servers.

Duration of Data Processing

The duration of data processing is highly individual and depends on the web design elements used. When cookies are involved, storage may last from one minute to several years. Please refer to our general cookie section and the privacy policies of the tools used for more information. There you'll usually find details about which cookies are used and what information they store. For instance, Google Font files are stored for one year to improve website load times. In general, data is only retained as long as necessary to provide the service. Legal requirements may result in longer storage periods.

Right to Object

You have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. This can be done via our cookie management tool or other opt-out options. You can also prevent data collection through cookies by managing, disabling, or deleting cookies in your browser. However, some data (mostly related to fonts) cannot be easily deleted as they are automatically collected and transferred to third parties (like Google) upon page load. In such cases, please contact the respective provider's support. For Google, you can reach support at https://support.google.com/?hl=en.

Legal Basis

f you have consented to the use of web design tools, this consent serves as the legal basis for the corresponding data processing. This consent is the legal basis under Art. 6 para. 1 lit. a GDPR for processing personal data as may occur when using web design tools. Additionally, we have a legitimate interest in improving the web design of our website to offer a beautiful and professional web experience. The corresponding legal basis is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use web design tools if you have given your consent, which we would like to emphasize here.

Information about specific web design tools, if available, is provided in the following sections.

Adobe Fonts Privacy Policy

We use Adobe Fonts, a web font hosting service, on our website. The service provider is the American company Adobe Inc. For the European region, Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible.

Adobe processes your data, among other things, in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may involve various risks for the legality and security of data processing.

As a basis for data processing with recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, especially in the USA) or for data transfers there, Adobe uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCCs) are model templates provided by the EU Commission to ensure that your data complies with European data protection standards even when transferred to and stored in third countries (such as the USA). Through these clauses, Adobe undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

More information about the data processed and Adobe's Standard Contractual Clauses can be found at https://www.adobe.com/privacy/eudatatransfers.html.

Google Fonts Privacy Policy

Google Fonts Privacy Policy Summary

👥 Data Subjects: Visitors to the website
🤝 Purpose: Optimizing our service
📓 Processed Data: Data such as IP address and CSS and font requests (details below)
🗕️ Storage Duration: Font files are stored by Google for one year
⚖️ Legal Bases: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate Interests)

(Additional specific details about Google Fonts can be added if needed.)

Was sind Google Fonts?

Auf unserer Website verwenden wir Google Fonts. Das sind die “Google-Schriften” der Firma Google Inc. Für den europäischen Raum ist das Unternehmen Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Irland) für alle Google-Dienste verantwortlich.

Für die Verwendung von Google-Schriftarten müssen Sie sich nicht anmelden bzw. ein Passwort hinterlegen. Weiters werden auch keine Cookies in Ihrem Browser gespeichert. Die Dateien (CSS, Schriftarten/Fonts) werden über die Google-Domains fonts.googleapis.com und fonts.gstatic.com angefordert. Laut Google sind die Anfragen nach CSS und Schriften vollkommen getrennt von allen anderen Google-Diensten. Wenn Sie ein Google-Konto haben, brauchen Sie keine Sorge haben, dass Ihre Google-Kontodaten, während der Verwendung von Google Fonts, an Google übermittelt werden. Google erfasst die Nutzung von CSS (Cascading Style Sheets) und der verwendeten Schriftarten und speichert diese Daten sicher. Wie die Datenspeicherung genau aussieht, werden wir uns noch im Detail ansehen.

Google Fonts (früher Google Web Fonts) ist ein Verzeichnis mit über 800 Schriftarten, die Google Ihren Nutzern kostenlos zu Verfügung stellen.

Viele dieser Schriftarten sind unter der SIL Open Font License veröffentlicht, während andere unter der Apache-Lizenz veröffentlicht wurden. Beides sind freie Software-Lizenzen.

Why Do We Use Google Fonts on Our Website?

With Google Fonts, we can use fonts on our website without having to upload them to our own server. Google Fonts is an essential component for maintaining the quality of our website. All Google fonts are automatically optimized for the web, which saves data volume and is particularly advantageous for mobile device usage. When you visit our site, the small file size ensures fast loading times. Additionally, Google Fonts are secure web fonts. Different rendering systems in various browsers, operating systems, and mobile devices can lead to errors, which may distort the appearance of text or entire web pages. Thanks to the fast Content Delivery Network (CDN), Google Fonts eliminates cross-platform issues. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). Therefore, we use Google Fonts to present our online services as beautifully and uniformly as possible.

What Data Is Stored by Google?

When you visit our website, the fonts are reloaded via a Google server. This external request transmits data to Google servers. This allows Google to recognize that you or your IP address has visited our website. The Google Fonts API is designed to limit the collection, storage, and use of end-user data to what is necessary for the efficient delivery of fonts. API stands for "Application Programming Interface" and serves, among other things, as a data transmitter in software systems.

Google Fonts securely stores CSS and font requests on Google servers, ensuring their protection. The collected usage statistics help Google determine the popularity of specific fonts. Google publishes these results on internal analysis pages, such as Google Analytics. Additionally, Google uses its own web crawler data to identify which websites use Google Fonts. This data is published in the Google Fonts BigQuery database. Businesses and developers utilize Google’s BigQuery web service to analyze and manage large datasets.

It is important to note that every Google Font request also automatically transmits information such as language settings, IP address, browser version, screen resolution, and browser name to Google servers. Whether this data is also stored is not clearly stated or confirmed by Google.

How Long and Where Is the Data Stored?

Google stores requests for CSS assets on its servers, which are primarily located outside the EU, for one day. This enables us to use fonts via a Google stylesheet. A stylesheet is a template that allows quick and easy changes to the design or font of a website.

The font files are stored by Google for one year. Google aims to improve website loading times through this practice. When millions of websites reference the same fonts, they are cached after the first visit and appear instantly on all subsequently visited websites. Occasionally, Google updates font files to reduce file size, expand language coverage, and improve design.

How Can I Delete My Data or Prevent Data Storage?

The data that Google stores for one day or one year cannot be easily deleted. This data is automatically transmitted to Google when the page is accessed. To have this data deleted prematurely, you must contact Google Support at https://support.google.com/?hl=de&tid=122403728. The only way to prevent data storage in this case is to avoid visiting our website.

Unlike other web fonts, Google allows us unrestricted access to all fonts. This means we can access an extensive range of fonts without limitations, allowing us to optimize our website’s design. For more information about Google Fonts and related questions, visit https://developers.google.com/fonts/faq?tid=122403728. Although Google addresses data privacy issues there, detailed information about data storage is not provided. It can be relatively difficult to obtain precise information from Google about stored data.

Legal Basis

If you have consented to the use of Google Fonts, this consent serves as the legal basis for the corresponding data processing. According to Article 6(1)(a) of the GDPR (Consent), this consent forms the legal basis for processing personal data that may occur when using Google Fonts.

Additionally, we have a legitimate interest in using Google Fonts to optimize our online services. The corresponding legal basis for this is Article 6(1)(f) of the GDPR (Legitimate Interests). However, we only use Google Fonts to the extent that you have provided your consent.

Google also processes your data in the USA, among other places. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of data protection for the transfer of data to the USA. This may entail various risks concerning the legality and security of data processing.

For data processing involving recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway—particularly in the USA) or for data transfers to such countries, Google uses what are known as Standard Contractual Clauses (SCCs) in accordance with Article 46(2) and (3) of the GDPR. Standard Contractual Clauses are templates provided by the EU Commission designed to ensure that your data complies with European data protection standards even when transferred to and stored in third countries (such as the USA). Through these clauses, Google commits to maintaining the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

The Google Ads Data Processing Terms, which also correspond to the Standard Contractual Clauses for Google Fonts, can be found here: https://business.safety.google/adsprocessorterms/.

To learn more about the data Google collects and how it is used, visit https://www.google.com/intl/de/policies/privacy/.

Google Fonts Local Privacy Policy

On our website, we use Google Fonts provided by Google Inc. For the European region, the responsible company is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We have integrated the Google Fonts locally on our web server, meaning they are not hosted on Google’s servers. As a result, there is no connection to Google servers, and no data is transmitted to or stored by Google.

What Are Google Fonts?

Google Fonts, formerly known as Google Web Fonts, is an interactive directory of over 800 fonts provided free of charge by Google. With Google Fonts, fonts could typically be used without uploading them to your own server. However, to completely prevent any data transmission to Google servers, we have downloaded the fonts to our own server. This ensures compliance with data protection regulations, as no data is sent to Google Fonts.

Online Mapping Services Introduction

Online Mapping Services Privacy Policy Summary

👥 Data Subjects: Visitors to the website
🤝 Purpose: Improving user experience
📓 Processed Data: The type of data processed depends largely on the services used. It usually includes IP addresses, location data, search queries, and/or technical data. More details can be found in the sections related to the specific tools used.
📅 Storage Duration: Dependent on the tools used
⚖️ Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What Are Online Mapping Services?

We use online mapping services on our website as an additional feature. Google Maps is probably the most well-known service, but there are also other providers specializing in digital maps. These services allow us to display locations, route plans, and other geographic information directly on our website.

By integrating a mapping service, you no longer need to leave our website to view routes to a specific location. The maps are embedded via HTML code, enabling the service to display street maps, terrain, or satellite imagery. When you use the integrated map, data will be transmitted to and stored by the respective mapping tool. This data may include personal information.

Why Do We Use Online Mapping Services on Our Website?

Generally speaking, our goal is to provide you with an enjoyable experience on our website. It’s much more pleasant if you can navigate the site easily and find the information you need quickly. That’s why we thought that adding an online mapping system would significantly enhance our service.

Without leaving our website, you can view route directions, locations, or even points of interest effortlessly. It’s also incredibly convenient for showing you where our company is located, helping you find us quickly and safely. As you can see, there are numerous advantages, and we consider online mapping services to be an integral part of our customer service.

What Data Is Stored by Online Mapping Services?

When you open a page on our website with an embedded online map feature, personal data may be transmitted to and stored by the respective service. This typically includes your IP address, which can be used to determine your approximate location. In addition to the IP address, data such as search terms, as well as latitude and longitude coordinates, may be stored.

For example, if you enter an address for route planning, this information will also be stored. The data is not stored on our servers but on the servers of the tools we’ve integrated. You can think of it like this: even though you’re on our website, when you interact with a mapping service, the interaction actually takes place on that service’s platform.

To ensure proper functionality, the service will typically place at least one cookie in your browser. Google Maps, for instance, uses cookies to track user behavior, optimize its services, and deliver personalized advertising. You can learn more about cookies in our "Cookies" section.

How Long and Where Is the Data Stored?

Each online mapping service processes user data differently. Where we have additional information, we provide details about data retention periods in the specific sections related to each tool. In general, personal data is stored only as long as necessary to provide the service.

For example:

Google Maps retains certain data for a defined period, while other data may require manual deletion by the user.
Mapbox stores IP addresses for 30 days before deletion.

Since each tool handles data retention differently, we recommend reviewing the privacy policies of the respective services.

Providers also use cookies to store data about how you interact with the mapping service. You can find more general information about cookies in our "Cookies" section, and the privacy policies of individual providers will detail the specific cookies they use. However, these lists are often only examples and may not be exhaustive.

Right to Object

You always have the option—and the right—to access your personal data and object to its use and processing. You can also revoke your consent at any time. The simplest way to do this is usually through the cookie consent tool.

Additionally, there are other opt-out tools you can use. Any cookies set by the services can also be managed, deleted, or disabled directly in your browser with just a few clicks. However, please note that this may affect the functionality of certain services.

The method for managing cookies depends on the browser you are using. In the "Cookies" section, you’ll find links to guides for managing cookies in the most popular browsers.

Legal Basis

If you have given your consent for the use of an online mapping service, this consent forms the legal basis for the related data processing. According to Art. 6(1)(a) GDPR (Consent), this consent provides the legal framework for processing personal data that may be collected by an online mapping service.

Additionally, we have a legitimate interest in using online mapping services to optimize the services offered on our website. The corresponding legal basis for this is Art. 6(1)(f) GDPR (Legitimate Interests). However, we only deploy online mapping services if you have given your explicit consent. We want to make this point absolutely clear.

You can find information about specific online mapping services—where applicable—in the following sections.

Google Maps Privacy Policy

Summary of the Google Maps Privacy Policy

👥 Data Subjects: Website visitors
🤝 Purpose: Optimization of our service performance
📓 Processed Data: Data such as entered search terms, your IP address, and latitude and longitude coordinates.
More details can be found further below in this privacy policy.
📅 Retention Period: Depends on the stored data
⚖️ Legal Basis: Art. 6 (1) (a) GDPR (Consent), Art. 6 (1) (f) GDPR (Legitimate Interests)

What is Google Maps?

We use Google Maps on our website, a service provided by Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Google Maps allows us to display locations more accurately and tailor our service to your needs. By using Google Maps, data is transmitted to Google and stored on Google servers. Here, we will detail what Google Maps is, why we use this Google service, what data is stored, and how you can prevent this.

Google Maps is an online mapping service provided by Google. With Google Maps, you can search for precise locations of cities, landmarks, accommodations, or businesses via a PC, tablet, or app. If businesses are listed on Google My Business, additional information about the company is displayed alongside the location. Map sections of a location can be embedded into a website using HTML code to show routes. Google Maps displays the Earth's surface as a street map or as an aerial or satellite image. Thanks to Street View images and high-quality satellite photos, highly accurate representations are possible.

Why Do We Use Google Maps on Our Website?

All our efforts on this site aim to provide you with a useful and meaningful experience. By integrating Google Maps, we can deliver the most important information about various locations. At a glance, you can see where our company headquarters is located. The route planner shows you the best or fastest way to us. You can retrieve directions for routes by car, public transport, on foot, or by bike. Providing Google Maps is part of our customer service.

What Data is Stored by Google Maps?

To provide its service fully, Google Maps must collect and store data from you. This includes search queries, your IP address, and latitude and longitude coordinates. If you use the route planner function, the entered starting address is also stored. However, this data is stored on Google Maps' websites. We can only inform you about this but have no influence over it. Since we have integrated Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google uses this data primarily to optimize its services and provide personalized advertising for you.

The following cookie is set in your browser due to the integration of Google Maps:

Name: NID
Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ122403728-5
Purpose: NID is used by Google to customize advertisements to your Google search. Using the cookie, Google "remembers" your most frequent search queries or your previous interactions with ads. This way, you receive tailored advertisements. The cookie contains a unique ID that Google uses to collect your personal settings for advertising purposes.
Expiration Date: After 6 months

Note: We cannot guarantee the completeness of the stored data. Changes, especially regarding the use of cookies, cannot be ruled out. A test page exclusively featuring Google Maps was created to identify the NID cookie.

How Long and Where is the Data Stored?

Google servers are located in data centers worldwide, with most servers in the USA. Therefore, your data is predominantly stored in the USA. You can read exactly where Google data centers are located here: Google Data Centers.

Google distributes the data across different storage devices to ensure faster access and better protection against manipulation. Each data center has special emergency programs. For example, if there are issues with Google hardware or a natural disaster disables the servers, the data remains relatively secure.

Google stores some data for a fixed period, while other data can only be deleted manually. Additionally, Google anonymizes information (such as advertising data) in server logs by deleting parts of the IP address and cookie information after 9 or 18 months.

How Can I Delete My Data or Prevent Data Storage?

With the automatic deletion feature introduced in 2019, location and activity data are stored for either 3 or 18 months, depending on your choice, and then deleted. You can also manually delete this data from your history via your Google account at any time. If you want to completely prevent location tracking, you must pause the "Web & App Activity" setting in your Google account. Click on "Data & Personalization" and then on "Activity Controls," where you can enable or disable activities.

In your browser, you can also disable, delete, or manage individual cookies. The process varies depending on the browser you use. In the "Cookies" section, you will find corresponding links to the instructions for the most popular browsers.

If you generally do not want any cookies, you can set your browser to notify you whenever a cookie is about to be set. This allows you to decide for each cookie whether to allow it or not.

Legal Basis

If you have consented to the use of Google Maps, the legal basis for data processing is this consent. According to Art. 6 (1) (a) GDPR (Consent), this consent constitutes the legal basis for processing personal data as may occur when Google Maps collects data.

Additionally, we have a legitimate interest in using Google Maps to optimize our online services. The corresponding legal basis for this is Art. 6 (1) (f) GDPR (Legitimate Interests). However, we only use Google Maps if you have provided consent.

Google also processes your data in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may involve various risks concerning the legality and security of data processing.

For data processing involving recipients in third countries (outside the European Union, Iceland, Liechtenstein, Norway—especially the USA) or data transfers to such countries, Google uses Standard Contractual Clauses (SCC) pursuant to Art. 46 (2) and (3) GDPR. Standard Contractual Clauses are model templates provided by the European Commission to ensure that your data complies with European data protection standards even when transferred and stored in third countries like the USA. Through these clauses, Google commits to maintaining the European level of data protection when processing your relevant data, even if it is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here: EU Commission SCC.

The Google Ads Data Processing Terms, which refer to the Standard Contractual Clauses, can be found here: Google Ads Data Processing Terms.

If you want to learn more about how Google processes data, we recommend reviewing the company's own privacy policy here: Google Privacy Policy.

Online Booking Systems Introductio

Online Booking Systems Privacy Policy Summary👥 Data Subjects: Website visitors
🤝 Purpose: Improving user experience and organization
📓 Processed Data: The data processed strongly depends on the services used. Typically, this includes IP addresses, contact and payment details, and/or technical data. More details can be found in the specific tools used.
📅 Storage Duration: Depends on the tools used
⚖️ Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What Is an Online Booking System?

To enable you to make bookings via our website, we use one or more booking systems. For example, appointments can be easily scheduled online. A booking system is a software application integrated into our website that displays available resources (such as free appointments), allowing you to book and often pay directly online. You are probably familiar with such booking systems from the hospitality or hotel industry. However, these systems are now used in various sectors. Depending on the tool and settings, booking systems can be used both internally by us and externally by customers like you. In this process, personal data is usually collected and stored.

Typically, the booking process works as follows: You will find the booking system on our website, where you can schedule an appointment for a service directly with a few clicks and by providing your data—often including payment. You may be required to fill out a form with personal details. Please be aware that all the data you enter may be stored and managed in a database.

Why Do We Use an Online Booking System?

We consider our website a service for you. You should find helpful information and feel completely comfortable using our site. This also includes an online service that makes booking appointments or services as simple as possible. The days of waiting for a booking confirmation via phone or email are over. With an online booking system, everything is done with just a few clicks, freeing you up to focus on other things. For us, the system also simplifies the management of all bookings and appointments. Therefore, we find such a booking system absolutely useful for both you and us.

What Data Is Processed?

We cannot specify exactly which data is processed in this general information text about booking systems. This always depends on the tool used and the features and capabilities it includes. Many booking systems offer a range of additional features alongside the standard booking function. For example, many systems have an integrated external online payment system (e.g., Stripe, Klarna, or PayPal) and a calendar synchronization function. Accordingly, different types and amounts of data may be processed depending on the functions. Typically, data such as IP address, name and contact details, technical information about your device, and the time of booking are processed.

If you make a payment through the system, banking details such as account numbers, credit card numbers, passwords, TANs, etc., will also be stored and forwarded to the relevant payment provider. We recommend that you carefully read the privacy policy of the specific tool to understand which of your data is processed.

Duration of Data Processing

Each booking system stores data for different periods. Therefore, we cannot provide specific information about data retention here. Generally, personal data is stored only as long as necessary to provide the services. Booking systems typically use cookies that store information for varying durations. Some cookies are deleted immediately after leaving the site, while others can be stored for several years. You can learn more about this in our "Cookies" section. Please also review the respective privacy policies of the providers, which should specify how long your data is stored in each case.

Right to Object

If you have consented to data processing via a booking system, you naturally have the option and the right to withdraw this consent at any time. Please always be aware that you have rights regarding your personal data, and you can exercise these rights at any time. If you do not want personal data to be processed, then no personal data may be processed. It’s as simple as that. The easiest way to withdraw consent is via a cookie consent tool or other provided opt-out options. You can also manage data storage through cookies directly in your browser. The legality of the data processing remains unaffected until your withdrawal.

Legal Basis

If you have consented to the use of booking systems, the legal basis for the corresponding data processing is this consent. According to Art. 6(1)(a) GDPR (Consent), this serves as the legal basis for the processing of personal data, as may occur with booking systems.

Furthermore, we have a legitimate interest in using booking systems because they help us improve customer service and optimize our internal booking management. The corresponding legal basis for this is Art. 6(1)(f) GDPR (Legitimate Interests). However, we only use these tools if you have given your consent. We want to emphasize this again clearly.

Information about specific booking systems can be found—if available—in the following sections.

Explanation of Terms Used

We always strive to make our privacy policy as clear and understandable as possible. However, this is not always easy, especially when it comes to technical and legal topics. It often makes sense to use legal terms (such as personal data) or specific technical expressions (like cookies or IP address). Nevertheless, we do not want to use these terms without explanation.

Below you will find an alphabetical list of important terms used in our privacy policy that may not have been sufficiently explained so far. If these terms are derived from the GDPR and are defined within it, we will also include the GDPR text and, if necessary, add our own explanations.

Processor

Definition according to Article 4 of the GDPR:
For the purposes of this Regulation:

"Processor" means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

Explanation:
As a company and website owner, we are responsible for all data we process from you. In addition to controllers, there can also be so-called processors. This includes any company or person that processes personal data on our behalf. Processors can include service providers such as tax advisors, as well as hosting or cloud providers, payment service providers, newsletter providers, or large corporations like Google or Microsoft.

Consent

Definition according to Article 4 of the GDPR:
For the purposes of this Regulation:

"Consent" of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Explanation:
On websites, such consent is usually obtained through a cookie consent tool. You are probably familiar with this: whenever you visit a website for the first time, you are typically asked via a banner whether you agree to data processing. Often, you can also make individual settings to decide which types of data processing you allow and which you do not. If you do not give your consent, your personal data must not be processed. Of course, consent can also be given in writing, not just via a tool.

Personal Data

Definition according to Article 4 of the GDPR:
For the purposes of this Regulation:

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Explanation:
Personal data includes all information that can identify you as a person. This generally includes data such as:

Name
Address
Email address
Postal address
Telephone number
Date of birth
Identification numbers such as social security number, tax identification number, passport number, or student ID number
Banking information such as account numbers, credit details, account balances, and more

According to the European Court of Justice (ECJ), your IP address is also considered personal data. IT experts can use your IP address to determine at least the approximate location of your device and, subsequently, identify you as the connection owner. Therefore, storing an IP address also requires a legal basis under the GDPR.

There are also so-called "special categories" of personal data that are considered particularly sensitive, including:

Racial and ethnic origin
Political opinions
Religious or philosophical beliefs
Trade union membership
Genetic data (e.g., data derived from blood or saliva samples)
Biometric data (information related to physical, physiological, or behavioral characteristics that can identify a person)
Health data
Data concerning sexual orientation or sex life

Profiling

Definition according to Article 4 of the GDPR:

For the purposes of this Regulation:

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

Explanation:
Profiling involves collecting various types of information about a person to gain more insights into them. In the online sector, profiling is often used for advertising purposes or creditworthiness checks. Web or advertising analytics programs, for example, collect data about your behavior and interests on a website. This data is used to create a specific user profile, which helps target advertisements more effectively to particular audiences.

Controller

Definition according to Article 4 of the GDPR:

For the purposes of this Regulation:

"Controller" means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Explanation:
In our case, we are responsible for processing your personal data and are therefore the “controller.” If we pass the collected data on to other service providers for processing, these parties are considered “processors.” For this, a Data Processing Agreement (DPA) must be signed.

Processing

Definition according to Article 4 of the GDPR:

For the purposes of this Regulation:

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Note:
When we refer to processing in our privacy policy, we mean any kind of data handling. This includes not only the collection of data but also its storage and further processing, as outlined in the original GDPR definition above.

Final Note

Congratulations! If you are reading these lines, you’ve either made it through our entire privacy policy or at least scrolled all the way down. As you can see from the length of our privacy policy, we take the protection of your personal data very seriously.

It’s important to us to inform you about the processing of personal data to the best of our knowledge and in good faith. We don’t just want to tell you which data is processed, but also explain the reasons behind the use of various software programs.

Privacy policies usually sound very technical and legal. However, since most of our readers are neither web developers nor legal experts, we’ve aimed to present this information in clear and simple language. Of course, this is not always possible due to the complexity of the topic. That’s why we’ve included explanations of key terms at the end of this privacy policy.

If you have any questions about data protection on our website, please don’t hesitate to contact us or the responsible authority.

We wish you a wonderful day and hope to welcome you back to our website soon!

All texts are protected by copyright.

Source: Created with the Privacy Policy Generator by AdSimple.