Data-privacy - divan-kids.de

Data Privacy Policy

1. Overview of Data Protection

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can personally identify you. For detailed information on data protection, please refer to our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the “Information on the Responsible Entity” section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us, for example, data you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website through our IT systems. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). These data are collected automatically as soon as you enter this website.

Why do we use your data?

Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your usage behavior.

What rights do you have regarding your data?

You have the right to obtain, at any time and free of charge, information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of processing of your personal data. Additionally, you have the right to file a complaint with the relevant supervisory authority.

For further questions on the topic of data protection, you can contact us at any time.

2. Hosting

We host our website content with the following provider:

All-Inkl

The provider is ALL-INKL.COM – Neue Medien Münnich, René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter “All-Inkl”). For details, please see All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/.

All-Inkl is used based on Art. 6 (1) (f) GDPR, as we have a legitimate interest in the reliable display of our website. If relevant consent has been requested, processing is based solely on Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, as far as the consent includes the storage of cookies or access to information in the user’s end device (e.g., device fingerprinting) under TTDSG. Consent can be revoked at any time.

3. General Notes and Mandatory Information

Data Protection

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what data we collect and for what purpose we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data from access by third parties is not possible.

Information on the Responsible Entity

The entity responsible for data processing on this website is:

Intecsoft GmbH & Co. KG
Fetscher Straße 32/34
Phone: +49 351 213033 0
Email: post@intecsoft.de

The responsible entity is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate deletion request or revoke your consent to data processing, your data will be deleted, provided we have no other legally permissible grounds for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion occurs after these grounds cease to apply.

General Information on the Legal Basis for Data Processing on This Website

If you have consented to data processing, we process your personal data based on Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR if special categories of data according to Art. 9 (1) GDPR are processed. In case of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49 (1) (a) GDPR. If cookies are stored or information in your device (e.g., via device fingerprinting) is accessed, processing is additionally based on § 25 (1) TTDSG. Consent can be revoked at any time. If your data is required for contract fulfillment or pre-contractual measures, we process your data based on Art. 6 (1) (b) GDPR. Furthermore, we process your data if required for fulfilling a legal obligation based on Art. 6 (1) (c) GDPR. Data processing may also be based on our legitimate interest according to Art. 6 (1) (f) GDPR. The applicable legal basis in each specific case is explained in the following paragraphs of this privacy policy.

Notice regarding Data Transfer to Non-Secure Third Countries and Transfer to US Companies not Certified under DPF

We use tools from companies based in non-secure third countries as well as US tools from providers not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to these countries and processed there. Please note that a level of data protection comparable to the EU may not be guaranteed in non-secure third countries.

The USA is generally regarded as a secure third country with a level of data protection comparable to the EU. Data transfers to the USA are therefore permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has suitable additional safeguards. Information on transfers to third countries, including the data recipients, can be found in this privacy policy.

Recipients of Personal Data

In the course of our business, we collaborate with various external entities. In some cases, transferring personal data to these external entities is necessary. We only share personal data with external entities if required for contract fulfilment, if we are legally obligated to do so (e.g., data transfer to tax authorities), if we have a legitimate interest under Art. 6 para. 1 lit. f GDPR, or if another legal basis permits data sharing. When using data processors, we share customers’ personal data only under a valid data processing agreement. In cases of joint processing, a joint processing agreement is concluded.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can withdraw consent at any time. The legality of data processing carried out until withdrawal remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 PARA. 2 GDPR).

Right to Lodge a Complaint with the Relevant Supervisory Authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to request the data that we process automatically based on your consent or in fulfilment of a contract to be handed over to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will only be done if it is technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

Within the framework of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin, and recipients, and the purpose of the data processing, and, if necessary, a right to correct or delete this data. For further questions regarding personal data, you can contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us regarding this at any time. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of its deletion.
If you have lodged an objection under Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent or to assert, exercise, or defend legal claims or to protect the rights of another natural or legal person, or for reasons of important public interest in the EU or a Member State.

Objection to Advertising Emails

We hereby object to the use of the contact details published within the framework of the imprint obligation for sending unsolicited advertising and informational materials. The operators of this site expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails, being received.

4. Data Collection on this Website

Cookies

Our website uses “cookies.” Cookies are small text files and do not harm your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain third-party services (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or displaying videos). Other cookies are used to evaluate user behaviour or display advertisements.

Cookies required to carry out the electronic communication process (necessary cookies) or to provide certain functions you wish to use (functional cookies, e.g., for the shopping cart function) or to optimise the website (e.g., cookies to measure web audience) are stored based on Art. 6 para. 1 lit. f GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to provide its services in a technically flawless and optimised manner. If consent to store cookies and similar recognition technologies has been requested, processing is exclusively based on this consent (Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG); consent can be revoked at any time.

You can set your browser to notify you about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases, or in general, and activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Consent with Consent Manager

Our website uses the Consent Manager technology to obtain your consent to the storage of certain cookies on your device or to use certain technologies and to document this consent in a data protection-compliant manner. The provider of this technology is Consent Manager GmbH, Wilhelmstraße 11, 40215 Düsseldorf, Germany (hereinafter “Consent Manager”).

When you enter our website, a connection to Consent Manager’s servers is established to obtain your consent and other explanations regarding cookie use. Consent Manager then stores a cookie in your browser to assign the granted consent or its revocation. The data collected in this way will be stored until you request us to delete it, delete the Consent Manager cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.

Consent Manager is used to obtain legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Server Log Files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not combined with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website – the server log files must be collected for this purpose.

Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us to process the enquiry and in case of follow-up questions. We do not share this information without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you enter in the contact form remains with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.

Enquiry by Email, Phone, or Fax

If you contact us by email, telephone, or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not share this information without your consent.

The data you send to us via contact requests remains with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – especially legal retention periods – remain unaffected.

Registration on this Website

You can register on this website to use additional features. The data entered for this purpose is only used for the purpose of using the respective offer or service for which you have registered. The required mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as in the scope of the offer or in the case of technically necessary changes, we use the email address provided during registration to inform you in this way.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. An informal message by email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.

Comment Function on this Website

For the comment function on this site, information about the time the comment was created, your email address, and, if you are not posting anonymously, the username you have chosen will be saved along with your comment.

Our comment function stores the IP addresses of users who post comments. Since we do not check comments on this site before they are activated, we need this data to be able to act against the author in cases of violations of rights such as insults or propaganda.

Comments are stored based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. An informal message by email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The comments and associated data (e.g., IP address) are saved and remain on this website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g., offensive comments).

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only insofar as it is necessary for the establishment, content, or modification of the legal relationship (inventory data). This is done based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data to fulfil a contract or pre-contractual measures. We collect, process, and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill the user.

The collected customer data will be deleted after the completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transmission upon Contract Conclusion for Online Shops, Retailers, and Goods Dispatch

We transmit personal data to third parties only when necessary within the scope of contract processing, for example, to companies entrusted with the delivery of goods or the bank responsible for handling payments. Further transmission of data does not take place unless you have expressly consented to it. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data Transmission upon Contract Conclusion for Services and Digital Content

We only transmit personal data to third parties if necessary for the contract processing, for example to the bank responsible for processing payments.

Further transmission of data does not take place unless you have expressly consented to it. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

5. Social Media

Facebook Plugins (Like & Share Button)

Plugins from the social network Facebook, provider Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are integrated on this website. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on this website. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.

When you visit this website, a direct connection between your browser and the Facebook server is established via the plugin. This allows Facebook to receive information that you have visited this website with your IP address. If you click on the Facebook “Like” button while logged into your Facebook account, you can link the contents of this website to your Facebook profile. This enables Facebook to assign the visit to this website to your user account. We would like to point out that as the provider of the website, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please see Facebook’s Privacy Policy at: https://de-de.facebook.com/privacy/explanation.

If you do not want Facebook to associate your visit to this website with your Facebook user account, please log out of your Facebook user account.

The use of Facebook plugins is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in being as visible as possible in social media.

Twitter Plugin

Functions of the Twitter service are integrated on this website. These functions are offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. For more information, please see Twitter’s Privacy Policy at: https://twitter.com/privacy.

The use of the Twitter plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in being as visible as possible in social media.

You can change your Twitter privacy settings in your account settings at https://twitter.com/account/settings.

Instagram Plugin

Functions of the Instagram service are integrated on this website. These functions are provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When you are logged into your Instagram account, you can click on the Instagram button to link the contents of this website to your Instagram profile. This enables Instagram to associate the visit to this website with your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

The use of the Instagram plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in being as visible as possible in social media.

For more information, please refer to Instagram’s Privacy Policy: https://instagram.com/about/legal/privacy/.

LinkedIn Plugin

This website uses functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click on the “Recommend” button of LinkedIn and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to this website with you and your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

The use of the LinkedIn plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in being as visible as possible in social media.

For more information, please refer to LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

XING Plugin

This website uses functions of the XING network. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time one of our pages containing XING functions is accessed, a connection to XING servers is established. To our knowledge, personal data is not stored. In particular, no IP addresses are stored or usage behaviour evaluated.

The use of the XING plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in being as visible as possible in social media.

For more information on data protection and the XING Share button, please see XING’s Privacy Policy at: https://privacy.xing.com/de/datenschutzerklaerung.

6. Analytical Tools and Advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses “cookies.” These are text files stored on your computer that allow for an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analytics tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behaviour to optimize both its website and advertising. If a corresponding consent has been requested (e.g., consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be withdrawn at any time.

IP Anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

Browser Plugin

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case, you may not be able to fully use all the functions of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to Data Collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data on future visits to this website: Google Analytics Opt-out.

For more information on how Google Analytics handles user data, see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract Data Processing

We have entered into a contract with Google for data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic Characteristics with Google Analytics

This website uses the “demographic characteristics” feature of Google Analytics. This allows reports to be created that contain information on the age, gender, and interests of website visitors. This data comes from interest-based advertising by Google and from visitor data provided by third-party providers. This data cannot be associated with a specific individual. You can disable this feature at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to Data Collection.”

7. Newsletter

Newsletter Data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Additional data is not collected or is only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The data provided in the newsletter registration form is processed exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent to the storage of data, your email address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the withdrawal.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you cancel the newsletter. Data stored by us for other purposes (e.g., email addresses for the members’ area) remain unaffected by this.

MailChimp

This website uses the services of MailChimp for sending newsletters. The provider is The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service that organises and analyses the sending of newsletters, among other things. If you enter data for the purpose of receiving newsletters (e.g., your email address), this data is stored on MailChimp’s servers in the USA.

MailChimp is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the United States that is intended to ensure compliance with European data protection standards in the USA.

With the help of MailChimp, we can analyse our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (a so-called web beacon) connects to MailChimp’s servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links were clicked. In addition, technical information is recorded (e.g., time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you do not want an analysis by MailChimp, you must unsubscribe from the newsletter. We provide a link for this in every newsletter message.

The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the withdrawal.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted both from our servers and from MailChimp’s servers after you cancel the newsletter. Data stored by us for other purposes (e.g., email addresses for the members’ area) remain unaffected by this.

For more details, please refer to MailChimp’s Privacy Policy at: https://mailchimp.com/legal/privacy/.

Conclusion of a Data Processing Agreement

We have entered into a so-called “Data Processing Agreement” with MailChimp, in which we oblige MailChimp to protect our customers’ data and not to pass it on to third parties.

8. Plugins and Tools

YouTube

Our website uses plugins from YouTube, a Google-owned site. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. This informs the YouTube server about which of our pages you have visited.

If you are logged into your YouTube account, YouTube enables you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online content. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/en/policies/privacy.

Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

To do this, your browser has to establish a direct connection to Google’s servers. Google is thus made aware that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information about handling user data can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy.

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence over this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offerings and to make it easier to locate the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/en/policies/privacy/.

9. Data Subject Rights

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and if so, access to the personal data and information such as the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and the planned period for which the data will be stored or the criteria used to determine this period.
Right to Rectification (Art. 16 GDPR): You have the right to obtain the rectification of inaccurate personal data and the completion of incomplete personal data.
Right to Erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data, provided that one of the grounds listed in Art. 17 GDPR applies, e.g., if the data is no longer necessary for the purposes pursued.
Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g., if you have objected to the processing, for the duration of any examination as to whether our legitimate interests outweigh yours.
Right to Data Portability (Art. 20 GDPR): In certain cases, detailed in Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller.
Right to Object (Art. 21 GDPR): If data is collected based on Art. 6 para. 1 lit. f (data processing to protect legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

To exercise these rights, please contact us at any time using the contact details provided above.