I. Name and address of the responsible party
taste! food & beverage communication GmbH
Frankfurter Str. 111
63067 Offenbach am Main
Tel.: +49 (0) 69 – 98 193 0
is the responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.
II. Name and address of the data protection officer
The data protection officer of the responsible party is:
Hanauer Landstr. 151-153
60314 Frankfurt am Main
Tel: +49 (0) 69 – 9043 79 65
III. General information pertaining to data processing
1. Scope of the processing of personal data
We principally only collect and use personal data of the users of our homepage insofar as this is necessary to provide a functional website, our contents and services.
The collection and use of personal data of our users shall principally only be carried out after they have granted their consent. An exception from this principally shall apply in the cases, in which a processing of the data is permitted by statutory regulations or it is not possible to obtain a consent in advance for actual reasons.
2. Legal basis for the processing of personal data
The legal bases for the processing of personal data can principally be derived from:
* • 6 Para. 1 lit. a GDPR if a consent of the relevant person is obtained.
* • 6 Para. 1 lit. b GDPR in case of processing, which serves to fulfil a contract, of which the relevant person is a contractual party. Also covered here are processing activities, which are necessary in order to carry out pre-contractual measures.
* • 6 Para. 1 lit. c GDPR in case of processing, which is necessary in order to fulfil a legal obligation.
* • 6 Para. 1 lit. d GDPR if vital interests of the relevant person or another natural person render a processing of personal data necessary.
* • 6 Para. 1 lit. f GDPR if the processing is necessary in order to safeguard a legitimate interest of our company or a third party and the interests, basic rights and basic freedom of the data subject do not outweigh the interest mentioned first.
3. Data deletion and storage duration
The personal data of the users will be deleted or blocked as soon as the purpose of the storage ceases to apply. The data can be stored beyond this if this was envisaged by the European or national legislator in regulations under Union law, laws or other regulations which the responsible party has to comply with. A blocking or deletion of the data shall also be carried out if a storage deadline stipulated by the stated standards expires, unless the further storage of the data is necessary for the conclusion of a contract or the fulfilment of a contract.
IV. Use of our website, general information
1. Description and scope of the data processing
Each time our website is called our system will automatically enter data and information from the user’s computer system. The following information will be collected:
* • Information about the browser type and the used version
* • The operating system of the user
* • The IP address of the user
* • Date and time of the access
* • Websites, from which the user’s system is referred to our website
* • Websites, which are called by the user’s system via our website
The described data are stored in the logfiles of our system. These data will not be stored together with other personal data of the user.
2. Purpose and legal basis for the data processing
The temporary storage of the IP address by our system is necessary in order to enable a delivery of the website to the user’s computer. For this purpose the IP address of the user must remain stored for the duration of the session.
The logfiles shall be stored in order to ensure the functionality of the website. Moreover the data help us to optimise the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes will not take place in this context.
The legal basis for the temporary storage of the data and the logfiles is Art. 6 Para. 1 lit. f GDPR.
The entry of your personal data for providing our internet presence is absolute essential for the operation of the website. Therefore, the user has no possibility to file an objection.
3. Duration of the storage
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your data are entered in order to guarantee the provision of the website the data will be deleted when the respective session is ended.
If your stored are stored in logfiles, they will be deleted no later than after seven days. A storage beyond this is possible whereby the IP addresses of the users will be deleted or alienated in this case. An allocation of the calling client is therefore no longer possible.
The legal basis for the processing of personal data by using cookies can be derived from Art. 6 Para. 1 lit. f GDPR. The purpose for the use of the technically necessary cookies is to simplify the use of our website.
You can find further information relating to cookies that are not necessary for technical purposes in Section IX.
VI. Your rights / rights of the data subject
According to the EU General Data Protection Regulation you have the following rights as a data subject:
1. Right to information
You have the right to receive the information from us as the responsible party whether we process personal data, which relate to you.
In addition, you can request details about the following information:
(1) Purpose of the data processing;
(2) the categories of the processed personal data;
(3) the recipients or the categories of recipients, towards whom the personal data relating to you were disclosed or will be disclosed still;
(4) the planned duration of the storage of the personal data relating to you or, if concrete details in this respect are not possible, criteria for the stipulation of the storage duration;
(5) the existence of a right to rectification or deletion of the personal data relating to you, a right to limitation of the processing by the responsible party or a right of objection against this processing;
(6) the existence of a right to lodge a complaint at a supervisory authority;
(7) all available information about the origin of the data if the personal data are not collected from the relevant person;
(8) the existence of an automatic decision-making including profiling pursuant to Art. 22 Para. 1 and 4 GDPR and – at least in these cases – significant information about the involved logic as well as the scope and the intended implications of such processing for the relevant person.
Finally, you also have the right to request information concerning whether your personal data will be transmitted to a third country or to an international organisation. In this case you can request information about the suitable guarantees pursuant to Art. 46 GDPR in connection with the transmission.
You could assert your entitlement to information under: email@example.com
2. Right to rectification
Should the personal data processed by us and which relate to you be incorrect or incomplete, you have a right towards us to rectification and/or completion. The rectification will be carried out without delay.
3. Right to limitation
The right to limitation to the processing of the personal data relating to you can be asserted in the following cases:
(1) the accuracy of the personal data is disputed for a duration, which enables the responsible party to check the accuracy of the personal data;
(2) the processing is unlawful and the deletion of the personal data is rejected, whereby instead the restriction to the use of the personal data is requested;
(3) the responsible party no longer requires the personal data for the purpose of processing, however the data subject requires these for the assertion, exercising or defence of legal claims, or
(4) the data subject has filed an objection against the processing pursuant to Art. 21 Para. 1 GDPR and it has not been determined yet whether the legitimate reasons of the responsible party outweigh the reasons of the data subject.
If the processing of the personal data relating to you was limited, these data may – apart from their storage – only be processed with your consent or for the assertion, exercising or defence of legal claims or for the protection of the rights of another natural person or legal entity or for reasons of an important public interest of the Union or a member state.
With the existence of a limitation to the processing according to the presented principles, you will be informed by us before the limitation is revoked.
4. Right to deletion
With the existence of the reasons presented below you can request that the personal data relating to you are deleted without delay. The responsible party is obliged to delete these data without delay. The reasons are:
(1) The personal data relating to you are no longer required for the purposes, for which they were collected or were processed in any other manner.
(2) The processing is protected by a consent pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and you revoke the consent. A further prerequisite is that there is no other legal basis for the processing.
(3) You file an objection against the processing (Art. 21 Para. 1 GDPR) and there are no prior legitimate reasons for the processing. A further possibility is that you file an objection against the processing pursuant to Art. 21 Para. 2 GDPR.
(4) The processing of the personal data relating to you is carried out unlawfully.
(5) The deletion of the personal data relating to you is necessary in order to fulfil a legal obligation according to Union law or the law of the member states, which the responsible party has to comply with.
(6) The personal data relating to you were collected with regard to offered services of the information society pursuant to Art. 8 Para. 1 GDPR.
If we have published the personal data relating to you and if pursuant to Art. 17 Para. 1 GDPR we are obliged to delete these we shall thus take appropriate measures by taking the available technology and the implementation costs into consideration, also of a technical kind in order to inform parties responsible for the data processing, who process the personal data that you as data subject have request the deletion of all links to these personal data or copies or replications of these personal data.
We would like to point out that the right to deletion shall not exist insofar as the processing is necessary
(1) in order to exercise the right to free expression of an opinion and information;
(2) in order to fulfil a legal obligation that requires the processing according to the law of the Union or of the member states, which the responsible party has to comply with, or to perform a task, which is in the public interest or is carried out while exercising a public authority, that was assigned to the responsible party;
(3) for reasons of public interest in the sector of public health pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, insofar as the right stated under Section a) is expected to render the realisation of the aims of this processing impossible or seriously impair these, or
(5) for the assertion, exercising or defence of legal claims.
5. Right to notification
If you have asserted the right to rectification, deletion or limitation to the processing we are obligated to inform all recipients, to whom the personal data relating to you were disclosed, of this rectification or deletion of the data or the limitation to the processing, unless this proves to be impossible or is associated with a disproportionate amount of work. You are further entitled to the right to be informed about these recipients.
6. Right to data portability
According to the GDPR your further have the right to receive the personal data relating to you, which were made available to us, in a structured, common and machine-readable format. You further have the right to transmit these data to another responsible party without this being impeded by the responsible party, to which the personal data were made available, if
* • the processing is based on a consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and
* • the processing is carried out by using automatic processes.
Within the scope of the exercising of the right to data portability you finally have the right to achieve that the personal data relating to you are transmitted directly by one responsible party to another responsible party insofar as this is technically possible and freedom and rights of other persons are not impaired hereby.
The right to data portability shall not apply to a processing of personal data, which is necessary in order to perform a task, which is in the public interest or is carried out while exercising a public authority that was assigned to the responsible party.
7. Right to revocation of the declaration of consent under data protection law
You are entitled to the right to revoke your declarations of consent under data protection law at all times. We would like to point out that the lawfulness of the processing carried out owing to the consent until the revocation shall not be affected by the revocation of the consent.
8. Right to objection
You further have the right, for reasons, which arise from your special situation, to file an objection at all times against the processing of the personal data relating to you, which is carried out owing to Art. 6 Para. 1 lit. e or f GDPR. The right to objection shall also apply to a profiling supported on these provisions.
The responsible party will no longer process the personal data relating to you, unless it can prove essential reasons worthy of protection for the processing, which outweigh your interests, rights and freedom, or the processing serves the assertion, exercising or defence of legal claims.
If the personal data relating to you are processed for the purpose of you are entitled to the right to file an objection at all times against the processing of the personal data relating to you for the purpose of such advertising. This shall also apply to the profiling insofar as it is associated with such direct advertising. In case of an objection against the processing for purposes of direct advertising the personal data relating to you will no longer be processed for these purposes.
You further have the possibility, in connection with the use of services of the information society (irrespective of the Directive 2002/58/EC), to exercise your right to objection by means of automatic processes, with which technical specifications are used.
9. Automatic decision-making in an individual case including profiling
According to the EU General Data Protection Regulation you further have the right to not be subjected to a decision exclusively based on an automatic processing – including profiling –, which shall have a legal effect against you or which shall substantially impair you in a similar manner. An exception from this principle shall however exist if the decision
(1) is necessary for the conclusion or the fulfilment of a contract between you and the responsible party,
(2) is admissible owing to legal regulations of the Union or the member states, which the responsible party has to comply with, and these legal regulations contain appropriate measures for safeguarding your rights and freedom as well as your legitimate interests or
(3) is carried out with your explicit consent.
If the processing is carried out within the scope of the cases stated in (1) and (3), then the responsible party shall take appropriate measures in order to safeguard the rights and freedom as well as your legitimate interests. This shall at least include the right to achieve the intervention of a person on the part of the responsible party to present the own point of view and to contestation of the decision.
The decisions according to (1) – (3) may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, insofar as Art. 9 Para. 2 lit. a or g does not apply and appropriate measures were taken for the protection of the rights and freedom as well as your legitimate interests.
10. Right to lodge a complaint at a supervisory authority
If you are of the opinion that the processing of the personal data relating to you breaches the GDPR you finally have the right to lodge a complaint at a supervisory authority, in particular in the member state of your place of abode, your workplace or the place of the presumed breach.
1. General information
You can subscribe to a free newsletter on our homepage, with which we inform you about our current interesting offers. The advertised contents are named in the declaration of consent. The data, which you enter in the input mask within the scope of the registration, will be transmitted to us.
Based on the consent obtained from you within the scope of the registration process we will collect the following data: e-mail address, Date and time of the registration.
Your data will not be forwarded in connection with the data processing for the despatch of newsletters. The data will be exclusively used for the despatch of the newsletter.
2. Double-Opt-In and recording
The registration for our newsletter shall be carried out in a so-called Double-Opt-In-process. After the registration you will receive an e-mail, in which you will be requested to confirm your registration. This confirmation is necessary so that no-one can register with third party e-mail addresses.
The registrations for the newsletter will be recorded in order to be able to prove the registration process in compliance with the legal requirements. This shall include the storage of the tune if registration and confirmation, as well as the IP address.
3. Legal basis
The legal basis for the processing of the data is, with the existence of a consent of the user, Art. 6 Para. 1 lit. a GDPR. The collection of the user’s e-mail address serves to serve the newsletter.
4. Deletion, revocation and objection
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your e-mail address will accordingly be stored as long as the subscription of the newsletter is active. The subscription of the newsletter can be ended by you at all times by the fact that you revoke the consent. For this purpose please contact: firstname.lastname@example.org.
We further point out to you that you can file an objection to the future processing of your personal data in compliance with the statutory stipulations pursuant to Art. 21 GDPR at all times. The objection can in particular be filed against the processing for purposes of the direct advertising.
5. Despatch service provider
The newsletter will be despatched by means of “Inxmail”, a newsletter despatch platform of the provider Inxmail GmbH, Wetzingerstr. 17, 79106 Freiburg, Germany.
The e-mail addresses of our newsletter recipients as well as their further data, described within the scope of these instructions, will be stored on the servers of Inxmail in Germany. Inxmail will use this information for the despatch and evaluation of the newsletters at our order. Inxmail can furthermore, according to its own information, use these data to optimise or improve its own services, e.g. for the technical optimisation of the despatch and the presentation of the newsletters or for commercial purposes in order to determine which countries the recipients come from. Inxmail will, however, not use the data of our newsletter recipients to write to these itself or to forward these to third parties.
We trust in the reliability and the IT as well as data security of Inxmail. Furthermore, we have concluded “contract data processing” with Inxmail. This concerns a contract, in which Inxmail undertakes to protect the data of our users, to process these in compliance with its data protection provisions at our order and in particular not to forward these to third parties. You can view the data provision provisions of Inxmail here.
6. Statistical collection
We would like to point out to you that we evaluate your user behaviour with the despatch of the newsletter. For this evaluation the sent e-mails include so-called Web-Beacons or Tracking-Pixel that represent One-Pixel image files, which are stored on our website. For the evaluations we link the data stated under Point 1 and the Web-Beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.
With the so-called data we create a user profile in order to customize the newsletter to satisfy your individual interests. We record hereby when you read our newsletter, which links you click in this newsletter and conclude from this your personal interests. We link these data with acts carried out by you on our website.
You can object to this tracking at all times by clicking on the separate link, which is provided in each e-mail or by informing us via another contact channel. The information will be stored as long as you have subscribed to the newsletter. After an unsubscription we will store the data for purely statistical purposes and anonymously.
VIII. Electronic contact
If you contact us a contact form is available to you on our homepage, which you can use for contacting us by using electronic means. The data entered in the input mask will be transmitted to us and stored. These data are: Form of address, first name, last name, e-mail, phone number and your message.
At the time when the message is sent moreover the following data will be stored:
* • The IP address of the user
* • Date and time of the registration
There is further the possibility to contact us via the provided e-mail address. In this case the personal data of the user transmitted with the e-mail will be stored.
Your data will not be forwarded to third parties in this context, the data will be exclusively used for processing the commencement of communication.
The legal basis for the processing of the data is, with the existence of consent of the user, Art. 6 Para. 1 lit. a GDPR. The legal basis for the processing of the data, which are transmitted over the course of the sending of an e-mail, is Art. 6 Para. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.
The processing of the personal data in this context solely serves to process establishing a contact. In the event of a contact by e-mail this shall also constitute the necessary legitimate interest in the processing of the data.
Should further personal data be processed during the sending process, these shall only serve to prevent a misuse of the contact form and to ensure the security of our IT systems.
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those, which were sent by e-mail, this is the case if the respective conversation with the user is ended. The conversation shall be deemed as ended if it can be derived from the circumstances that the relevant fact has been finally clarified.
The personal data additionally collected during the sending process will be deleted no later than after a deadline of seven days.
You have the possibility to revoke your consent to the processing of the personal data at all times. When contacting us by e-mail you can also object to the storage of your personal data at all times. However, we would like to point out that in such a case the conversation cannot be continued.
All personal data, which were stored over the course of the establishment of contact, will be deleted in this case. You can send the revocation to: email@example.com.
IX. Web Analytics
1. Use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files, which are stored on your computer and which enable an analysis of the use of the website by you. The information generated by the cookie about your use of this website will, as a rule, be transmitted to a server of Google in the USA and stored there. In the event of the activation of the IP anonymization on this website, your IP address will however be previously abbreviated by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and abbreviated there. By order of the operator of this website Google will use this information in order to evaluate your use of the website to compile reports on the website activities and to provide further services associated with the website use and the internet use towards the website operator.
The IP address transmitted by your browser within the scope of Google Analytics will not be aggregated with other data of Google.
You can prevent the storage of the cookies by a corresponding setting of your browser software; however we would like to point out to you that in this case you will, if applicable, not be able to use all functions of this website in full. You can, in addition, prevent the entry of the data generated by the cookie and which refer to your use of the website (incl. your IP address) to Google as well as the processing of these data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension “_anonymizeIp()”.IP addresses are hereby further processed abbreviated, the ability to refer to a person can therefore be excluded. Insofar as the data collected in relation to you allow a personal reference, this will thus be excluded immediately and the personal data will therefore be deleted immediately.
We use Google Analytics in order to analyse the use of our website and to be able to improve it regularly. Through the gained statistics we can improve our offer and design it more interesting for you as a user. For the exceptional cases, in which personal data are transmitted to the USA, Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f GDPR
Information of the data provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Conditions of use: http://www.google.com/analytics/terms/de.html , overview relating to data protection: http://www.google.com/intl/de/analytics/learn/privacy.html as well as the privacy statement: http://www.google.de/intl/de/policies/privacy.
This website uses Google Analytics moreover for a cross-device analysis of visitor flows, which is carried out via a User-ID. You can in your customer account under “My Data”, “personal data” deactivate the cross-device analysis of your use.
X. Social Media
1. Use of social media plugins
We currently use the following social media plugins: Facebook, Twitter, Xing.
These social plugins normally lead to the fact that each visitor of a site is immediately entered by these services with his IP address and his further activities in the internet are recorded. This even takes place if the user does not click on one of the buttons.
In order to prevent this we use the Shariff-Method on our homepage. The social media buttons only establish the direct contact between the social network and the visitor when the user actively clicks on the share button. If the user is already registered with a social network this is carried out with Facebook and Google+ without a further window. With Twitter a popup window appears in which one can edit the text of the Tweet still.
You can consequently post in social networks without the networks being able to create complete surfing profiles of you. The Shariff-Method is already used in numerous cases in order to protect the users. The starting point was an initiative of www.heise.de , where you can find the current status of the discussion and further information.
Moreover the data stated in Subclause IV of this statement are transmitted. In the event of Facebook and Xing, according to information of the respective providers in Germany, the IP address is anonymised immediately after the collection. By the activation of the plugin personal data are thus transmitted by you to the respective plugin provider and stored there (with US providers in the USA). As the plugin provider carries out the data collection in particular through cookies, we recommend you to delete all cookies before clicking on the greyed box via the security settings of your browser.
We neither have an influence on the collected data and data processing activities, nor are we aware of the full scope of the data collection, the purposes of the processing or the storage deadlines. No information is available to us either regarding the deletion of the collected data by the plugin provider.
The plugin provider stores the data collected in relation to you as a usage profile and use these for purposes of advertising, market research and /or the design of its website suitable for the needs. Such an evaluation is carried out in particular (also for users that are not logged in) for the presentation of advertising suitable for the needs and in order to inform other users of the social network about your activities on our website. You are entitled to a right to objection against the formation of these user profiles, whereby you must contact the respective plugin provider in order to exercise this right. Via the plugins we offer you the possibility to interact with the social networks and other users so that we can improve our offer and design it more interesting for you as a user. The legal basis for the use of the plugins is Art. 6 Para. 1 S. 1 lit. f DS-GVO.
The data transfer is carried out irrespective whether you possess and account at the plugin provider and are logged in there. If you are logged into the plugin provider, you data collected in our company will be directly allocated to your account existing at the plugin provider. If you press the activated button and e.g. link the site the plugin provider will also store this information in your user account and share it publicly with your contacts. We recommend you after using a social network to regularly log-out, in particular however before activation of the button as you can thus prevent an allocation to your profile at the plugin provider.
You can receive further information relating to the purpose and scope of the data collection and their processing by the plugin provider in the privacy statements of these providers shown below. There you will also receive further information regarding your rights and setting options in this respect for the protection of your privacy.
Addresses of the respective plugin providers and URL with their data protection notices:
1. 1. a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information relating to data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted itself to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.
1. 1. b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted itself to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.
2. Use of Vimeo plugins
We use for the integration of videos the provider Vimeo. Vimeo is operated by Vimeo, LLC with its head office in 555 West 18th Street, New York, New York 10011.
On several of our websites we use plugins of the provider Vimeo. If you call the websites of our internet presence fitted with such a plugin, a connection will be established to the Vimeo-servers and the plugin is presented. It is hereby transmitted to the Vimeo server, which of our websites you have visited. If you are logged in as a member of Vimeo at this time, Vimeo will allocate this information to your personal user account. With the use of the plugin such as e.g. by clicking the start button of a video this information will also be allocated to your user account. You can prevent this allocation by logging out from your Vimeo user account before using our website and by deleting the corresponding cookies of Vimeo.
You can find further information relating to the data processing and notices regarding data protection by Vimeo under https://vimeo.com/privacy.
3. Use of YouTube plugins
We use videos from YouTube and YouTube plug-ins on our website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
YouTube is integrated by embedding the service on our website by an iFrame. When loading this iFrame, YouTube or Google may collect and process information (including personal data). It can’t be excluded that YouTube or Google also transfer information to a server in a third country.
As indicated by Google’s Privacy Shield certification (which can be found at https://www.privacyshield.gov/list under the search term “Google”), Google is committed to complying with the EU-US Privacy Shield Framework published by the U.S. Department of Commerce and the Swiss-US Privacy Shield Framework on the collection, use and retention of personal data from EU member states and Switzerland respectively. Google, including Google LLC and its wholly owned subsidiaries in the United States, has by certification declared that it complies with the Privacy Shield Principles. For more information, please visit https://www.google.de/policies/privacy/frameworks/.
We have no control over which data YouTube or Google actually collects and processes. However, YouTube or Google states that the following information (including personal data) may be processed among others:
If you are logged in to your YouTube or Google account, YouTube or Google may add the processed information to your account and treat it as personal information depending on your account settings, specifically https://www.google.de/policies/privacy/partners/.
You can prevent this information from being added directly by signing out of your YouTube or Google Account or by changing the appropriate account settings in your YouTube or Google Account. Furthermore, you can prevent the installation of cookies – provided as they are set by Google or YouTube – by making the appropriate settings in your browser; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Through the integration of YouTube, we pursue the purpose of being able to present various videos to you on our website so you can watch them directly on our website.
The legal basis for the processing of personal data which is described here is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in this respect lies in the great benefit that YouTube offers. By integrating external videos we relieve our servers and can use corresponding resources elsewhere. Among other things, this can increase the stability of our servers. YouTube or Google also has a legitimate interest in the collected (personal) data in order to improve our own services.
Right of objection
You have the right to object. You can send us or inform us of your objection at any time. Please use the address of the responsible person for the website on the subject of data protection.
4. Use of Twitter plugins
Functions and contents of the service offered by Twitter are integrated on our website by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For this purpose e.g. contents such as photos, videos or texts and buttons are included, with which users can express their likes relating to the consents, the authors of the contents or can subscribe to our contributions. Insofar as the users are members of the Twitter platform, Twitter can allocate the call of the aforementioned contents and functions to the profiles of the users there. Twitter is certified under the Privacy-Shield Agreement and hereby offers a guarantee to comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy statement: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
5. Integration of Google Maps
On this website we use the offer of Google Maps. We can hereby display interactive maps to you directly in the website and enable you the easy use of the map function.
By the visit to the website Google receives the information that you have called the corresponding sub-side of our website. Moreover, the data stated under Subclause IV of this statement are transmitted to Google. This is carried out irrespective whether Google makes a user account available, through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be allocated directly to your account. If you do not request the allocation with your profile at Google, you must log-out before activation of the button. Google shall store your data as usage profiles and use these for purposes of advertising, market research and/or to design its website suitable for the needs. Such an evaluation is in particular carried out (even for users who are not logged in) to provide advertising suitable for the needs and in order to inform other users of the social networks about your activities on our website. You are entitled to a right to objection against the formation of these user profiles, whereby you must contact Google in order to exercise this right.
You will receive further information relating to the purpose and scope of the data collection and their processing by the plugin provider in the privacy statement of the provider. There you will also receive further information relating to your rights in this respect and setting options for the protection of your privacy: http://www.google.de/intl/de/policies/privacy . Google also processes your personal data in the USA and has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
6. Integration of script libraries (Google Webfonts)
In order to present our consents cross-browser correctly and attractive in terms of graphics, we use script libraries and font libraries on this website such as e.g. Google Webfonts (https://www.google.com/webfonts/). Google Webfonts are assigned to avoid multiple loading in the cache of your browser. If the browser does not support the Google Webfonts or prevents the access contents will be displayed in a standard font.
The call of script libraries or font libraries will automatically trigger off a connection to the operator of the library. It is theoretically possible here that operators of corresponding libraries collect data.
7. Social Media Presence
We maintain fanpages on various social networks and platforms, with the aim of communicating with customers, prospective customers and users active on them, and informing them about our services.
We would like to point out that your personal data may be processed outside of the European Union, such that risks may arise for you (for example, in the enforcement of your rights under European / German law). Please note that some US providers are certified under the Privacy Shield and undertake to comply with the data protection standards of the EU.
The data of users is generally processed for market research and advertising purposes. Usage profiles can therefore be created, for example, based on the usage behaviour and interests of the users. These usage profiles can also be used, for example, to activate advertising inside and outside of the platforms, where it is suspected that such advertising is in the interest of the users. For these purposes, cookies are usually stored on the computers of the users, in which their usage behaviour and interests are stored. In addition, data may be stored in the usage profiles which is independent of the equipment used by the users (in particular, if the users are members of the respective platforms and are logged in to them).
The processing of the personal data of the users is done on the basis of our legitimate interests, with respect to effectively informing and communicating with users according to Article 6(1f) GDPR. If the users are asked by the respective providers to consent to the processing of data (i.e. consent, for example, by ticking a checkbox or confirmation via a button), the legal basis for the processing is Article 6(1a) and Article 7 GDPR.
For more information about the processing of your personal data and about your options for objection, see the links below of the respective provider. The assertion of the right to receive information and other rights of the data subject may also be made vis-à-vis suppliers, though only to those who have direct access to the data of users and have the relevant information. Of course we are available to answer any questions and will assist you should you require assistance. Provider:
Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA