Support@coworkingnrw.de
booking@coworkingnrw.de
Mon - Fri, 9am - 5pm
Ccontact

Privacy Policy

1. General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

Data Collection on Our Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the website’s legal notice (Impressum).

How do we collect your data?

Your data is collected, for example, when you provide it to us. This could be data that you enter into a contact form.

Other data is collected automatically by our IT systems when you visit the website. This mainly includes technical data (e.g., internet browser, operating system, or time of the page visit). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the website is provided without errors. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. For this purpose, as well as for further questions about data protection, you can contact us at any time using the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You also have the right to request the restriction of processing of your personal data under certain circumstances. Details can be found in the privacy policy under “Right to Restriction of Processing.”

 

2. General Notes and Mandatory Information on Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various pieces of personal data are collected. Personal data is any data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission on the internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of the data against access by third parties is not possible.

Note on the responsible entity

The responsible entity for data processing on this website is:

CoworkingNRW.de
Bark Link GmbH
Telefon: +49 0208 38577734
E-Mail: Support@coworkingnrw.de
E-Mail: booking@coworkingnrw.de

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent at any time. An informal email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

If the data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data, including profiling based on those provisions. The respective legal basis for processing can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling to the extent that it is associated with such direct advertising. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process based on your consent or in fulfillment of a contract, in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address line from “http://” to “https://” and the lock icon in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website

If there is an obligation to transmit your payment data (e.g., account number for direct debit authorization) to us after concluding a paid contract, this data is required for payment processing.

Payment transactions via the common means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the change in the address line of the browser from “http://” to “https://” and the lock icon in your browser line.

When communication is encrypted, your payment data that you transmit to us cannot be read by third parties.

Access, Blocking, Deletion and Correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking, or deletion of this data. For this purpose and for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the legal notice. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to check this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.

If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

If you have objected pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may – apart from storage – only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Objection to Promotional Emails

We hereby object to the use of contact data published within the scope of the legal notice obligation for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

 

3. Data Collection on Our Website Cookies

Our websites sometimes use so called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so called “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general  and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies necessary for the electronic communication process or for providing certain functions you request (e.g., shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to ensure technically error free and optimized service provision. If other cookies (e.g., for analyzing your browsing behavior) are stored, they will be addressed separately in this privacy policy.

Server Log Files

The provider of the pages automatically collects and stores information in so called server log files, which your browser automatically transmits to us. These are:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error free presentation and optimization of their website — for this purpose, the server log files must be recorded.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow up questions. We do not share this data without your consent.

The processing of the data entered into the contact form is thus based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. An informal email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions  especially retention periods remain unaffected.

Registration on This Website

You can register on our website to use additional features on the site. The data entered for this purpose will only be used for the purpose of using the respective offer or service for which you registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes such as to the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you via this way.

The processing of the data entered during registration is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time. An informal email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

Registration via Facebook Connect

Instead of registering directly on our website, you can register via Facebook Connect. This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

When you choose to register via Facebook Connect and click the “Login with Facebook” / “Connect with Facebook” button, you will be redirected to Facebook’s platform. You can log in there using your Facebook credentials. This will link your Facebook profile with our website or services. Through this link, we receive access to your Facebook data, such as:

Facebook name, profile and cover photo, email address stored on Facebook, Facebook ID, friend list, Likes, birthday, gender, country, language

This data is used to create, provide and personalize your account.

Registration via Facebook Connect and the associated data processing operations are based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time with future effect.

For more information, see Facebook’s terms of use and privacy policy:
https://de-de.facebook.com/about/privacy/ and https://de-de.facebook.com/legal/terms/

Processing Data (Customer and Contract Data)

We collect, process and use personal data only to the extent necessary to establish, structure, or modify the legal relationship (inventory data). This is done based on Art. 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre contractual measures.

We collect, process and use personal data about the use of our website (usage data) only to the extent necessary to enable the user to use the service or to bill for it.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data Transfer Upon Contract Conclusion for Online Shops, Retailers and Product Shipping

We transfer personal data to third parties only if it is necessary within the scope of contract processing, such as to companies entrusted with the delivery of goods or the credit institution responsible for payment processing. Further data transfer will not occur or only if you have expressly consented to the transfer. Your data will not be disclosed to third parties without your explicit consent, e.g., for advertising purposes.

The basis for data processing is Art. 6(1)(b) GDPR.

Data Transfer Upon Contract Conclusion for Services and Digital Content

We transfer personal data to third parties only if it is necessary within the scope of contract processing, such as to the credit institution responsible for payment processing.

Further data transfer will not occur or only if you have expressly consented to the transfer. Your data will not be disclosed to third parties without your explicit consent, e.g., for advertising purposes.

The basis for data processing is Art. 6(1)(b) GDPR.

4. Social Media

eRecht24 Safe Sharing Tool

Content on our pages can be shared on social networks like Facebook, Twitter, or Google+ in compliance with data protection laws. We use the eRecht24 Safe Sharing Tool for this purpose. This tool only establishes direct contact between networks and users when the user actively clicks on one of these buttons. Clicking the button constitutes consent as per Art. 6(1)(a) GDPR. This consent can be revoked at any time with future effect.

No automatic transmission of user data to the operators of these platforms occurs via this tool. If the user is logged in to one of the social networks, an information window appears when using the social buttons of Facebook, Google+1, Twitter, etc., in which the user can confirm the text before submitting.

Our users can share the content of this site in a privacy compliant manner on social networks without full browsing profiles being created by the network operators.

Social Media Plugins with Shariff

We use plugins from social media platforms (e.g., Facebook, Twitter, Google+, Instagram, Pinterest, XING, LinkedIn, Tumblr).

To protect your data on our website, we use these plugins only with the “Shariff” solution. This prevents the plugins from transferring data to the respective providers as soon as the website is loaded.

Only when you activate the plugin by clicking the button is a direct connection to the provider’s server established (consent). Upon activation, the provider receives information that you have visited our site with your IP address. If you are logged into your social media account (e.g., Facebook), the provider can associate the visit with your user account.

Activating the plugin constitutes consent under Art. 6(1)(a) GDPR. This consent can be revoked at any time.

Further information on the purpose, scope and further processing and use of data by Pinterest as well as your rights and options for protecting your privacy can be found in Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy policy.

5. Analysis Tools and Advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so called “cookies.” These are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

IP Anonymization

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser within Google Analytics is not merged with other Google data.

Browser Plugin

You can prevent the storage of cookies by adjusting the settings of your browser software; however, we point out that in this case you may not be able to use all the functions of this website fully. Furthermore, you can prevent the collection of data generated by the cookie related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to Data Collection

You can prevent the collection of your data by Google Analytics by clicking the following link. An opt out cookie will be set that prevents the collection of your data on future visits to this website: Disable Google Analytics.

More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order Processing

We have concluded a contract for order processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic Features in Google Analytics

This website uses the “demographic features” function of Google Analytics. This enables reports to be created that contain statements about the age, gender and interests of the website visitors. These data come from interest based advertising by Google as well as from visitor data from third parties. These data cannot be assigned to any specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to Data Collection.”

Google AdSense

This website uses Google AdSense, a service for embedding advertising by Google Inc. (“Google”). Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses so called “cookies,” text files stored on your computer that allow analysis of website usage. Google AdSense also uses so called web beacons (invisible graphics). These web beacons enable information such as visitor traffic on these pages to be evaluated.

The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transferred to a Google server in the USA and stored there. This information can be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

The storage of AdSense cookies is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

You can prevent the installation of cookies by adjusting your browser software settings; however, we point out that in this case you may not be able to use all the functions of this website fully. By using this website, you agree to the processing of the data collected about you by Google in the manner described above and for the aforementioned purpose.

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in connection with the cross device functions of Google AdWords and Google DoubleClick. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function allows the remarketing audiences created with Google Analytics Remarketing to be linked with the cross device functions of Google AdWords and Google DoubleClick. In this way, interest based, personalized advertising messages that were adapted to you on one device (e.g., mobile phone) based on your previous usage and browsing behavior can also be displayed on another one of your devices (e.g., tablet or PC).

If you have given corresponding consent, Google links your web and app browser history with your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on any device on which you log in with your Google account.

To support this function, Google Analytics collects Google authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create audiences for cross device advertising.

You can permanently object to cross device remarketing/targeting by disabling personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google account is done solely based on your consent, which you can give or revoke at Google (Article 6(1)(a) GDPR). For data collection processes that are not merged in your Google account (e.g., because you do not have a Google account or have objected to the merging), data collection is based on Article 6(1)(f) GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

Further information and Google’s privacy policy can be found at: https://policies.google.com/technologies/ads?hl=de.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

Within Google AdWords, we use so called conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and do not serve to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive information that would allow users to be personally identified. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” and the use of this tracking tool are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

More information about Google AdWords and Google conversion tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally and to activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Facebook Pixel

Our website uses Facebook visitor action pixels from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion measurement.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and to optimize future advertising measures.

The data collected are anonymous to us as the operator of this website; we cannot draw conclusions about the identity of users. However, the data are stored and processed by Facebook, so a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data use policy. This enables Facebook to place advertisements on Facebook sites as well as outside Facebook. This use of the data cannot be influenced by us as the site operator.

The use of Facebook Pixel is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures including social media.

Further information on protecting your privacy can be found in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.

You can also disable the remarketing function “Custom Audiences” in the ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. For this, you must be logged in to Facebook.

If you do not have a Facebook account, you can disable usage based advertising from Facebook at the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

 

6. Newsletter

Newsletter Data

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. No further data are collected or only on a voluntary basis. We use these data exclusively to send the requested information and do not pass them on to third parties.

The processing of data entered into the newsletter registration form is exclusively based on your consent (Article 6(1)(a) GDPR). You can revoke the consent given to store the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing carried out before the revocation remains unaffected.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after the newsletter subscription is cancelled. Data stored by us for other purposes remain unaffected.

MailChimp

This website uses the services of MailChimp for sending newsletters. Provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service with which the sending of newsletters can be organized and analyzed. If you enter data for the purpose of receiving newsletters (e.g., email address), these are stored on the servers of MailChimp in the USA.

MailChimp has a certification under the “EU-US Privacy Shield.” The “Privacy Shield” is an agreement between the European Union (EU) and the USA, which is intended to ensure compliance with European data protection standards in the USA.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (a so called web beacon) connects to the servers of MailChimp in the USA. This can determine whether a newsletter message was opened and which links, if any, were clicked. Technical information is also recorded (e.g., time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is exclusively used for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you do not want analysis by MailChimp, you must unsubscribe from the newsletter. We provide an appropriate link in every newsletter message for this purpose. You can also unsubscribe directly on the website.

Data processing is based on your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing carried out before the revocation remains unaffected.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe and deleted after the cancellation both from our servers and from MailChimp’s servers. Data stored by us for other purposes remain unaffected.

More details can be found in MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/.

Conclusion of a Data Processing Agreement

We have concluded a so called “Data Processing Agreement” with MailChimp in which we oblige MailChimp to protect the data of our customers and not to pass it on to third parties. This contract can be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.

 

7. Plugins and Tools

YouTube with Enhanced Privacy

Our website uses plugins from the YouTube website. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. However, the sharing of data with YouTube partners is not necessarily excluded by the enhanced privacy mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video or not.

As soon as you start a YouTube video on our website, a connection to YouTube’s servers is established. The YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your surfing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve user friendliness and prevent fraud attempts. The cookies remain on your device until you delete them.

If applicable, further data processing operations may be triggered after starting a YouTube video, over which we have no influence.

The use of YouTube is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information about privacy at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

Vimeo

Our website uses plugins from the video portal Vimeo. Provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed about which of our pages you have visited. Additionally, Vimeo obtains your IP address. This also applies if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you allow Vimeo to directly associate your surfing behavior with your personal profile. You can prevent this by logging out of your Vimeo account.

The use of Vimeo is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on handling user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.

Google Web Fonts

This site uses so called web fonts provided by Google for a uniform representation of fonts. The Google Fonts are installed locally. No connection to Google servers takes place.

Adobe Typekit Web Fonts

Our website uses so called web fonts from Adobe Typekit for a uniform representation of certain fonts. Provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you visit our pages, your browser loads the required fonts directly from Adobe so that they can be displayed correctly on your device. In doing so, your browser establishes a connection to Adobe’s servers in the USA. Adobe thus becomes aware that our website was accessed via your IP address. According to Adobe, no cookies are stored during the provision of the fonts.

Adobe is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the United States of America and the European Union to ensure compliance with European data protection standards. More information can be found at: https://www.adobe.com/de/privacy/eudatatransfers.html.

The use of Adobe Typekit Web Fonts is necessary to ensure a uniform font appearance on our website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information about Adobe Typekit Web Fonts can be found at: https://www.adobe.com/de/privacy/policies/typekit.html.

Adobe’s privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html.

Google Maps

This site uses the map service Google Maps via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and the easy findability of the places we have specified on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

More information on handling user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

reCAPTCHA is used to check whether data entry on our websites (e.g., in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information for the analysis (e.g., IP address, length of stay of the website visitor on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam.

Further information on Google reCAPTCHA as well as Google’s privacy policy can be found at the following links: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html.

 

8. Payment Providers and Resellers

PayPal

On our website, we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the possibility to revoke your consent to data processing at any time. A revocation does not affect the legality of data processing operations carried out in the past.

Sofortüberweisung (Instant Bank Transfer)

On our website, we offer, among other things, payment via “Sofortüberweisung.” The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”).

With the “Sofortüberweisung” procedure, we receive real time payment confirmation from Sofort GmbH and can immediately begin fulfilling our obligations.

If you choose the payment method “Sofortüberweisung,” you transmit your PIN and a valid TAN to Sofort GmbH, enabling them to log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and executes the transfer to us using the TAN you provided. It then immediately sends us a transaction confirmation. Additionally, after logging in, your transactions, the credit limit of your overdraft credit and the existence of other accounts and their balances are automatically checked.

Besides the PIN and TAN, the payment data you enter and data about your person are also transmitted to Sofort GmbH. These personal data include first and last name, address, telephone number(s), email address, IP address and possibly other data required for payment processing. The transmission of these data is necessary to unequivocally establish your identity and prevent fraud attempts.

The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You can revoke your consent to data processing at any time. Revocation does not affect the legality of data processing operations carried out in the past.

Details about payment with Sofortüberweisung can be found at the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Paydirekt

On our website, we offer, among other things, payment via Paydirekt. The provider of this payment service is Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany (hereinafter “Paydirekt”).

If you choose to pay via Paydirekt, Paydirekt collects various transaction data and forwards them to the bank with which you are registered with Paydirekt. Besides the data necessary for payment, Paydirekt may collect further data in the course of transaction processing, such as delivery address or individual items in the shopping cart.

Paydirekt then authenticates the transaction using the authentication procedure stored with the bank for this purpose. The payment amount is then transferred from your account to ours. Neither we nor third parties have access to your account data.

Details about payment with Paydirekt can be found in the Terms and Conditions and the privacy policy of Paydirekt at: https://www.paydirekt.de/agb/index.html.