Privacy policy

Responsible for data processing

bachmaier GmbH
Am Pfaffenkogel 4
83483 Bischofswiesen
Deutschland
E-Mail: office@bachmaier.de
Telefon: +49 (0) 8652 655320

We are pleased über your interest in our online store. The protection of your privacy is very important to us. Below we inform you in detail über the handling of your data.

Privacy policy

1. General information and principles of data processing

We are delighted that you are visiting our website. Protecting your privacy and your personal data when you use our website is very important to us.

According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data that cannot be linked to your person, for example through anonymisation, is not personal data. Processing (e.g. collection, storage, retrieval, retrieval, use, transmission, deletion or destruction) in accordance with Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally prescribed retention obligations to be observed.

Here you will find information about how your personal data is handled when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.

We also explain the nature and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective storage period.

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via a hyperlink. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.

2. Responsible body

The controller responsible for the processing of personal data on this website is:

bachmaier GmbH
Am Pfaffenkogel 4
83483 Bischofswiesen
Germany

Email: office@bachmaier.de
Telephone: +49 (0) 8652 655320

3. Provision and use of the website/ server log files

a) Type and scope of data processing

If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which is automatically transmitted to our server, including:

  • IP address

  • Date and time of the request

  • Name and URL of the file accessed

  • Website from which access is made (referrer URL)

  • Access status/HTTP status code

  • Browser type

  • Language and version of the browser software

  • Operating system

b) Purpose and legal basis

This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 (1) lit. f) GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c) Storage period

As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object to this aspect. Further storage may take place in individual cases if this is required by law.

4. Use of cookies

a) Type, scope and purpose of data processing

We use cookies. Cookies are small files that we send to the browser of your end device and store there when you visit our website.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to perform various analyses. For example, some cookies can recognise the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Cookies enable us, among other things, to make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programmes or contain viruses. Various types of cookies are used on our website, the nature and function of which are explained below.

Temporary cookies/session cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognise your device during subsequent visits to the website.

Permanent cookies

Our website uses so-called permanent cookies. Permanent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period varies depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to monitor anonymous user behaviour on our website.

We also use advertising cookies. These cookies allow user behaviour to be tracked for advertising and targeted marketing purposes.

Social media cookies enable you to connect to your social networks and share content from our website within your networks.

Configuring your browser settings

Most web browsers are preset to accept cookies automatically. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. Please note, however, that you may then no longer be able to use all the functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser to notify you before cookies are stored. As different browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options.

Deactivating the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will have to deactivate it again.

b) Legal basis

Based on the purposes described above, the legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website, the legal basis is additionally Art. 6 (1) lit. a) GDPR.

c) Storage period

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

5. Data collection for the implementation of pre-contractual measures and for the fulfilment of the contract

a) Type and scope of data processing

In the pre-contractual area and when concluding a contract, we collect personal data about you. This includes, for example, your first and last name, address, email address, telephone number or bank details.

b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of contract execution or to fulfil pre-contractual obligations.

The legal basis for this is Art. 6 (1) (b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 (1) (a) GDPR.

c) Storage period

The data will be deleted as soon as it is no longer required for the purpose of its processing.

There may also be statutory retention obligations, for example commercial or tax retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

6. use of an AI chatbot (Botpress)

On our website, we offer you the opportunity to contact us via an AI chatbot (Botpress). When using the AI chatbot, please refer to this privacy policy to obtain your consent.

a) Type and scope of data processing

When you use the AI chatbot, the following personal data about you will be processed:

Communication content: All information you enter in the chat with the AI chatbot.

Metadata: Time and date of communication, IP address, device type and operating system.

b) Purpose and legal basis

The legal basis for the processing is consent in accordance with Art. 6 para. 1 lit. a) GDPR, which you give voluntarily when using the AI chatbot and which you can revoke at any time for the future.

c) Storage duration

The data you enter in the AI chatbot will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular retention periods under the German Commercial Code (HGB) or the German Fiscal Code (AO) - remain unaffected by this.

Further information on the processing of your personal data can be found in Chatbot's privacy policy at https://botpress.com/legal/privacy-statement’

7. Registration option

a) Type and scope of data processing

You can register on our website. When you register, we collect and store the data you enter in the input mask (e.g. surname, first name, email address). This data is not passed on to third parties.

b) Purpose and legal basis of data processing

Your registration is necessary for the use of certain content and services on our website or for the fulfilment of a contract or for the implementation of pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or have it completely deleted from the data stock of the controller.

The legal basis for processing in the case of consent is Art. 6 (1) (a) GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6 (1) lit. b) GDPR is an additional legal basis.

c) Storage period

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

8. Data transfer

We only pass on your personal data to third parties if:

a) you have given your express consent in accordance with Art. 6 (1) (a) GDPR.

b) this is legally permissible and necessary in accordance with Art. 6 (1) (b) GDPR for the performance of a contractual relationship with you or the implementation of pre-contractual measures.

c) there is a legal obligation to disclose the data in accordance with Art. 6 (1) (c) GDPR.

We are legally obliged to transfer data to government authorities, e.g. tax authorities, social security institutions, health insurance companies, supervisory authorities and law enforcement agencies.

d) the transfer is necessary in accordance with Art. 6 (1) lit. f) GDPR to safeguard legitimate business interests, as well as to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

e) in accordance with Art. 28 GDPR, we use external service providers, known as processors, for processing, who have been obliged to handle your data with care.

We use such service providers in the following areas:

  • IT

  • Logistics

  • Telecommunications

When transferring data to external parties in third countries, i.e. outside the EU or the EEA, we ensure that these parties treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.

9. Application opportunity

a) Type and scope of data processing

You can apply on our website or by email. When you apply, we collect and store the data you enter in the input mask or send us by email.

b) Purpose and legal basis

We process your data solely for the purpose of processing your application. Your data will not be passed on to third parties. The legal basis for processing is Art. 88 (1) GDPR in conjunction with § 26 BDSG (Federal Data Protection Act) and additionally Art. 6 (1) lit. b) GDPR.

If you give us your consent to be included in our applicant pool, the legal basis is Art. 6 (1) (a) GDPR.

c) Storage period

If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. The period begins with the receipt of the rejection letter.

If you have given us your consent to be included in our applicant pool, we will store your data for a maximum of two years.

d) Data transfer

Your data will only be received by those departments involved in the decision (relevant HR or specialist departments, management, works council).

We are also obliged to transfer your data to public authorities and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).

Other recipients of your data may be those bodies for which you have given us your consent to transfer your data.

10. Contact form

a) Type and scope of data processing

On our website, we offer you the opportunity to contact us using a form provided. When you submit your enquiry via the contact form, you will be referred to this privacy policy to obtain your consent.

If you use the contact form, the following personal data will be processed:

  • Name

  • Company

  • Email address

  • Telephone number

  • Content of the message

b) Purpose and legal basis

The purpose of providing your email address is to send you a reply to your enquiry by email. When you use the contact form, your personal data will not be passed on to third parties.

The legal basis for processing is consent in accordance with Art. 6 (1) (a) GDPR on the basis of the declaration of consent voluntarily submitted by you below, which can be revoked at any time in the future:

c) Storage period

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed).

This does not affect mandatory legal provisions, in particular retention periods under the German Commercial Code (HGB) or the German Fiscal Code (AO).

11. Contact options by e-mail

Our website provides you with the option of contacting us by e-mail.

a) Type and scope of data processing

You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and to any personal data you provide when contacting us.

b) Purpose and legal basis

The purpose of data processing is to enable us to respond to your enquiry appropriately. The legal basis for this is Art. 6 (1) (f) GDPR. There is a legitimate interest in processing the above-mentioned personal data in order to be able to process your enquiry appropriately.

c) Storage period

The duration of storage of the above-mentioned data depends on the background of your contact. Your personal data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer necessary. This may result, for example, from the processing of your enquiry.

12. Newsletter

a) Type and scope of data processing

On our website, you have the option of subscribing to a free regular email newsletter. In order to send you the newsletter regularly, we need your email address.

We use the double opt-in procedure to send the newsletter.

This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters from us by clicking on a corresponding link.

This serves to ensure that only you, as the owner of the email address provided, can subscribe to the newsletter. Your confirmation must be made promptly after receiving the confirmation email, otherwise your newsletter subscription will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the input mask (e.g. surname, first name, email address).

When you subscribe to the newsletter, we also store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. In the confirmation email sent for verification purposes (double opt-in email), we also store the date and time of the click on the confirmation link and the IP address entered by the Internet service provider (ISP).

b) Purpose and legal basis

The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising via the newsletter.

The processing of your email address for the purpose of sending the newsletter is based on Art. 6 (1) lit. a) GDPR and § 7 (2) No. 3 UWG (German Unfair Competition Act) on the basis of the declaration of consent voluntarily submitted by you below, which can be revoked at any time in the future.

In addition, the processing is based on Art. 6 (1) lit. f) GDPR due to our legitimate interests in documenting the required consent.

c) Storage period

Your email address will be stored for as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your email address will be deleted unless you have expressly consented to further use of your data.

13. Tracking and analysis tools

Meta Pixel / Meta Conversion Tracking

We use the visitor action pixel from the provider Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland ("Meta") on our website. The remarketing tag or tracking pixel from Meta has been implemented. Meta and we are jointly responsible for data processing.

The Meta pixel enables Meta to identify visitors to our online offering as a target group for the display of advertisements (so-called "Meta ads"). Users can also be tracked across multiple websites. We use the Meta pixel to display the Meta advertisements we place only to those Meta users who have shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics or products, which are determined based on the websites visited) that we transmit to Meta (so-called "custom audiences").

With the help of the Meta pixel, we can also track the effectiveness of Meta ads for statistical and market research purposes ("Audience Insights") by seeing whether users were redirected to our website after clicking on a Meta ad (so-called "conversion").

The Meta pixel is a JavaScript code that sends the following data to Meta:

  • HTTP header information: including IP address, web browser information, page location, document, website URL and web browser device (computer, smartphone, tablet, other), as well as date and time of use.

  • Pixel-specific data: Pixel ID and Meta cookie data, including your Meta ID (these are used to link events to a specific Meta advertising account and thus assign them to a Meta user)

  • Additional information about the visit, as well as standard and custom data events.

Further information can be found here.

We also use the additional "automatic advanced matching" function. This involves transmitting data such as first and last names, place of residence, email addresses, telephone numbers or Meta IDs of users to Meta in encrypted form for the purpose of creating target groups ("custom audiences" or "lookalike audiences"). This also includes data from non-Meta users and from users who are not logged into Meta when visiting our website. This also allows website visitors who have disabled the storage of third-party cookies to be identified.

If no Meta cookies are stored in your browser, you will not be assigned to any of the user groups referred to as "Custom Audiences". However, if the Meta ID contained in the Meta cookie has been assigned to a Meta user, Meta assigns this user to a so-called "Custom Audience" based on the rules we have defined.

According to the case law of the European Court of Justice, we are jointly responsible with Meta for the operation of the tracking pixel with regard to compliance with data protection regulations. In this context, Meta provides the associated IT infrastructure and the social network website and is generally the primary contact when it comes to the processing of your data on the social network pages (e.g. information or deletion). However, you can also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network. We use the Meta pixel to display the "Meta ads" we place to Meta users who have shown an interest in our online offering or who have certain characteristics that we transmit to Meta (so-called "custom audiences").

The legal basis for the use of Meta Custom Audience is your consent in accordance with Art. 6 (1) (a) GDPR.

Further information on this can be found here and in Meta's privacy policy.

Google Adwords conversion tracking

We use Google Adwords to display advertisements to you on Google and other third-party websites. Google Adwords Conversion Tracking is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google").

Conversion tracking allows us to determine how successful individual advertising measures are.

The advertising is delivered by Google via so-called "ad servers".

We use cookies for this purpose, which allow certain parameters for measuring success, such as the display of advertisements or clicks by users, to be measured. If you access our website via a Google advertisement, Google Adwords will store a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally at . The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be targeted) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google servers. We have no influence on the scope and further use of the data collected by Google and inform you according to our state of knowledge: By integrating AdWords conversion tracking, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address.

Our purpose in doing so is to show you advertising that is of interest to you and to make our website more interesting for you.

The legal basis for the processing of your data is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

The stored data will be deleted as soon as it is no longer required for our purposes.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

http://www.google.com/settings/ads/plugin

Further information on data protection at Google can be found here:

http://www.google.com/intl/de/policies/privacy

Google Analytics

We use the tracking tool Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google") on our website.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

When individual pages of our website are accessed, the following data is stored:

  • Three bytes of the IP address of the user's accessing system (anonymised IP address)

  • The website accessed

  • The website from which the user accessed the accessed page of our website (referral URL)

  • The subpages accessed from the accessed page

  • The length of time spent on the website

  • The frequency with which the website is accessed

We use Google Analytics with IP anonymisation enabled. This means that

IP addresses are truncated by the last octet (e.g. 192.168.79.***; so-called IP masking). It is no longer possible to assign the truncated IP address to the user's computer or end device.

The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR.

We delete the stored data as soon as it is no longer required for our recording purposes. In our case, the storage period is a maximum of 24 months.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

Further information on the terms of use of Google Analytics:

www.google.com/analytics/terms/de.html

Further information on data protection at Google Analytics:

https://support.google.com/analytics/answer/6004245?hl=de

You can also change your consent in the cookie settings [Change your consent] at any time.

Google Maps

We use Google Maps on some of our websites. This allows us to display interactive maps directly on our website and enables you to conveniently use the map function. When you use Google Maps, data is transmitted to Google in the USA, including your IP address.

You can prevent the transfer of data to Google by deactivating JavaScript in your browser settings. In this case, however, you will not be able to use Google Maps on our website.

The legal basis for the processing of your data is Art. 6 (1) lit. f GDPR.

Information about Google:

Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA

Further information on Google's terms of use: www.google.com/analytics/terms/de.html

Further information on the terms of use of Google Maps: www.google.com/intl/de_US/help/terms_maps.html

Google reCAPTCHA

In order to ensure sufficient data security when submitting forms, we use the reCAPTCHA service in certain cases, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

This allows us to distinguish whether the input is made by a human or abusively by automated computer programmes (bots). By using reCAPTCHA, the user's IP address and, if applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. The data protection provisions of Google LLC apply in this regard.

The legal basis for the use of reCAPTCHA is Art. 6 (1) lit. f GDPR. Checking form entries to see if they were created by a human being is a legitimate interest of the website operator.

European contact details for Google:

Google Dublin, Google Ireland Ltd.
Gordon House, 4 Barrow Street
Dublin D04 E5W5
Ireland Telephone: +353 1 543 1004

For more information about Google LLC's privacy policy, please visit http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/

Google Customer Reviews (formerly Google Certified Dealer Programme)

We work with Google LLC as part of the "Google Customer Reviews" programme, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The programme allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey from Google. If you give your consent in accordance with Art. 6 (1) (a) GDPR, we will forward your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will then be combined with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Centre dashboard, and will also be used for Google seller ratings.

You can revoke your consent at any time by sending a message to the data controller or to Google. Further information on Google's data protection in connection with the Google Customer Reviews programme can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de. Further information on Google's privacy policy for Google seller ratings can be found at this link: https://support.google.com/adwords/answer/2375474.

Google Tag Manager

Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. Further information on this can be found at: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Matomo

We use the Matomo tool to analyse visitor traffic on our website. We use the data and information collected to evaluate and improve the use of this website, among other things.

Matomo is a web analytics service. Among other things, a web analytics tool collects data about which website you came from (known as the referrer), which subpages of the website you accessed, when and from which region, or how often and for how long you viewed a subpage. In addition, language settings on your device, the type of device, click behaviour on the page (mouse and scroll movements) and certain predefined actions (so-called conversions) can be recorded.

Cookies are set on your device to enable such analysis of website usage. We store the information collected in this way exclusively on our servers in Germany.

We use Matomo with the "Automatically Anonymise Visitor IPs" function activated. This shortens the IP addresses collected (known as IP masking). This means that a connection to specific individuals can be ruled out. The legal basis for processing data using Matomo is your consent in accordance with Art. 6(1)(a) of the GDPR.

Matomo is an open source project. For more information on data protection, please visit: https://matomo.org/privacy-policy/

Cloudflare

We use the services of the company "Cloudflare" (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) to increase the availability and security of our website.

Cloudflare provides a so-called content delivery network (CDN). This means that website operators can make certain page content available not only on their own servers, but also on servers of CDN providers. If the CDN servers are closer to the user than the servers of the website operator, the use of a CDN regularly leads to faster loading times for the user. When the user visits the page of such a website operator, they establish a connection not only to the website operator, but also to the CDN operator.

In addition, Cloudflare provides website operators with security features that can be used in particular to defend against automated attacks on the website. The use of these features ensures the availability of our website and the offers contained therein.

Cloudflare uses cookies for the above-mentioned purposes and may process the following categories of data in particular:

IP address,

User's terminal device,

Data about traffic between the user and the website operator, e.g. pages accessed, date and time of access.

You can completely prevent Cloudflare from processing your personal data by disabling the execution of script code in your browser settings or by integrating a so-called script blocker into your browser.

Cloudflare is contractually obliged, on the basis of so-called EU standard data protection clauses, to ensure that, when transferring personal data from the European Economic Area, the recipients comply with a data protection standard that essentially corresponds to the European standard. Please note, however, that we cannot guarantee that Cloudflare will be able to comply with these contractual obligations in every case.

The legal basis for data processing is our legitimate interest in the continuous and secure operation of our website and the prevention of hacker attacks (Art. 6(1)(f) GDPR).

Further information can be found in Cloudflare's privacy policy at: https://www.cloudflare.com/de-de/privacypolicy/

Font Awesome

We use Font Awesome on our website. This allows us to integrate certain fonts into our website. These fonts are provided by Font Awesome via servers in the USA. When our website is accessed, the visitor's web browser establishes a direct connection to these servers. Among other things, the visitor's IP address is transmitted to Font Awesome and stored there. Further information about Font Awesome: Fonticons, Inc., CORPORATION TRUST CENTER 1209 ORANGE ST, WILMINGTON, New Castle, Delaware, 19801, USA. Further information on data protection at Fonts Awesome: https://fontawesome.com/privacy

Instagram

When you visit our Instagram channel, personal data is stored and processed by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, as the provider of Instagram, in accordance with Instagram's privacy policy. The privacy policy can be found here:

https://help.instagram.com/519522125107875 We use the Instagram Insights statistics service for the purpose of designing our pages in line with user needs and continuously optimising them. This service records your activity on our site and provides us with anonymised statistics. This provides us with insights into, among other things, the interactions of our fan page visitors, the number of visits to our page, the reach of posts, information about the activity of our subscribers, information about the countries and locations of our visitors, and statistics on the gender ratio of our visitors. It is not possible for us to draw conclusions about individual users or access individual user profiles.

LinkedIn

On our LinkedIn page, we inform you about career opportunities with us and you can contact us directly.

Personal user data is processed by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn").

We use the analytics functions provided by LinkedIn to optimise the performance of our LinkedIn page. LinkedIn provides us with a statistically processed – i.e. anonymised – compilation of certain information. This includes the following data categories: conversions (achievement of certain targets, e.g. event registrations, leads), user actions (e.g. clicks, views of certain ads) and target groups (e.g. professional position, industry). It is not possible for us to draw conclusions about individual users or access individual user profiles.

Further information on LinkedIn's analytics functions can be found at:

https://business.linkedin.com/de-de/marketing-solutions/reporting-analytics

In addition, we can also search for suitable candidates for vacant positions based on specific characteristics (e.g. current position, skills, professional experience, salary expectations). This allows us to view specific LinkedIn profiles, which we can contact directly.

LinkedIn's privacy policy can be found at:

https://www.linkedin.com/legal/privacy-policy

PayPal

We offer the option of processing payments via the payment service provider PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "Purchase on account" via PayPal, we will pass on your payment details to PayPal as part of the payment process. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – "Purchase on account" via PayPal. PayPal uses the result of the credit check in relation to the statistical probability of payment default to decide whether to provide the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, these are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.

For further information on data protection, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Sentry

We use the Sentry service to improve the technical stability of our service by monitoring system stability and identifying code errors. The service is operated by:

Sentry
1501 Mariposa St #408
San Francisco, CA 94107, USA

Sentry is used solely to monitor system stability and identify code errors and does not evaluate data for advertising purposes. User data, such as device information or error times, is collected anonymously, used in a non-personalised manner and subsequently deleted.

Further information can be found in Sentry's privacy policy: https://sentry.io/privacy/

The legal basis for the integration of Sentry is your consent (Art. 6 (1) (a) GDPR).

WhatsApp

We offer you the option of contacting us via the WhatsApp messenger service. WhatsApp is a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When using WhatsApp, in addition to so-called metadata, which provides information about the circumstances of the communication (e.g. telephone number, time stamp), communication content may also be transmitted to WhatsApp outside the European Union.

WhatsApp undertakes to conclude so-called EU standard data protection clauses within the meaning of Art. 46 GDPR. On the basis of this contractual framework, recipients in third countries are also obliged to comply with a data protection standard that essentially corresponds to the European standard. However, it should be noted that actual compliance with the requirements arising from the EU standard data protection clauses cannot be guaranteed in every case (e.g. due to official access to the data in the recipient country).

The use of WhatsApp is voluntary. You can also contact us at any time via other communication channels, e.g. by email. The legal basis is your consent in accordance with Art. 6(1)(a) GDPR.

Further information on data protection at WhatsApp: https://www.whatsapp.com/privacy

SendinBlue

Emails are sent by default via the SendinBlue service. SendinBlue is operated by:

Sendinblue GmbH
Köpenicker Straße 126
10179 Berlin, Germany

If you do not wish to use this service, SendinBlue can be replaced by your own SMTP server. SendinBlue has access to the data transmitted by the user as well as to the subject and content of the emails sent by the user via SendinBlue's services. This allows the behaviour of the recipients of these emails to be analysed (individual tracking of the open rate, click rate and bounce rate, i.e. the proportion of visitors to a website who only generate a single page view). SendinBlue states that it undertakes not to transfer or rent the data provided by users to third parties.

According to SendinBlue, the hosting servers on which SendinBlue processes and stores the data are located exclusively in the European Union. SendinBlue's privacy policy can be found here: https://de.sendinblue.com/legal/privacypolicy/

The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR.

YouTube videos

On our YouTube channel, you can find videos and helpful tips about our services. Our customer service team also responds professionally to user questions and comments on YouTube. Personal data is stored and processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 D04 E5W5, Ireland ("Google"), as the operator of YouTube, in accordance with Google's privacy policy. The privacy policy can be found here: https://policies.google.com/privacy?hl=de&gl=de

Mithilfe YouTube's analytics functions enable us to perform certain statistical analyses to optimise our channel. This includes, in particular, details about the most popular videos (e.g. user retention time, video rankings), target groups (e.g. countries, language settings, age and gender, activity times) and the reach of our channel (e.g. where users were redirected to a video from) and impressions (e.g. how many users saw a particular ad). It is not possible for us to draw conclusions about individual users or access individual user profiles. Further information on YouTube's analytics functions can be found at: https://support.google.com/youtube/answer/9002587?hl=de

Embedding YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The extended data protection mode is used here, which, according to the provider, only starts storing user information when the videos are played. When the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behaviour. According to YouTube, these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular in accordance with Art. 6 (1) (f) GDPR on the basis of Google's legitimate interests in displaying personalised advertising, market research and/or the needs-based design of its website. You have a right to object to the creation of these user profiles ( ), whereby you must contact YouTube to exercise this right. Regardless of whether the embedded videos are played, a connection to the Google network "DoubleClick" is established each time this website is accessed, which may trigger further data processing operations beyond our control. Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

14. Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organisational security measures, which are regularly reviewed and adapted to technological progress.

This includes, among other things, the use of recognised encryption methods (SSL or TLS). However, unencrypted data disclosed, for example, via unencrypted email, may be read by third parties. We have no influence over this. It is the responsibility of the respective user to protect the data they provide against misuse by means of encryption or other means.

15. Changes to the privacy policy

We reserve the right to update this policy as necessary at any time.

16. Your rights

Here you will find your rights with regard to your personal data. Details can be found in Articles 7, 15-22 and 77 of the GDPR. You can contact the responsible body (section 2) in this regard.

Right to withdraw your consent to data protection in accordance with Art. 7(3) sentence 1 GDPR

You may withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out until the withdrawal.

a) Right to information pursuant to Art. 15 GDPR

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to obtain information about this personal data and further information, e.g. the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.

b) Right to rectification and completion pursuant to Art. 16 GDPR

You have the right to request the rectification of inaccurate data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

c) Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR

You have the right to erasure if the processing is not necessary. This is the case, for example, if your data is no longer necessary for the original purposes, you have revoked your declaration of consent under data protection law or the data has been processed unlawfully.

d) Right to restriction of processing under Art. 18 GDPR

You have the right to restriction of processing, e.g. if you believe that the personal data is inaccurate.

e) Right to data portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

f) Right to object pursuant to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you. In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

g) Automated decision-making in individual cases, including profiling, pursuant to Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing, including profiling, except in the exceptional cases mentioned in Art. 22 GDPR.

Decision-making based solely on automated processing, including profiling, does not take place.

h) Complaint to a data protection supervisory authority pursuant to Art. 77 GDPR

You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that the data processing is not in accordance with data protection regulations.

toggle/primary-open toggle/primary-close toggle/primary-hover xmark bamsho-external-link