Data protection

Data protection

 

Responsible body

Working Group Emergency Medicine Fürth represented by the Board of Directors Klaus Meyer – Chairman of the Board Petra Guttenberger, MdL – Deputy Chairman Christian Gußner – Deputy Chairman Dr. Frank Sinning – Medical Director Dr. Bernd Landsleitner – Deputy Medical Director René Rosenzweig – Chief Financial Officer Christoph Maier – Legal Advisor

• Deutenbacher Str. 1, 90547 Stein
• 0911 477692-0
• info@agnf.de

General information

We would like to inform you about the collection and use of your personal data in accordance with our legal obligations.

When you use our website, personal data about you is collected. You can do this by entering the data yourself, e.g. your e-mail address. However, our system also collects data from you automatically, such as your visit to our website. This is done regardless of the device or software you use to access our website.

Any input of data by you on our website is voluntary; you will not suffer any disadvantages if you do not disclose your data. Without certain data, however, it is not possible for us to provide services or conclude contracts. We will inform you of such mandatory information in each case.

On this website, personal data of the user is only collected within the framework of the applicable data protection law, in particular the General Data Protection Regulation (GDPR). The technical terms used in the text are explained in more detail in Art. 4 of the GDPR.

Data processing is permitted under the GDPR in three cases in particular:

• pursuant to Art. 6 para. 1 lit. a and 7 GDPR, if you have consented to data processing by us; in each case, we will inform you in advance in this data protection declaration and on the occasion of the consent in accordance with Art. 4 No. 11 GDPR exactly for what purpose and under what circumstances your data will be processed by us;
• pursuant to Art. 6 para. 1 lit. b GDPR if the processing of your personal data is necessary for the initiation, conclusion or performance of a contractual relationship;
• pursuant to Art. 6 para. 1 lit. f GDPR if, after a balancing of interests, the processing is necessary to safeguard our legitimate interests; this includes in particular our interests in analyzing, optimizing and securing the offer on our website – this includes in particular an analysis of user behavior, the creation of profiles for advertising purposes and the storage of access data as well as the use of third-party providers.

Inventory data

We collect inventory data insofar as it is necessary for the establishment, content or modification of a contractual relationship (including free of charge) between us and the user. This may include Customer data (e.g. name, address), contact data (e.g. e-mail address, telephone number), service data (e.g. service ordered, duration, fee). When establishing the user relationship, we will request this data from you (e.g. name, address and e-mail address) and also inform you to what extent the information is bindingly required in order to establish the user relationship.

Usage data

We also collect usage data to enable the user to make use of the services on our website. This may include Usage data (e.g. websites or areas accessed, duration of visit, interest in services), content data (e.g. data entered or uploaded by you, texts, images, sounds, videos), metadata (e.g. identity of your device, location, IP address).

We only merge usage data if and insofar as this is necessary for billing purposes. Otherwise, we will only create usage data under a pseudonym and only if you have not objected to this. You can send this objection at any time to the address given in the legal notice or to the controller named in this privacy policy.

The legal basis for this data processing is, on the one hand, our legitimate interests in accordance with. Art. 6 para. 1 lit. f GDPR in the analysis of the website and its use, if applicable also the legal permission to store data in the context of the initiation of a contractual relationship in accordance with Art. Art. 6 para. 1 lit. b GDPR.

Furthermore, our provider stores information, the so-called server log files, which are automatically transmitted by your browser each time you use this website. These are:

• Your IP address
• Type and version of your browser
• Hostname
• Time of visit
• the website from which you visited our website
• Name of the website accessed
• exact time of the call and
• the amount of data transferred

This data is only used for statistical purposes and does not enable us to identify you as a user.

Initial contact via electronic request

If you contact us in electronic form (e.g. e-mail, fax, telephone, messenger, etc.), we store and process the data you have provided to us (e.g. name, contact information, content of the request). The legal basis for this is our legitimate interest in effective customer communication in accordance with. Art. 6 para. 1 lit. a GDPR and, insofar as it concerns a request to enter into or fulfill a contract, also Art. 6 para. 1 lit. b GDPR.
We will only pass this data on to third parties if it is necessary (in accordance with Art. 6 para. 1 lit. b GDPR) for the fulfillment of the contract, if this corresponds to the overriding interest in an effective service (in accordance with Art. 6 para. 1 lit. f GDPR) or if your consent (in accordance with Art. 6 para. 1 lit. a GDPR) or another legal permission or obligation exists.
You can request information from us at any time free of charge about the purpose of the processing, origin and, if applicable, recipient of your personal data. You can also request the rectification, erasure and restriction of the processing of your personal data. You can object to the (further) processing of your data at any time and have a right to data portability as well as a right to lodge a complaint with the competent supervisory authority.
Your data will only be stored for as long as is necessary for the purpose of the respective data processing. Further storage may be considered in particular if this is still necessary for legal prosecution or for legitimate interests or if there is a legal obligation to retain the data (e.g. tax retention periods, statute of limitations).

Consent

Where we ask for your consent to process your data, we will inform you in clear and easily accessible language about the cases for which you are giving your consent. Any consent we ask for is voluntary, any benefit you wish to obtain by giving consent can be obtained without consent, just ask us.
For any consent, you have the right to withdraw any consent you have given us to process your personal data at any time. This can be done by sending an informal message, e.g. via our contact form, an e-mail to the e-mail address given in the imprint or an unsubscribe link (if offered by us). Your revocation does not affect the legality of the data processing carried out up to that point.

Storage duration

Your data will only be stored for as long as required for the purpose of the respective data processing. Further storage may be considered in particular if this is still necessary for legal prosecution by us or for our other legitimate interests.
For your inventory data that was required to fulfill a contractual relationship (even free of charge), this means that we store it until the complete fulfillment or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus a reasonable surcharge for any interruption of the limitation period.
For your usage data collected when you use the website, this means that we only store it for as long as is necessary for the proper functioning of our website and for as long as is in our legitimate interest. We will primarily only store statistical data in pseudonymized form.
We also store your data to the extent that we are legally obliged to do so. These are in particular the tax retention periods, which are generally 6 or even 10 years.

Rights of the users

You can request information from us at any time and free of charge about the personal data we have stored about you. In order to prevent misuse, it is necessary to identify you personally.

Deletion, correction, restriction

You can demand that we correct (including by supplementing) incorrect data at any time, restrict its processing or delete your data. This applies in particular if the processing purpose has expired, a required consent has been revoked and no other legal basis exists or our data processing is unlawful. We will then immediately correct, block or even delete your personal data within the legal framework.

Contradiction

Any processing of your personal data that we base on a consideration of your interests in accordance with Art. 6 para. 1 lit. f GDPR, you can object at any time if there are reasons for doing so that arise from your particular personal situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims on our part.

Data transmission

You can request that we transfer the data stored about you in machine-readable form.

Complaint

If you feel that your rights have been violated by our data processing, you can lodge a complaint with the competent supervisory authority( you can find a list of authoritieshere ).

Changes to the privacy policy

If it becomes necessary to change the privacy policy for legal or factual reasons, we will update this page accordingly. No changes are made to the consent given by the user.

External hosting

This website is hosted by external service providers (hosters). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hosters are used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hosters will only process your data to the extent that this is necessary to fulfill their performance obligations and follow our instructions with regard to this data.

 

We use the following hosters:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68 | D-02742 Friedersdorf

 

Strato AG – www.strato.de

represented by the Executive Board

Otto-Ostrowski-Strasse 7 I D-10249 Berlin

 

In order to guarantee data protection-compliant processing, we have concluded an order processing contract with our hosters.

 

Data collection on this website

Cookies

More than necessary cookies

Our website uses cookies as part of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR cookies and, where applicable, technologies with a similar purpose such as pixels, web beacons or tags. Cookies are text files that are stored on your computer and store certain data about your user behavior. Cookies can be “session cookies”, which are automatically deleted at the end of your visit to our website. However, there are also persistent cookies that are stored on your computer for a certain period of time unless you delete them. This enables us to recognize your browser the next time you visit our website and to provide you with functions or offers according to your previous use. When you enter our website, we inform you about the types of cookies we use and give you the option of agreeing or disagreeing to individual types of cookies. We only load non-essential cookies once you have consented to their use. You can find more information about the services we use that use cookies or technologies with a similar purpose in this privacy policy.

Your browser allows you to prevent the use of cookies completely or in individual cases. Please refer to the operating instructions for your browser. You can also delete cookies; we have compiled some instructions on how to do this here:

• for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
• for Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
• for Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
• for Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• for Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer

Blocking cookies may restrict the function of our website and other websites you visit. You can find more information on how you can manage, restrict or completely disable third-party cookies and technologies with similar purposes in particular at:

• https://www.aboutads.info/choices
• https://www.youronlinechoices.eu
• https://www.networkadvertising.org/choices

Contact form:

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 S.1 lit. b) GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para.1 S.1 lit. f) GDPR) or on your consent (Art. 6 para.1 S.1 lit. a) GDPR) if this has been requested; consent can be revoked at any time.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Newsletter

RapidMail:

 

If you subscribe to our company’s newsletter, the data in the respective input mask will be transmitted to the controller. Registration for our newsletter takes place in a so-called double opt-in procedure. This means that you will receive an e-mail after registration asking you to confirm your registration. This confirmation is necessary so that no one can log in with other people’s e-mail addresses. When registering for the newsletter, the user’s IP address and the date and time of registration are stored. This serves to prevent misuse of the services or the e-mail address of the data subject. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass on the data. The data will be used exclusively for sending the newsletter. The subscription to the newsletter can be canceled by the data subject at any time. Consent to the storage of personal data can also be revoked at any time. For this purpose, you will find a corresponding link in every newsletter. The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a) GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 para. 3 UWG.

Use of rapidmail

Description and purpose: We use rapidmail to send newsletters. The provider is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany. Among other things, rapidmail is used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter will be stored on rapidmail’s servers in Germany. If you do not wish to be analyzed by rapidmail, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. For the purpose of analysis, the emails sent with rapidmail contain a so-called tracking pixel, which connects to the rapidmail servers when the email is opened. In this way, it can be determined whether a newsletter message has been opened. We can also use rapidmail to determine whether and which links in the newsletter message are clicked on. Optionally, links in the e-mail can be set as tracking links with which your clicks can be counted.

Legal basis: The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR.

Recipient: The recipient of the data is rapidmail GmbH.

Transfer to third countries: Data is not transferred to third countries.

Duration: The data stored by us as part of your consent for the purpose of the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of rapidmail after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

Revocation option: You have the option to revoke your consent to data processing at any time with effect for the future. The legality of the data processing operations already carried out remains unaffected by the revocation.

Further data protection information: For more information, please refer to rapidmail’s data security information at: https://www.rapidmail.de/datensicherheit. For more information on the analysis functions of rapidmail, please see the following link: https://www.rapidmail.de/wissen-und-hilfe

Plugins and tools

Google

Google Analytics:

 

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is assigned to the user’s respective end device. There is no assignment to a device ID.

 

We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data records and uses machine learning technologies for data analysis.

 

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

 

The use of this service is based on your consent in accordance with Art. 6 para. 1 S.1 lit. a) GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

 

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/

IP anonymization

 

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

 

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

 

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Google signal

We use Google Signal. When you visit our website, Google Analytics records your location, search history, YouTube history and demographic data (visitor data), among other things. This data can be used for personalized advertising with the help of Google Signal. If you have a Google account, the visitor data from Google Signal will be linked to your Google account and used for personalized advertising messages. The data is also used to compile anonymous statistics on the user behavior of our users.

 

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be created that contain information on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

 

Google Analytics e-commerce measurement

 

This website uses the “e-commerce measurement” function of Google Analytics. With the help of e-commerce measurement, website operators can analyze the purchasing behavior of website visitors to improve their online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product is recorded. This data can be summarized by Google under a transaction ID that is assigned to the respective user or their device.

 

Google Fonts:

This site uses so-called fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers does not take place.

 

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de

Map services

GoogleMaps:

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there.

 

The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform display of fonts.

 

When you access Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

 

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 S.1 lit. f) GDPR constitutes. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 (1) GDPR. S.1 lit. a) GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

 

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ andhttps://privacy.google.com/businesses/gdprcontrollerterms/sccs/

 

You can find more information on the handling of user data in Google’s privacy policy: https://policies.google.com/privacy?hl=de

 

YouTube with enhanced data protection

This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. YouTube establishes a connection to the Google DoubleClick network, regardless of whether you are watching a video.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts.

After the start of a YouTube video, further data processing operations may be triggered over which we have no influence.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 S.1 lit. f) GDPR constitutes. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 GDPR. S.1 lit. a) GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

You can find more information about data protection at YouTube in their privacy policy at:

https://policies.google.com/privacy?hl=de

Instagram

Functions of the Instagram service are integrated on this website. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

If consent has been obtained, the above-mentioned service is used on the basis of Art. 6 (1) GDPR. S.1 lit. a) GDPR and § 25 TDDDG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the widest possible visibility in social media.

Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook or Instagram. The processing carried out by Facebook or Instagram after forwarding is not part of the joint responsibility.

The obligations incumbent on us jointly were set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.

According to this agreement, we are responsible for providing the data protection information when using the Facebook or Instagram tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381

You can find more information on this in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time a page of this website containing LinkedIn elements is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click on the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn will be able to associate your visit to this website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

If consent has been obtained, the above-mentioned service is used on the basis of Art. 6 (1) GDPR. S.1 lit. a) GDPR and § 25 TDDDG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the widest possible visibility in social media.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-derschweiz?lang=de

Further information on this can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy

Facebook

Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

You can find an overview of the Facebook social media elements here: https://developers.facebook.com/docs/plugins/?locale=de_DE

When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook receives the information that you have visited this website with your IP address. If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.

You can find further information on this in Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation

If consent has been obtained, the above-mentioned service is used on the basis of Art. 6 (1) GDPR. S.1 lit. a) GDPR and § 25 TDDDG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the widest possible visibility in social media.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly were set out in an agreement on joint processing.

The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.

According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php

Facebook plugins (Like & Share button)

Plugins of the social network Facebook, provider Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on this website. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on this website.

You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/?locale=de_DE

When you visit this website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited this website with your IP address. If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.

You can find further information on this in Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation

If you do not want Facebook to be able to associate your visit to this website with your Facebook user account, please log out of your Facebook user account.

The Facebook plugins are used on the basis of Art. 6 (1) GDPR. S.1 lit. f) GDPR. The website operator has a legitimate interest in the widest possible visibility in social media.

You can find further information on this in Facebook’s privacy policy at: https://www.facebook.com/about/privacy/

PayPal

 

On this website we offer payment via PayPal.

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

The transmission of your data to PayPal takes place on the basis of Art. 6 para. 1 S.1 lit. a) GDPR (consent) and Art. 6 para. 1 S.1 lit. b) GDPR (processing for the performance of a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations that took place in the past.

Data security

 

We have taken appropriate technical and organizational security measures to protect all personal data that is transmitted to us and to ensure that we and our external service providers comply with data protection regulations. This is why, among other things, all data between your browser and our server is transmitted in encrypted form via a secure SSL connection.

 

 

Status of the privacy policy: 29.02.2024