Privacy policy

In accordance with the statutory requirements of data protection law (in particular the new German Federal Data Protection Act (BDSG) and the European General Data Protection Regulation “GDPR”), we inform you below about the type, scope and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. For the definition of terms such as “personal data” or “processing”, please refer to Art. 4 GDPR.

Name and contact details of the controller
Our controller (hereinafter “controller”) within the meaning of Art. 4 No. 7 GDPR is:

Fumari GmbH
Miramstraße 87
34123, Kassel, Germany
Managing Director Manuel Bremond
Email address: manuel@fumari.com

Data protection officer
Nicholas Grabandt
Miramstraße 87
34123, Kassel, Germany


Types of data, purposes of processing and categories of data subjects

Below we inform you about the type, scope and purpose of the collection, processing and use of personal data.

1. Types of data we process
Usage data (access times, websites visited, etc.), master data (name, address, etc.), contact data (telephone number, email, fax, etc.), payment data (bank details, account details, payment history, etc.), contract data (subject matter of the contract, term, etc.), content data (text entries, videos, photos, etc.), communication data (IP address, etc.),

2. Purposes of processing pursuant to Art. 13 (1) (c) GDPR
Performance of contracts, evidentiary purposes / preservation of evidence, technical and economic optimisation of the website, enabling easy access to the website, fulfilment of contractual obligations, contact in the event of legal complaints by third parties, fulfilment of statutory retention obligations, optimisation and statistical evaluation of our services, supporting commercial use of the website, improving user experience, making the website user-friendly, economic operation of advertising and the website, marketing / sales / advertising, compiling statistics, determining the likelihood of texts being copied, prevention of spam and abuse, handling of application procedures, customer service and customer care, handling contact enquiries, providing websites with functions and content, security measures, uninterrupted, secure operation of our website,

3. Categories of data subjects pursuant to Art. 13 (1) (e) GDPR
Visitors/users of the website, customers, suppliers, prospective customers, applicants, employees, employees of customers or suppliers,

The data subjects are collectively referred to as “users”.

Legal bases for the processing of personal data

Below we inform you about the legal bases for the processing of personal data:

1. Where we have obtained your consent to the processing of personal data, Art. 6 (1) sentence 1 (a) GDPR is the legal basis.
2. Where processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, Art. 6 (1) sentence 1 (b) GDPR is the legal basis.
3. Where processing is necessary for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations), Art. 6 (1) sentence 1 (c) GDPR is the legal basis.
4. Where processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1) sentence 1 (d) GDPR is the legal basis.
5. Where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, and your interests or fundamental rights and freedoms do not override these, Art. 6 (1) sentence 1 (f) GDPR is the legal basis.

Disclosure of personal data to third parties and processors

As a matter of principle, we do not disclose data to third parties without your consent. Should this nevertheless occur, the disclosure takes place on the basis of the aforementioned legal bases, e.g. when passing data to online payment providers for the performance of a contract, or on the basis of a court order or a legal obligation to disclose the data for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
We also use processors (external service providers, e.g. for hosting our websites and databases) to process your data. Where data is passed to processors within the framework of a data processing agreement, this is always done in accordance with Art. 28 GDPR. We select our processors carefully, monitor them regularly and have been granted a right to issue instructions regarding the data. In addition, the processors must have taken appropriate technical and organisational measures and comply with the data protection regulations pursuant to the BDSG (new version) and the GDPR

Data transfers to third countries

The adoption of the European General Data Protection Regulation (GDPR) created a uniform basis for data protection in Europe. Your data is therefore predominantly processed by companies to which the GDPR applies. Should processing nevertheless take place through third-party services outside the European Union or the European Economic Area, these must meet the special requirements of Art. 44 et seq. GDPR. This means that processing takes place on the basis of special safeguards, such as an officially recognised finding by the EU Commission of a level of data protection equivalent to that of the EU, or compliance with officially recognised special contractual obligations, the so-called “Standard Contractual Clauses”. In the case of US companies, submission to the so-called “Privacy Shield”, the data protection agreement between the EU and the USA, fulfils these requirements.

Deletion of data and storage period

Unless expressly stated otherwise in this privacy policy, your personal data will be deleted or blocked as soon as the purpose for storage ceases to apply, unless further retention is required for evidentiary purposes or is precluded by statutory retention obligations. These include, for example, commercial-law retention obligations for business letters pursuant to Section 257 (1) of the German Commercial Code (HGB) (6 years) and tax-law retention obligations for vouchers pursuant to Section 147 (1) of the German Fiscal Code (AO) (10 years). When the prescribed retention period expires, your data will be blocked or deleted, unless storage continues to be necessary for the conclusion or performance of a contract.

Existence of automated decision-making

We do not use automated decision-making or profiling.

Provision of our website and creation of log files

1. If you use our website for information purposes only (i.e. no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data:• IP address;
   • the user’s internet service provider;
   • date and time of access;
   • browser type;
   • language and browser version;
   • content of the request;
   • time zone;
   • access status/HTTP status code;
   • amount of data;
   • websites from which the request originates;
   • operating system.
   This data is not stored together with other personal data relating to you.
   
   
2. This data serves the purpose of delivering our website to you in a user-friendly, functional and secure manner with functions and content, as well as optimising it and evaluating it statistically.
   
   
3. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
4. For security reasons, we store this data in server log files for a period of 70 days. After this period, it is automatically deleted, unless we need to retain it for evidentiary purposes in the event of attacks on the server infrastructure or other legal violations.

Cookies

1. We use so-called cookies when you visit our website. Cookies are small text files that your internet browser places and stores on your computer. When you visit our website again, these cookies provide information so that you are automatically recognised. The information obtained in this way serves to optimise our web offerings technically and economically and to give you easier and more secure access to our website. When you access our website, we inform you, by means of a notice referring to our privacy policy, about the use of cookies for the aforementioned purposes and how you can object to this or prevent their storage (“opt-out”). Our website uses session cookies, persistent cookies and third-party cookies:
   
   • Session cookies: We use so-called cookies to recognise repeated use of an offering by the same user (e.g. if you have logged in, to determine your login status). When you visit our site again, these cookies provide information so that you are automatically recognised. The information obtained in this way serves to optimise our offerings and to give you easier access to our site. When you close the browser or log out, the session cookies are deleted.
   
   • Persistent cookies: These are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.
   
   • Third-party cookies: You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that you may then not be able to use all functions of this website. You can read more about these cookies in the respective privacy policies of the third-party providers.
   
   
2. The legal basis for this processing is Art. 6 (1) sentence 1 (b) GDPR if the cookies are set in order to initiate a contract, e.g. for orders; otherwise we have a legitimate interest in the effective functionality of the website, in which case Art. 6 (1) sentence 1 (f) GDPR is the legal basis.
   
   
3. Objection and “opt-out”: You can generally prevent cookies from being stored on your hard drive by selecting “do not accept cookies” in your browser settings. However, this may result in our offerings functioning only to a limited extent. You can object to the use of third-party cookies for advertising purposes via a so-called “opt-out” on this American website (https://optout.aboutads.info) or this European website (http://www.youronlinechoices.com/de/praferenzmanagement/).

Performance of contracts

1. We process master data (e.g. company, title/academic degree, names and addresses as well as contact details of users, email), contract data (e.g. services used, names of contact persons) and payment data (e.g. bank details, payment history) for the purpose of fulfilling our contractual obligations (knowing who the contracting party is; establishing, defining the content of and performing the contract; checking the plausibility of the data) and services (e.g. contact by customer service) pursuant to Art. 6 (1) sentence 1 (b) GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.
   
   
2. As a rule, this data is not passed on to third parties unless this is necessary to pursue our claims (e.g. handing over to a lawyer for debt collection) or to perform the contract (e.g. passing the data to payment providers), or there is a legal obligation to do so pursuant to Art. 6 (1) sentence 1 (c) GDPR.
   
   
3. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you emails with technical information.
   
   
4. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For master and contract data, this is the case when the data is no longer required to perform the contract and no further claims can be asserted under the contract because they are time-barred (warranty: two years / standard limitation period: three years). Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, upon termination of the contract we restrict processing after three years, i.e. your data will only be used to comply with legal obligations. Information in the user account remains until the account is deleted.
   
   

Online payment providers

1. When paying via “PayPal”, billing is handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, web: paypal.de, https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
   When paying via “Sofort.com”, billing is handled by Klarna GmbH, Theresienhöhe 12, 80339 Munich, https://www.klarna.com/sofort/datenschutz/.
   Hereinafter referred to as “online billing providers”. The online billing providers collect, store and process your usage and billing data in order to determine and bill the services you have used. The data entered with the online billing providers is processed and stored only by them. If the online billing providers are unable to collect the usage fees in full or in part, or refrain from doing so because of a complaint by you, the usage data will be passed on by the online billing providers to the controller, and the controller may block access. The same applies if, for example, a credit card company reverses a transaction made by you at the expense of the controller.
   
   
2. The legal basis is Art. 6 (1) sentence 1 (b) GDPR, as the processing is necessary for the performance of a contract by the controller. In addition, external online billing providers are used on the basis of Art. 6 (1) sentence 1 (f) GDPR due to the legitimate interests of the controller in offering you payment options that are as secure, simple and varied as possible.
   
   
3. With regard to storage periods, revocation, information and data subject rights, please refer to the above privacy policies of the online billing providers.
   
   

Klarna Privacy Policy

In order to offer you Klarna’s payment methods, we may pass on your personal data in the form of contact and order data to Klarna during the checkout process, so that Klarna can assess whether you qualify for its payment methods and tailor these payment methods to you. Your personal data transferred is processed in line with Klarna’s own privacy notice.

Use of blog functions / comments

1. You can post public comments in our blog, which contains articles on topics of our website. You can use a pseudonym instead of your real name. Your contribution will then be published under the pseudonym. Providing an email address is mandatory; all other information is voluntary.
   
   
2. When you post a comment, we store your IP address together with the date and time, which we delete after 70 days. This storage serves our legitimate interest in defending ourselves against claims by third parties if you publish unlawful or untrue content. We store your email address for the purpose of contacting you should third parties raise legal objections to your comments.
   
   
3. The legal bases are Art. 6 (1) sentence 1 (b) and (f) GDPR.
   
   
4. We do not review your comments before publication. In the event of complaints from third parties, we reserve the right to delete your comments. We do not pass the data on to third parties unless this is necessary to pursue our claims or there is a legal obligation to do so (Art. 6 (1) sentence 1 (c) GDPR).
   
   
5. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected or to perform the contract because the contract has been terminated.
   
   

Use of our forum

1. Registration via the corresponding online form is a prerequisite for using the forum. You can read the forum without registering and, once registered, publish posts and topics under a pseudonym. There is no obligation to use your real name. After registering via the online form in the forum, you will receive a confirmation email to verify your data, with which you can confirm your registration with a click (“double opt-in procedure”). The free forum user agreement is concluded when the controller activates your account (conclusion of contract). If you do not confirm your registration with a click, your registration will be deleted by us within 24 hours.
   
   
2. Once we have activated your account, we store, in addition to your login data and until you unsubscribe, all activities in the forum, in particular your public topics and posts, your profile information, your private messages, your signature, your account wall and your reputation, in order to operate the forum. When you publish new topics and posts, we store your IP address together with the date and time, which we delete after 70 days. This storage serves our legitimate interest in defending ourselves against claims by third parties if you publish unlawful or untrue content. We store your email address and name for the purpose of contacting you should third parties raise legal objections to your content.
   
   
3. The legal bases are Art. 6 (1) sentence 1 (b) and (f) GDPR.
   
   
4. If your forum account is deleted, your forum posts and topics remain visible to all readers and can be found via search engines, and are marked “Guest”. All other data will be deleted. If you also wish your forum posts and topics to be deleted, you must inform the controller of this via the contact details above before deleting the account. Once the account has been deleted, it is no longer possible to assign and delete the posts.
   
   

Contact via contact form / email / fax / post

1. When you contact us via contact form, fax, post or email, your details are processed for the purpose of handling the contact enquiry.
   
   
2. The legal basis for processing the data is Art. 6 (1) sentence 1 (a) GDPR if you have given consent. The legal basis for processing data transmitted in the course of a contact enquiry or email, letter or fax is Art. 6 (1) sentence 1 (f) GDPR. The controller has a legitimate interest in processing and storing the data in order to answer users’ enquiries, to preserve evidence for liability reasons and, where applicable, to comply with its statutory retention obligations for business letters. If the contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 (1) sentence 1 (b) GDPR.
   
   
3. We may store your details and contact enquiry in our customer relationship management system (“CRM system”) or a comparable system.
   
   
4. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the input mask of the contact form and data sent by email, this is the case when the respective conversation with you has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved. We store enquiries from users who have an account or contract with us until two years after termination of the contract. In the case of statutory archiving obligations, deletion takes place after these have expired: end of the commercial-law (6 years) and tax-law (10 years) retention obligation.
   
   
5. You have the option of revoking your consent to the processing of personal data pursuant to Art. 6 (1) sentence 1 (a) GDPR at any time. If you contact us by email, you can object to the storage of your personal data at any time.
   
   

Contact by telephone

1. When you contact us by telephone, your telephone number is processed to handle and process the contact enquiry and is temporarily stored or displayed in the RAM / cache of the telephone device / display. Storage takes place for liability and security reasons, in order to be able to prove the call, and for economic reasons, in order to enable a call-back. In the case of unauthorised advertising calls, we block the telephone numbers.
   
   
2. The legal basis for processing the telephone number is Art. 6 (1) sentence 1 (f) GDPR. If the contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 (1) (b) GDPR.
   
   
3. The device cache stores the calls for [__] days and successively overwrites or deletes old data; when the device is disposed of, all data is deleted and the memory destroyed if necessary. Blocked telephone numbers are reviewed annually to determine whether the block is still necessary.
   
   
4. You can prevent your telephone number from being displayed by calling with your number withheld.
   
   

Newsletter

1. You can subscribe to our newsletter with your voluntary consent by entering your email address. Only this is mandatory. Providing further data is voluntary and serves only to address you personally. We use the so-called “double opt-in procedure” for registration. After registering with your email address, you will receive an email from us with a link to confirm your registration. When you click this confirmation link, your email address is added to the newsletter distribution list and stored for the purpose of sending emails. If you do not click the confirmation link within 24 hours, your registration data will be blocked and automatically deleted after 30 days.
   
   
2. We also log the IP address you used when registering, as well as the date and time of the double opt-in (registration and confirmation). The purpose of this storage is to comply with legal requirements regarding proof of your registration and to prevent misuse of your email address.
   
   
3. The contents of the newsletter (e.g. advertised products/services, offers, advertising and topics) are specifically described in your declaration of consent.
   
   
4. When sending the newsletter, we evaluate your user behaviour. For this purpose, the newsletters contain so-called “web beacons” or “tracking pixels”, which are retrieved when the newsletter is opened. For the evaluations, we link the web beacons with your email address and an individual ID. Links contained in the newsletter also contain this ID. The data is collected exclusively in pseudonymised form, i.e. the IDs are not linked to your other personal data and direct personal identification is ruled out. With this data we can determine whether and when you opened the newsletter and which links in the newsletter were clicked. This serves the purpose of optimising and statistically evaluating our newsletter.
   
   
5. We use the data obtained above to create a user profile in order to identify the reading habits and interests of our users and to personalise the newsletter accordingly. If you have also carried out other actions on our website, we also link this data in order to tailor our newsletter content to your interests.
   
   
6. The legal basis for sending the newsletter, measuring its success and storing the email address is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR in conjunction with Section 7 (2) No. 3 of the German Act Against Unfair Competition (UWG), and for logging the consent Art. 6 (1) sentence 1 (f) GDPR, as this serves our legitimate interest in legal provability.
   
   
7. You can object to the tracking at any time by clicking the unsubscribe link at the end of the newsletter. In that case, however, newsletter delivery would also end. If you deactivate the display of images in your email software, tracking is also not possible. However, this may limit the functions of the newsletter, and included images will not be displayed.
   
   
8. You can revoke your consent to receiving the newsletter at any time. You can exercise the revocation by clicking the unsubscribe link at the end of the newsletter, or by sending an email or message to our contact details above. We store your data for as long as you are subscribed to the newsletter. After you unsubscribe, your data will only be stored anonymously for statistical purposes.
   
   

Competitions

1. To carry out competitions, the email address is stored for contact purposes and, in the event of a win, the address data in order to send the prize. The address data may be passed on to a shipping service provider. The data is not passed on to third parties in any other way. Participation in the competition is permitted from the age of 18.
   
   
2. The legal basis is Art. 6 (1) sentence 1 (b) GDPR.
   
   
3. The data will be deleted 2 months after the winners have been determined.
   
   

Google AdSense

1. We have integrated advertisements from the Google service “AdSense” (Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA) on our website. The advertisements are marked in each ad by the (i) notice “Google Ads”. We have activated personalised ads in order to show you more interesting advertising, which supports the commercial use of our website, increases its value for us and improves the user experience for you. With personalised advertising, we can use AdSense to reach users based on their interests and demographic characteristics (e.g. “sports enthusiasts”).
   
   
2. For these purposes, Google receives the information that you have accessed our website when you visit it. To do this, Google places a web beacon or cookie on your computer. We do not know the full scope of the data processing or the storage period. The data is also transferred to the USA and analysed there. If you are logged in to a Google account, AdSense can assign the data to your account. If you do not want this, you must log out before visiting our website.
   
   
3. However, Google may also use other information for this purpose:
   
   • the type of websites you visit and the mobile apps installed on your device;
   
   • cookies in your browser and settings in your Google account;
   
   • websites and apps you have visited;
   
   • your activities on other devices;
   
   • previous interactions with Google ads or advertising services;
   
   • your Google account activities and information.
   
   
   
4. When an AdSense ad is clicked, the user’s IP address is processed by Google (usage data), with processing taking place in pseudonymised form (so-called “advertising ID”) by truncating the last two digits of the IP address.
   
   
5. For personalised advertising, Google does not link identifiers from cookies or similar technologies with special categories of personal data pursuant to Art. 9 GDPR, such as ethnic origin, religion, sexual orientation or health.
   
   
6. It cannot be ruled out that the above data will be passed on to third parties, authorities or Google partners. This website has also activated Google AdSense ads from third-party providers. The aforementioned data may be transferred to these third-party providers (listed at https://support.google.com/dfp_sb/answer/94149).
   
   
7. The legal basis for processing your data is Art. 6 (1) sentence 1 (f) GDPR. Google is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
   
   
8. You can object to or prevent the installation of cookies by Google AdSense in various ways:
   • You can prevent cookies in your browser by selecting the setting “do not accept cookies”, which also includes third-party cookies;
   
   • You can deactivate personalised ads directly with Google via the link https://adssettings.google.com; this setting only remains in effect until you delete your cookies. Instructions for deactivating personalised advertising on mobile devices can be found here: https://support.google.com/adsense/troubleshooter/1631343;
   
   • You can deactivate the personalised ads of third-party providers participating in the advertising self-regulation initiative “About Ads” via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/; this setting only remains in effect until you delete all your cookies;
   • You can permanently deactivate cookies using a browser plug-in for Chrome, Firefox or Internet Explorer via the link https://support.google.com/ads/answer/7395996. This deactivation may mean that you can no longer use all functions of our website to their full extent.
   
   
9. Further information on the use of Google cookies in ads and their advertising technologies, storage period, anonymisation, location data, how they work and your rights can be found in Google’s advertising privacy policy at https://policies.google.com/technologies/ads.
   
   

Google AdWords with conversion tracking

1. We use the service “AdWords with conversion tracking” (Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA) to draw attention to our website on third-party websites by means of advertisements. When you click on one of our Google ads, a cookie is stored in your browser which is valid for approximately 30 days. If you then visit our website, we and Google can use the cookie to evaluate whether you have visited our website and which page you visited. Google compiles statistics from this. We do not know the full scope of the data processing. The data is also transferred to the USA and analysed there. If you are logged in to a Google account, AdWords can assign the data to your account. If you do not want this, you must log out before visiting our website. This conversion tracking serves the purpose of analysis, optimisation and economic operation of our advertising and website.
   
   
2. The legal basis for processing your data is our legitimate interest in the analysis, optimisation and economic operation of our advertising and website pursuant to Art. 6 (1) sentence 1 (f) GDPR. Google is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
   
   
3. You can object to or prevent the installation of cookies by Google in various ways:
   
   • You can prevent cookies in your browser by selecting the setting “do not accept cookies”, which also includes third-party cookies;
   
   • You can deactivate conversion tracking directly with Google via the link https://adssettings.google.com; this setting only remains in effect until you delete your cookies.
   
   • You can deactivate the personalised ads of third-party providers participating in the advertising self-regulation initiative “About Ads” via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/; this setting only remains in effect until you delete all your cookies;
   
   • You can permanently deactivate cookies using a browser plug-in for Chrome, Firefox or Internet Explorer via the link https://support.google.com/ads/answer/7395996. This deactivation may mean that you can no longer use all functions of our website to their full extent.
   
   
   
4. Further information can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=de&gl=de and https://services.google.com/sitestats/de.html.
   
   

Google AdWords Remarketing / “Similar Audiences”

1. We use the application Google AdWords Remarketing / “Similar Audiences” (Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA) to draw attention to our website on third-party websites and other online offerings by means of advertisements. With the Remarketing or “Similar Audiences” function in AdWords, we can reach you there if you have already visited our website and address you with a suitable message in an ad. With remarketing, we can bring our previous visitors back to our website with a click. When you visit certain pages of ours, a cookie is stored in your browser which is valid for 30 days. If you then visit other websites or online offerings, we and Google can use the cookie to evaluate whether you have already visited our website and show you our advertising there as well. Google compiles statistics from this. We do not know the full scope of the data processing. The data is also transferred to the USA and analysed there. According to Google, the data collected through remarketing is not merged with any personal data of yours that may be stored by Google, but is processed under a pseudonym. This remarketing serves the purpose of analysis, optimisation and economic operation of our advertising and website.
   
   
2. The legal basis for processing your data is our legitimate interest in the analysis, optimisation and economic operation of our advertising and website pursuant to Art. 6 (1) sentence 1 (f) GDPR. Google is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
   
   
3. You can object to or prevent the installation of cookies by Google in various ways:
   
   • You can prevent cookies in your browser by selecting the setting “do not accept cookies”, which also includes third-party cookies;
   
   • You can deactivate personalised ads directly with Google via the link https://adssettings.google.com; this setting only remains in effect until you delete your cookies.
   
   • You can deactivate the personalised ads of third-party providers participating in the advertising self-regulation initiative “About Ads” via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/; this setting only remains in effect until you delete all your cookies;
   
   • You can permanently deactivate cookies using a browser plug-in for Chrome, Firefox or Internet Explorer via the link https://support.google.com/ads/answer/7395996. This deactivation may mean that you can no longer use all functions of our website to their full extent.
   
   
   
4. Further information can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=de&gl=de.
   
   

Facebook Custom Audiences

1. On our website we use the remarketing function “Custom Audiences” of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or, if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook has submitted to the Privacy Shield agreement (https://www.privacyshield.gov/EU-US-Framework).
   
   
2. When you visit the social network Facebook or other websites that use this remarketing function, interest-based advertisements (“Facebook Ads”) may be displayed to you. We use the remarketing function to optimise and economically operate our website and to show you advertising that is as relevant to your interests as possible, thereby making our website more user-friendly.
   
   
3. When you access our website, your browser establishes a connection to Facebook’s servers. We have no knowledge of exactly which data is transmitted to Facebook in this process. However, Facebook receives the information that you have viewed or clicked on a corresponding advertisement. If you are logged in to Facebook at the time, Facebook can assign this information to your account.
   
   
4. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
5. With regard to processing by Facebook, please read Facebook’s privacy policy at https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and how it works can be found in Facebook’s help section:
   https://www.facebook.com/business/help/651294705016616.
   
   
6. Users who are not logged in can deactivate the “Facebook Custom Audiences” function here [__Insert your website’s Facebook Pixel opt-out link__]; logged-in users can do so via this link: https://www.facebook.com/settings/?tab=ads#.
   
   
7. Further information on data processing by Facebook is available at https://www.facebook.com/about/privacy.
   
   

Amazon Associates Programme

1. We participate in the Amazon affiliate programme (Amazon EU S.à r.l., Amazon Services Europe S.à r.l. and Amazon Media EU S.à r.l., all three located at 5, Rue Plaetis, L-2338 Luxembourg), through which we receive advertising fee reimbursements by placing ads or affiliate links when third parties purchase something from Amazon via them. For this purpose, Amazon compiles statistics and records when an affiliate link was clicked and what was purchased through it. The data is transferred to the USA and evaluated there. To track orders, Amazon may place a cookie on your computer. We have no influence on the data collected by Amazon and cannot say anything about the storage period or the exact scope of the data collection. If you are logged in to your Amazon account, Amazon may assign this data to your account. If you do not want this, you must log out of your account. Amazon may pass your data on to authorities or contractual partners.
   
   
2. The legal basis for processing your data is our legitimate interest in the analysis, optimisation and economic operation of our advertising and website pursuant to Art. 6 (1) sentence 1 (f) GDPR. Amazon is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
   
   
3. You can object to or prevent the installation of cookies by Amazon in various ways:
   • You can prevent cookies in your browser by selecting the setting “do not accept cookies”, which also includes third-party cookies;
   
   • You can deactivate interest-based ads on Amazon via this link: https://www.amazon.de/adprefs;
   
   • You can deactivate the personalised ads of third-party providers participating in the advertising self-regulation initiative “About Ads” via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/; this setting only remains in effect until you delete all your cookies.
   
   
4. Further information can be found in Amazon’s privacy notice at https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010 and on interest-based advertising here: https://www.amazon.de/gp/help/customer/display.html?nodeId=201151440.
   
   

Plista

1. Our website is supported by a fully automated recommendation technology from plista GmbH, Torstraße 33, 10119 Berlin. With the help of this technology, we want to improve the user-friendliness of our website by recommending articles and advertisements to you, our visitors, that are tailored to your individual interests (so-called usage-based advertising).
   
   
2. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
3. In order to deliver usage-based advertising, plista uses cookies on all websites of the plista partner network to collect information about the usage behaviour of website visitors (so-called usage data) and combines this with a random identifier assigned by plista (so-called cookie ID) to form pseudonymous usage profiles. Further information on this and on data protection at plista can be found at https://www.plista.com/de/about/privacy/.
   
   
4. Objection: You are, of course, free to deactivate and object to usage-based advertising from plista at any time by declaring your opt-out at https://www.plista.com/de/about/opt-out/.
   
   

tisoomi

1. To display advertising, this website works with tisoomi-services (a service of tisoomi GmbH, Gänsemarkt 31, 20354 Hamburg). Tisoomi uses so-called “cookies”, text files that are stored on your computer and enable interest-based display of advertising. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a tisoomi server in Germany and stored there in pseudonymised form. Tisoomi will use this information to optimise the content of advertising material and, where applicable, to compile reports for website operators.
   
   
2. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
3. You can prevent the installation of cookies by setting your browser software accordingly. By using this website, you consent to the processing of the collected data by tisoomi in the manner described above and for the stated purpose.
   
   
4. You can object to the interest-based display of advertising by tisoomi at any time by using the “opt-out” option on the following page: https://www.tisoomi-services.com/datasecurity
   
   

Google Analytics

1. We have integrated the website analysis tool “Google Analytics” (Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA, EU branch: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) on our website.
   
   
2. When you visit our website, Google places a cookie on your computer in order to analyse your use of our website. The data obtained is transferred to the USA and stored there. Should personal data be transferred to the USA, Google’s certification under the Privacy Shield agreement (https://www.privacyshield.gov/EU-US-Framework) guarantees compliance with European data protection law.
   
   
3. We have activated IP anonymisation (“anonymizeIP”), which means that IP addresses are only processed further in truncated form. On this website, your IP address is therefore first truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the controller with further services relating to website and internet use. We have also activated cross-device analysis of website visitors, which is carried out using a so-called user ID. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The use of Google Analytics serves the purpose of analysing, optimising and improving our website.
   
   
4. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
5. Data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs is automatically deleted after 14 months. Data whose retention period has been reached is deleted automatically once a month.
   
   
6. Further information on data use by Google Analytics can be found here: https://www.google.com/analytics/terms/de.html (Analytics terms of use), https://support.google.com/analytics/answer/6004245?hl=de (information on data protection in Analytics) and Google’s privacy policy https://policies.google.com/privacy.
   
   
7. Objection and “opt-out”: You can generally prevent cookies from being stored on your hard drive by selecting “do not accept cookies” in your browser settings. However, this may result in our offerings functioning only to a limited extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website, and from processing this data, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
   
   
8. As an alternative to the above browser plug-in, you can prevent collection by Google Analytics by clicking [__please insert your website’s Analytics opt-out link here__]. Clicking sets an “opt-out” cookie that prevents your data from being collected when you visit this website in future. This cookie only applies to our website and your current browser and only remains in effect until you delete your cookies. In that case you would need to set the cookie again.
   
   
9. You can deactivate cross-device user analysis in your Google account under “My data > personal data”.
   
   

Etracker

1. We have implemented the web analysis service “etracker” (etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg) on our website in order to analyse the use of our website. Cookies are used for this purpose, which are stored in your browser and used to create a pseudonymous usage profile. The cookies allow you to be recognised when you visit our website again. Etracker will not use this data to identify you or to combine it with personal data without your consent. The collected data is stored permanently and analysed in pseudonymised form on servers in Germany.
   
   
2. This data is collected and stored for the purposes of marketing, analysis and optimisation of our website.
   
   
3. We have concluded a data processing agreement with etracker pursuant to Art. 28 GDPR.
   
   
4. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
5. You can object to the collection and storage of data at any time, free of charge, with effect for the future. You can object to or prevent the installation of cookies by etracker in various ways:
   
   • You can prevent cookies in your browser by selecting the setting “do not accept cookies”, which also includes third-party cookies;
   
   • You can deactivate etracker cookies via this link:
   
   http://www.etracker.de/privacy?et=XXXX. This cookie only applies to our website and your current browser and only remains in effect until you delete your cookies. In that case you would need to set the cookie again.
   
   
6. Further information can be found in etracker’s privacy policy at: https://www.etracker.com/datenschutz.
   
   

Matomo (formerly PIWIK)

1. We have installed the web analysis service / open-source software “Matomo” on our website in order to analyse and improve the use of our website. For the analysis, the software places cookies on your computer which have a storage period of one week. We have activated so-called “IP anonymisation”, which truncates your IP address by the last 9 digits. As a result, the data can no longer be linked to a person. In addition, this IP address is not merged with other data collected by us. The data is processed and stored on servers in [__].
   
   
2. This data is collected and stored for the purposes of marketing, analysis and optimisation of our website.
   
   
3. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
4. The server logs are automatically deleted after [__] days.
   
   
5. You can object to the collection and storage of data at any time, free of charge, with effect for the future. You can object to or prevent the installation of cookies by Matomo in various ways:
   
   • You can prevent cookies in your browser by selecting the setting “do not accept cookies”, which also includes third-party cookies;
   
   • You can deactivate Matomo cookies via this link:
   
   [Please insert your Matomo opt-out link here]. This cookie only applies to our website and your current browser and only remains in effect until you delete your cookies. In that case you would need to set the cookie again.
   
   
6. Further information can be found in Matomo’s privacy policy at: https://matomo.org/privacy/.
   
   

Jetpack (formerly WordPress.com Stats)

1. We have integrated the web analysis service Jetpack (by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA; the provider of the tracking technology is Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA) on our website in order to analyse and improve the use of our website. For the analysis, the software places cookies on your computer. The data is transferred to, processed and stored on Jetpack servers in the USA. We have activated the extension for truncating your IP address in Jetpack, which means that the data can no longer be linked to a person. In addition, this IP address is not merged with other data collected by us. Automattic Inc. has submitted to the Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
   
   
2. This data is collected and stored for the purposes of marketing, analysis and optimisation of our website.
   
   
3. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
4. You can object to the collection and storage of data at any time, free of charge, with effect for the future. You can object to or prevent the installation of cookies in various ways:
   
   • You can prevent cookies in your browser by selecting the setting “do not accept cookies”, which also includes third-party cookies;
   
   
5. Further information on preventing cookies can be found above under “Cookies”.

Use of the Scalable Central Measurement Method (SZM)

1. Our website uses the measurement method (“SZMnG”) of INFOnline GmbH (https://www.INFOnline.de) to determine statistical parameters on the use of our offerings. The aim of the usage measurement is to determine statistically – on the basis of a uniform standard procedure – the number of visits to our website, the number of website visitors and their browsing behaviour, and thus to obtain values that are comparable across the market.
   
   
2. For all digital offerings that are members of the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. (IVW – http://www.ivw.eu) or participate in the studies of the Arbeitsgemeinschaft Online-Forschung e.V. (AGOF – http://www.agof.de), the usage statistics are regularly processed further into reach figures by AGOF and the Arbeitsgemeinschaft Media-Analyse e.V. (agma – http://www.agma-mmc.de) and published with the performance value “unique user”, and by the IVW with the performance values “page impression” and “visits”. These reach figures and statistics can be viewed on the respective websites.
   
   
3. Measurement using the SZMnG measurement method by INFOnline GmbH takes place on the basis of legitimate interest pursuant to Art. 6 (1) (f) GDPR.
   
   
4. The purpose of processing the personal data is to compile statistics and form user categories. The statistics serve to track and document the use of our offering. The user categories form the basis for targeting advertising materials and measures to users’ interests. Usage measurement that ensures comparability with other market participants is indispensable for marketing this website. Our legitimate interest arises from the economic exploitability of the insights resulting from the statistics and user categories and from the market value of our website – also in direct comparison with third-party websites – which can be determined on the basis of the statistics.
   
   
5. In addition, we have a legitimate interest in making the pseudonymised data available to INFOnline, AGOF and IVW for market research purposes (AGOF, agma) and for statistical purposes (INFOnline, IVW). Furthermore, we have a legitimate interest in making the pseudonymised data available to INFOnline for the further development and provision of interest-based advertising materials.
   
   
6. INFOnline GmbH collects the following data, which constitutes personal data under the EU GDPR:
   
   • IP address: The at least temporary storage of the IP address is technically necessary due to the way the internet works. IP addresses are truncated by 1 byte before any processing and are only processed further in anonymised form. The untruncated IP addresses are not stored or otherwise processed.
   
   • A randomly generated client identifier: To recognise computer systems, reach processing uses either a cookie with the identifier “ioam.de”, a “local storage object” or a signature created from various automatically transmitted information from your browser. This identifier is unique to a browser as long as the cookie or local storage object is not deleted. Measurement of the data and subsequent assignment to the respective client identifier is therefore also possible when you visit other websites that also use INFOnline GmbH’s measurement method (“SZMnG”). The validity of the cookie is limited to a maximum of 1 year.
   
   • A device identifier when using apps: To recognise devices, reach measurement uses unique identifiers of the end device or a signature created from various automatically transmitted information from your device. Measurement of the data and subsequent assignment to the respective identifier may also be possible when you use other applications that also use INFOnline GmbH’s measurement method (“SZMnG”). The following unique device identifiers may be transmitted to INFOnline GmbH as a hash: advertising identifier, installation ID, Android ID, vendor ID.
   
   
7. The INFOnline GmbH measurement method used on this website determines usage data. This is done in order to collect the performance values page impressions, visits and clients and to derive further key figures from them (e.g. qualified clients). In addition, the measured data is used as follows:
   
   • So-called geolocation, i.e. the assignment of a website visit to the location of the visit, is carried out exclusively on the basis of the anonymised IP address and only down to the geographical level of federal states / regions. Under no circumstances can the geographical information obtained in this way be used to draw conclusions about a user’s specific location.
   
   • The usage data of a technical client (e.g. a browser on a device) is merged across websites and stored in a database. This information is used for the technical estimation of the socio-demographic characteristics age and gender and is passed on to AGOF’s service providers for further reach processing. As part of the AGOF study, socio-demographic characteristics are technically estimated on the basis of a random sample and can be assigned to the following categories: age, gender, nationality, occupation, marital status, general household information, household income, place of residence, internet use, online interests, place of use, user type.
   
   
8. INFOnline GmbH does not store the full IP address. The truncated IP address is stored for a maximum of 60 days. The usage data in connection with the unique identifier is stored for a maximum of 6 months.
   
   
9. Neither the IP address nor the truncated IP address is passed on. For the preparation of the AGOF study, data with client identifiers is passed on to the following AGOF service providers:
   
   • Kantar Deutschland GmbH (https://www.tns-infratest.com/)
   • Ankordata GmbH & Co. KG (http://www.ankordata.de/homepage/)
   • Interrogare GmbH (https://www.interrogare.de/)
   
   
10. If you do not wish to take part in the measurement, you can object via the following link: https://optout.ioam.de.
    To guarantee exclusion from the measurement, it is technically necessary to set a cookie. If you delete the cookies in your browser, you will need to repeat the opt-out process via the link above. For apps, you can object to the measurement by deactivating it under “Settings”.
    
    
11. Further information on data protection in the measurement method can be found on the website of INFOnline GmbH (https://www.infonline.de), which operates the measurement method, on AGOF’s data protection website (http://www.agof.de/datenschutz) and on IVW’s data protection website (http://www.ivw.eu).
    
    

VG Wort

1. We have integrated the “Scalable Central Measurement Method” (SZM) of INFOnline GmbH (Brühler Str. 9, D-53119 Bonn) on our website to determine statistical parameters for establishing the likelihood of texts being copied.
   
   
2. Anonymous measurement values are collected in the process. To recognise computer systems, access measurement uses either a session cookie or a signature created from various automatically transmitted information from your browser. No personal data is collected via cookies. IP addresses are only processed in anonymised form. The method was developed with data protection in mind. The sole purpose of the method is to determine the likelihood of individual texts being copied. Individual users are never identified. Your identity always remains protected. You do not receive any advertising via the system.
   
   
3. Some of our pages and articles contain JavaScript calls through which we report accesses to the collecting society VG Wort (Verwertungsgesellschaft Wort, association with legal capacity by conferment, Untere Weidenstraße 5, 81543 Munich). In this way, we enable our authors to participate in the distributions of VG Wort, which secures the statutory remuneration for the use of copyrighted works pursuant to Section 53 of the German Copyright Act (UrhG).
   
   
4. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
5. INFOnline GmbH does not store the full IP address. The truncated IP address is stored for a maximum of 60 days. The usage data in connection with the unique identifier is stored for a maximum of 6 months. Neither the IP address nor the truncated IP address is passed on.
   
   
6. If you do not wish to take part in the measurement, you can object via the following link: https://optout.ioam.de.
   To guarantee exclusion from the measurement, it is technically necessary to set a cookie. If you delete the cookies in your browser, you will need to repeat the opt-out process via the link above.
   
   
7. Further information can be found in the privacy policy of INFOnline GmbH here: https://www.infonline.de/datenschutz/datenschutzerklaerung/ and that of VG Wort here: https://www.vgwort.de/datenschutz.html.
   
   

YouTube videos

1. We have embedded YouTube videos from youtube.com on our website using the embed function, so that they can be played directly on our website. YouTube belongs to Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA, EU branch: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. We have embedded the videos in so-called “privacy-enhanced mode”, without cookies being used to record usage behaviour in order to personalise video playback. Instead, video recommendations are based on the video currently being played. Videos played in an embedded player in privacy-enhanced mode do not affect which videos are recommended to you on YouTube. When a video is started (click on the video), YouTube receives the information that you have accessed the corresponding subpage of our website. The data obtained is transferred to the USA and stored there. This also happens without a Google user account. If you are logged in to your Google account, Google can assign the above data to your account. If you do not want this, you must log out of your Google account. Google creates user profiles from such data and uses them for the purposes of advertising, market research or optimising its websites.
   
   
2. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
3. You have a right to object to Google regarding the creation of user profiles. Please contact Google directly for this via the privacy policy mentioned below. You can declare an opt-out objection regarding advertising cookies here in your Google account:
   https://adssettings.google.com/authenticated.
   
   
4. Further information on the use of Google cookies and their advertising technologies, storage period, anonymisation, location data, how they work and your rights can be found in YouTube’s terms of service at https://www.youtube.com/t/terms and in Google’s advertising privacy policy at https://policies.google.com/technologies/ads. Google’s general privacy policy: https://policies.google.com/privacy.
   
   
5. Google is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and is therefore obliged to comply with European data protection law.
   
   

Google reCAPTCHA

1. We have integrated the anti-spam function “reCAPTCHA” from “Google” (Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA, EU branch: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) on our website. By using “reCAPTCHA” in our forms, we can determine whether an entry was made by a machine (robot) or a human. When using the service, your IP address and any other data required for this purpose may be transmitted to Google servers in the USA.
   
   
2. The purpose of processing this data is to prevent spam and abuse, as well as our economic interest in optimising our website.
   
   
3. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
4. Google is certified under the Privacy Shield agreement (https://www.privacyshield.gov/EU-US-Framework). This ensures compliance with European data protection law.
   
   
5. Further information on Google reCAPTCHA can be found at https://www.google.com/recaptcha/ and in Google’s privacy policy at: https://policies.google.com/privacy.
   
   

Google Maps

1. We have integrated maps from “Google Maps” (Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA, EU branch: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) on our website. This allows us to display the location of addresses and directions directly on our website in interactive maps and enables you to use this tool.
   
   
2. When you access the part of our website where Google Maps is integrated, a connection to Google’s servers in the USA is established. Your IP address and location may be transmitted to Google in the process. In addition, Google receives the information that you have accessed the corresponding page. This also happens without a Google user account. If you are logged in to your Google account, Google can assign the above data to your account. If you do not want this, you must log out of your Google account. Google creates user profiles from such data and uses them for the purposes of advertising, market research or optimising its websites.
   
   
3. The legal basis for this is our legitimate interest in data processing, which also lies in the above purposes, pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
4. You have a right to object to Google regarding the creation of user profiles. Please contact Google directly for this via the privacy policy mentioned below. You can declare an opt-out objection regarding advertising cookies here in your Google account:
   https://adssettings.google.com/authenticated.
   
   
5. Further information on the use of Google cookies and their advertising technologies, storage period, anonymisation, location data, how they work and your rights can be found in the Google Maps terms of use at https://www.google.com/intl/de_de/help/terms_maps.html and in Google’s advertising privacy policy at https://policies.google.com/technologies/ads. Google’s general privacy policy: https://policies.google.com/privacy.
   
   
6. Google is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and is therefore obliged to comply with European data protection law.
   
   

Presence on social media

1. We maintain profiles or fan pages on social media in order to communicate with the users connected and registered there and to inform them about our products, offers and services. The US providers are certified under the so-called Privacy Shield and are therefore obliged to comply with European data protection law. When you use and access our profile on the respective network, the privacy notices and terms of use of the respective network apply.
   
   
2. We process the data you send us via these networks in order to communicate with you and to answer your messages there.
   
   
3. The legal basis for processing personal data is our legitimate interest in communicating with users and in our external presentation for advertising purposes pursuant to Art. 6 (1) sentence 1 (f) GDPR. Insofar as you have given the controller of the social network consent to the processing of your personal data, the legal basis is Art. 6 (1) sentence 1 (a) and Art. 7 GDPR.
   
   
4. The privacy notices, information options and objection options (opt-out) of the respective networks can be found here:
   
   • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) privacy policy: https://www.facebook.com/about/privacy/, opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
   
   • Google+ (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – privacy policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
   
   • Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – privacy policy: https://twitter.com/de/privacy, opt-out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
   
   • XING (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – privacy policy / opt-out: https://privacy.xing.com/de/datenschutzerklaerung.
   
   • Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) – privacy policy: https://policy.pinterest.com/de/privacy-policy, opt-out: https://help.pinterest.com/de/articles/personalized-ads-pinterest.
   
   • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – privacy policy: https://www.linkedin.com/legal/privacy-policy, cookie policy and opt-out: https://www.linkedin.com/legal/cookie-policy, Privacy Shield of the US company LinkedIn Inc.: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
   
   

Social media plug-ins

1. We use social media plug-ins from social networks on our website. For this we use the so-called “two-click solution” Shariff from c’t / heise.de. As a result, no personal data is transmitted to the providers of the plug-ins when you access our website. Next to the logo or brand of the social network you will find a slider with which you can activate the plug-in with a click. After activation, the provider of the social network receives the information that you have accessed our website, and your personal data is transmitted to the provider of the plug-in and stored there. These are so-called third-party cookies. According to their own statements, some providers such as Facebook and XING anonymise your IP address immediately after collection.
   
   
2. The plug-in provider stores the data collected about the user as usage profiles. These are used for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (also for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about the user’s activities on our website. The user has a right to object to the creation of these user profiles and must contact the respective plug-in provider to exercise this right.
   
   
3. The legal basis for the use of the plug-ins is our legitimate interest in improving and optimising our website by increasing our visibility through social networks and enabling interaction with you and between users via social networks pursuant to Art. 6 (1) sentence 1 (f) GDPR.
   
   
4. We have no influence on the data collected and the data processing operations. Nor do we have any knowledge of the scope of the data collection, the purpose of the processing or the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
   
   
5. With regard to the purpose and scope of data collection and processing, please refer to the respective privacy policies of the social networks. You will also find information there on your rights and settings options for protecting your personal data.
   
   

Facebook

1. We have integrated plug-ins from the social network Facebook.com (registered office in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website as part of the so-called Shariff “two-click solution”. You can recognise these by the Facebook logo “f” or the addition “Like” or “Share”.
   
   
2. As soon as you deliberately activate the Facebook plug-in, a connection is established between your browser and Facebook’s servers. Facebook receives the information, including your IP address, that you have accessed our website and transmits this information to Facebook servers in the USA, where it is stored. If you are logged in to your Facebook account, Facebook can assign this information to your account. When you use the functions of the plug-in, e.g. clicking the “Like” button, this information is also transmitted from your browser to Facebook’s servers in the USA, stored there and displayed in your Facebook profile and possibly to your friends.
   
   
3. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for protecting your privacy, can be found in Facebook’s privacy notice: https://www.facebook.com/about/privacy/. Data collection with the “Like” button: https://www.facebook.com/help/186325668085084. You can manage and object to the use of your profile data for advertising purposes on Facebook here: https://www.facebook.com/ads/preferences/.
   
   
4. If you log out of Facebook and delete your cookies before visiting our website, no data about your visit to our website will be assigned to your Facebook profile when the plug-in is activated.
   
   
5. You can also prevent the Facebook plug-in from loading by using so-called “Facebook blockers”, which you can install as an add-on for your browser: Facebook blocker for Firefox, Chrome and Opera or 1Blocker for Safari, iPad and iPhone.
   
   
6. Facebook has submitted to the Privacy Shield and thus ensures compliance with European data protection law: https://www.privacyshield.gov/EU-US-Framework.
   
   

Twitter

1. We have integrated plug-ins from the social network Twitter.com (Twitter Inc., 1355 Market St., Suite 900, San Francisco, California 94103, USA) on our website as part of the so-called Shariff “two-click solution”. You can recognise these plug-ins by the Twitter logo with a white bird on a blue background. An overview of Twitter buttons and tweets can be found at: https://developer.twitter.com/en/docs/twitter-for-websites/overview.
   
   
2. If you are logged in to your Twitter account while deliberately activating the Twitter plug-ins, Twitter can assign the visit to our website to your Twitter profile. We do not know which data is transmitted to Twitter.
   
   
3. If you wish to prevent data being transmitted to Twitter when the plug-in is activated, log out of Twitter and delete your cookies before visiting our website.
   
   
4. The purpose and scope of the data collection and the further processing and use of the data by Twitter, as well as your related rights and settings options for protecting your privacy, can be found in Twitter’s privacy notice: https://twitter.com/de/privacy. Objection (opt-out): https://twitter.com/personalization.
   
   
5. Twitter has submitted to the Privacy Shield and thus ensures compliance with European data protection law: https://www.privacyshield.gov/EU-US-Framework.
   
   

Google Plus

1. We have integrated plug-ins from the social network Google+ (G+) (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on our website as part of the so-called Shariff “two-click solution”. You can recognise these by buttons with the symbol “+1” on a white or coloured background.
   
   
2. As soon as you deliberately activate the Google+ plug-in, a connection is established between your browser and Google’s servers. Google receives the information, including your IP address, that you have accessed our website and transmits this information to Google servers in the USA, where it is stored. If you are logged in to your Google account, Google can assign this information to your account. When you use the functions of the plug-in, e.g. clicking the “+1” button, this information is also transmitted from your browser to Google’s servers in the USA, stored there and displayed in your Google+ profile and possibly to your friends.
   
   
3. The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your related rights and settings options for protecting your privacy, can be found in the Google+ privacy notice: https://www.google.com/intl/de_de/+/policy/index.html. Data collection with the “+1” button: https://developers.google.com/+/web/buttons-policy. You can manage and object to the use of your profile data for advertising purposes on Google here (opt-out): https://adssettings.google.com/authenticated.
   
   
4. If you log out of Google+ and delete your cookies before visiting our website, no data about your visit to our website will be assigned to your Google+ profile when the plug-in is activated.
   
   
5. Google has submitted to the Privacy Shield and thus ensures compliance with European data protection law: https://www.privacyshield.gov/EU-US-Framework.
   
   

XING

1. We have integrated plug-ins from the social network XING (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) on our website as part of the so-called Shariff “two-click solution”. You can recognise these by the share button with the white XING logo and the “X” symbol on a green background.
   
   
2. If you deliberately activate the XING share button on our website, your browser establishes a connection with the XING server when the respective web page is accessed. According to XING, no data about the access is stored from which XING could derive a direct personal reference. In particular, XING does not store your IP address and does not use cookies. When you click the share button, you are redirected to the XING homepage where – if you are logged in – you can recommend our page, which serves the purpose of increasing our visibility and reach. With regard to these activities on the XING platform, the XING privacy policy mentioned below applies.
   
   
3. If you log out of XING and delete your cookies before visiting our website, no data about your visit to our website will be assigned to your XING profile when the plug-in is activated.
   
   
4. The purpose and scope of the data collection and the further processing and use of the data by XING, as well as your related rights and settings options for protecting your privacy, can be found in XING’s privacy notice on the share button at https://www.xing.com/app/share%3Fop%3Ddata_protection and in XING’s general privacy policy at
   https://privacy.xing.com/de/datenschutzerklaerung.
   
   

Instagram

1. We have integrated plug-ins from the social network Instagram (Instagram LLC., 1601 Willow Road, Menlo Park, CA, 94025, USA) on our website as part of the so-called Shariff “two-click solution”. You can recognise these by the Instagram logo in the shape of a square camera.
   
   
2. If you deliberately activate the plug-in, a connection is established between your browser and Instagram’s servers. Instagram receives the information, including your IP address, that you have visited our site and transmits this information to Instagram servers in the USA, where it is stored. If you are logged in to your Instagram account, Instagram can assign this information to your account, and you can click the Instagram button to share and save the content of our pages on your Instagram account and possibly display it to your friends there. We have no knowledge of the exact content of the transmitted data, its use or its storage period by Instagram.
   
   
3. If you log out of Instagram and delete your cookies before visiting our website, no data about your visit to our website will be assigned to your Instagram profile when the plug-in is activated.
   
   
4. Further information can be found in Instagram’s privacy policy at https://help.instagram.com/519522125107875 and on privacy settings here: https://help.instagram.com/196883487377501.
   
   

Pinterest

1. We have integrated plug-ins from the social network Pinterest (operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) on our website as part of the so-called Shariff “two-click solution”. You can recognise these by buttons with the white “P” on a red background.
   
   
2. If you deliberately activate the plug-in, a connection is established between your browser and Pinterest’s servers. Pinterest receives the information, including your IP address, that you have visited our site and transmits this information to Pinterest servers in the USA, where it is stored. If you are logged in to your Pinterest account, Pinterest can assign this information to your account, and you can click the Pinterest button to share and save the content of our pages on your Pinterest account and possibly display it to your friends there. We have no knowledge of the exact content of the transmitted data, its use or its storage period by Pinterest.
   
   
3. If you log out of Pinterest and delete your cookies before visiting our website, no data about your visit to our website will be assigned to your Pinterest profile when the plug-in is activated.
   
   
4. Further information can be found in Pinterest’s privacy policy at https://policy.pinterest.com/de/privacy-policy.
   
   

Data protection for applications and in the application process

1. Applications sent to the controller electronically or by post are processed electronically or manually for the purpose of handling the application process.
   
   
2. We expressly point out that application documents containing “special categories of personal data” pursuant to Art. 9 GDPR (e.g. a photo that allows conclusions to be drawn about your ethnic origin, religion or marital status), with the exception of any severe disability that you freely choose to disclose, are not desired. You should submit your application without this data. This has no effect on your chances of success.
   
   
3. The legal bases for the processing are Art. 6 (1) sentence 1 (b) GDPR and Section 26 BDSG (new version).
   
   
4. If an employment relationship is entered into with the applicant after the application process has been completed, the applicant data will be stored in compliance with the relevant data protection regulations. If you are not offered a position after the application process has been completed, your cover letter and documents will be deleted 6 months after the rejection has been sent, in order to be able to meet any claims and obligations to provide evidence under the German General Equal Treatment Act (AGG).
   
   

Rights of the data subject

1. Objection to or revocation of the processing of your data
   
   Insofar as the processing is based on your consent pursuant to Art. 6 (1) sentence 1 (a), Art. 7 GDPR, you have the right to revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
   
   Insofar as we base the processing of your personal data on a balancing of interests pursuant to Art. 6 (1) sentence 1 (f) GDPR, you can object to the processing. This is the case in particular if the processing is not necessary for the performance of a contract with you, which we indicate in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
   
   You can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can exercise the right to object free of charge. You can inform us of your objection to advertising using the following contact details:
   
   Fumari Europe
   Graben 18
   34117, Kassel, Germany
   Managing Director Manuel Bremond
   Email address: manuel@fumari.com
   
2. Right of access
   You have a right of access to your personal data stored by us pursuant to Art. 15 GDPR. This includes, in particular, information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, and the source of your data if it was not collected directly from you.
   
   
3. Right to rectification
   You have a right to the rectification of inaccurate data or the completion of incomplete data pursuant to Art. 16 GDPR.
   
   
4. Right to erasure
   You have a right to the erasure of your data stored by us pursuant to Art. 17 GDPR, unless statutory or contractual retention periods or other legal obligations or rights to further storage preclude this.
   
   
5. Right to restriction
   You have the right to request restriction of the processing of your personal data if one of the conditions in Art. 18 (1) (a) to (d) GDPR is met:
   • if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data;
   
   • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
   
   • the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims, or
   
   • if you have objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.
   
   
6. Right to data portability
   You have a right to data portability pursuant to Art. 20 GDPR, which means that you can receive the personal data we have stored about you in a structured, commonly used and machine-readable format or request its transmission to another controller.
   
   
7. Right to lodge a complaint
   You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.
   
   

Data security

In order to protect all personal data transmitted to us and to ensure that data protection regulations are complied with by us and by our external service providers, we have taken appropriate technical and organisational security measures. For this reason, among other things, all data between your browser and our server is transmitted in encrypted form via a secure SSL connection.

As of: 08.08.2018

Source: Sample privacy policy by JuraForum.de