Ishi Design Co.

Privacy declaration

Table of Contents

Responsible Authority

We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:

Ishi Goel

represented by the Owner Ishi Goel
Franz-Haas-Straße 2
90491 Nürnberg
Phone: +49 151 6670 3310
E-mail: ishidesignco@gmail.com

Users‘ Rights - Information

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

The right to object to advertisement is governed by our text regarding consent:

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

You may request us to transfer the data stored about you in machine-readable form.

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency hier here you find a list of agencies).

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

General Information

Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.

When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.

All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.

On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.

The GDPR allows data processing in three cases in particular:

  • in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances your data will be processed by us;
  • in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;
  • in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; this means in particular our interests to analyse, optimise and secure the offers on our website – meaning primarily the analysis of user behaviour, setting up profiles for advertisement purposes and storage of access data as well as the use of third-party providers.

Inventory Data, Usage Data

We collect inventory data (for example name, address and e-mail address, possibly services used) insofar as they are required for establishing, defining or amending a contract between us and the user.

We also collect usage data (for example visits to the website, interest in products) to allow the user to use the services on our website and to invoice them. We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time. The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR. Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:

  • your IP address
  • type and version of your browser
  • host name
  • time of visit
  • the page from which you came to our page
  • name of the page opened
  • exact time of usage as well as
  • the amount of data transferred

This data will only be used for statistical purposes and do not allow us to identify you as a user.

Consent

Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Your data will generally only remain stored for as long as the purpose of the relevant data processing requires it. Storage beyond that is mainly possible when it is still necessary for us to pursue our rights or for our other legitimate interests or if we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files, which is generally 6 years, but may last up to 10 years).

Inventory Data

We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user.

This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment).

Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.

Usage Data

We also collect usage data to allow users to use the services on our website. These may consist of: usage information (for example visited websites or parts, duration of visit, interest in services), content data (for example data, text, images, sounds, videos entered or uploaded by you), meta data (for example identity of your device, location, IP address).

We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.

The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.

Hoster

GoDaddy

Our Website is presented in the Internet by a service provider.

We use the service GoDaddy, 2155 E. GoDaddy Way Tempe, AZ 85284, United States.

We have concluded a data processing agreement with our provider.

With this contract, our provider is obliged to process the data according to our instructions.

You can find more information on data processing at our provider in his privacy policy at https://www.godaddy.com/de-de/legal/agreements/privacy-policy.

The legal basis for this data processing is on the one hand our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, and, on the other hand, our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 (b) GDPR.

Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:

  • your IP address
  • type and version of your browser
  • host name
  • time of visit
  • the page from which you came to our page
  • name of the page opened
  • exact time of usage as well as
  • the amount of data transferred

This data will only be used for statistical purposes and do not allow us to identify you as a user.

Advertisements

Insofar as we send advertising, we do so exclusively within the scope of Section 7 (3) of the German Act Against Unfair Competition (UWG) or on the basis of your consent.

Storage Period

Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.

For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus an adequate extra time for potential interruptions of the limitation period.

For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.

Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular the tax-law requirements to keep records, usually for 6 or even 10 years.

Cookies

Upon opening the website, we have asked you to consent to the storing of certain cookies which will be placed while you visit our website. Based on your consent pursuant to Art 6 para. 1 (a) GDPR, our website thus uses cookies, so that our offer can be used in a better, more effective and more secure way.

A cookie is a record of information that is stored on your terminal device (computer, tablet, smartphone, etc.). These can be “session cookies”, which are automatically deleted when you leave our website. Other cookies are stored on your computer permanently until you delete them. That allows us to recognize your browser when you visit our website again and to provide you with features or offers according to your previous usage.

Your browser allows you to prevent the use of cookies in general or in specific cases. Please check the instructions for your browser to find out more about this. You can also delete cookies following these instructions which we have listed for you:

for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en

for Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

for Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

for Edge: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

for Internet Explorer: https://support.microsoft.com/en-gb/help/278835/how-to-delete-cookie-files-in-internet-explorer

Blocking cookies may limit the functionality of our website and of other websites visited by you.

More information on this topic, in particular how you can administer, limit or completely disable third-party cookies and technologies with a similar purpose, can be found at:

https://www.aboutads.info/choices

https://www.youronlinechoices.eu

https://www.networkadvertising.org/choices

You can withdraw your consent at any time with effect for the future: Cookie-Einstellungen ändern.

Transfer of data

Transfer to Third Parties

We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law.

Transfer of customer data may either

  • be required for the performance of a contract and in that case be permitted according to Art. 6 para. 1 (b) GDPR, or
  • be permitted based on our legitimate interest in an effective service structure pursuant to Art. 6 para. 1 (f) GDPR, or
  • covered by your consent pursuant to Art. 6 para. 1 (a) GDPR, or
  • become necessary if we will be legitimately asked by a government or an agency to hand over your data pursuant to Art. 6 para. 1 (c) GDPR.

If your data are transferred to third parties, this is mentioned in this privacy policy.

Transfer to other countries, particularly USA

Insofar as we transfer personal data to countries outside the European Union, in particular the USA, in accordance with the provisions set out below, we will only carry out such a transfer where an adequate level of data protection, appropriate safeguards or your consent, and thus a transfer permitted under the GDPR, is in place.

Users‘ Rights

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

Deletion, Correction, Limitation

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

Objection

The right to object to advertisement is governed by our text regarding consent:

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time.

You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Data Transfer

You may request us to transfer the data stored about you in machine-readable form.

Complaint

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).

Changes to the Privacy Policy

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

Data Entry

Encryption of Data Entry

When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.

Contact Forms

General contact form

When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.

Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.

Basis for this storage is the safeguarding of our legitimate interests in regard to communication with interested users pursuant to Art. 6 para. 1 (f) GDPR and in the case of inquiries prior to entering into a contract also the performance of a contract pursuant to Art. 6 para (b) GDPR.

Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).

Offer

On our website, you find a contact form, through which you may request a specific offer for our goods and services. We will ask for for the necessary data as in the form, so we can prepare the offer.

Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.

The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and in case of contractual requests also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR.

These data remain saved until you will terminate your access by sending an e-mail to the e-mail address listed in the "About Us" section. After that, they will remain stored in connection with the necessary performance of the contract (see the section on user/contract data).

Return Call

On our service page, you can ask for a call from one of our customer service agents.
We will ask for

– your first name, because we like to address your personally,

– your phone number, so we can call you, and

– your e-mail address, because we will e-mail you to confirm your request.

Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.

The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and in case of contractual requests also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR.

We will only use this data for your specific request and will save it for 6 months after the request has been completed, so we can refer to the results already achieved in the case of subsequent service requests.

Newsletter

Mail Chimp

If you subscribe to the newsletter offered on our website, we will inform you in detail about the information you will receive, which of your data will be stored and what it will be used for. We will not pass on your data to third parties and we will only use it to mail the newsletter.

We will only mail you the newsletter if you have given us your prior permission. To that purpose, you will receive an e-mail from us with a link and further instructions and our request for your consent. By clicking on this link, you declare your consent to receiving the newsletter and our advertising.

Because we are legally obligated to record your permission as part of the so-called double opt-in, your order of the newsletter, the mailing of our e-mail of consent and your consent by clicking on the link will be recorded and saved with location and time as well as with your IP address.

The basis for the storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant to us by registering for the newsletter. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example through the contact form or an e-mail or the unsubscribe button in each e-mail). This withdrawal has no effect on the legality of the data processing that has occurred until that point.

For mailing the newsletter, we use (based on our legitimate interest in a technologically perfect processing of our customer information and analysis) the provider MailChimp (Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA) from the USA.

This means, your data will be exportet to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. 

In our newsletter, we will also explicitly ask you to provide your consent to transferring data to MailChimp and to the USA. You will declare that consent by clicking on the link, but you may revoke it at any time. For the handling of your data at MailChimp, we refer you to the Privacy Policy of MailChimp at: https://mailchimp.com/legal/privacy/.

MailChimp will only use your data for mailing the newsletter and for evaluating that mailing on our behalf. In addition to that, MailChimp will only use your data to improve their own service. But MailChimp will not use the data to contact you directly or to pass on your data to third parties.

The mails used by MailChimp contains a “web beacon“, which will inform MailChimp about the opening of the newsletter and/or the clicking on a link contained therein by you. As part of that process, information regarding your browser, your location and your IP address will be transmitted to MailChimp. This information will be used to optimise our communication with you.

Our newsletter provider will also use this data for purposes of analysis and optimisation of their own service, but only in pseudonymised form (meaning that your identification is not possible). But your data will not be used by the provider to contact you directly.

Your data will remain stored for as long as you are stored in our mailing list, the storage is required to enforce our rights or it is necessary for our legitimate interest or we are required by law to keep your data.

Social Media

Social Media Plugins

Facebook

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network Facebook by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

Due to the Shariff method, Facebook will only learn your IP address and your visit to our website, once you will have clicked on the button.

If you confirm the plugin while being logged in at Facebook, Facebook may attribute your use to your user account.

Your data will be forwarded by Facebook Ireland on the ground of the standard contractual clauses to Facebook USA. Additionally, this provider is certified under the EU-US Data Privacy Framework. This makes the data transfer to the USA legally secure based on the adequacy decision concluded on July 10, 2023.

The collection and use of your data which is then possibly carried out by Facebook is beyond our knowledge or control. You will find further information in Facebook’s privacy policy at https://en-gb.facebook.com/policy.php.

Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.

Instagram Feed

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network Instagram, provided by Instagram LLC, now Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

The feed automatically displays the contents of our Instagram feed on our website. However, with the Shariff method, Facebook only learns of your IP address and your visit to our website once you have activated the display of the feed. If you confirm the plugin while being logged into Instagram, Instagram/Facebook may attribute your use to your user account.

Your data will be forwarded by Facebook Ireland on the ground of the standard contractual clauses to Facebook USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have neither knowledge of, nor any influence on the possible collection and processing of your data by Instagram. Further information can be found in Instagram's privacy policy at https://privacycenter.instagram.com/policy.

For the general approach to cookies and their deactivation as well as regarding the passing of data to third parties, particularly to the USA, we refer you to our general information in this Privacy Policy.

Pinterest

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network Pinterest, provided by Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA. With the Shariff method, Pinterest will only learn of your IP address and your visit to our website once you have clicked on the button.

If you confirm the plugin while being logged into Pinterest, Pinterest may attribute your use to your user account.

Thus, your data will be forwarded to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.

Further information can be found in the privacy policy of Pinterest at https://policy.pinterest.com/en/privacy-policy . For the general approach to cookies and their deactivation as well as regarding the passing of data to third parties, particularly to the USA, we refer you to our general information in this Privacy Policy.

Our website uses links to our presence in the social network of Instagram by Instagram LLC, now Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

It is just a normal link. Thus, when you open our site, Instagram will not learn of your visit to our website. But once you click on the link, you will be led to Instagram, allowing Instagram / Facebook to learn that you have visited out site.

Your data will be forwarded by Meta Platforms Ireland on the base of the standard contractual clauses to Meta Platforms USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

The collection and use of your data which is possibly carried out by Instagram/Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Instagram’s privacy policy at

https://privacycenter.instagram.com/policy.

Social Media Tracking

Meta Pixel (Facebook)

As long as you have consented to the use of advertising and marketing cookies, such as the Facebook Pixel, when visiting our website, we use the Meta Pixel for our marketing communication and to evaluate the success of our marketing efforts.

The Meta Pixel is a reach measurement service used on this website within the framework of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization according to Art. 6 (1) lit. f GDPR. It is provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The technology implemented by the Meta Pixel allows us to measure the reach and the resulting sales (so-called conversions) of our ads on Facebook, thus improving our advertising communication. Moreover, it enables us to target users who have already visited our website more precisely with advertisements on Facebook. We can also use the data to create so-called Custom Audiences. Here, Facebook evaluates data from users of our website to identify people with similar interests.

The Meta Pixel stores a cookie on your computer, through which Meta recognizes that you have visited our website if you are logged into Meta or log in again. The data is anonymized for us, meaning we cannot associate it with you.

For more information on how Meta handles your data, please refer to Facebook's privacy policy at: https://www.facebook.com/about/privacy. Your data will be transmitted by Meta Ireland based on standard contractual clauses to Meta in the USA. Meta is also certified under the EU-US Data Privacy Framework. This makes it legally secure to transfer data to the USA based on the adequacy decision concluded on 10.07.2023.

Meta can link this data to your respective user profile. Meta may use the data for its own advertising purposes according to the Meta Data Use Policy (https://www.facebook.com/about/privacy/). If you wish to withdraw your consent, please send us a brief email to [[huedigitalsolutions@gmail.com]].

If you are under 13 years old, you cannot effectively give consent. In this case, please also send us an email to [[huedigitalsolutions@gmail.com]].

Meta offers you various settings for the remarketing function and Custom Audiences, which you can access here if you are logged into Facebook. Without a Meta account, you can also make settings at the European Interactive Digital Advertising Alliance and prevent being targeted with advertising here.

If you wish to disable tracking by the Meta Pixel on our website, click here to opt-out Current status:

Google

Google Analytics 4

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the Google Analytics tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This helps to analyse the use of websites.

In that process, the data can be turned into pseudonymous user profiles.

Google uses different technologies for that purpose, which are based on algorithms, also it is possible, that Cookies are used.

Google uses a pseudonymous number for each user of our website.

Pseudonym means that neither name nor e-mail address nor other data that clearly identifies the user are used.

The number is then used to analyse how the individual user uses our online offering.

The date and time of use as well as page views, scrolls to the end of the page, clicks on external links, website searches, viewing of an embedded YouTube video and file downloads are also analysed.

Google may transfer the collected data to countries outside of the EU, in particular to the USA. We have concluded a data-processing agreement with Google, according to which Google will only process your information in accordance with our instructions.

This data-processing agreement also states that Google may only transfer the data to the USA within the framework of the standard contractual clauses, see the Google Ads Data Processing Terms for further information.

The Google Ads Data Processing Terms are available here: https://business.safety.google/adsprocessorterms/.

Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

Google will automatically anonymize your IP address, which means that information won't be stored on their hard disk. To ensure an adequate protection of your data, we have also concluded a data-processing agreement with Google, according to which Google will not combine your information with other data collected by Google with the goal of determining your identity.

If you don't find this sufficient, you can also use the link http://tools.google.com/dlpage/gaoptout?hl=de to download and install Google's browser plugin to block Google Analytics, which will prevent Google from collecting and passing on your personal data.

You can also prevent being analysed by Google Analytics by using the following link: Deactivate Google Analytics to place an opt-out cookie, which will also prevent the data from being collected.

If you want to read about Google's privacy policy, please use the following link https://www.google.de/intl/de/policies/privacy/.

Videoconferences, Webinare and Onlinemeetings

Microsoft Teams

We use external communication providers (third-party providers or platforms for our video conferences, audio conferences, webinars or other online meetings and online communications), here Microsoft Teams, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.
This is done either

- within the framework of our contractual or pre-contractual legal relationships according to Art. 6 para. 1 lit. b GDPR,
- within the scope of your consent, provided that we have obtained this in advance (such as for a recording) in accordance with Art. 6 para. 1 lit. a GDPR or otherwise
- in the context of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization acc. Article 6 (1) lit. f GDPR.

Every time you use our external communication provider, you enter or display all the data that you provide during communication (in particular inventory data such as name and email, usage data such as the browser used, websites visited, length of stay, referrer URL and your IP address, content data such as audio and video communication and / or recording, chat history, shared screen contents) to the external communication provider and saved by it. We ourselves use settings that are as privacy-friendly as possible, you can also take such precautions.

You can register with alias names or unique email addresses, for example, or deactivate your audio and video transmission (in part).

This will forward your data to the United States.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses.

According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework.

This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions. 

Your data will remain stored insofar as it is still necessary for the purposes of your consent, for contract fulfillment / processing, for legal prosecution by us or for our other legitimate interests or if we are legally required to keep your data.

We and the external communication provider will not pass on your data to third parties. An exception can be an evaluation of the usage data for service and backup purposes as well as for marketing purposes by the external communication provider. For further use of your data by the external communication provider, we refer to their privacy policy

https://privacy.microsoft.com/de-de/privacystatement

and the associated additional safety information

https://www.microsoft.com/de-de/trust-center.

If the external communication provider stores cookies or other trackers for you, we also refer to our general presentation in this data protection declaration for the general handling and deactivation of cookies.

Security systems

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the security plugin Wordfence provided by Defiant, Inc., Attn: Legal Department, 1700 Westlake Ave N Ste 200, Seattle, WA 98109, United States, to prevent attacks on our website.

Login attempts, logout requests, requests for suspicious URLs, changes to the content of the site and password updates are recorded by the plugin and stored for 30 days in order to block massive requests and attacks on our website.

Information about your use of this website (including your IP address) will be sent to a server of our security plugin in the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. This applies in particular since the US Presidential Decree of 07.10.2022.

You can find more information about the use of your data by our security plugin in the privacy policy our security plugin: https://www.wordfence.com/privacy-policy/. Our security plugin cannot be blocked, because that would remove the protection of our website.

Fonts

Google Fonts

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use Google Fonts, online font libraries provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google“), to display fonts on our website. External font libraries especially capable of an even, fast and secure presentation.

For the use of the online fonts, no cookies or other trackers are stored in your browser. The font files (CSS, fonts) are requested from the provider of the font libraries. But, as with any data transfer on the internet, your usage data like your IP address, the browser used, the website visited previously as well as your user behaviour will be transmitted to the provider of the fonts.

Google points out that all requests concerning the CSS and fonts are absolutely separated from all other Google services. They will not be attributed to your account and will only be stored by Google for a short time. Google uses the data only in pseudonymous form for statistical evaluations. You can find detailed information about Google Web Fonts at https://developers.google.com/fonts/faq.

By using Google Fonts, your data will be sent to Google servers in the USA and will be stored there. You can find more information about the use of your data by Google in the privacy policy of Google:

https://policies.google.com/privacy?hl=de&gl=de