Data Protection Declaration / Privacy Policy of the Borek media GmbH website

Data protection declaration / Privacy Policy

We are very pleased about your interest in our company. Data protection takes a high priority for the management of Borek media GmbH. Basically, the websites of the Borek media GmbH can be used without any indication or disclosure of personal data. However, if an user of our websites (hereinafter "data subject") wishes to use our company's special services within our website, the processing of personal data may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, always takes place in accordance with the European General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection provisions applicable to Borek media GmbH. By this privacy policy, our company seeks to inform the public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed about their rights by means of this privacy policy.

Borek media GmbH, as the controller, has implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to submit personal data to us by alternative means, for example via telephone.

1. Name, address and contact Information of the Controller

The controller responsible für data processing within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions with a data protection character is the

Borek media GmbH
Lüttgenröder Str. 4
38835 Osterwieck
Telephone: +49 (0)39421 710
Facsimile: +49 (0)39421 71-212
E-Mail: dialog(at)borekmedia.de
Internet: www.borekmedia.de

2. Name and contact information of the Data Protection Officer

The data protection officer of the controller can be reached at:

Borek media GmbH
Data Protection
Lüttgenröder Str. 4
38835 Osterwieck
E-Mail: datenschutz(at)borekmedia.de
Telephone: +49 (0)39421 710

Any data subject can contact our data protection officer at any time with any questions or suggestions regarding data protection using the above-mentioned contact details.

3. Definitions

The privacy policy of the Borek media GmbH is based on the terms used by the European directive and regulatory authorities in the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand, both for the public and for our customers and business partners. To ensure this, we would like to explain in advance the terminology used.

Among other things, we use the following terms in this privacy policy:

a) Personal Data
'Personal Data' means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

b) Data Subject
'Data Subject' means any identified or identifiable natural person whose personal data will be processed by the Controller;

c) Processing
'Processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

d) Restriction of processing
'Restriction of Processing' means the marking of stored personal data with the aim of limiting their processing in the future;

e) Profiling
'profiling' means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

f) Pseudonymisation
'Pseudonymisation' means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

g) Controller or Controller responsible for Processing
'Controller' means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

h) Processor
'Processor' means a natural or legal person, public authority, agency or other body, which processes personal data on behalf of the controller;

i) Recipient
'Recipient' means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

j) Third Party
'Third Party' means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

k) Consent
'Consent' of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

4. Legal bases and purposes of processing

Within processing operations in which we obtain consent for a particular processing purpose, legal basis is provided by point (a) if Article 6 (1) GDPR. If the processing of personal data is necessary to fulfill a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on point (b) of Article 6 (1) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services. If our company is subject to a legal obligation, which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on point (c) of Article 6 (1) GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on point (d) of Article 6 (1) GDPR. Finally, processing operations could be based on point (f) of Article 6 (1) GDPR, which is the legal basis for processing operations that are not covered by any of the above legal bases and if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the data subject prevail. Such processing operations are particularly permitted because the European legislator has specifically mentioned them. In that regard, the European legislator considered that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, second sentence, GDPR).

Personal data is used for the purposes of operating the website. Purposes of processing are:

  • Analysis and maintenance of technical operations (servers and networks) and anti-abuse control;
  • Providing the online offer and online services, its functions and contents;
  • Answering contact requests and communicating with users;
  • Security measures;
  • Audience research and reach measurement / Marketing

We process your personal data only for the purposes stated in this privacy policy. A transfer of your personal data to third parties for purposes other than those mentioned does not take place. We only share your personal information with third parties if:

  • You have given your explicit consent;
  • The processing is required to execute a contract with you;
  • The processing is necessary to fulfill a legal obligation;
  • The processing is necessary to safeguard legitimate interests and there is no reason to believe that there is an overriding legitimate interest in not disclosing personal data.

5. Legitimate interests in processing of data being pursued by the Controller or a third party

If the processing of personal data is based on point (f) of Article 6 (1) GDPR, our legitimate interest is in conducting our business for the benefit of all of our employees and our shareholders.

6. Collection of general data and information

The website of the Borek media GmbH collects a range of general data and information every time a data subject or an automated system accesses the website. This general data and information is stored in the log files of the server. In this context the following data can be gathered: (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-websites accessed by the accessing system on our website (5) the date and time of access to the website, (6) an Internet Protocol (IP) address, (7) the Internet service provider of the accessing system and (8) other similar data and information used for the purpose of protection in the event of attacks on our information technology systems.

When using this general data and information, Borek media GmbH does not draw conclusions about the data subject. Rather, this information is required to (1) correctly provide and deliver the contents of our website, (2) to optimize the content of our website and its advertising, (3) to ensure the permanent functioning of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the necessary information for prosecution in case of a cyberattack. Therefore, this anonymously collected data and information will be evaluated statistically by Borek media GmbH and also with the aim of increasing data protection and data security in our company in order to ensure the best possible level of protection regarding the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

7. Cookies

The websites of Borek media GmbH use Cookies. Cookies are text files that are saved and stored on a computer system via an Internet browser.

Many websites and servers use Cookies. Many Cookies contain a so-called Cookie-ID. A Cookie-ID is a unique identifier of the Cookie. It consists of a string by which websites and servers can be assigned to the specific Internet browser in which the Cookie was stored. This allows visited websites and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other Cookies. A particular Internet browser can be recognized and identified by the unique Cookie-ID.

By using Cookies, Borek media GmbH can provide users of this website with more user-friendly services that would not be possible without the Cookie-setting.

By means of a Cookie the information, offers and services on our website can be optimized in the sense of the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses Cookies does not need to reenter their credentials every time he visits the website because this is done by the website and the Cookie stored on the user's computer system. Another example is the Cookie of a shopping cart in an online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart via a Cookie.

The data subject can prevent the setting of Cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of Cookies. Furthermore, already set Cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of Cookies in the Internet browser used, not all functions of our website may be fully usable.

8. Subscription to our newsletter

On the website of Borek media GmbH, the users are given the opportunity to subscribe to the newsletter of our company. Which personal data will be transmitted to the data controller when ordering the newsletter results from the input mask used for this purpose.

Borek media GmbH informs its customers and business partners at regular intervals by means of a newsletter about offers of the company. The data subject can only receive the newsletter of our company if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter. For legal reasons, a confirmation email, using the double-opt-in procedure, will be sent to the email address entered first-time by the data subject for newsletter-mailing. This confirmation email serves to verify whether the owner of the email address as the data subject has authorized the receipt of the newsletter.

When registering for the newsletter, we also store the IP address of the computer system used by the data subject, as assigned by the Internet Service Provider (ISP), at the time of registration, as well as the date and time of registration, The collection of this data is necessary in order to be able to retrace a (possible) misuse of the data subject's email address at a later date and therefore provides the legal safeguard for the data controller.

The personal data collected in the context of registering for the newsletter will be used solely to send our newsletter. In addition, subscribers to the newsletter may be notified by email if this is necessary for the operation of the newsletter service or the corresponding registration, as may be the case in the event of changes to the newsletter offer or technical changes. There is no transfer of the personal data collected in the context of the newsletter service to third parties. Subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given us for the newsletter, can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter.

9. Newsletter tracking

The newsletters of Borek media GmbH contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in those emails, that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded pixel, Borek media GmbH can detect if and when an email was opened by a data subject and which links in the email were called up by the data subject.

Such personal data collected via the tracking pixels contained in the newsletters will be stored and evaluated by the controller in order to optimize the distribution of the newsletter and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Data subjects are at any time entitled to revoke the separate declaration of consent issued via the double-opt-in procedure. After revocation, this personal data will be deleted by the controller. A cancellation of the receipt of the newsletter will be automatically interpreted as a revocation by Borek media GmbH.

10. Contact via website

Due to legal regulations, the website of Borek media GmbH contains information that enables fast electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (email address). If a data subject contacts the data controller by email or via a contact form, the personal data provided by the data subject will be automatically saved. Such personal information provided on a voluntary basis by a data subject to the controller is stored for the purposes of processing the respective request or contacting the data subject. There is no disclosure of this personal data to third parties.

11. Routine erasure and blocking of personal data

The controller processes and stores personal data of the data subject only for the period necessary to achieve the purpose of the storage or if so required by the European body issuing directives and regulations or any other legislator in laws or regulations, to which the controller is subject to.

If the storage purpose is omitted or if a storage period prescribed by the European body issuing directives and regulations or any other relevant legislature expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

12. Rights of the data subject

a) Right to obtain confirmation
Every data subject shall have the right, granted by the European body issuing directives and regulations, to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If an affected person wishes to exercise this right of confirmation, he or she can contact an employee of the controller at any time.

b) Right of access
Every data subject shall have the right, granted by the European body issuing directives and regulations, at any time to obtain from the controller free information regarding the personal data stored about him or her and obtain a copy of that information.

Furthermore, the European body issuing directives and regulations provides the data subject with access to the following information:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, the data subject has the right of access whether personal data has been transmitted to a third country or to an international organization. If this is the case, then the data subject has the right to obtain information about the appropriate safeguards relating to the transfer.

If a data subject wishes to claim this right of access, he or she may, at any time, contact an employee of the controller.

c) Recht to rectification
Every data subject shall have the right, granted by the European body issuing directives and regulations, to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to claim this right to rectification, he or she may, at any time, contact an employee of the controller.

d) Right to erasure ('right to be forgotten')
Every data subject shall have the right, granted by the European body issuing directives and regulations, to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies and to the extent that processing is not necessary pursuant to Article 17(3):

  • he personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
  • the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

If one of the above-mentioned reasons applies and a data subject wishes to arrange for the deletion of his or her personal data stored by Borek media GmbH, he or she may at any time contact an employee of the controller. The respective employee of Borek media GmbH will arrange that the erasure request will be fulfilled immediately.

Where the Borek media GmbH has made the personal data public and is obliged pursuant to Article 17(1) to erase the personal data the Borek media GmbH, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data, provided that processing is not necessary pursuant to Article 17(3).

The respective employee of Borek media GmbH will on a case-by-case basis make the necessary arrangements.

e) Right to restriction of processing
Every data subject shall have the right, granted by the European body issuing directives and regulations, to obtain from the controller restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
  • the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the above-mentioned conditions applies and a data subject wishes to arrange for the restriction of his or her personal data stored by Borek media GmbH, he or she may at any time contact an employee of the controller. The respective employee of Borek media GmbH will arrange that the restriction request will be fulfilled immediately.

f) Right to data portability
Every data subject shall have the right, granted by the European body issuing directives and regulations, to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, the data subject, in exercising his or her right to data portability pursuant to Article 20(1), shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided, that the rights and freedoms of others will not be affected.

The data subject may at any time contact an employee of the controller to assert the right to data portability.

g) Right to object
Every data subject shall have the right, granted by the European body issuing directives and regulations, to object on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.

The Borek media GmbH will no longer process the personal data unless we, as the controller, demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where Borek media GmbH process personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

Furthermore, where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

The data subject may at any time contact an employee of the controller to assert the right to object. In addition, the data subject may, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, exercise his or her right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling
Every data subject shall have the right, granted by the European body issuing directives and regulations, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. This shall not apply if the decision is necessary for entering into, or performance of a contract between the data subject and a data controller, is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests or is based on the data subject's explicit consent.

In the cases referred to in points (a) and (c) of Article 22(2), the Borek media GmbH will implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

The data subject may at any time contact an employee of the controller to assert the rights related to automated individual decision-making.

i) Right of withdrawal of the declaration of consent
Every data subject shall have the right, granted by the European body issuing directives and regulations, to withdraw his or her consent at any time.

The data subject may at any time contact an employee of the controller to assert his or her right to withdraw his or her consent.

j) Right to lodge a complaint with a supervisory authority
Pursuant to Article 77, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation. A list of supervisory authority (for the non-public sector) can be found under: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

13. Data protection within applications and application procedures

The controller collects and processes personal data of applicants for the purpose of processing the application procedure. The processing can also be made by electronic means. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by email or via a web form available on the website. If the controller concludes a contract of employment with an applicant, the transmitted personal data will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the applicant by the controller, the application documents will be automatically deleted two months after the announcement of the rejection decision, unless deletion precludes other legitimate interests of the controller. Other legitimate interest in this sense is for example a burden of proof in a procedure under the German General Equal Treatment Act (AGG).

14. Data protection regulations regarding the usage and application of Facebook

Within the providing of our online content we use, due to our legitimate interests in the analysis, optimization and economic operation of our online offer, the so-called "Facebook pixel" of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

Facebook is certified under the Privacy Shield Agreement, providing a guarantee to comply with European data protection legislation. (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

A social network is an internet-based social meeting place, an online community that usually allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for sharing views and experiences, or allows the Internet community to provide personal or business information. Facebook allows social network users to create private profiles, upload photos and socialize via friend requests.

By using Facebook Pixel, it possible for Facebook to determine the visitors of our website as a target group for the presentation of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the placed Facebook Ads only to those Facebook users who have shown an interest in our online offering or having particular features (e.g. interests in certain topics or products that have been determined by means of the visited website), which we transmit to Facebook (so-called "Custom Audiences"). With the help of Facebook Pixel, we also want to make sure that our Facebook Ads are in line with the potential interest of users and thus are not annoying. By the means of Facebook Pixel, we can also relate to the effectiveness of the Facebook Ads for statistical and market research purposes, by seeing whether users were redirected to our website after clicking on a Facebook Ad (so-called "conversion").

Each time, a user accesses one of the individual pages of this website, which is operated by the controller and on which a Facebook component (Facebook plug-in) was integrated, the respective Facebook component causes the Internet browser on the information technology system of the data subject to automatically download a representation of the Facebook component from Facebook. An overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Facebook and at the same time visits our website, Facebook recognizes which specific subpage of our website the data subject visits with each access of our website and during the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated in our website, for example the "Like" button, or if the data subject leaves a comment, Facebook assigns this information to the personal Facebook user account of the data subject and saves this personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website, if the data subject is simultaneously logged in to Facebook at the time of accessing our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject wants to avoid such a transfer of this information to Facebook, he or she can prevent the transfer by logging out of his or her Facebook account before accessing our website.

The processing of the data by Facebook is part of Facebook's data usage policy. Accordingly, general notes on how to display Facebook Ads, in Facebook's Data Usage Policy can be found under: https://www.facebook.com/policy.php. For specific information and details about Facebook Pixel and how it works, visit the help section of Facebook: https://www.facebook.com/business/help/651294705016616.

You may object to the capture of personal data by the Facebook Pixel and the use of your data to display Facebook Ads. To set which types of ads you see within Facebook, you can visit the page set up by Facebook and follow the instructions for the usage-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings can be made regardless of the used platform, so they will be adopted for all devices, such as desktop computers or mobile devices.

You may also object to the usage of Cookies for distance measurement and promotional purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/), in addition via the US website (http://www.aboutads.info/choices) or via the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

The data privacy policy published by Facebook, which is available at de-de.facebook.com/about/privacy/, provides further information regarding the collection, processing and use of personal data by Facebook. On this website it is also explained, which options Facebook offers to protect the privacy of the data subject. In addition, different applications are available, which make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

15. Data protection regulation regarding the usage and application of Google Tag Manager

The controller uses Google Tag Manager on this website. Google Tag Manager is a solution operated by Google LLC. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("hereinafter referred to as Google") that allows us to manage so-called web site tags using an interface (e.g. integrate Google Analytics and other Google marketing services into our online offer). However, the Tag Manager itself, which implements the tags, also works without Cookies and thus does not collect any personal data of the users. The Tag Manager tool causes other tags to be activated, which may, for their part, register data under certain circumstances. For these respective third-party providers, appropriate explanations can be found in this privacy policy. Google Tag Manager does not access this information. If recording has been deactivated on domain or Cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager, so the Google Tag Manager will not change your Cookie settings.

Google may ask for your permission to share some product data (such as your account information) with other Google products to enable certain features, for example, to simplify the addition of new conversion tracking tags for Ads. In addition, Google's developer reviews product usage information from time to time to further optimize the product. However, Google will never share this type of data with other Google products without your consent.

With regard to the processing of users' personal data, it is referred to the following information on Google services:

Usage policies of Google: https://www.google.com/intl/de/tagmanager/use-policy.html.

Privacy policy of Google: https://policies.google.com/privacy?hl=de&gl=de

15. Data protection regulation regarding the usage and application of Google AdSense

The controller uses Google AdSense on this website. Google AdSense is an online service that provides distribution of advertising on third-party websites. Google AdSense is based on an algorithm that selects the advertisements displayed on third-party websites in accordance with the contents of the respective third-party website. Google AdSense allows interest-based targeting of the Internet user, which is implemented by generating individual user profiles.

The Google AdSense component is operated by Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of the Google AdSense component is to include advertisements on our website. Google AdSense sets a Cookie in the information technology system of the data subject. The meaning and definition of Cookies, has already been explained above. By placing this Cookie, Alphabet Inc. provides an analysis of the use of our website. Each time, one of the pages of this website, into which a Google AdSense component has been integrated, is accessed, the internet browser on the data subject's information technology system is automatically initiated by the respective Google AdSense component to submit data to Alphabet Inc. for purposes of online advertising and commission settlement. As part of this technical process, Alphabet Inc. gains knowledge of personal information, such as the IP address of the data subject, which is used by Alphabet Inc., inter alia, to relate to the origin of website visitors and clicks, and subsequently to facilitate commission settlement.

The affected person can prevent the setting of Cookies by our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of Cookies. Such a setting of the Internet browser used would also prevent Alphabet Inc. from setting a Cookie on the information technology system of the data subject. In addition, a Cookie already set by Alphabet Inc. can be deleted at any time via the Internet browser or other software programs.

Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in websites to enable log file recording and log file analysis, whereby a statistical evaluation can be performed. Based on the embedded tracking pixel, Alphabet Inc. can detect if and when a website was accessed by a data subject and which links were clicked by the data subject. Tracking pixels are used, among other things, to evaluate the flow of visitors to a website.

Google AdSense will transfer personal data and information, which includes the IP address and is required to collect and bill the displayed advertising, to Alphabet Inc. in the United States of America. This personal data is stored and processed in the United States of America. Alphabet Inc. may transfer such personal information collected through the technical process to third parties.

For further details about Google AdSense see: www.google.de/intl/de/adsense/start/.

16. Data protection regulation regarding the usage and application of Google Analytics (with anonymization function)

The controller uses Google Analytics (with anonymization function) on this website. This is done on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of point (f) of Article 6 (1). Google Analytics is a web analytics service. Web analysis is the generating, collection and analysis of data regarding the user behavior of visitors to websites. Among other things, a web analysis service collects data such as from which website a data subject has come to visit a website (so-called "referrers"), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize a website and for cost-benefit analysis of Internet advertising.

The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google uses Cookies. The information generated by the Cookie about the use of the online offer by the users may be transmitted by Google to countries outside the EU, in particular the USA, and may be stored there. However, Google has submitted to the Privacy Shield Framework, providing a guarantee to comply with European data protection legislation.. For more information on your rights, see: http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf and

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

The controller uses the addition "_gat._anonymizeIp" for web analytics via Google Analytics. Via this addendum, Google will shorten and anonymize the IP address of the internet connection of the data subject if the access to our website was made from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information collected to evaluate the use of our website, to compile online reports for us, showing the activities on our website, and to provide other services related to the use of our website. In doing so, pseudonymous user profiles of the processed data can be created.

We use Google Analytics to display the advertisements, displayed within Google's advertising services and within advertising services of Google's affiliates, only to those users, who have shown an interest in our online offering or who have certain characteristics (e.g. interest in specific topics or products on the basis of the websites visited by them) that we submit to Google (so-called "Remarketing" or "Google Analytics Audiences"). With Remarketing Audiences, we also want to make sure that our ads meet the potential interest of users.

Google Analytics uses a Cookie on the information technology system of the data subject. The meaning and definition of Cookies has already been explained above. By placing this Cookie, Google provides an analysis of the use of our website. Each time, one of the pages of this website, into which a Google Analytics component has been integrated, is accessed, the internet browser on the data subject's information technology system is automatically initiated by the respective Google Analytics component to submit data to Google for purposes of online advertising. As part of this technical process, Google gains knowledge of personal information, such as the IP address of the data subject, which is used by Google, inter alia, to relate to the origin of website visitors and clicks, and subsequently to facilitate commission settlement.

The Cookie stores personal data, such as access time, the location from where access was made and the frequency of site visits by the data subject. Each time a user visits our website, personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal dta is stored by Google in the United States of America. Google may transfer this personal data collected through the technical process to third parties.

The IP address submitted by the user's browser will not be merged with other data provided by Google. The affected person can prevent the setting of Cookies by our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of Cookies. Such a setting of the Internet browser used would also prevent Google from setting a Cookie on the information technology system of the data subject. In addition, a Cookie already set by Google can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject may have the right of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, the data subject has to download and install a browser add-on from tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If the data subject's information technology system is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within his or her control, the data subject has to reinstall or re-enable the browser add-on.

Likewise, the data subject can prevent the collection of personal data by Google Analytics by clicking on the following link <a href="javascript:gaOptout()">Google Analytics deaktivieren</a>, and set an opt-out Cookie, which also prevents the collection of personal data .

Additional information and Google's privacy policy can be found at:

www.google.de/intl/de/policies/privacy/ and at

www.google.com/analytics/terms/de.html.

More details regarding Google Analytics can be found under:

www.google.com/intl/de_de/analytics/.

17. Data protection regulation regarding the usage and application of Google Ads

The controller uses Google Ads on this website. This is done on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer) within the meaning of point (f) of Article 6 (1). Google Ads is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google has submitted to the Privacy Shield Framework, providing a guarantee to comply with European data protection legislation. For more information on your rights, see:

http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf and

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Google Ads is an Internet advertising service that allows advertising companies to place ads on Google's search engine results as well as on the Google Network (e.g., in search results, in videos, on websites, etc.) to display the ads to users, who have a supposed interest in the ads. Google Ads allows an advertising company to define specific keywords that display an ad on Google's search engine results only when the user retrieves a keyword-related search result within the search engine. In the Google Advertising Network, the ads are distributed to topic-relevant websites using an automated algorithm and according to previously defined keywords. This allows us to display advertisements for and within our online offering in a more targeted way so that we only present ads to users that potentially match their interests. If e.g. ads for products, a user was looking for on other online offers, are displayed to him or her, this is called "remarketing". For these purposes, upon access to our and other websites where the Google Advertising Network is active, Google will immediately execute a code from Google and so-called (re)marketing tags (invisible graphics or code, also called "web beacons") will be incorporated into the website. These tags cause the saving of an individual Cookie, i.e. a small file, on the device of the user (instead of Cookies, comparable technologies can be used). In this file it is noted which websites the user visited, in what content he was interested in and what offers he clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information regarding the use of the online offer.

The purpose of Google Ads is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google's search engine and by displaying third-party advertisements on our website.

If a data subject accesses our website via a Google ad, a so-called conversion Cookie will be stored on the data subject's information technology system by Google. The meaning and definition of Cookies has already been explained above. A conversion Cookie loses its validity after thirty days and is not used to identify the data subject. Via the conversion Cookie, if not yet expired, it is traced whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. Using the conversion Cookie, both, we and Google, can relate to whether a data subject, who accesses our website via an ads-advertisement, generated sales, i.e. completed or canceled a purchase.

The data and information collected via the use of the conversion Cookies is used by Google to create visitor statistics for our website. These visitor statistics are in turn used by us to determine the total number of users who have been referred to us by advertising-ads, in other words, to determine the success or failure of each advertising-ad and to optimize our advertising-ads for the future. We'll only receive the anonymous total number of users who clicked on our advertisement and were redirected to a website, tagged with a conversion tracking tag. Neither our company nor other advertising customers of Google Ads receive any information from Google that could identify the data subject. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization.

Via the conversation Cookie, personal data, such as websites accessed by the data subject, are stored. Each time a user visits our website, personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected through the technical process to third parties. The affected person can prevent the setting of Cookies by our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of Cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversation-Cookie on the information technology system of the data subject. In addition, a Cookie already set by Google can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the opportunity to object to interest-based advertising by Google. To do this, the data subject needs to click on the link https://adssettings.google.com/authenticated within any internet browser he or she uses and make the respective settings.

Additional information and Google's privacy policy can be found at:

www.google.de/intl/de/policies/privacy/.

18. Data protection regulation regarding the usage and application of LinkedIn

The controller uses components of the LinkedIn Corporation on this website. LinkedIn is an internet-based social network that allows users to connect to existing business contacts and make new business contacts. Over 400 million registered people use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited sites in the world.

LinkedIn is operated by the LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. Outside of the USA, privacy issues are handled by LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time, a user accesses this website, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the respective component causes the Internet browser on the information technology system of the data subject to automatically download a representation of the LinkedIn component from LinkedIn. Further information regarding LinkedIn plug-ins can be found at developer.linkedin.com/plugins. As part of this technical process, LinkedIn receives information about which specific subpage of our website is visited by the data subject with his or her IP address.

If the data subject is logged in to LinkedIn and at the same time visits our website, LinkedIn recognizes which specific subpage of our website the data subject visits with each access of our website and during the entire duration of the respective stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject. If the data subject activates one of the LinkedIn buttons integrated in our website ("Recommend-Button" of LinkedIn), LinkedIn assigns this information to the personal LinkedIn user account of the data subject and saves this personal data.

LinkedIn always receives information via the LinkedIn component that the data subject has visited our website, if the data subject is simultaneously logged in to LinkedIn at the time of accessing our website; this takes place regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject wants to avoid such a transfer of this information to LinkedIn, he or she can prevent the transfer by logging out of his or her LinkedIn account before accessing our website.

We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data and their use by LinkedIn.

On our website, we also use the analytics and conversion tracking technology of the LinkedIn platform. Via this LinkedIn technology, more relevant, interest-based advertising can be displayed to you.

The storage of conversion Cookies is based on point (f) of Article 6 (1) GDPR. The controller of the website has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

We also receive aggregated and anonymous reports from LinkedIn on advertising activities and information about how the user interacts with our website. At www.linkedin.com/psettings/guest-controls, LinkedIn offers the option to unsubscribe from email, text messages and targeted advertising, and manage advertising settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame to set Cookies. Such Cookies may be denied at www.linkedin.com/legal/Cookie-policy. LinkedIn's privacy policy is available at www.linkedin.com/legal/privacy-policy. LinkedIn's Cookie policy is available at www.linkedin.com/legal/Cookie-policy.

19. Data protection regulation regarding the usage and application of Xing

The controller uses components of Xing on this website. Xing is an internet-based social network that allows users to connect to existing business contacts and make new business contacts. The individual users can create a personal profile at Xing. Companies can, for example, create company profiles or publish job offers on Xing.

Xing is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time, a user accesses this website, which is operated by the controller and on which a Xing component (Xing plug-in) was integrated, the respective component causes the Internet browser on the information technology system of the data subject to automatically download a representation of the Xing component from Xing. Further information regarding Xing plug-ins can be found at dev.xing.com/plugins. As part of this technical process, Xing receives information about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Xing and at the same time visits our website, Xing recognizes which specific subpage of our website the data subject visits with each access of our website and during the entire duration of the respective stay on our website. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the data subject. If the data subject activates one of the Xing buttons integrated in our website, e.g. the share button, Xing assigns this information to the personal Xing user account of the data subject and saves this personal data.

Xing always receives information via the Xing component that the data subject has visited our website, if the data subject is simultaneously logged in to Xing at the time of accessing our website; this takes place regardless of whether the data subject clicks on the Xing component or not. If the data subject wants to avoid such a transfer of this information to Xing, he or she can prevent the transfer by logging out of his or her Xing account before accessing our website.

Xing's privacy policy, available at www.xing.com/privacy, provide information about the collection, processing and use of personal information by Xing. Additionally, Xing has published privacy notices regarding the XING Share button at www.xing.com/app/share.

20. Data protection regulation regarding the usage and application of Hotjar

The controller uses Hotjar on this website, an analysis software of the Hotjar Ltd. ("Hotjar"), 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe. Hotjar allows us to measure and evaluate the usage behavior on our website in the form of clicks, mouse movements, scroll heights, etc.

By this means, we gain valuable information to optimize our website, make it faster and more customer-friendly. The above mentioned analysis is based on our legitimate interests in optimization and marketing purposes and the appropriate interest-based design of our website in accordance with point (f) of Article 6 (1) GDPR.

The information, generated by the tracking code and the Cookie, is transmitted to and stored by the Hotjar servers in Ireland.

The following data is collected:

  • The IP address of your device (collected and stored in an anonymous format)
  • Your email address, including your first name and surname, provided that you have provided it via our website
  • Screen size of your device
  • Device type and browser information
  • Geographical location (only the country)
  • The preferred language to display our website

In addition, the following data is logged on our server when using Hotjar:

  • referring domain
  • visited pages
  • Geographical location (only the country)
  • The preferred language to display our website
  • Date and time of access to the website

Hotjar will use this information to evaluate your use of our website, to generate reports, as well as other services related to the website usage and internet evaluation of the website. Hotjar also uses third-party services such as Google Analytics and Optimizely to provide services. These third parties may store information that your browser sends during your visit of the website, such as Cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy policies.

By using this website, you agree to the above-mentioned processing of the named data by Hotjar and its third parties under this Privacy Policy.

Hotjar offers every user the option of using a "Do Not Track Header" to prevent the use of the tool Hotjar, so that no data regarding the visit of the respective website are recorded. This is a setting that supports all common browsers in current versions. For this purpose, your browser sends a request to Hotjar, with a note to disable the tracking of the respective user. If you use our website with different browsers / computers, you must set up the "Do Not Track header" for each of these browsers / computers separately.

Detailed instructions with information about your browser can be found at: https://www.hotjar.com/opt-out.

More information about Hotjar Ltd. and about the tool Hotjar can be found at: https://www.hotjar.com.

For the privacy policy of Hotjar Ltd. see: https://www.hotjar.com/privacy.

21. Duration of storage of personal data

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiration of the deadline, the corresponding data will be deleted routinely, if they are no longer required to fulfill the contract or to initiate a contract.

22. Legal or contractual regulations regarding the provision of personal data; Necessity for the conclusion of a contract; Obligation of the data subject to provide personal data; possible consequences of non-provision

We clarify that the provision of personal data is in part required by law (such as tax regulations) or may result from contractual arrangements (such as details of the contractor). Occasionally it may be necessary for a contract to be concluded that a data subject provides us with personal data that have to be subsequently be processed by us. For example, the data subject is required to provide us with personal information when our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the person concerned could not be closed. Prior to any personal data being provided by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or required for the conclusion of the contract, if there is an obligation to provide the personal data, and what consequences the failure to provide the personal data may have.

23. Protection of minors

Without consent of the legal guardians, persons who have not reached the age of 16 may not submit any personal data to us and provide personal information to us only if the express consent of the parent or guardian exists. We will process the aforementioned data in accordance with this privacy policy.

24. Existence of automated decision-making

As a responsible company, we refrain from automatic decision-making or profiling.

25. Adjustment of our privacy policy

We reserve the right to amend this privacy policy to always comply with the actual legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your new visit will be subject to the adjusted privacy policy.