Privacy Policy

1) Information about the data controller collecting personal data and contact details

1.1 Thank you for visiting our website and your interest in our company. Below we provide information about how we deal with your personal data when using our website. Personal data refers to all data that can identify you personally.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Thomas Feiner, Institute for EEG-Neurofeedback, Karl-Böhm-Str. 50, 85598 Baldham, Germany, Tel.: +49(0)89 2000 299-66, Fax: +49(0)89 2000 299-8966, E-Mail: info@neurofeedback-info.de. The person responsible for the processing of personal data is the natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the data controller), this website uses SSL and TSL encryption. An encrypted connection can be identified by the character sequence “https://” and the lock symbol in your browser title.

2) Data collection when visiting our website

If you use our website purely for information, i.e. you do not register or transmit information in any other way, we only collect the data that your browser transmits to our server (so-called “server logfiles”). When you call up our website we will collect the following data that we require from a technical point of view to display our website to you:

The website visited
Date and time of accessing the website
Volume of data transmitted in bytes
Source/reference from where you accessed the website
Browser used
Operating system used
IP address used (anonymous if applicable)

The data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disseminated or used in any other way. However, we reserve the right to check the server logfiles retrospectively if there is concrete evidence of unlawful use.

3) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called "session cookies"), some of these cookies remain longer on your device and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration in the overview of the cookie settings in your web browser.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either to implement the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of a given consent or according to Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be restricted if you reject cookies.

4) Contacting us

4.1 Calendly

This website uses the software “Calendly” from the provider Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA to provide an online appointment booking function.
For the purpose of making an appointment, your first and last name as well as your email address (and if applicable your telephone number if you would like to make an appointment by telephone) are collected in accordance with Art. 6 Para. 1 lit. b GDPR and transmitted to Calendly in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment management and stored there for appointment organization. After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by Calendly. We have a data processing agreement with Calendly (“Data Processing Addendum”, which can be viewed at https://calendly.com/pages/dpa) in which we oblige Calendly to protect our customers' data in accordance with legal requirements. Calendly generally transmits collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
Details of Calendly’s privacy policy can be found here: https://calendly.com/de/pages/privacy

4.2

When you contact us (e.g. via contact form, registration form for training courses or email), personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

5) Data processing when opening a customer account and for contract execution

According to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the purpose of concluding a contract or opening a customer account. The data collected is shown in the respective input forms. A deletion of your customer account is possible at any time and can be done by a message to the above-mentioned address of the person in charge. We store and use the data you have provided for the execution of the contract. After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiration of these periods, unless you have expressly consented to further use of your data or a legally permitted further data use by our side has been.

6) comment function

As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the name of the commentator you have chosen will be stored and published on this website. Furthermore, your IP address will be saved for security reasons in order to enable attribution to the author in the event of illegal comments. Your e-mail address will be saved so that you can be contacted if a third party should complain that your published content is illegal.

7) Use of customer data for direct advertising

7.1 Subscribing to our email newsletter

If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used in order to be able to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you will only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6 (1) (a) GDPR. We save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter are used strictly for the specific purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

7.2 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services, such as those already purchased, from our range by e-mail. For this we do not have to obtain a separate consent from you according to § 7 Abs. 3 UWG. In this respect, data processing takes place solely on the basis of our legitimate interest in personalized direct mail in accordance with Art. 6 para. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, we will not send you a mail. You are entitled to object to the use of your e-mail address for the purpose described above at any time with effect for the future by a message to the person named at the beginning. For this purpose, you only have to pay delivery costs according to the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

8) Data processing for order processing

8.1

Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Article 6 (1) (b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact details you provided when ordering (name, address, e-mail address) in order to meet our statutory information requirements in accordance with Art. 6 Para . 1 lit. c GDPR personally using a suitable means of communication (e.g. by post or email) about upcoming updates in the legally stipulated period. Your contact details will be used strictly for the purpose of notifications about updates we owe and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the following service provider (s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Disclosure of personal data to shipping service providers

- DHL

If the delivery of the goods is carried out by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will give your email address in accordance with Art. 6 Para. 1 lit. a GDPR to DHL prior to delivery of the goods for the purpose of agreeing a delivery date or to announce the delivery, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR, only the name of the recipient and the delivery address are forwarded to DHL. The transfer only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible.

The consent can be withdrawn at any time with effect for the future against the person named above or against the transport service provider DHL.

-DPD

If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will give your email address and telephone number before the goods are delivered in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of agreeing a delivery date or to announce the delivery to DPD, provided that you have given your express consent in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO only forwards the name of the recipient and the delivery address to DPD. It will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or the transport service provider DPD.

-FedEx

If the goods are delivered by the transport service provider FedEx (FedEx Express Germany GmbH, Langer Kornweg 34 k, 65451 Kelsterbach), we will give your e-mail address and telephone number before the goods are delivered in accordance with Art. 6 Para. 1 lit. a GDPR to FedEx for the purpose of agreeing a delivery date or to announce the delivery, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR only forwards the name of the recipient and the delivery address to FedEx. It will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with FedEx or the delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or the transport service provider FedEx.

- GLS

If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Strasse 1 - 7, 36286 Neuenstein), we will give your email address in accordance with Art. 6 Para. 1 lit. a GDPR to GLS before the delivery of the goods for the purpose of agreeing a delivery date or to announce the delivery, provided that you have given your express consent for this in the ordering process. Otherwise, we will provide for the purpose of delivery in accordance with Art. 6 Para. b GDPR only forward the name of the recipient and the delivery address to GLS. It will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with GLS or the transmission of status information of the shipment delivery is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or vis-à-vis the transport service provider GLS.

- Hermès

If the goods are delivered by the transport service provider Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg), we will pass on your e-mail address to Hermes before the goods are delivered in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Hermes for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with Hermes in advance or to transmit status information on the delivery of the shipment.

The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider Hermes.

- UPS

If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will give your email address before the goods are delivered in accordance with Art. 6 Paragraph 1 lit. a GDPR for the purpose of agreeing a delivery date or to announce the delivery to UPS, provided you have given your express consent in the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO only forward the name of the recipient and the delivery address to UPS. It will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of status information of the shipment delivery is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the person responsible or the transport service provider UPS.

8.3 Use of payment service providers (payment services)

- Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we will transfer your payment data in the course of payment to PayPal (Europe) Sarl et Cie, SCA, 22- 24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), continue. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment process.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment details may be processed in accordance with Art. 6 Para. 1 lit. f GDPR passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is used, among other things, but not exclusively, to calculate the score values. For more information on data protection law, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data, if this is necessary for the contractual payment.

- Stripe

If you choose a payment method from the payment service provider Stripe, the payment will be processed by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will provide the information and information you provided during the ordering process pass on your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. You can find more information on Stripe's data protection at the URL https://stripe.com/de/privacy#translation.

Stripe reserves the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard the legitimate interest in determining the solvency of the user. If necessary, Stripe transmits the personal data required for a credit check and received as part of payment processing to selected credit agencies, which Stripe discloses to users on request. The credit report can contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Stripe uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the authorization to use the selected payment method.

You can object to this processing of your data at any time by sending a message to Stripe or the commissioned credit bureaus.

However, Stripe may still be entitled to process your personal data if this is necessary for contractual payment processing.

9) web analytics services

9.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your device and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there; it can also be transferred to the Google LLC server. come in the US.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp ()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. With the extension, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google LLC. Server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
With a special function, the so-called "demographic characteristics", Google Analytics also enables the creation of statistics with statements about the age, gender and interests of the site visitors on the basis of an evaluation of interest-related advertising and with the help of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data records recorded via the “demographic characteristics” cannot be assigned to a specific person.
Details on the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading out information on the device used, will only be carried out if you have given us a message in accordance with Art. 6 Para. 1 lit. a GDPR have given your express consent to this. Without this consent, Google Analytics will not be used during your website visit.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing contract with Google for the use of Google Analytics, with which Google is obliged to protect the data of our website visitors and not to pass them on to third parties.
For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

9.2 - 1&1 IONOS Web Analytics

This website uses "1&1 IONOS WebAnalytics", a web analysis service provided by 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur ("1&1 IONOS"), to track and evaluate certain user actions. This is done either via a JavaScript-based tracking pixel implemented on our site or alternatively by reading a log file on the user's device.
Certain user information is collected in an anonymized form via the tracking pixel or by reading the log file, transferred to 1&1 IONOS and evaluated there. This anonymized information includes the user's IP address, referrer abbreviations of the previously visited websites, the type of device used, the browser type used, the operating system used and the time stamp of access).
All processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

10) Page functionalities

10.1 Use of YouTube videos

This website uses the YouTube embedding function do display and play videos of the service provider YouTube, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Here, the extended data protection mode is in use; according to information by the service provider, the storage of user information is only initiated once (a) video/s is/are played. Once embedded YouTube videos start to be played, the service provider YouTube uses cookies to collect information about the user behaviour. According to information provided by YouTube, these cookies are used, amongst others, to collect video statistics, improve the user experience, and prevent misuse. If you are logged into Google, your data will be directly assigned to your account when you click on a video. If you do not want your profile to be assigned to YouTube you will need to log out before activating a video button. Google stores your data (even for users that are not logged in) as user profiles and uses these for analysis. Such analysis is carried out in particular in accordance with Article 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertisements, in market research, and/or Google’s tailored website service. You have the right to object against the creation of these user profiles; you will need to contact YouTube to exercise this right. Within the use of YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.
Independent of the embedded videos being played, every time this website is called up a connection is made to the Google network which may initiate further data handling processes that we cannot influence.

All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent to this in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Without this consent, YouTube videos will not be used during your visit to the site.

You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website using alternative options notified to you on the website.

Further information on data protection at "Youtube" can be found in the Youtube Terms of Use https://www.youtube.com/static?template=terms as well as in Google's privacy policy at https://www.google.de/intl/de/policies/privacy

10.2 Use of Vimeo videos

On our website, plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are embedded. If you call up one of our web pages that contains such a plugin, your browser will establish a direct connection to the Vimeo servers. The content of the plugin will be directly transmitted to your browser by Vimeo and embedded in the page. With this embedding Vimeo receives the information that your browser has called up the respective page of our website even if you do not have a Vimeo account or are not logged into Vimeo at that time. This information (including your IP address) will be transmitted by your browser directly to a server of Vimeo in the USA and stored there.
If you are logged into Vimeo, Vimeo can assign your visit to our website directly to your Vimeo account. If you interact with the plugins, for example by pressing the “Start” button of a video, this information will also be transmitted directly to a server of Vimeo and stored there.
If you do not want Vimeo to assign the data collected through our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.
The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your related rights and setting options to protect your privacy can be found in Vimeo's data protection information: https://vimeo.com/privacy
With Vimeo videos that are embedded in our website the Google Analytics tracking tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is integrated automatically. This is a separate tracking by Vimeo to which we do not have any access and which we cannot influence from our website. Google Analytics uses so-called “cookies” for tracking; these are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website are normally transmitted to a Google server and stored there; this can also be a transmission to the servers of Google LLC in the USA.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, Vimeo videos will not be used during your visit to the site.
You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website using alternative options notified to you on the website.

10.3 - Zoom

We use the “Zoom” service from Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter “Zoom”) to conduct online meetings, video conferences and/or webinars.
When using Zoom, different data is processed. The extent of the data processed depends on what data you provide before or during participation in an online meeting, video conference or webinar. When using Zoom, data from communication participants is processed and stored on Zoom servers. This data may include, in particular, your registration data (name, email address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions from participants, as well as voice input, can be processed in chats.
When processing personal data that is required to fulfill a contract with you (this also applies to processing operations that are required to carry out pre-contractual measures), Article 6 (1) (b) GDPR serves as the legal basis. If you have given us your consent to the processing of your data, the processing will take place on the basis of Article 6(1)(a) GDPR. A given consent can be revoked at any time with effect for the future.
Furthermore, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in the effective conduct of the online meeting, webinar or video conference in accordance with Art. 6 (1) lit. f GDPR. Further information on data usage by Zoom can be found in Zoom’s privacy policy at https://zoom.us/docs/de-de/privacy-and-legal.html

10.4 - Adobe Fonts (Typekit)

For the uniform display of fonts, this page uses so-called web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA ("Adobe"). When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Adobe's servers. This may also involve the transmission of personal data to Adobe's servers in the USA. In this way, Adobe becomes aware that our website was accessed via your IP address.

The processing of personal data when establishing contact with the font provider will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For more information about Adobe Fonts, see https://fonts.adobe.com/ and in Adobe’s privacy policy: https://www.adobe.com/de/privacy.html

- Google web fonts

For a uniform presentation of fonts, this website uses so-called web fonts; these are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you call up a page your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This can also result in the transmission of personal data to the servers of Google LLC. come in the US. In this way, Google becomes aware that our website has been accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google's privacy policy at

https://www.google.com/policies/privacy/

10.5 Google reCAPTCHA

On our website we also make use of the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function mainly serves the purpose of distinguishing between an input being made by a human or being misused by machine or automatic processing. This service includes the transmission of the IP address and any other data required by Google for the reCAPTCHA service to Google and is in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in establishing individual responsibility in the Internet and the prevention of misuse and spam. Within the use Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

To the extent legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR to process your data as described above. You can revoke your consent at any time with effect for the future.

To exercise your right of withdrawal, please follow the objection procedure described above.

10.6 Google Translate

This site uses the "Google Translate" translation service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") via an API integration. The browser you are using connects to the Google servers so that the translation is automatically displayed according to your choice of a national language. Google uses so-called "cookies", which are text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there; it can also be transferred to the Google LLC server. come in the US.

You can find more information about Google Translate and Google's privacy policy at: https://www.google.com/policies/privacy/

You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

11) Rights of the data subject

11.1 The applicable data protection law grants you the following rights of data subjects (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:
- Right to information according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to information according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR;
- Right to complain according to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA WITHIN A BALANCING OF INTERESTS AND BASED ON OUR OVERRIDING LEGITIAMTE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS EMANATING FROM YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA. WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING PRIVILEGED REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA FOR DIRECT ADVERTISING PURPOSES.

12) Storage period of personal data

The storage duration of personal data is determined by the respective legal framework, the processing purpose, and - where appropriate - additionally by the respective legal retention period (e.g. retention periods pertaining to commercial or tax legislation).

When processing personal data based on an explicit consent in accordance with Article 6(1)(a) GDPR this data will be stored until the data subject withdraws their consent.

If legal retention periods exist for data that have been processed within transactional or transactional-similar obligations on the basis on Article 6(1)(b) GDPR, these data will be routinely erased after expiry of the retention period provided they are no longer required for the fulfilment or initiation of a contract and/or no legitimate interest on continued storage continues from our side.

When processing personal data on the basis of Article 6(1)(f) GDPR we will store these data until the data subject exercises their right to object in line with Article 21(1) GDPR, unless we can prove compelling privileged reasons for processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defence of legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6(1)(f) GDPR these data are stored until the data subject exercises their right to object in line with Article 21(2) GDPR.

If any other information of this declaration about specific processing situations does not result in any other outcomes, stored personal data will be erased when they are no longer required for the purposes for which they were collected or processed in any other way.

Copyright notice: This privacy statement was created by the specialist lawyers of the IT law firm and is protected by copyright (https://www.it-recht-kanzlei.de)

Version of 26.04.2022