thousands of satisfied customers

Privacy policy

Privacy policy of the website and at the same time information of data subjects according to article 13 and article 14 DSGVO


I. Name and address of the responsible person

The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
watt24 GmbH
Zum Kleifeld 13 | D-59469 Ense
Telefon: +49 (0) 69 66 773 73 95
E-mail: info@watt24.com 

II. Name and address of the data protection officer

The data protection officer of the data controller is:
Thorsten Schröers | SAFE-PORT Consulting GmbH
Hülshoff-Strasse 7 | D-59469 Ense 
Phone: +49 (0) 2938 977 978 
E-mail: privacy@safe-port.de 

III. general information on data processing

1. scope of the processing of personal data
As a matter of principle, we process personal data of our users only insofar as this is necessary for the provision of a functional website as well as our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.

2. legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) f DSGVO serves as the legal basis for the processing. 

3. data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

4. note on data transfer to the USA
Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. We have concluded valid appropriate guarantees with the service providers for the transfer to these third countries in accordance with Art. 46 (2) DSGVO. If you have any further questions, please feel free to contact our data protection officer.

IV. Provision of the website and creation of log files

1. hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).
Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.
In order to ensure data protection-compliant processing, we have concluded an order processing agreement with our hoster.

2. description and scope of data processing
For the use of our website for information purposes only, it is generally not necessary for you to provide personal data. Each time you access our website, our system automatically collects data and information from the computer system of the calling end device.
The following data is collected:
  • browser type and browser version
  • Operating system used
  • referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address
The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

3. legal basis for the data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

4. purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider.
These purposes also include our legitimate interests in data processing according to Art. 6 Para. 1 lit. f DSGVO.

5. duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

6. possibility of objection and elimination
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

V. Data collection on this website

a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. We also use cookies on our website that enable an analysis of the user's surfing behavior.
When calling up our website, the user is informed about the use of cookies by a Consent banner and his consent to the processing of personal data used in this context is obtained and documented in accordance with data protection law. In this context, there is also a reference to this privacy policy. There is also a reference in this context to how the storage of cookies can be prevented in the browser settings.
Whether cookies can be set and retrieved, you can determine yourself through the settings in your browser. You can, for example, completely deactivate the storage of cookies in your browser, limit it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback on this. For the full functionality of our website, however, it is necessary for technical reasons to allow the above.

b) Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f DSGVO.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) lit. a DSGVO if the user has given his consent in this regard; consent can be revoked at any time.

c) Purpose of data processing
If there is a use of technically necessary cookies:
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f DSGVO.
The user data collected through technically necessary cookies are not used to create user profiles.
The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

d) Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as the user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
You will be informed about the exact storage period in the notes in our Consent Tool. Consents already given can be revoked there.


2. cookie consent-tool OneTrust
a) Description and scope of data processing
Our website uses the cookie consent technology of OneTrust, LLC, represented in two main offices in the USA and England: Atlanta, GA, USA (Co-Headquarters), 1200 Abernathy Rd NE, Building 600, Atlanta, GA 30328 United States, as well as London, England (Co-Headquarters), Dixon House, 1 Lloyd's Avenue, London, EC3N 3DQ (hereinafter "OneTrust"), in order to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection regulations.
When you enter our website, a OneTrust cookie is stored in your browser in order to be able to assign the consents you have given or their revocation. The data collected in this way is stored until you request us to delete it, delete the Consent Manager Provider cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

b) Legal basis for data processing
OneTrust is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c DSGVO.

c) Further information
We have concluded an order processing agreement with OneTrust. This is a contract required by data protection law, which ensures that OneTrust only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.

3. google analytics
a) Description, purpose and scope of data processing
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used and the origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

b) Legal basis for data processing
The use of this analysis tool is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

c) Duration of storage, possibility of objection and removal.
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

d) Further information
IP Anonymization
we have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Order processing
We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics with Google Analytics
This website uses the "demographic characteristics" function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that include statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".

Google Analytics E-Commerce-Tracking
This website uses the "e-commerce tracking" function of Google Analytics. With the help of e-commerce tracking, the website operator can analyze the purchasing behavior of website visitors in order to improve its online marketing campaigns. This involves recording information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product. This data can be summarized by Google under a transaction ID, which is assigned to the respective user or his device.

4. Google AdWords andGoogle Conversion Tracking
Google Ads
a) Description, purpose and scope of data processing
The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to play advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks.

b) Legal basis for data processing
The use of Google Ads is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in marketing its service products as effectively as possible.

c) Further information
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Google Conversion Tracking
a) Description, purpose and scope of data processing
This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google conversion tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

b) Legal basis for data processing
The use of Google conversion tracking is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. Insofar as a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.

c) Further information
More information on Google conversion tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

5. Facebook Pixel
a) Description, purpose and scope of data processing.
This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries.
In this way, the behavior of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

b) Legal basis for data processing
The use of Facebook Pixel is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in effective advertising measures including social media. Insofar as a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.

c) Possibility of objection and removal.
You can also deactivate the "Custom Audiences" remarketing function in the Advertising Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must be logged in to Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

d) Further information
You can find further information on protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.


6. Microsoft Advertising ("Bing Ads")
a) Description, purpose and scope of data processing
This website uses Microsoft Advertising (formerly Bing Ads), a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter referred to as: "Microsoft"). Microsoft Advertising collects and stores data from which usage profiles are created using pseudonyms.
If you access our website via a Bing ad, Microsoft will store a cookie on your terminal device. This cookie has a limited validity. We ourselves only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the identity of the user is communicated. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to that page. In doing so, the following information may be collected, among other things: IP address, identifiers assigned by Microsoft (identifiers), information about the browser you are using and about the device you are using, referrer URL (web page from which you accessed our website), URL of our website.

b) Legal basis for data processing
We use Microsoft Advertising for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 lit. f DSGVO.
The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO.

c) Possibility of objection and removal
You can prevent the evaluation by deleting existing cookies and deactivating a storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all functions of our website to their full extent. In addition, you can prevent the display of personalized advertising by Microsoft by setting an opt-out cookie on the website linked below: https://choice.microsoft.com/de-de/opt-out. Please note that this setting will be deleted when you delete your cookies.

d) Further information
Microsoft guarantees compliance with the EU data protection level based on the standard contractual clauses.
For more information on data protection and the cookies used by Microsoft Advertising, please see Microsoft's privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
For more information about Microsoft Advertising's analytics services: https://help.ads.microsoft.com/#apex/3/de/53056/2.


7. LinkedIn Analytics / Insight Tag
a) Description, purpose and scope of data processing.
This website uses the Insight tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
With the help of the LinkedIn Insight Tag, we obtain information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g., country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, we can measure your user behavior on our website with the help of LinkedIn Insight Tags (conversion measurement). Conversion measurement can also take place across devices. LinkedIn Insight Tag also offers a retargeting function, with the help of which we can display targeted advertising to visitors to our website outside of the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.

b) Legal basis for data processing
We use LinkedIn Analytics for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO.
The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 (1) lit. a DSGVO.

c) Possibility of objection and elimination
You can prevent the evaluation by deleting existing cookies and deactivating a storage of cookies in the settings of your web browser. We point out that in this case you may not be able to use all functions of our website in full. You can object to the analysis of usage behavior as well as targeted advertising by LinkedIn under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. We would like to point out that this setting will be deleted when you delete your cookies.
Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in the account settings. To avoid a linkage of data collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

d) Further Information
We have concluded an order processing agreement with LinkedIn. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs. For more information from the third-party provider, please see LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

8. AWIN
a) Description, purpose and scope of data processing.
This website uses components of the company AWIN (the operating company of AWIN is AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany). AWIN is a German affiliate network and serves as an interface between merchants and affiliates.
As part of its tracking services, AWIN stores cookies for the documentation of transactions (e.g., of leads and sales) on end devices of users who visit or use websites or other online offers of its customers (e.g., register for a newsletter or place an order in an online store). These cookies serve the sole purpose of a correct allocation of the success of an advertising medium and the corresponding billing within the scope of its network. The tracking cookie of AWIN does not store any personal data, but only the ID of the referring partner as well as the order number of the advertising medium clicked on by the visitor, which are required for payment processing.

b) Legal basis for data processing
The described processing is carried out on the basis of our legitimate financial interest in the processing of commission payments with AWIN pursuant to Art. 6 (1) lit. f DSGVO.

c) Possibility of objection and removal.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent AWIN from setting a cookie on the information technology system of the data subject. In addition, cookies already set by AWIN can be deleted at any time via an internet browser or other software programs.4

d) Further Information
The applicable data protection provisions and information on the use of data by AWIN can be found at https://www.awin.com/de/rechtliches/privacy-policy.

9. Criteo
This website uses functions from Criteo. The provider is Criteo SA, 32 Rue Blanche, 75009 Paris (hereinafter "Criteo").
Criteo is used to display interest-based advertisements to you within the Criteo advertising network. Your interests are determined on the basis of your previous usage behavior. Here, Criteo records, for example, which products you have viewed, added to your shopping cart or purchased.
In order to be able to show you interest-based advertising, we or other Criteo partners must be able to recognize you. For this purpose, a cookie is stored on your terminal device or a comparable identifier is used that links your user behavior to a pseudonymous user profile.

b) Legal basis for data processing
Criteo is used in the interest of targeted advertising measures. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. Insofar as a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.

c) Possibility of objection and removal.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. You can also deactivate the Criteo services via https://www.criteo.com/de/privacy/.

d) Further information
For details on data processing by Criteo, please refer to Criteo's privacy policy at: https://www.criteo.com/de/privacy/.
Criteo and we are joint data controllers within the meaning of Art. 26 DSGVO. An agreement on joint processing has been concluded between Criteo and us, the main contents of which Criteo describes under the following link: https://www.criteo.com/de/privacy/how-we-use-your-data/.

VI. own services (use of offers, contact possibilities and applications)

1. contact form
a) Description and scope of data processing
Our website contains our contact data and contact form, which can be used to contact us. If a user takes the opportunity via the contact form, the data entered in the input mask is transmitted to us and stored. These data are:
  • Name
  • E-mail address
  • Company
  • Telephone number (optional)
  • Other data within the message
At the time of sending the message, the following data is also stored:
  • The IP address of the user
  • Date and time of sending
For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy.
We use the customer relationship management (CRM) "HubSpot", a service of HubSpot Ireland Limited, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland (hereinafter referred to as "HubSpot"). HubSpot is a web-based CRM and pipeline management solution that allows us to track and structure our communications with our customers.
Alternatively, it is possible to contact us via the e-mail address or telephone number provided. In this case, the transmitted personal data (name and inquiry) of the user will be stored and processed by us for the purpose of processing your request.
In this context, the data will not be passed on to third parties without your consent. The data will be used exclusively for the processing of the conversation.

b) Legal basis for the data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending a request is Art. 6 (1) lit. f DSGVO. The legitimate interest consists in an efficient and fast processing of user requests. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.

c) Purpose of the data processing
The processing of the personal data from the input mask or the data transmitted in another way serves us to process the establishment of contact and the handling of user inquiries. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

d) Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

e) Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. To withdraw your consent, you can contact our data protection officer at any time using the above contact details.
All personal data stored in the course of contacting us will be deleted in this case.

f) Further Information
For more information about "HubSpot", please see the "HubSpot" section of this Privacy Policy.

2. Newsletter
a) Description and scope of data processing
On our website there is the possibility to subscribe to a free newsletter. In doing so, the data from the input mask is transmitted to us when you register for the newsletter. In order to be able to subscribe to our e-mail newsletter service, we require, in addition to your consent under data protection law, at least your e-mail address to which the newsletter is to be sent and, for personal address, your name. In addition, the date and time of registration are collected.
For the newsletter dispatch, we use the so-called double opt-in procedure, i.e. we will only send you the newsletter if you first confirm your registration via a confirmation e-mail sent to you for this purpose by means of a link contained therein. In this way, we want to ensure that only you, as the owner of the e-mail address provided, can register for the newsletter. Your confirmation in this regard must be made within 5 working days after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

b) Legal basis for data processing
The legal basis for the processing of data for newsletter marketing is Art. 6 (1) lit. a DSGVO if the user has given his consent.
Insofar as we transfer data to third countries, we have taken appropriate guarantees in accordance with Art. 46 DSGVO in connection with the transfer. We would like to point out that in these countries, due to deviating laws, the level of data protection may differ compared to the DSGVO.

c) Purpose of the data processing
Any further information is voluntary and will be used to address you personally and to personalize the content of the newsletter as well as to clarify queries regarding the e-mail address. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

d) Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address is stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.

e) Possibility of objection and removal
You can unsubscribe from a newsletter you have subscribed to with us at any time. To do so, you can either send us an informal e-mail to the contact details above or use the link at the end of the newsletter to cancel. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. This also enables a revocation of consent to the storage of personal data collected during the registration process.
After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist, if necessary, in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.7

f) Furhter Information
For more information about "HubSpot", please see the "HubSpot" section of this Privacy Policy.

3. Live-Chat
a) Description, purpose and scope of data processing.
This website uses HubSpot's live chat feature, "Messages". The content you enter there is processed accordingly by the HubSpot system and allows you to contact us directly.

b) Legal basis for data processing
The processing of data is based on the user's consent (Art. 6 para. 1 lit. a DSGVO).
Insofar as the processing is not based on your consent, the processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website, as well as for the uniform control of various channels.

c) Duration of storage
Data is deleted as soon as it is no longer required for our recording purposes.

d) Possibility of objection and elimination
If you do not want HubSpot to process your data, you can prevent this by means of your browser settings or by using the opt-out function.

e) Further information
For more information about "HubSpot", please see the "HubSpot" section of this Privacy Policy.

4. registration on this website and partner program of watt24
a) Description, purpose and scope of data processing
You can register on this website in order to use additional functions on the site. We use the data you enter for this purpose only for the purpose of using the particular offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration. Which data is collected can be seen from the respective input form masks.
For important changes, for example in the scope of the offer or in the case of technically necessary changes, we use the e-mail address provided during registration to inform you in this way.

b) Legal basis for data processing
The data entered during registration is processed for the purpose of implementing the user relationship established by registration and, if necessary, for initiating further contracts (Art. 6 para. 1 lit. b DSGVO).

c) Duration of storage
The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Legal retention periods remain unaffected.

5. handling of applicant data
a) Description and scope of data processing
We offer you the opportunity to apply to us (e.g. by e-mail or by post) In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.#

b) Legal basis for data processing
The legal basis for data processing is § 26 BDSG n.F. under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG n.F. and Art. 6 (1) lit. b DSGVO for the purpose of implementing the employment relationship.

c) Purpose of data processing
If you apply to us, we will collect and process your personal data for the purpose of handling the application process, deciding on the establishment of an employment relationship and carrying out pre-contractual measures.
Only authorized employees from the HR department or employees involved in the application process have access to your data.
Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.

d) Duration of storage
Your data will be stored for a period of 6 months beyond the end of the application process. As a rule, this is done to fulfill legal obligations or to defend against any claims arising from legal regulations. Subsequently, we are obliged to delete or anonymize your data. In this case, the data will only be available to us as so-called metadata without direct reference to individuals for statistical evaluations (for example, proportion of women or men in applications, number of applications per period, etc.).
You will not be informed separately about the deletion of your data.
In addition, we reserve the right to store your data for inclusion in our "Talent Pool" for one year after the end of the application process in order to identify any other interesting positions for you. This also applies, for example, to applications for apprenticeships or internships. For this purpose, we will provide you with a separate consent form in which you can agree to the possible further storage of your data and inclusion in our "Talent Pool". The data will be deleted from the "talent pool" after one year.
You will not be informed separately about the deletion of your data.
If you receive an offer of employment with us as part of the application process and accept this, we will store the personal data collected as part of the application process for at least the duration of the employment relationship.

e) Possibility of objection and elimination
If personal data is processed by us as the controller, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR) depending on the legal basis and purpose of the processing. These can be found in the chapter "Rights of the data subject" of this privacy statement.
If the processing of personal data is based on your consent, you have the right to revoke this consent under data protection law in accordance with Article 7 (3) DSGVO. Please contact our data protection officer at the above-mentioned contact details to assert your data subject rights with regard to the data processed in the application process.

VII Social media

1. processing of personal data
We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below.
Social networks such as Facebook, Twitter, etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

2. legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).
In part, the use of our social media presences is based on Art. 6 (1) lit. f DSGVO (legitimate interests). Our interests lie in the analysis of trends, the interaction with our social media users and the improvement of our campaigns and services. If you require further information on the balancing of interests to be carried out pursuant to Art. 6 (1) lit. f DSGVO, please contact our data protection officer using the contact details provided in this privacy policy. If necessary, we will obtain your consent for the data processing (Art. 6 para. 1 lit. a DSGVO).

3. data controller and assertion of rights.
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Insofar as personal data is processed by us as the controller, you as the data subject have certain rights from Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing. These can be found in the chapter "Rights of the data subject" of this privacy policy.

4. storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

5. social media appearances
5.1 Facebook
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Facebook ("Joint Controller"). This agreement specifies the data processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement and the addendum to this agreement at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum (Agreement) and
https://www.facebook.com/legal/controller_addendum (Responsible Party Addendum).
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in:
https://www.facebook.com/settings?tab=ads.
For details, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.

5.2 Instagram
We have a profile on Instagram. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on their handling of your personal data, please refer to Instagram's privacy policy:
https://help.instagram.com/519522125107875.

5.3 Xing
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how they handle your personal data, please refer to XING's data protection statement:
https://privacy.xing.com/de/datenschutzerklaerung.

5.4 LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you would like to disable LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
For details on their handling of your personal data, please refer to LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy.

6. further information on our social media presences.
Facebook - For more information on how you can assert or implement your data subject rights directly against Facebook, please visit:
https://www.facebook.com/privacy/explanation.
Instagram - For further information on how you can assert or implement your data protection rights directly against Facebook (as operator of Instagram), please contact:
https://www.facebook.com/help/instagram/155833707900388.
LinkedIn - For further information on how you can assert or implement your data protection rights directly against LinkedIn, please contact:
https://www.linkedin.com/help/linkedin/answer/50191?trk=microsites-frontend_legal_privacy-policy.

VIII Plugins, tools and affiliate programs

1. YouTube with extended data protection
This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can save various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent was requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
For more information about data protection at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

2. Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

3. HubSpot
We use the CRM system of the provider HubSpot, a software company from the USA with a branch in Ireland (Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland), in order to be able to process user inquiries faster and more efficiently and to optimize our contact management (legitimate interest pursuant to Art. 6 (1) lit. f. DSGVO).
We have concluded an order processing agreement with HubSpot, according to which HubSpot only processes your data on our behalf: https://legal.hubspot.com/de/dpa.
HubSpot offers various functions, of which we use the contact forms, newsletter software, tracking and analysis CRM (Customer Relation Management) and chat software functions.
You can find more information about data processing by HubSpot on HubSpot's website: https://www.hubspot.de/data-privacy/gdpr.

4. Affilinet
The controller has integrated components of the company Affilinet on this website. Affilinet is a German affiliate network that offers affiliate marketing.
Affiliate marketing is an Internet-based form of distribution that enables commercial operators of websites, so-called merchants or advertisers, to display advertisements, which are usually remunerated via click or sale commissions, on third-party websites, i.e. on the websites of distribution partners, who are also called affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of Internet advertising, which is subsequently integrated by an affiliate on its own Internet pages or advertised via other channels, such as keyword advertising or e-mail marketing.
The operating company of Affilinet is Affilinet GmbH, Sapporobogen 6-8, 80637 Munich, Germany.
Affilinet sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. The tracking cookie from Affilinet does not store any personal data. Only the identification number of the affiliate, i.e. the partner referring the potential customer, as well as the order number of the visitor to a website and the advertising material clicked on are stored. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Affilinet.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Affilinet from setting a cookie on the information technology system of the data subject. In addition, cookies already set by Affilinet can be deleted at any time via an internet browser or other software programs.
Affilinet's applicable privacy policy can be accessed here: https://www.awin.com/de/datenschutzerklarung?utm_medium=redirect&utm_source=www.affili.net

5. Trustpilot
We use the review portal Trustpilot to publish reviews from our customers. For this purpose we give your email address, first name and an internal booking number to Trustpilot A/S, Trommesalen 5, 3. sal, 1614 Copenhagen (Denmark).
Your participation is of course voluntary. After submission, your reviews will be published according to Trustpilot's guidelines on their websites and possible partners. Reviews can also be published in Google search results. However, a right to publication does not arise from this.
The legal basis for the processing is your consent (Art. 6 DSGVO para. 1 lit a.). Your rights as a data subject remain, including the revocation of your consent. Completed processes remain unaffected by future objections.
All details and data protection conditions of the provider Trustpilot are published at https://legal.trustpilot.de/end-user-privacy-terms and https://legal.trustpilot.de/end-user-terms-and-conditions.

IX. eCommerce and payment providers

Processing of data (customer and contract data)
We collect, process and use personal data only to the extent that it is necessary for the establishment, content or amendment of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill the user.
The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transfer upon conclusion of a contract for online stores, dealers and shipment of goods
We transmit personal data to third parties only if this is necessary in the context of the contract, such as to the companies entrusted with the delivery of the goods or the credit institution entrusted with the payment processing. A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

Data transfer upon conclusion of a contract for services and digital content
We transmit personal data to third parties only if this is necessary in the context of the contract, for example, to the credit institution entrusted with the processing of payments.
Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Payment service provider
We integrate payment services from third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, account details, credit card number) is processed by the payment service provider for the purpose of payment processing. For these transactions, the respective contract and data protection provisions of the respective providers apply. The use of the payment service providers is based on Art. 6 para. 1 lit. b DSGVO (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f DSGVO). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a DSGVO is the legal basis for data processing; consents can be revoked at any time for the future.
We use the following payment services / payment service providers within the scope of this website:

PayPal
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). For details, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Sofortüberweisung
The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "Sofort GmbH"). With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfill our obligations. If you have chosen the payment method "Sofortüberweisung", you transmit the PIN and a valid TAN to Sofort GmbH, with which it can log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have transmitted. It then immediately sends us a transaction confirmation. After logging in, it also automatically checks your turnover, the credit line of the overdraft facility and the existence of other accounts and their balances. In addition to the PIN and the TAN, the payment data you have entered as well as data about yourself are also transmitted to Sofort GmbH. The personal data is your first and last name, address, telephone number(s), e-mail address, IP address and, if necessary, other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud attempts. Details on payment with Sofortüberweisung can be found in the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

X. Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:
1. right to information
You may request confirmation from the controller as to whether personal data concerning you are being processed by us.
If such processing is taking place, you may request information from the controller about the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data, if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.


2. right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

3. right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defense of legal claims; or
(4) if you have objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the controller's legitimate grounds override your grounds.
If the processing of personal data relating to you has been restricted, such data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4 Right to erasure
4.1 Obligation to delete
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) DSGVO and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
(4) The personal data concerning you have been processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you was collected in relation to services offered by the information society pursuant to Art. 8 (1) DSGVO.

4.2 Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it in accordance with Art. 17(1) DSGVO, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

4.3 Exceptions
The right to erasure does not exist to the extent that the processing is necessary for.
(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
(5) for the assertion, exercise or defense of legal claims.

5. Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against the controller to be informed about these recipients.

6. right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that.
(1) the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and
(2) the processing is carried out with the help of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.


8. right to revoke the declaration of consent under data protection law.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9 Automated decision in individual cases including profiling.
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

10. right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

XI. Data security, third party websites, changes

1. SSL or TLS encryption
or security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

2. data protection and third party websites
The Website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or warranty for third-party content or data protection conditions. Please make sure that you are aware of the applicable data protection conditions before you submit personal data to these websites.

3. changes to this privacy policy
We reserve the right to change these data protection provisions at any time with effect for the future. A current version is available on the website. Please visit the website regularly and inform yourself about the applicable data protection provisions.

Status 10/16/2020 | v1.11.3