Privacy Policy
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the “Information on the responsible body” section of this privacy policy.
How do we collect your data?
Your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g., Internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other order inquiries.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time if you have any questions about this or other data protection issues.
Analysis tools and third-party tools
When you visit this website, your surfing behavior may be statistically evaluated. This is mainly done using so-called analysis programs.
Detailed information about these analysis programs can be found in the following privacy policy.
2. Hosting
We host the content of our website with the following provider:
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter IONOS). When you visit our website, IONOS collects various log files, including your IP addresses. For details, please refer to the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.
The use of IONOS is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in ensuring that our website is as reliable as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Information about the responsible body
The responsible body for data processing on this website is: Martina Fuchs
Frank-Wedekind-Straße 2
65201 Wiesbaden, Germany
Phone: +49 170 150 53 54
E-Mail: contact@toolquanta.comThe responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage period
Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will take place after these reasons no longer apply.
General information on the legal basis for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, if special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g., via device fingerprinting), data processing is also carried out on the basis of Section 25 (1) TDDDG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation on the basis of Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The relevant legal basis in each individual case is explained in the following paragraphs of this privacy policy.
Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The relevant legal basis in each individual case is explained in the following paragraphs of this privacy policy.
Note on data transfer to third countries that are not secure under data protection law and transfer to US companies that are not DPF-certified
Among other things, we use tools from companies based in third countries that are not secure in terms of data protection law, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to these countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in third countries that are not secure in terms of data protection law.
We would like to point out that the US, as a secure third country, generally has a level of data protection comparable to that of the EU. Data transfer to the US is therefore permissible if the recipient is certified under the EU-US Data Privacy Framework (DPF) or has appropriate additional safeguards in place. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
Recipients of personal data
As part of our business activities, we work with various external parties. In some cases, this requires the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary for the performance of a contract, if we are legally obliged to do so (e.g., passing on data to tax authorities), if we have a legitimate interest in passing on the data in accordance with Art. 6 (1) lit. f GDPR, or if another legal basis permits the transfer of data. When using processors, we only pass on our customers’ personal data on the basis of a valid contract for data processing. In the case of joint processing, a contract for joint processing is concluded.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
Information, Correction, and Deletion
You have the right, in accordance with applicable legal provisions, to request free information about your stored personal data, its origin, recipients, and the purpose of processing, and, if applicable, the right to correction or deletion of this data. For this purpose, as well as for any further questions regarding personal data, you can contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of processing your personal data. You can contact us at any time regarding this. The right to restriction of processing applies in the following cases:
- If you dispute the accuracy of your stored personal data, we usually need time to verify this. During the verification process, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data is unlawful, you can request the restriction of data processing instead of its deletion.
- If we no longer need your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing your personal data instead of its deletion.
- If you have filed an objection under Article 21(1) GDPR, a balancing of interests between yours and ours must be carried out. As long as it is not determined whose interests outweigh, you have the right to request the restriction of processing your personal data.
If you have restricted the processing of your personal data, these data—aside from storage—may only be processed with your consent, for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a member state.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Objection to Advertising E-Mails
We hereby object to the use of contact data published within the scope of the legal notice for sending unsolicited advertisements and informational materials. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
4. Data Collection on this Website
Cookies
Our websites use so-called “cookies.” Cookies are small data packets and do not harm your device. They are either temporarily stored for the duration of your session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them or they are automatically deleted by your web browser.
Cookies may come from us (first-party cookies) or third parties (third-party cookies). Third-party cookies enable the integration of certain third-party services within websites (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., shopping cart functions or video display). Other cookies may be used for evaluating user behavior or for advertising purposes.
Cookies that are required for carrying out electronic communication processes, for providing certain functions you want (e.g., for the shopping cart function), or for optimizing the website (e.g., cookies for measuring web audience) are stored based on Article 6(1)(f) GDPR, unless another legal basis is provided. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of their services. If consent for storing cookies and similar technologies is requested, the processing is solely based on this consent (Article 6(1)(a) GDPR and Section 25(1) TDDG); consent can be revoked at any time.
You can set your browser to inform you when cookies are set and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may restrict the functionality of this website.
The cookies and services used on this website can be found in this privacy policy.
Use of Complianz Cookie-Consent Tool
We use the Complianz Cookie-Consent Tool on this website to obtain user consent for the storage of certain cookies and the processing of their personal data in accordance with the General Data Protection Regulation (GDPR) and the ePrivacy Directive (Cookie Law). Complianz enables us to transparently collect users’ consent and manage the use of cookies on our website.
Data Used:
In the context of cookie consent, Complianz does not store any personal data without the explicit consent of the user. The tool only uses technically necessary cookies to store the user’s preferences and ensure compliance with legal requirements.
Purpose of Data Processing:
The collected data is used to store the user’s choice regarding consent to the use of cookies and to manage the display of cookie banners and opt-out options. No data is used for marketing purposes.
Consent and Withdrawal:
By using Complianz, users have the option to grant or deny consent for the use of cookies. Users can withdraw their consent at any time by adjusting their cookie settings or deleting cookies in their browser settings.
Further Information:
For more details on privacy and cookie usage by Complianz, including the processing of data and the exact functionality, please visit the Complianz Privacy Policy.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data will not be merged with other data sources.
The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of their website – for this purpose, the server log files must be collected.
Contact Form
If you send us inquiries via contact form, your information from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not share this data without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR) if requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—especially retention periods—remain unaffected.
Inquiry via E-Mail, Telephone, or Fax
If you contact us via email, telephone, or fax, your inquiry, including any personal data arising from it (name, inquiry), will be stored and processed by us for the purpose of addressing your request. We will not share this data without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR) if requested; consent can be revoked at any time.
The data you send us through contact inquiries will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—particularly legal retention periods—remain unaffected.
5. Social Media
Social Media Elements with Shariff
This website uses elements from social media (e.g., Facebook, X, Instagram, Pinterest, XING, LinkedIn, Tumblr).
These social media elements can usually be recognized by their respective social media logos. To ensure data privacy on this website, we use these elements only together with the so-called “Shariff” solution. This application prevents the social media elements integrated into this website from transmitting your personal data to the respective provider the moment you visit the site.
Only when you activate the respective social media element by clicking the associated button is a direct connection to the provider’s server established (consent). Once you activate the social media element, the respective provider receives the information that you have visited this website with your IP address. If you are simultaneously logged into your respective social media account (e.g., Facebook), the provider can associate the visit to this website with your user account.
Activating the plugin constitutes consent within the meaning of Article 6(1)(a) GDPR and Section 25(1) TDDG. This consent can be revoked at any time with effect for the future.
The use of the service is to obtain the legally required consents for the use of certain technologies. The legal basis for this is Article 6(1)(c) GDPR.
Facebook (Meta Platforms)
This website integrates features from the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
An overview of Facebook social media features can be found here: Facebook Plugins.
When the social media element is active, a direct connection is established between your device and the Facebook server. This allows Facebook to gather information that you have visited this website using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This enables Facebook to associate your visit to this website with your user account. We want to clarify that as the website operator, we have no knowledge of the content of the transmitted data or its usage by Facebook. For more information, please refer to Facebook’s Privacy Policy: Facebook Privacy.
The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG. You can withdraw your consent at any time.
In case personal data is collected through the use of the tool described here and transmitted to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook. The further processing by Facebook is not part of the joint responsibility. Our mutual obligations have been set out in an agreement on joint processing. The text of the agreement can be found here: Facebook Controller Addendum.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: EU Data Transfer Facebook.
X (formerly Twitter)
This website integrates features of the service X (formerly Twitter), provided by the parent company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For data processing of persons outside the USA, the responsible entity is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
When the social media element is active, a direct connection is established between your device and the X server. This allows X (formerly Twitter) to gather information about your visit to this website. By using X (formerly Twitter) and the “Re-Tweet” or “Repost” feature, the websites you visit are linked to your X (formerly Twitter) account and made visible to other users. We want to clarify that as the website operator, we have no knowledge of the content of the transmitted data or its usage by X (formerly Twitter). For more information, please refer to X’s Privacy Policy: X Privacy.
The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG. You can withdraw your consent at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: X EU Data Transfer.
This website integrates features from the service Instagram, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram gathers information about your visit to this website.
If you are logged into your Instagram account, by clicking the Instagram button, you can link the content of this website to your Instagram profile. This allows Instagram to associate your visit to this website with your user account. We want to clarify that as the website operator, we have no knowledge of the content of the transmitted data or its usage by Instagram.
The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG. You can withdraw your consent at any time.
If personal data is collected through the tool described here and transmitted to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook or Instagram. The further processing by Facebook or Instagram is not part of the joint responsibility. Our mutual obligations have been set out in an agreement on joint processing. The text of the agreement can be found here: Facebook Controller Addendum.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: EU Data Transfer Facebook.
Tumblr
This website uses buttons and other elements from the service Tumblr. The provider is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA. When the social media element is active, a direct connection is established between your device and the Tumblr server. Tumblr receives information about your visit to this website. The Tumblr buttons allow you to share a post or a page on Tumblr or follow the provider on Tumblr. When you visit one of our pages with a Tumblr button, the browser establishes a direct connection with Tumblr’s servers. We have no influence over the amount of data that Tumblr collects and transmits through this plugin. Currently, it is known that Tumblr transmits the user’s IP address and the URL of the visited website.
The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG. You can withdraw your consent at any time. Further information can be found in Tumblr’s privacy policy here: https://www.tumblr.com/privacy/de.
This website uses elements of the social network Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. When you visit a page containing such an element, your browser establishes a direct connection to Pinterest’s servers. This social media element transmits log data to Pinterest’s servers in the USA. These log data may include your IP address, the address of the visited pages that also contain Pinterest features, browser type and settings, date and time of the request, your use of Pinterest, and cookies. The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG. You can withdraw your consent at any time. For more information about the purpose, scope, and further processing of your data by Pinterest, as well as your rights and privacy protection options, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure that European data protection standards are adhered to when processing data in the USA. Any company certified under the DPF commits to complying with these data protection standards. For more information, visit: https://www.dataprivacyframework.gov/participant/4203.
6. Analysis Tools and Advertising
IONOS WebAnalytics
This website uses the analysis services of IONOS WebAnalytics (hereinafter: IONOS). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur. In the context of analyses with IONOS, visitor numbers and behavior (e.g., number of page views, visit duration, bounce rates), visitor sources (i.e., from which page the visitor comes), visitor locations, and technical data (browser and operating system versions) may be analyzed. For this purpose, IONOS stores the following data:
- Referrer (previously visited webpage)
- Requested webpage or file
- Browser type and version
- Used operating system
- Used device type
- Time of access
- IP address in anonymized form (used only to determine the location of access)
According to IONOS, the data collection is fully anonymized, so it cannot be traced back to individual persons. IONOS WebAnalytics does not store cookies. The storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior in order to optimize both their web offering and advertising. If consent was requested, processing is based exclusively on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per the TDDG. Consent can be withdrawn at any time. For more information on data collection and processing by IONOS WebAnalytics, please refer to IONOS’s privacy policy here: https://www.ionos.de/terms-gtc/datenschutzerklaerung/.
Data Processing Agreement (DPA)
We have entered into a Data Processing Agreement (DPA) for the use of the above service. This is a legally required agreement to ensure that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Matomo (formerly Piwik)
Matomo is an open-source analytics platform that allows website owners to track user behavior on their site. Unlike many other analytics tools, Matomo stores all data locally, giving the website owner full control over the collected information. Matomo provides detailed insights into visitor numbers, time spent on the site, visitor sources, pages visited, devices used, and much more.
Data collection is done in compliance with privacy regulations, particularly the GDPR. Matomo can be configured to operate without cookies, helping to protect user privacy. It also offers the option to run the tool in an anonymized mode, meaning no personally identifiable information is collected.
7. Newsletter
Newsletter Data
If you wish to receive the newsletter offered on the website, we require an email address and information that allows us to verify that you are the owner of the provided email address and agree to receive the newsletter. No further data is collected, except on a voluntary basis. This data is used solely for sending the requested information and is not shared with third parties. The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). The consent given for storing the data, email address, and their use for sending the newsletter can be withdrawn at any time, for example, via the “unsubscribe” link in the newsletter. The lawfulness of the already processed data remains unaffected by the withdrawal. The data you provided for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter or the purpose no longer applies, and then deleted from the newsletter distribution list. We reserve the right to delete or block email addresses from our newsletter distribution list at our discretion, based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Data stored for other purposes will remain unaffected. After unsubscribing from the newsletter distribution list, your email address may be stored in a blacklist with us or with the newsletter service provider to prevent future mailings. The data in the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and ours in ensuring compliance with legal requirements when sending newsletters (legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.
Newsletter Dispatch to Existing Customers
If you have ordered goods or services from us and provided your email address, we may use this email address to send newsletters, provided we inform you beforehand. In such cases, the newsletter will only contain direct advertising for similar goods or services. You can unsubscribe from this newsletter at any time. A corresponding link is included in each newsletter. The legal basis for sending the newsletter in this case is Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG. After unsubscribing from the newsletter distribution list, your email address may be stored in a blacklist to prevent future mailings. The data in the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and ours in ensuring compliance with legal requirements when sending newsletters (legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.
8. Plugins and Tools
YouTube with Enhanced Privacy
This website embeds videos from YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit a page on this website that embeds YouTube videos, a connection to YouTube’s servers is established. The YouTube server is notified which of our pages you visited. If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used for personalizing your YouTube experience. Ads shown in enhanced privacy mode are also not personalized. No cookies are set in enhanced privacy mode. However, so-called local storage elements are stored in the user’s browser, which can contain personal data and may be used for recognition. Details on the enhanced privacy mode can be found here: https://support.google.com/youtube/answer/171780.
After activating a YouTube video, additional data processing operations may be triggered, which we have no influence over. The use of YouTube is in the interest of presenting our online offerings attractively. This constitutes a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. If consent was requested, processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per the TDDG. Consent can be withdrawn at any time. For more information on privacy at YouTube, please refer to their privacy policy here: https://policies.google.com/privacy?hl=en.
Vimeo without Tracking (Do-Not-Track)
This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit a page on our website that contains Vimeo videos, a connection to Vimeo’s servers is established. The Vimeo server is notified which pages you visited. Additionally, Vimeo gains access to your IP address. However, we have configured Vimeo to not track your user activities or set cookies. The use of Vimeo is in the interest of presenting our online offerings attractively. This constitutes a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. If consent was requested, processing is based solely on Art. 6 para. 1 lit. a GDPR; consent can be withdrawn at any time. Data transmission to the USA is based on the EU Commission’s standard contractual clauses, and Vimeo states that it is based on “legitimate business interests.” Details can be found here: https://vimeo.com/privacy.
Google Fonts (Local Hosting)
This page uses Google Fonts for a consistent display of fonts, provided by Google. The Google Fonts are installed locally. No connection to Google servers takes place. More information on Google Fonts can be found here: https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Font Awesome (Local Hosting)
This page uses Font Awesome for consistent font display. Font Awesome is installed locally. No connection to Fonticons, Inc. servers takes place. More information on Font Awesome can be found in its privacy policy here: https://fontawesome.com/privacy.
MyFonts
This page uses MyFonts, a service that loads fonts into your browser when you visit our website to ensure consistent font presentation. The provider is Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA. MyFonts transfers your IP address along with the URL of our website and our contract data to its servers in the USA to verify compliance with licensing terms and the number of monthly page views. According to Monotype, your IP address is anonymized immediately after the transfer so that no personal reference can be made (anonymization). Details can be found in Monotype’s privacy policy: https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/datenschutzrichtlinie-zum-tracking-von-webschriften.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards when processing data in the USA. Any company certified under the DPF commits to adhering to these data protection standards. For more information, visit: https://www.dataprivacyframework.gov/participant/6347.
Google Maps
This page uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed map material on our website. To use Google Maps’ functions, it is necessary to store your IP address. This information is usually transferred to a server in the USA and stored there. The provider of this website has no influence over this data transfer. If Google Maps is activated, Google may use Google Fonts for consistent font display. When you visit Google Maps, your browser loads the necessary web fonts into its browser cache to display texts and fonts correctly. The use of Google Maps is in the interest of providing an attractive display of our online offerings and making the locations listed on our website easily findable. This constitutes a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. If consent was requested, processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TDDG. Consent can be withdrawn at any time.
Data Transfer to the USA
The data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure that European data protection standards are adhered to when processing data in the USA. Any company certified under the DPF commits to complying with these data protection standards. For more information, visit: https://www.dataprivacyframework.gov/participant/5780.
Bing Maps
We have integrated Bing Maps on this website. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, United States (hereinafter “Bing Maps”). With this service, we can embed map material on our website.
To use Bing Maps’ features, it is necessary to store your IP address. This information is usually transferred to a Microsoft server in the USA and stored there. The provider of this website has no influence over this data transfer.
The use of Bing Maps is in the interest of presenting our online offerings attractively and ensuring the easy location of places listed on our website. This constitutes a legitimate interest according to Art. 6 para. 1 lit. f GDPR. If consent has been requested, the processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in the sense of TDDG. Consent can be revoked at any time.
The data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses.
For further details, refer to the provider’s privacy policy here: https://www.microsoft.com/en-us/maps/bing-maps/product.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure that European data protection standards are adhered to when processing data in the USA. Any company certified under the DPF commits to complying with these data protection standards. For more information, visit: https://www.dataprivacyframework.gov/participant/6474.
OpenStreetMap
We use the map service of OpenStreetMap (OSM).
We embed map material from OpenStreetMap on the server of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The UK is considered a data protection-safe third country. This means that the UK has a level of data protection that is equivalent to that of the European Union. When using the OpenStreetMap maps, a connection to the servers of the OpenStreetMap Foundation is established. This may transmit your IP address and other information about your behavior on this website to OSMF. OpenStreetMap may store cookies in your browser or use similar recognition technologies.
The use of OpenStreetMap is in the interest of presenting our online offerings attractively and ensuring the easy location of places listed on our website. This constitutes a legitimate interest according to Art. 6 para. 1 lit. f GDPR. If consent has been requested, the processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in the sense of TDDG. Consent can be revoked at any time.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether data entry on this website (e.g., in a contact form) is done by a human or an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of stay on the website, or mouse movements made by the user). The data collected in the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
The storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated scraping and spam. If consent has been requested, the processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in the sense of TDDG. Consent can be revoked at any time.
For more information about Google reCAPTCHA, please refer to Google’s privacy policy and terms of use at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure that European data protection standards are adhered to when processing data in the USA. Any company certified under the DPF commits to complying with these data protection standards. For more information, visit: https://www.dataprivacyframework.gov/participant/5780.
hCaptcha
We use hCaptcha (hereinafter “hCaptcha”) on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter “IMI”).
hCaptcha is used to check whether data entry on this website (e.g., in a contact form) is done by a human or an automated program. To do this, hCaptcha analyzes the behavior of the website visitor based on various characteristics.
This analysis starts automatically as soon as the website visitor enters a website with hCaptcha enabled. For analysis, hCaptcha evaluates various information (e.g., IP address, duration of stay on the website, or mouse movements made by the user). The data collected in the analysis is forwarded to IMI. If hCaptcha is used in “invisible mode,” the analysis runs entirely in the background. Website visitors are not informed that an analysis is taking place.
The storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated scraping and spam. If consent has been requested, the processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in the sense of TDDG. Consent can be revoked at any time.
The data processing is based on Standard Contractual Clauses, which are included in the data processing addendum to IMI’s General Terms and Conditions or the data processing agreements.
For more information on hCaptcha, refer to the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure that European data protection standards are adhered to when processing data in the USA. Any company certified under the DPF commits to complying with these data protection standards. For more information, visit: https://www.dataprivacyframework.gov/participant/6388.
Wordfence
We have integrated Wordfence on this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”).
Wordfence serves to protect our website from unauthorized access or malicious cyberattacks. For this purpose, our website establishes a persistent connection to the Wordfence servers so that Wordfence can compare the accesses made to our website with its databases and block them if necessary.
The use of Wordfence is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effectively protecting its website from cyberattacks. If consent has been requested, the processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in the sense of TDDG. Consent can be revoked at any time.
The data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.
WordPress
Our website uses WordPress, a content management system that enables the basic functionality of our website. WordPress does not collect personal data unless it is gathered via plugins or forms on our website. However, it may collect technical data to optimize page loading speeds and general usage. This data is stored locally on our servers and is not shared with third parties.
Elementor
Our website uses Elementor, a visual page builder to create the design and layout of the website. Elementor does not collect personal data unless it is collected via forms or user interactions. Elementor collects data about interactions with design elements (such as clicks on buttons), and this data is used in an anonymized way to improve the user experience.
Pretty Links
We use Pretty Links to create user-friendly and optimized short links. Pretty Links allows us to track clicks and the origin of traffic to analyze the effectiveness of our links. No personal data is collected by Pretty Links unless the links lead to forms or interactive elements that collect personal data.
Polylang
Our website uses Polylang, a plugin for providing a multilingual user experience. Polylang stores the user’s preferred language in a cookie to display the website in the selected language. No personal data is collected, only the user’s language settings are stored to improve the user experience.
LiteSpeed
We use LiteSpeed as our web server to improve the performance of our website, especially through caching and speed optimizations. LiteSpeed itself does not collect personal data unless data is processed through third-party plugins or specific features integrated with LiteSpeed. LiteSpeed only stores technical data necessary for performance optimization of the website.
Adobe Fonts
Our website uses Adobe Fonts to display custom fonts. No personal data is collected, unless a connection is made to Adobe’s servers to load the fonts. Adobe may collect technical data such as IP addresses and font usage. However, this data is generally anonymized and not shared with third parties.
Calendly
Our website uses Calendly for scheduling and booking appointments. When you book an appointment via Calendly, personal data such as name, email address, and appointment preferences are processed. This data is used exclusively for appointment scheduling and is not shared with third parties. For more information on data processing by Calendly, please refer to their privacy policy.
ShareThis
Our website uses ShareThis to enable users to share content on social networks. ShareThis collects anonymized usage data, including interactions with share buttons and the origin of visitors. This data may also be used for statistical or marketing purposes. More information on data processing can be found in the ShareThis privacy policy.
Miscellaneous Tools
In addition to the tools mentioned above, we also use other services to optimize our website and improve the user experience. These tools may collect various data, such as for website usage analysis or improving functionality (e.g., videos, forms, performance). All tools used and their specific data processing are described in detail in our Cookie Policy.
Important Notice on Cookies
Some of these tools use cookies to enable website functionality or enhance the user experience. In our Cookie Policy, we have provided detailed information about the cookies used and the associated data processing practices. Source: https://www.e-recht24.de