Privacy policy

Privacy Policy

Unless otherwise stated below, the disclosure of your personal data is neither required by law or contract, nor is it necessary for the completion of a contract. You are not required to provide the data. Failure to provide it will have no consequences. This applies only to the extent that no indication to the contrary is made in the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Logfiles

You can visit our websites without providing any personal information.

Every time you access our website, usage data is transmitted to us or our web hoster / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, e.g., the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

The process is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our legitimate interest in ensuring the uninterrupted operation of our website as well as for the improvement of our offer.

Contact

Responsible party/data protection officer

ritterwerk GmbH, Industriestraße 13, 82194 Gröbenzell Germany, +49 8142 44016-0, info@ritterwerk.de

You can reach our data protection officer directly at: email@iitr.de

Customer initiated contact by e-mail

If you choose to contact us for business purposes via e-mail, we will gather your personal information (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of processing and answering your contact request.

If the contact serves to carry out pre-contractual measures (e.g. consultation in case of interest in purchase, a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO.

If contact is established for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our predominantly justified interest in processing and answering your enquiry. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation.

We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.

If the inquiry serves the purpose of carrying out pre-contractual actions (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our overrall legitimate interest in processing and answering your inquiry. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation.

We will only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing of applications by e-mail

Visitors to our website can apply by e-mail if they are interested in vacancies advertised on our website. In doing so, we only collect your personal data to the extent provided by you. This includes your contact details (e.g. name, e-mail address, telephone number), details of your professional qualifications and training, details of any further professional training you have undertaken, as well as evidence of your performance.

This data processing serves the purpose of contacting you and helping us decide whether to establish an employment relationship with you. Providing the relevant information is necessary to complete the application process. Processing of your personal data is based on Art. 6 para. 1 lit. b DSGVO in conjunction with. § Section 26 (1) BDSG to carry out pre-contractual measures (going through the application procedure as an employment contract initiation).

If you have given us consent to process personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is based on Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

If special categories of personal data within the meaning of Art. 9 (1) DSGVO are requested from applicants as part of the application process, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2) lit. b. DSGVO. DSGVO so that we can exercise the rights arising from labour law, social security and social protection law and fulfil our obligations in this regard.

We store your personal information for as long as is required to make a decision regarding your application. Your data will then be deleted after six months at the latest, unless you have consented to further processing and use. If an employment relationship is established following the application process, the data provided will be further processed on the basis of Art. 6 Para. 1 lit. b DSGVO in conjunction with Section 26 Para. 1 BDSG for the purposes of implementing the employment relationship and then transferred to the personnel file.

Collection and processing when sending images by e-mail

You have the option of sending us images by e-mail in connection with the order of a personalised product.

With the transmission of your images, we may collect your personal data (image of an identifiable person) only to the extent provided by you. The data processing serves the purpose of creating personalised products. The image sent serves as a template for the product and is used for this purpose (e.g. T-shirt printing). The processing is based on Art. 6 Para. 1 lit. b DSGVO and is necessary for the fulfilment of a contract with you.

Your data will not be passed on.

We only use the image you send us within the scope of providing the service. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.

Customer account orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 Para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.

Collection, processing and forwarding of personal data when placing orders

When you place an order, we collect and process your personal data only insofar as this is necessary for the fulfilment and processing of your order and for dealing with your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 Para. 1 lit. b DSGVO and is necessary for the fulfilment of a contract with you.

Your data is passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.

Customer Reviews Advertisement

Website logo for Google Customer Reviews
The website logo for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") is embedded on our website.
The purpose of the integration is to display the number and result of our reviews received so far via Google and to advertise participation in this program.
In order to display the logo on our website and to show you personalized advertisements on Google, Google uses cookies. In the process, among other things, your IP address may be processed and transmitted to Google.
Your data may be transmitted to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
You can find more information on terms of use and data protection when using Google Customer Reviews at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html as well as https://policies.google.com/privacy?hl=de

Google Customer Reviews Rating Tool

We use the Google Customer Reviews rating tool from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") for our website.

After your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, we will contact you by e-mail using Google's survey opt-in module. In doing so, the following information, among others, may be processed and transmitted to Google: Order details (e.g. order ID, country of delivery, expected delivery date, GTIN of the products ordered) and your email address.

Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google is not certified under the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://privacy.google.com/businesses/controllerterms/ and https://business.safety.google/adscontrollerterms.

The processing is carried out on the basis of Art. 6 para. 1 lit. a DSGVO with your consent, provided that you have expressly consented to the disclosure of your data and the receipt of the evaluation request. You can revoke your consent at any time with effect for the future without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

You can find more information on the terms of use and data protection when using Google customer reviews at https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html and at https://policies.google.com/privacy?hl=de.

Use of the e-mail address for receiving newsletters
We use your e-mail address independently of the contract processing exclusively for our own advertising purpose of sending newsletters, provided that you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.

Use of CleverReach
We use the service of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; "CleverReach") as part of our order processing.
We pass on the information provided by you during the newsletter registration (e-mail address, first and last name, if applicable) to CleverReach. The data processing serves the purpose of sending the newsletter and its statistical evaluation.

In order to evaluate newsletter campaigns, the newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. Conversion tracking enables us to analyze whether, for example, a purchase was made after clicking on a link in the newsletter or whether you have registered on our website. In this context, we collect your personal data such as IP address, browser type and device as well as the time. From this data, usage profiles can be created under a pseudonym. The collected data will not be used to identify you personally. The collected data is only used for statistical analysis to improve newsletter campaigns.
The processing of your personal data is based on Art. 6 (1) lit. f DSGVO from our legitimate interest in a targeted, effective advertising and user-friendly newsletter system. You have the right to object to this processing of personal data concerning you at any time on grounds relating to your particular situation. More information as well as Cleverreach's privacy policy can be found at: Privacy Policy - CleverReach as well as Report & track success for email campaigns - CleverReach/.

Shipping service provider

Forwarding of the e-mail address to the shipping company for information about the shipping status

We pass on your e-mail address to the shipping company as part of the contract processing, provided you have expressly agreed to this during the ordering process. The purpose of passing on your e-mail address is to inform you about the shipping status by e-mail. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us or the transport company without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

Payment service provider

Use of PayPal Check-Out

We use the PayPal Check-Out payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. With the selection and use of payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfil the contract with you with the selected payment method. This processing is based on Art. 6 Para. 1 lit. b DSGVO.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical methods using credit agencies, if necessary. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a weighed decision about the establishment, implementation or termination of the contractual relationship. The creditworthiness information may include probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures and in the calculation of which, among other things, address data are included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our overriding legitimate interest in protection against payment default when PayPal makes advance payments.

You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f DSGVO for reasons arising from your particular situation by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method requested by you. Failure to provide the data will result in the contract not being concluded with the payment method you have selected.

Third-party provider

When paying via the payment method of a third-party provider, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO. In order to carry out this type of payment, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 Para. 1 lit. b DSGVO. Local third-party providers can be, for example:

® Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany).

® giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)

Purchase on account via PayPal

When paying via the payment method purchase on account, the data required to process the payment are first transmitted to PayPal. For the execution of this payment method, the data will then be transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to be able to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit agencies in accordance with the procedure already described above. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO due to our overriding legitimate interest in protection against payment default when Ratepay makes advance payments. Further information on data protection and which credit agencies Ratpay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

For more information on data processing when using PayPal, please refer to the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of SOFORT

We use the payment service provider SOFORT GmbH, (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. Sofort GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data processing serves the purpose of being able to offer you various payment methods through the payment processing via the payment service provider SOFORT. If you have chosen the payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is based on Art. 6 Para. 1 lit. b DSGVO. For more information on data processing when using the payment service provider SOFORT, please visit https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance as well as prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.

You can find out how to manage (including disabling) cookies in the main browsers by following the links below:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The use of cookies or comparable technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f DSGVO due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Use of Usercentrics

We use the Usercentrics consent management tool from Usercentrics GmbH (Rosenthal 4, 80331, Munich; "Usercentrics") on our website.

The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right of revocation for consent already given. The purpose of data processing is to obtain and document the necessary consent for data processing and thus to comply with legal obligations. Cookies may be used for this purpose. The following information, among others, may be collected and transmitted to Usercentrics: Date and time of the page view, information on the browser you are using and the device you are using, anonymised IP address, opt-in and opt-out data.

Usercentrics uses the Google Cloud Platform of Google Ireland Limited, which means that your data may be transmitted to the USA. There is no EU Commission adequacy decision for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.

Data processing is carried out to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c DSGVO.

The revocation receipt of a previously granted consent is stored for a period of three years.

You can find more information on data protection at Usercentrics at: https://usercentrics.com/privacy-policy/

Ad tracking

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

Among other things, the following information can be collected: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website via which you found our website). visited the website), location data, purchase activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information generated in this way about your use of this website is usually transmitted to a Google server in the USA and stored there. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is not certified according to the TADPF. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. Both Google and US government agencies have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google has about you. When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in an anonymous form. The IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can find more information on terms of use and data protection at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Use of Meta Pixel

We use the "Custom Audiences" remarketing function of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook") on our website.

Meta Platforms Ireland and we are jointly responsible for the collection of your data that takes place when the service is integrated and the transmission of this data to Facebook. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum. According to this, we are particularly responsible for fulfilling the information obligations in accordance with Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for complying with the obligations in accordance with Art. 33 , 34 GDPR to the extent that a personal data breach affects our obligations under the Joint Processing Agreement. Meta Platforms Ireland is responsible for enabling the rights of data subjects in accordance with Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of personal data protection affects Meta Platforms Ireland's obligations under the Joint Processing Agreement.

The purpose of the application is to target visitors to the website with interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on the website. This tag is used to establish a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. If you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads. Your data may be transmitted to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is not TADPF certified.

The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum.

Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy/.

Plugins and Miscellaneous

Use of Google Tag Manager

We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website. The Google Tag Manager itself does not store cookies, nor is personal data processed as a result. However, it enables the triggering of additional tags that can collect and process personal data. More information on terms of use and data protection can be found here.

Use of Cloudflare
We use the Cloudflare CDN content delivery network of Cloudflare Inc (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare") on our website. This is a transregional network of servers in various data centers to which our web server connects and via which certain content on our website is delivered.
The data processing serves the purpose of optimizing the loading times of our website and thus making it more user-friendly.
In the process, the following information may be collected, among other things: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transmitted to the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself in accordance with the TADPF and is thus obliged to comply with European data protection principles.
The processing of your personal data is based on Art. 6 (1) lit. f DSGVO from our legitimate interest in the demand-oriented and targeted design of the website. You have the right to object at any time to this processing of your personal data based on Art. 6 (1) f DSGVO for reasons arising from your particular situation.

For more information on privacy when using Cloudflare, please visit https://www.cloudflare.com/de-de/privacypolicy/.

Use of YouTube

We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) affiliated company.

The function displays videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it sent to YouTube and stored there. Your data may be transmitted to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is not certified according to the TADPF. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.

Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can find more information about the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube's data protection information at https://www.youtube.com/t/privacy.

Using Vimeo

We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; “Vimeo”) on our website to integrate videos from the “Vimeo” portal. If you access pages on our website that have such a plug-in, a connection to the Vimeo servers will be established and the plug-in will be displayed on the page by notifying your browser. As a result, both your IP address and the information on which of our pages you have visited are transmitted to the Vimeo servers. If you are logged in to Vimeo, Vimeo assigns this information to your personal user account. When using the plug-in functions (e.g. by starting a video by pressing the corresponding button), this information is also assigned to your Vimeo account.

Your data may be transmitted to the USA. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo is not TADPF certified. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard -contractual-clauses-scc_de.

Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can find more detailed information on the purpose and scope of the collection and on the further use and processing of the data by Vimeo as well as on your rights in this regard and options for protecting your privacy in Vimeo's data protection information: https://vimeo.com/privacy

Data subject rights and storage period

Duration of storage

After completion of the contract, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to the processing based on Art. 6 Para. 1 f GDPR and to processing for the purpose of direct advertising.

Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

You can lodge a complaint, among other things, with the supervisory authority responsible for us, which you can reach under the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18

91522 Ansbach

Phone: +49 981 1800930

Fax: +49 981 180093800

Email: poststelle@lda.bayern.de

Right to object

If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 Paragraph 1 lit. f GDPR, you have the right to object to this processing at any time for reasons that arise from your particular situation with effect for the future. After an objection has been raised, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

last update: 26.09.2023