We strive for the greatest possible data economy and transparency when processing personal data. Our websites can usually be used without providing any personal data. The regulations on data protection are observed.
If you have any questions about data protection, you can contact us at .
1. Data collection and processing when accessed from the Internet
When you visit our websites, our web servers automatically record each access in a log file. The following data is stored:
- IP address
- Name and URL of the retrieved file
- Date and time of access
- Amount of data transferred
- Message whether the retrieval was successful
- URL of the referring page
- Web server access status (file transferred, file not found, command not executed, etc.)
- browser identifier
The stored data is not passed on to third parties and is only used to optimize the website and for troubleshooting. The stored data will be deleted after 14 days.
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
2. Hosting and Content Delivery Network (CDN)
We use Microsoft Azure as a web hosting and content delivery network provider for our website. Service provider is the American company Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
The legal basis for data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. Microsoft Corporation has certified itself under the EU-US Privacy Shield Agreement (see www.privacyshield.gov/list).
Microsoft uses so-called standard contractual clauses (= Art. 46 Para. 2 and 3 GDPR) as the basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data also comply with European data protection standards if they are transferred to third countries (such as the USA) and stored there. Through these clauses, Microsoft undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: [eur-lex.europa.eu/eli/dec_impl/2021/914/oj](https://eur-lex.europa.eu/eli/dec_impl /2021/914/oj?locale=en)
You can find more information about the Standard Contractual Clauses at Microsoft at [learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses](https://learn.microsoft.com/en-us/compliance/ regulatory/offering-eu-model-clauses)
You can find out more about the data processed by using Microsoft in the data protection declaration at privacy.microsoft.com/de-de/privacystatement .
3. Personal Data
Personal data will only be collected by us and only to the extent that you make it available to us yourself with your knowledge.
You have the right to withdraw consent at any time. The purposes of processing are stated in the appropriate places on our websites and are not subject to any subsequent changes.
4. Forms and Web-based Services
Our website contains forms and services in which data can be entered. The use of these additional options and the associated input of data is entirely on a voluntary basis. The data will be processed for the purpose stated there.
Unless otherwise stated, processing is based on Art. 6 EU-DSGVO.
We use the file processing and upload tool Uploadcare for our website. Service provider is the Canadian company Uploadcare Inc., Burrard St, Vancouver, BC V7X 1M8, Canada.
Your data may also be processed in Canada and thus outside the scope of the GDPR. The European Commission has decided that there is an adequate level of protection for commercial offers from Canada in accordance with Article 45 (1) GDPR. This means that data can be transferred to this country. You can consult the decision here: eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32002D0002.
You can find out more about the data processed by using Uploadcare in the privacy policy at uploadcare.com/about/privacy-policy/.
We use the anti-spam tool Cloudflare Turnstile for our website. Service provider is the American company Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107 USA.
To learn more about the data processed using Cloudflare Turnstile, see the Privacy Policy at www.cloudflare.com/application/privacypolicy/ .
5. Social networks
We use the so-called Shariff solution for communication with social networks. Contact is only made when the user actively clicks on the corresponding button.
vimeo We embed the videos from the “Vimeo” platform provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy Policy: vimeo.com/privacy.
youtube We embed the videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: www.google.com/policies/privacy/, Opt-Out: adssettings.google.com/authenticated.
6. Reference to data subject rights
According to Art. 15 EU General Data Protection Regulation (EU-GDPR), there is a right to free information as to whether personal data of one’s own person is being processed and, if so, which personal data is involved. In principle, a copy of the data can be requested, provided that no legal exception applies. If the data is incomplete or incorrect, there is a right to correction in accordance with Art. 16 EU GDPR.
Other data subject rights are:
- Art. 17 EU-DSGVO: Deletion of your own personal data if there is a reason for deletion specified there.
- Art. 18 EU-DSGVO: Restriction of the processing of personal data if there is a reason stated there.
- Art. 20 EU-DSGVO: Transfer of your own personal data to a provider if the processing is based on consent or on the basis of a contract.
- Art. 21 EU-DSGVO: For reasons of a special personal situation, the right to object to an otherwise legal processing of personal data may exist.
- Art. 22 EU-DSGVO: Grants special data subject rights for automated decisions in individual cases, including profiling.
7. Use of cookies
We use temporary cookies to save the selection of dark or light mode for a session.
Cloudflare Turnstile may use temporary cookies for spam checking.
8. Information and contact
You have the right at any time to request information about the personal data stored about you free of charge. You can contact us in writing both by e-mail and by post. If you have any questions, you are also welcome to contact us.