Privacy Policy

Introduction

Mit der folgenden Datenschutzerklärung möchten wir Sie darüber aufklären, welche Arten Ihrer personenbezogenen Daten (nachfolgend auch kurz als „Daten“ bezeichnet) wir zu welchen Zwecken und in welchem Umfang verarbeiten. Die Datenschutzerklärung gilt für alle von uns durchgeführten Verarbeitungen personenbezogener Daten, sowohl im Rahmen der Erbringung unserer Leistungen als auch insbesondere auf unseren Webseiten, in mobilen Applikationen sowie innerhalb externer Onlinepräsenzen, wie z.B. unserer Social-Media-Profile (nachfolgend zusammenfassend bezeichnet als „Onlineangebot“).

The terms used are not gender-specific.

Date: 15 July 2022

Summary of contents

Data controller

Adress
Subkontra e.V.
Putzmühle
Oberpöbel 8
01744 Dippoldiswalde

Authorised representatives

represented by the Board of Directors

E-mail address

info@subkontra.org

Overview of processing operations

The following overview summarises the type of data processed and the purpose of their processing and refers to the people affected.

Types of data processed

  • Inventory data.
  • Payment data.
  • Contact data.
  • Content data.
  • Contract data.
  • Usage data.
  • Meta/communication data.

Categories of persons affected

  • Customers.
  • Interested parties.
  • Users.
  • Members.
  • Business and contractual partners.

Purpose of processing

  • Provision of contractual services and customer service.
  • Contact requests and communication.
  • Office and organisational procedures.
  • Managing and responding to requests.
  • Feedback.
  • Marketing.
  • Provision of our online services and user experience.
  • Information technology infrastructure.

Relevant legal basis

Below you will find an overview of the legal basis of the GDPR on the basis of which we process personal data. Please note that in addition to the regulations of the GDPR, national data protection regulations may apply in your or our country of residence or seat. If more specific legal grounds apply in individual cases, we will inform you of these in the privacy policy.

  • Contract fulfilment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. GDPR) - The processing is necessary for the fulfilment of a contract to which the person concerned is a party or for the performance of pre-contractual measures taken at the request of the person concerned.
  • Legal obligation (Art. 6 para. 1 p. 1 lit. c. GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR) - Processing is necessary for the purpose of protecting the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the person concerned which require the protection of personal data.

In addition to the privacy policy of the General Data Protection Regulation, national regulations on data protection apply in Germany. These include, in particular, the Act on protection against misuse of personal data in data Processing (Bundesdatenschutzgesetz - BDSG). In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, the processing for other purposes and the sharing and automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for purposes of employment relationship (Section 26 BDSG), in particular regarding the justification, performance or termination of employment relationships as well as the consent of employees. Furthermore, data protection laws of the individual federal states may apply.

Security measures

We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with the legal requirements, taking into account the current state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the severity of the threat to the rights and freedoms of natural persons.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access to, entry into, disclosure of, assurance of availability of and separation of the data. We also have procedures in place to ensure the exercise of data subjects' rights, the deletion of data and responses to data compromise. Furthermore, we already take the protection of personal data into account in the development or selection of hardware, software and procedures in accordance with the principle of data protection, through technical design and through data protection-friendly default settings.

SSL encryption (https): In order to protect your data transmitted via our online service, we use SSL encryption. You can recognise such encrypted connections by the prefix https:// in the address line of your browser.

Sharing of personal data

In the course of our processing of personal data, the data may be transferred to or disclosed to other institutions, companies, legally independent organisational units or persons. The recipients of this data may include, for example, service providers responsible for IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, establish appropriate contracts or agreements that serve to protect your data with the recipients of your data.

Data deletion

The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not required for the purpose). If the data is not deleted because it is required for other and legally permissible purposes, its processing is limited to these purposes. This means that the data is locked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person.

Our privacy notices may also contain further information on the storage and deletion of data, which will take priority for the respective processing operations.

Performance of tasks according to statutes or rules of procedure

Wir verarbeiten die Daten unserer Mitglieder, Unterstützer, Interessenten, Geschäftspartner oder sonstiger Personen (Zusammenfassend „Betroffene“), wenn wir mit ihnen in einem Mitgliedschafts- oder sonstigem geschäftlichen Verhältnis stehen und unsere Aufgaben wahrnehmen sowie Empfänger von Leistungen und Zuwendungen sind. Im Übrigen verarbeiten wir die Daten Betroffener auf Grundlage unserer berechtigten Interessen, z.B. wenn es sich um administrative Aufgaben oder Öffentlichkeitsarbeit handelt.

The data processed in this context, the type, scope and purpose and the necessity of its processing are determined by the underlying membership or contractual relationship, which also determines the necessity of any data disclosures (we also refer to required data).

We delete data that is no longer required to fulfil our statutory and business purposes. This is determined according to the respective tasks and contractual relationships. We retain the data for as long as it may be relevant for the processing of the business as well as with regard to any warranty or liability obligations on the basis of our legitimate interest in their regulation. The necessity of retaining the data is reviewed regularly; in all other respects, the legal storage obligations apply.

  • Data types processed: Inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); contact data (e.g. e-mail, telephone numbers); contract data (e.g. contractual object, term, customer category).
  • Persons affected: Users (e.g. website visitors, users of online services); members; business and contractual partners.
  • Purpose of processing: Providing contractual services and customer service; contact requests and communication; managing and responding to requests.
  • Legal basis: Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. GDPR); Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).

Business services

Wir verarbeiten Daten unserer Vertrags- und Geschäftspartner, z.B. Kunden und Interessenten (zusammenfassend bezeichnet als „Vertragspartner“) im Rahmen von vertraglichen und vergleichbaren Rechtsverhältnissen sowie damit verbundenen Maßnahmen und im Rahmen der Kommunikation mit den Vertragspartnern (oder vorvertraglich), z.B., um Anfragen zu beantworten.

We process this data in order to fulfil our contractual obligations. These include, in particular, the obligations to provide the agreed services, any update obligations and remedial action in the event of warranty and other service disruptions. Furthermore, we process the data to safeguard our rights and for the purpose of the administrative tasks associated with these obligations as well as the company organisation. Additionally, we process the data on the basis of our legitimate interests regarding lawful and economical business management as well as security measures to protect our contractual partners and our business operations from misuse, endangerment of their data, secrets, information and rights (e.g. for the involvement of telecommunication, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). Within the framework of applicable law, we only disclose the data of contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfil legal obligations. Contractual partners will be informed about further forms of processing, e.g. for marketing purposes, within the framework of our privacy policy.

We inform the contractual partners of the data required for the above-mentioned purposes prior to or in the course of data collection, e.g. in online forms, by means of special labelling (e.g. colours) or symbols (e.g. asterisks or similar), or in person.

We delete the data after the expiry of legal warranty and comparable obligations, i.e., in principle after 4 years, unless the data is stored in a customer account, e.g., as long as it must be kept for legal archiving reasons. The legal retention period for documents relevant under tax law as well as for trading books, inventories, opening balances, annual financial statements, the instructions required to understand these documents and other organisational documents and booking vouchers is ten years and for received trading and business letters and copies of sent trading and business letters six years. The period starts at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statement or the management report was drawn up, the commercial or business letter was received or sent or the accounting document was created, the recording was made or other documents were created.

In case we use third party providers or platforms to provide our services, the terms and conditions and privacy policy of the respective third party providers or platforms shall apply in the relationship between the users and the providers.

  • Data types processed: Inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); contact data (e.g. e-mail, telephone numbers); contract data (e.g. contractual object, term, customer category).
  • Persons affected: Interested parties; business and contractual partners; customers.
  • Purpose of processing: Provision of contractual services and customer service; contact requests and communication; office and organisational procedures; administration and response to requests.
  • Legal basis: Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. GDPR); Legal obligation (Art. 6 para. 1 p. 1 lit. c. GDPR); Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).

Additional information on processing operations, procedures and services:

  • Events: Wir verarbeiten die Daten der Teilnehmer der von uns angebotenen oder ausgerichteten Veranstaltungen, Events und ähnlichen Aktivitäten (nachfolgend einheitlich als „Teilnehmer“ und „Veranstaltungen“ bezeichnet), um ihnen die Teilnahme an den Veranstaltungen und Inanspruchnahme der mit der Teilnahme verbundenen Leistungen oder Aktionen zu ermöglichen. Sofern wir in diesem Rahmen gesundheitsbezogene Daten, religiöse, politische oder sonstige besondere Kategorien von Daten verarbeiten, dann erfolgt diese im Rahmen der Offenkundigkeit (z.B. bei thematisch ausgerichteten Veranstaltungen oder dient der Gesundheitsvorsorge, Sicherheit oder erfolgt mit Einwilligung der Betroffenen). Die erforderlichen Angaben sind als solche im Rahmen des Auftrags-, Bestell- bzw. vergleichbaren Vertragsschlusses gekennzeichnet und umfassen die zur Leistungserbringung und Abrechnung benötigten Angaben sowie Kontaktinformationen, um etwaige Rücksprachen halten zu können. Soweit wir Zugang zu Informationen der Endkunden, Mitarbeitern oder anderer Personen erhalten, verarbeiten wir diese im Einklang mit den gesetzlichen und vertraglichen Vorgaben; Legal basis: Contract fulfilment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. GDPR).
  • Ticketshop: We process the data of our customers in order to enable them to select, purchase or order our tickets and associated services, as well as payment and delivery or performance thereof. Insofar it is necessary for the processing of an order, we use service providers, in particular ticketing platforms, to perform the processing for our customers. For the processing of payment transactions, we use the services of banks and payment service providers. The required information is identified as such in the context of the order or a comparable purchasing process and includes the information required for delivery or provision and billing as well as contact information in order to be able to consult with you if necessary; Legal basis: Contract fulfilment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b) GDPR).

Payment procedures

Im Rahmen von Vertrags- und sonstigen Rechtsbeziehungen, aufgrund gesetzlicher Pflichten oder sonst auf Grundlage unserer berechtigten Interessen bieten wir den betroffenen Personen effiziente und sichere Zahlungsmöglichkeiten an und setzen hierzu neben Banken und Kreditinstituten weitere Dienstleister ein (zusammenfassend „Zahlungsdienstleister“).

The data processed by the payment service providers include inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as the contract, sum and recipient-related details. The information is required to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. I.e. we do not receive any account or credit card related information, but only information with confirmation or negative confirmation of payment. Under certain circumstances, the data may be forwarded by the payment service providers to credit agencies. The purpose of this forwarding is to check the identity and creditworthiness of the customer. In this case, we refer to the general terms and conditions and the privacy policy of the payment service providers.

The terms and conditions and privacy policy of the respective payment service providers apply to the payment transactions, which can be accessed within the respective websites or transaction applications. We also refer to these for further information and the assertion of revocation, information and other data subject rights.

  • Data types processed: Inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); contract data (e.g. contract subject, term, customer category); usage data (e.g. websites visited, interest in content, access times); meta/communication data (e.g. device information, IP addresses).
  • Persons affected: Customers; Interested parties.
  • Purpose of processing: Provision of contractual services and customer service.
  • Legal basis: Contract fulfilment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. GDPR).

Additional information on processing operations, procedures and services:

  • PayPal: Payment services (technical integration of online payment methods) (e.g. PayPal, PayPal Plus, Braintree); Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Legal basis: Contract fulfilment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. GDPR); Website: https://www.paypal.com/uk; Privacy Policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
  • Ticket Tailor: Payment services (technical integration of online payment methods) (e.g. PayPal, PayPal Plus, Braintree); Service provider: Zimma Ltd, trading as Ticket Tailor of Unit 219, Mare Street Studios, 203-213 Mare Street, London, E8 3LY; Legal basis: Contract fulfilment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. GDPR); Website: https://www.tickettailor.com/; Privacy Policy: https://www.tickettailor.com/gdpr/

Provision of online services and web hosting

In order to provide our online services securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online services can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services as well as security services and technical maintenance services.

The data processed as part of the provision of the hosting offer may include all information relating to the users of our online services that is generated as part of the use and communication. This regularly includes the IP address, which is necessary to be able to distribute the contents of online services to browsers, and all input made within our online service or from websites.

  • Data types processed: Content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times); meta/communication data (e.g. device information, IP addresses).
  • Persons affected: Users (e.g. website visitors, users of online services).
  • Purpose of processing: Provision of our online services and user experience; information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.).).
  • Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).

Additional information on processing operations, procedures and services:

  • Email sending and hosting: The web hosting services we use also include the sending, receiving and storing of e-mails. For these purposes, the addresses of the recipients and senders as well as further information regarding the e-mail transmission (e.g. the providers involved) and the contents of the respective e-mails are processed. The aforementioned data may also be processed for the purpose of recognising SPAM. Please note that e-mails on the Internet are generally not sent in encrypted form. As a rule, e-mails are encrypted in transmission, but (unless a so-called end-to-end encryption procedure is used) not on the servers from which they are sent and received. We can therefore not assume any responsibility for the transmission path of the e-mails between the sender and the reception on our server; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).
  • WordPress.com: Hosting and software for the creation, provision and operation of websites, blogs and other online offerings; Service provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR); Website: https://wordpress.com; Privacy Policy: https://automattic.com/privacy/; Order processing agreement: https://wordpress.com/support/data-processing-agreements/.
  • STRATO: Services in the area of provision of information technology infrastructure and related services (e.g. storage space and/or computing capacities); Service provider: STRATO AG, Pascalstraße 10,10587 Berlin, Deutschland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR); Website: https://www.strato-hosting.co.uk/; Privacy Policy: https://www.strato-hosting.co.uk/privacy-policy/; Order processing agreement: Provided by the service provider.

Audio content

We use hosting and analytics services from service providers to make our audio content available for listening or download.

  • Data types processed: Usage data (e.g. websites visited, interest in content, access times); meta/communication data (e.g. device information, IP addresses).
  • Persons affected: Users (e.g. website visitors, users of online services).
  • Purpose of processing: Reach measurement (e.g. access statistics, recognising returning visitors); conversion measurement (measuring the effectiveness of marketing); profiles with user-related information (creating user profiles); provision of our online offer and user experience.
  • Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR)

Additional information on processing operations, procedures and services:

Presence in social networks (social media)

We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to provide information about us.

We would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the users' rights could be made more difficult.

Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and resulting interests of the users. The usage profiles can in turn be used for, e.g., placing advertisements within and outside the networks that presumably match the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Additionally, data may be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

For a detailed description of the respective types of processing and the options to object (opt-out), we refer to the privacy policies and information provided by the operators of the respective networks.

In the case of information requests and the assertion of data subject rights, we would like to point out that these can most effectively be asserted through the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

  • Data types processed: Contact data (e.g. e-mail, telephone numbers); content data (e.g. entries in online forms); usage data (e.g. websites visited, interest in content, access times); meta/communication data (e.g. device information, IP addresses).
  • Persons affected: Users (e.g. website visitors, users of online services).
  • Purpose of processing: Contact requests and communication; feedback (e.g. collecting feedback via online form); marketing.
  • Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).

Additional information on processing operations, procedures and services:

  • Facebook pages: Profile innerhalb des sozialen Netzwerks Facebook – Wir sind gemeinsam mit Meta Platforms Ireland Limited für die Erhebung (jedoch nicht die weitere Verarbeitung) von Daten der Besucher unserer Facebook-Seite (sog. „Fanpage“) verantwortlich. Zu diesen Daten gehören Informationen zu den Arten von Inhalten, die Nutzer sich ansehen oder mit denen sie interagieren, oder die von ihnen vorgenommenen Handlungen (siehe unter „Von dir und anderen getätigte und bereitgestellte Dinge“ in der Facebook-Datenrichtlinie: https://www.facebook.com/policy), as well as information about the devices used by users (e.g. IP addresses, operating system, browser type, language settings, cookie data; see under "App, browser and device information" in the Facebook Data Policy: https://www.facebook.com/policy). Wie in der Facebook-Datenrichtlinie unter „Wie verwenden wir diese Informationen?“ erläutert, erhebt und verwendet Facebook Informationen auch, um Analysedienste, so genannte „Seiten-Insights“, für Seitenbetreiber bereitzustellen, damit diese Erkenntnisse darüber erhalten, wie Personen mit ihren Seiten und mit den mit ihnen verbundenen Inhalten interagieren. Wir haben mit Facebook eine spezielle Vereinbarung abgeschlossen („Informationen zu Seiten-Insights“, https://www.facebook.com/legal/terms/page_controller_addendum), in der insbesondere geregelt wird, welche Sicherheitsmaßnahmen Facebook beachten muss und in der Facebook sich bereit erklärt hat die Betroffenenrechte zu erfüllen (d. h. Nutzer können z. B. Auskünfte oder Löschungsanfragen direkt an Facebook richten). Die Rechte der Nutzer (insbesondere auf Auskunft, Löschung, Widerspruch und Beschwerde bei zuständiger Aufsichtsbehörde), werden durch die Vereinbarungen mit Facebook nicht eingeschränkt. Weitere Hinweise finden sich in den „Informationen zu Seiten-Insights“ (https://www.facebook.com/legal/terms/information_about_page_insights_data); Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR); Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Standard contractual clauses (guaranteeing the level of data protection in the case of processing in third countries): https://www.facebook.com/legal/EU_data_transfer_addendum; Further information: Agreement on joint responsibility: https://www.facebook.com/legal/terms/information_about_page_insights_data.
  • YouTube: Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR) Privacy Policy: https://policies.google.com/privacy; Possibility of objection (opt-out): https://adssettings.google.com/authenticated.

Plugins and embedded functions and content

Wir binden in unser Onlineangebot Funktions- und Inhaltselemente ein, die von den Servern ihrer jeweiligen Anbieter (nachfolgend bezeichnet als „Drittanbieter”) bezogen werden. Dabei kann es sich zum Beispiel um Grafiken, Videos oder Stadtpläne handeln (nachfolgend einheitlich bezeichnet als „Inhalte”).

Die Einbindung setzt immer voraus, dass die Drittanbieter dieser Inhalte die IP-Adresse der Nutzer verarbeiten, da sie ohne die IP-Adresse die Inhalte nicht an deren Browser senden könnten. Die IP-Adresse ist damit für die Darstellung dieser Inhalte oder Funktionen erforderlich. Wir bemühen uns, nur solche Inhalte zu verwenden, deren jeweilige Anbieter die IP-Adresse lediglich zur Auslieferung der Inhalte verwenden. Drittanbieter können ferner sogenannte Pixel-Tags (unsichtbare Grafiken, auch als „Web Beacons“ bezeichnet) für statistische oder Marketingzwecke verwenden. Durch die „Pixel-Tags“ können Informationen, wie der Besucherverkehr auf den Seiten dieser Webseite, ausgewertet werden. Die pseudonymen Informationen können ferner in Cookies auf dem Gerät der Nutzer gespeichert werden und unter anderem technische Informationen zum Browser und zum Betriebssystem, zu verweisenden Webseiten, zur Besuchszeit sowie weitere Angaben zur Nutzung unseres Onlineangebotes enthalten als auch mit solchen Informationen aus anderen Quellen verbunden werden.

  • Data types processed: Usage data (e.g. websites visited, interest in content, access times); meta/communication data (e.g. device information, IP addresses).
  • Persons affected: Users (e.g. website visitors, users of online services).
  • Purpose of processing: Provision of our online services and user experience; provision of contractual services and customer service.
  • Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).

Additional information on processing operations, procedures and services:

  • Google Maps: We integrate the maps of the "Google Maps" service of the provider Google. The data processed may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually obtained in the framework of the settings of their mobile devices); Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR); Website: https://cloud.google.com/maps-platform; Privacy Policy: https://policies.google.com/privacy; Possibility of objection (opt-out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=en, settings for the display of advertisements: https://adssettings.google.com/authenticated.
  • Integration of third-party software, scripts or frameworks (e.g. jQuery): Wir binden in unser Onlineangebot Software ein, die wir von Servern anderer Anbieter abrufen (z.B. Funktions-Bibliotheken, die wir zwecks Darstellung oder Nutzerfreundlichkeit unseres Onlineangebotes verwenden). Hierbei erheben die jeweiligen Anbieter die IP-Adresse der Nutzer und können diese zu Zwecken der Übermittlung der Software an den Browser der Nutzer sowie zu Zwecken der Sicherheit, als auch zur Auswertung und Optimierung ihres Angebotes verarbeiten; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR)
  • YouTube-Videos: Video content; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR) Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Possibility of objection (opt-out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=en, settings for the display of advertisements: https://adssettings.google.com/authenticated.

Changing and updating the privacy policy

We ask you to regularly inform yourself about the content of our privacy policy. We adjust the privacy policy as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

Where we provide addresses and contact details of companies and organisations in this privacy statement, please note that the addresses may change over time and please check the details before contacting us.

Definitions of terms

This section provides you with an overview of the terms used in this privacy policy. Many of the terms are taken from the law and are defined primarily in Art. 4 of the GDPR. The legal definitions are binding. The following explanations, on the other hand, are primarily intended to help you understand them. The terms are sorted alphabetically.

  • Personal data: „Personenbezogene Daten“ sind alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person (im Folgenden „betroffene Person“) beziehen; als identifizierbar wird eine natürliche Person angesehen, die direkt oder indirekt, insbesondere mittels Zuordnung zu einer Kennung wie einem Namen, zu einer Kennnummer, zu Standortdaten, zu einer Online-Kennung (z.B. Cookie) oder zu einem oder mehreren besonderen Merkmalen identifiziert werden kann, die Ausdruck der physischen, physiologischen, genetischen, psychischen, wirtschaftlichen, kulturellen oder sozialen Identität dieser natürlichen Person sind.
  • Controller: Als „Verantwortlicher“ wird die natürliche oder juristische Person, Behörde, Einrichtung oder andere Stelle, die allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung von personenbezogenen Daten entscheidet, bezeichnet.
  • Processing: „Verarbeitung“ ist jeder mit oder ohne Hilfe automatisierter Verfahren ausgeführte Vorgang oder jede solche Vorgangsreihe im Zusammenhang mit personenbezogenen Daten. Der Begriff reicht weit und umfasst praktisch jeden Umgang mit Daten, sei es das Erheben, das Auswerten, das Speichern, das Übermitteln oder das Löschen.
Rechtstext von Dr. Schwenke - für weitere Informationen bitte anklicken.

en_GB