Privacy policy

Overview of processing activities

The following overview summarizes the types of processed data and the purposes of their processing, and refers to the affected individuals.

Types of processed data

• Inventory data (e.g., names, addresses).
• Content data (e.g., entries in online forms).
• Contact details (e.g., email, phone numbers).
• Meta-/communication data (e.g., device information, IP addresses).
• Usage data (e.g., visited web pages, interest in content, access times).

Categories of data subjects

• Communication partners.
• Users (e.g., website visitors, users of online services).

Purposes of processing

• Provision of our online offering and user-friendliness.
• Direct marketing (e.g., via email or postal).
• Feedback (e.g., collecting feedback via online form).
• Marketing.
• Contact inquiries and communication.
• Security measures.
• Provision of contractual services and customer service.
• Management and response to inquiries.

Relevant legal bases

Below is an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. If more specific legal bases are relevant in individual cases, we will inform you of these in the privacy policy.

• Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Contract performance and pre-contractual inquiries (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legitimate interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national data protection regulations apply in Germany. This includes in particular the Law for the Protection against Misuse of Personal Data in Data Processing (Bundesdatenschutzgesetz – BDSG). The BDSG contains specific regulations regarding the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, transmission, and automated decision-making including profiling on a case-by-case basis. Furthermore, it regulates data processing for purposes of employment relationships (§ 26 BDSG), especially with regard to the establishment, implementation, or termination of employment relationships as well as the consent of employees. Furthermore, data protection laws of individual federal states (Landesdatenschutzgesetze) may apply.