Introduction and Overview

We have prepared this Privacy Policy (Version September 26, 2026-313239795) to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, to explain which personal data (hereinafter “data”) we, as the data controller—and the data processors we engage (e.g., service providers)—process, will process in the future, and what legal rights you have.

The terms used are to be understood as genderneutral.

In short: We provide you with comprehensive information about the data we process about you.

Privacy policies usually sound very technical and use legal jargon. This privacy policy, however, is intended to explain the most important points to you as simply and transparently as possible. Where it promotes transparency, technical terms are explained in a readerfriendly manner, links to further information are provided.

We therefore use clear and simple language to explain that, in the course of our business activities, we process personal data only when there is a corresponding legal basis for doing so. This certainly isn’t possible if we provide explanations that are as brief, unclear, and legally technical as those often found online when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps you’ll discover a piece of information or two that you weren’t aware of before. If you still have questions, please contact the responsible party listed below or in the legal notice, follow the provided links, and review additional information on third-party websites. You can, of course, also find our contact information in the legal notice.

Scope of Application

This Privacy Policy applies to all personal data processed by our company and to all personal data processed by companies we have commissioned (processors). By “personal data,” we mean information as defined in Article 4(1) of the GDPR, such as a person’s name, email address, and mailing address. The processing of personal data enables us to offer and bill for our services and products, whether online or offline.

The scope of this Privacy Policy includes:

• all online platforms (websites, online stores) that we operate

• social media accounts and email communications

• mobile apps for smartphones and other devices

In short: This Privacy Policy applies to all areas in which personal data is processed in a structured manner within the company via the aforementioned channels. Should we enter into legal relationships with you outside Subscribe to DeepL Pro to translate larger documents. Visit www.DeepL.com/pro for more information. these channels, we will inform you separately if necessary.

Legal Bases

In the following Privacy Policy, we provide you with transparent information regarding the legal principles and regulations—that is, the legal bases under the General Data Protection Regulation—that enable us to process personal data. With regard to EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can, of course, read this EU General Data Protection Regulation online on EUR-Lex, the portal for EU law, at https://eurlex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We process your data only if at least one of the following conditions applies:

1. Consent (Article 6(1)(a) of the GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.

2. Contract (Article 6(1)(b) of the GDPR): We process your data to fulfill a contract or precontractual obligations with you, we process your data. For example, if we enter into a purchase agreement with you, we need personal information in advance.

3. Legal obligation (Article 6(1)(c) of the GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to retain invoices for accounting purposes. These typically contain personal data.

4. Legitimate Interests (Article 6(1)(f) of the GDPR): In cases where legitimate interests do not restrict your fundamental rights, we reserve the right to process personal data. For example, we must process certain data in order to operate our website securely and costeffectively. This processing therefore constitutes a legitimate interest.

Other conditions, such as processing for reasons of public interest, the exercise of official authority, or the protection of vital interests, generally do not apply to us. Should such a legal basis nevertheless be relevant, it will be indicated in the appropriate section.

In addition to the EU Regulation, national laws also apply:

• In Germany, the Federal Data Protection Act (BDSG) applies.

Contact Information for the Data Controller

If you have any questions regarding data protection or the processing of personal data, you will find the contact information for the data controller below, in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR):

TheWebAlley

Alexander Zengel

Kurt-Schumacher-Ring, 18146 Rostock, Germany

Email:[email protected]

Phone: +49 1512 3203616

Legal Notice: https://sites.leadconnectorhq.com/preview/8YZjFb60zRS9YJSFyBFP

Retention Period

As a general rule, we store personal data only for as long as is strictly necessary to provide our services and products. This means that we delete personal data as soon as the reason for processing it no longer exists. In some cases, we are legally required to retain certain data even after the original purpose has ceased to exist, for example, for accounting purposes.

If you request the deletion of your data or revoke your consent to data processing, the data will be deleted as soon as possible, provided there is no legal obligation to retain it.

We provide information below regarding the specific duration of each data processing activity, to the extent that we have further details available.

Rights under the General Data Protection Regulation

In accordance with Articles 13 and 14 of the GDPR, we are informing you of the following rights to which you are entitled to ensure fair and transparent data processing:

• Under Article 15 of the GDPR, you have the right to request information regarding whether we are processing your data. If this is the case, you have the right to receive a copy of the data and to learn the following information:

  - the purpose for which we are processing the data;

  - the categories, i.e., the types of data being processed;

  - who receives this data and, if the data is transferred to third countries, how security is ensured;

  - how long the data will be stored;

  - the existence of the right to rectification, erasure, or restriction of processing, and the right to object to processing;

  - that you may lodge a complaint with a supervisory authority (links to these authorities are provided below);

  - the source of the data, if we did not collect it from you;

  - whether profiling is carried out—that is, whether data is automatically analyzed to create a personal profile of you.

• Under Article 16 of the GDPR, you have the right to have your data corrected, which means that we must correct any errors you find.

• Under Article 17 of the GDPR, you have the right to erasure (“right to be forgotten”), which specifically means that you may request the erasure of your data.

• Under Article 18 of the GDPR, you have the right to restrict processing, which means that we may only continue to store the data but may not use it further.

• Under Article 20 of the GDPR, you have the right to data portability, which means that, upon request, we must provide you with your data in a commonly used format.

• Under Article 21 of the GDPR, you have the right to object, which, once exercised, will result in a change to how your data is processed.

  - If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then review as soon as possible whether we can legally comply with this objection.

  - If data is used for direct marketing, you may object to this type of data processing at any time. We may no longer use your data for direct marketing after that.

  - If data is used for profiling, you may object to this type of data processing at any time. We may no longer use your data for profiling after that.

• Under certain circumstances, pursuant to Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing (such as profiling).

• Under Article 77 of the GDPR, you have the right to lodge a complaint. This means you can file a complaint with the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights—don’t hesitate to contact the data controller listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in any other way, you may file a complaint with the supervisory authority. In Austria, this is the Data Protection Authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection commissioner for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Website Builder Systems Introduction

What are website builder systems?

We use a website builder for our website. Website builders are a specific type of content management system (CMS). With a website builder, website operators can create a website very easily and without any programming knowledge. In many cases, web hosting providers also offer website builders. When using a website builder, your personal data may be collected, stored, and processed. In this privacy notice, we provide you with general information about data processing by website builders. For more detailed information, please refer to the provider’s privacy policy.

Why do we use website builders for our website?

The biggest advantage of a website builder is its ease of use. We want to offer you a clear, simple, and well-organized website that we can easily operate and maintain ourselves— without external support. A website builder now offers many helpful features that we can use even without programming knowledge. This allows us to design our website according to our preferences and provide you with an informative and enjoyable experience on our site.

What data is stored by a website builder?

Exactly what data is stored naturally depends on the website builder used. Each provider processes and collects different types of data from website visitors. However, technical usage information—such as operating system, browser, screen resolution, language and keyboard settings, hosting provider, and the date of your visit—is typically collected. In addition, tracking data (e.g., browser activity, clickstream activity, session heatmaps, etc.) may also be processed. Furthermore, personal data may be collected and stored. This usually includes contact information such as your email address, phone number (if you have provided it), IP address, and geographic location data. You can find details on exactly what data is stored in the provider’s privacy policy.

Website Builder Systems Privacy Policy Summary Data Subjects: Website visitors Purpose: To optimize our services Data Processed: Data such as technical usage information (e.g., browser activity, clickstream activity, session heatmaps), as well as contact information, IP address, or your geographic location. You can find more details below in this Privacy Policy and in the providers’ privacy policies. Retention Period: Depends on the provider Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interests), Art. 6(1)(a) GDPR (Consent) Web Analytics Privacy Policy Summary Data Subjects: Website visitors Purpose: Analysis of visitor information to optimize the website. Data Processed: Access statistics, which include data such as access locations, device data, duration and time of access, navigation behavior, click behavior, and IP addresses. You can find more details on this in the privacy policy of the respective web analytics tool used. Retention Period: Depends on the web analytics tool used Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

How long and where is the data stored?

We provide information below regarding the duration of data processing in connection with the website builder system used, to the extent that we have further information on this matter. You can find detailed information on this in the provider’s privacy policy. In general, we process personal data only for as long as is strictly necessary to provide our services and products. The provider may store your data according to its own policies, over which we have no control.

Right to Object

You always have the right to access, correct, and delete your personal data. If you have any questions, you can also contact the data controllers of the website builder system we use at any time. You can find their contact information either in our Privacy Policy or on the provider’s website.

You can delete, disable, or manage cookies that providers use for their functions in your browser. Depending on which browser you use, this works in different ways. Please note, however, that not all functions may then work as usual.

Legal Basis

We have a legitimate interest in using a website builder system to optimize our online service and present it to you in an efficient and user-friendly manner. The corresponding legal basis for this is Article 6(1)(f) of the GDPR (Legitimate Interests). However, we only use the website builder system to the extent that you have given your consent. To the extent that the processing of data is not strictly necessary for the operation of the website, the data will be processed only on the basis of your consent. This applies in particular to tracking activities. The legal basis in this regard is Article 6(1)(a) of the GDPR. With this privacy policy, we have provided you with the most important general information regarding data processing. If you would like more detailed information on this topic, you can find additional details—where available—in the following section or in the provider’s privacy policy.

The Website Builder we use

We host and build our website using the platform GoHighLevel (HighLevel Inc., 400 N. Saint Paul St., Suite 920, Dallas, TX 75201, USA). GoHighLevel processes technical log data, IP addresses, and form submission data to ensure site stability and security. Data processing is based on Art. 6(1)(f) GDPR (legitimate interest).

Web Analytics Introduction

What is Web Analytics?

We use software on our website to analyze the behavior of website visitors, known as web analytics or web analysis for short. In the process, data is collected, which the respective analytics tool provider (also known as a tracking tool) stores, manages, and processes. This data is used to generate analyses of user behavior on our website, which are then made available to us as the website operator. In addition, most tools offer various testing options.

Why Do We Use Web Analytics?

With our website, we have a clear goal in mind: we want to provide the best online offering on the market for our industry. To achieve this goal, we aim to offer the best and most interesting content while also ensuring that you feel completely at ease on our website. With the help of web analytics tools, we can take a closer look at the behavior of our website visitors and then improve our website for both you and us accordingly. For example, we can determine the average age of our visitors, where they come from, when our website receives the most traffic, or which content or products are particularly popular. All of this information helps us optimize the website and thus tailor it as closely as possible to your needs, interests, and preferences.

What data is processed?

Exactly what data is stored depends, of course, on the analytics tools used. However, as a general rule, the following information is stored: what content you view on our website, which buttons or links you click, when you visit a page, which browser you use, what device (PC, tablet, smartphone, etc.) you use to visit the website, and what operating system you use. If you have consented to the collection of location data, this information may also be processed by the web analytics tool provider.

In addition, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are considered personal data. However, your IP address is generally stored in a pseudonymized form (i.e., in an unrecognizable and truncated form). For the purposes of testing, web analytics, and web optimization, no direct data—such as your name, age, address, or email address—is stored. All of this data, if collected, is stored in a pseudonymized form. This means you cannot be identified as an individual.

How long the respective data is stored always depends on the provider. Some cookies store data for only a few minutes or until you leave the website; other cookies can store data for several years.

Duration of Data Processing

We provide information on the duration of data processing below, provided we have further details on this matter. In general, we process personal data only for as long as is strictly necessary to provide our services and products. If required by law—as is the case with accounting, for example—this retention period may be exceeded.

Right to Object

You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. You can do this either through our cookie management tool or via other opt-out features. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser.

Legal Basis

The use of web analytics requires your consent, which we have obtained via our cookie popup. According to Article 6(1)(a) of the GDPR (Consent), this consent constitutes the legal basis for the processing of personal data, as may occur during collection by web analytics tools. In addition to your consent, we have a legitimate interest in Messenger & Communication Privacy Policy Summary Data Subjects: Website visitors Purpose: Contact requests and general communication between us and you Data Processed: Data such as name, address, email address, phone number, general content data, and, if applicable, IP address You can find more details on this under the respective tools used. Retention period: Depends on the messenger and communication features used Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests), Art. 6(1)(b) GDPR (contractual or pre-contractual obligations) analyze the behavior of website visitors and thereby improve our offering both technically and economically. With the help of web analytics, we detect website errors, identify attacks, and improve cost-effectiveness. The legal basis for this is Article 6(1)(f) GDPR (Legitimate Interests). However, we use these tools only to the extent that you have have given your consent. Since web analytics tools use cookies, we also recommend that you read our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools. Information on specific web analytics tools—where available—can be found in the following sections.

Messenger & Communication Introduction

What are messenger and communication features? We offer various options on our website (such as messaging and chat features, online or contact forms, email, and phone) for communicating with us. In doing so, your data is processed and stored to the extent necessary to respond to your inquiry and take subsequent actions. In addition to traditional communication methods such as email, contact forms, or phone, we also use chats and messaging services. The most commonly used messaging service at present is WhatsApp, but there are, of course, many different providers that offer messaging features specifically for websites. If content is end-to-end encrypted, this is indicated in the individual privacy notices or in the privacy policy of the respective provider. End-to-end encryption simply means that the content of a message is not visible even to the provider. However, information about your device, location settings, and other technical data may still be processed and stored.

Why do we use messaging and communication features?

Being able to communicate with you is very important to us. After all, we want to talk to you and answer any questions you may have about our service as best as possible. smooth communication is an important part of our service. With our convenient messaging and communication features, you can choose the ones you prefer at any time. In exceptional cases, however, we may not be able to answer certain questions via chat or messaging. This is the case, for example, when internal contractual matters are involved. In such cases, we recommend other communication channels such as email or phone. We generally assume that we remain the data controller under data protection law, even when we use the services of a social media platform. However, the European Court of Justice has ruled that, in certain cases, the operator of the social media platform may be jointly responsible with us within the meaning of Article 26 of the GDPR. To the extent that this is the case, we will make a separate note of it and operate on the basis of a relevant agreement. The key provisions of the agreement are outlined below for the respective platform. Please note that when you use our embedded features, your data may also be processed outside the European Union, as many providers—such as Facebook Messenger or WhatsApp—are U.S. companies. As a result, you may no longer be able to assert or enforce your rights regarding your personal data as easily.

What data is processed?

Exactly which data is stored and processed depends on the respective provider of the messaging and communication features. Generally, this includes data such as your name, address, phone number, email address, and content data—for example, any information you enter into a contact form. In most cases, information about your device and your IP address is also stored. Data collected via a messaging and communication feature is also stored on the providers’ servers. If you want to know exactly what data is stored and processed by the respective providers and how you can object to the data processing, you should carefully read the company’s privacy policy.

How long is data stored? How long data is processed and stored depends primarily on the tools we use. You can learn more about data processing for each tool below. The providers’ privacy policies typically specify exactly what data is stored and processed, and for how long. As a general rule, personal data is processed only for as long as necessary to provide our services. When data is stored in cookies, the retention period varies greatly. The data may be deleted immediately after you leave a website, but it may also remain stored for several years. Therefore, you should examine each individual cookie in detail if you want to know more about data storage. In most cases, you’ll also find helpful information about individual cookies in the privacy policies of the respective providers.

Right to Object You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. You can do this either through our cookie management tool or via other opt-out features. For example, you can also prevent data collection via cookies by managing, disabling, or deleting cookies in your browser. For further information, please refer to the section on consent. Since cookies may be used in messenger and communication features, we also recommend that you review our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Legal Basis

If you have consented to the processing and storage of your data through integrated messenger and communication features, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). We process your inquiry and manage your data within the framework of contractual or pre-contractual relationships in order to fulfill our pre-contractual and contractual obligations or to respond to inquiries. The legal basis for this is Art. 6(1), sentence 1, subparagraph (b) of the GDPR. In general, your data is also processed on the basis of consent, your data is also processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in prompt and effective communication with you or other customers and business partners.

Chatbots Introduction

Chatbots Privacy Policy Summary Data Subjects:

Website visitors Purpose: Contact requests and general communication between us and you

Data processed: Data such as name, address, email address, phone number, general content data, and, if applicable, IP address

You can find more details on this in the information provided for the respective tools used.

Retention period: Depends on the chatbots and chat functions used Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests), Art. 6(1)(b) GDPR (contractual or pre-contractual obligations)

What are chatbots? You can also communicate with us via chatbots or similar chat features. A chat allows you to write or speak with each other with very little delay. A chatbot is a piece of software that attempts to answer your question and, if necessary, keeps you informed about updates. When you use these communication tools, your personal data may also be processed and stored.

Why do we use chatbots?

We value our ability to communicate with you. After all, we want to talk to you and answer any questions you may have about our service as best as possible. Effective communication is an important part of the service we provide. Chatbots offer the significant advantage of allowing us to automatically answer frequently asked questions using this software. This saves us time while still providing you with detailed and helpful answers. If the chatbot cannot assist you, you are, of course, always welcome to contact us directly. Please note that when using our integrated features, your data may be processed outside the European Union, as many providers are U.S.-based companies. As a result, you may no longer be able to assert or enforce your rights regarding your personal data as easily.

What data is processed?

You may also use the chat services on other websites or platforms. In this case, your user ID will also be stored on the servers of those websites. We may also be informed about which user used the chat and when. The content is also stored. Exactly which data is stored depends on the specific service. As a rule, however, this includes contact information such as an email address or phone number, IP address, and various usage data. If you have consented to the use of the chat feature, this consent—along with any registration— is also stored or logged. We do this so that we can provide proof of the registration or consent if required by law. The provider of a chat platform may also learn when you are chatting and receives technical information about the device you are using. Exactly what information is stored and processed also depends on your computer settings. In many cases, for example, data regarding your approximate location may be collected. This is done, on the one hand, to optimize the chat services and, on the other hand, to ensure greater security. Furthermore, the information may also be used to implement personalized advertising and marketing campaigns. If you have consented to a chatbot sending you messages, you can, of course, deactivate this feature at any time. The chatbot also serves as a guide here and shows you how to opt out of this feature. All your related data will then be deleted from the recipient list. We use the data mentioned above to, for example, address you personally via chat, answer your questions and inquiries, or send you relevant content. In addition, this data helps us improve our chat services overall.

How long is data stored? How long data is processed and stored depends primarily on the tools we use. You can learn more about data processing for each tool below. The providers’ privacy policies typically specify exactly which data is stored and processed, and for how long. As a general rule, personal data is processed only for as long as necessary to provide our services. When data is stored in cookies, the retention period varies significantly. The data may be deleted immediately after you leave a website, but it may also remain stored for several years. Therefore, you should examine each individual cookie in detail if you want to know more about data storage. In most cases, you’ll also find helpful information about individual cookies in the privacy policies of the respective providers.

Right to Object You also have the right and the option to withdraw your consent to the use of cookies or third-party providers at any time. You can do this either through our cookie management tool or via other opt-out features. For example, you can also prevent data collection via cookies by managing, disabling, or deleting cookies in your browser. Since chat services may use cookies, we also recommend that you review our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Legal Basis

We use a pop-up window to ask for your permission to process your data in connection with the chat services. If you consent, this consent also serves as the legal basis (Art. 6(1)(a) GDPR) for data processing. In addition, we process your inquiries and manage your data within the framework of contractual or pre-contractual relationships in order to fulfill our pre-contractual and contractual obligations or to respond to inquiries. The legal basis for this is Art. 6(1)(b) GDPR. In general, your data is also processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in prompt and effective communication with you or other customers and business partners. However, we only use these tools to the extent that you have given your consent.

Social Media Introduction

Social Media Privacy Policy Summary

Data Subjects:

Website visitors Purpose: Presenting and optimizing our services, contacting visitors, prospective customers, and others; advertising

Data Processed: Data such as phone numbers, email addresses, contact information, user behavior data, information about your device, and your IP address.

You can find more details on this for each social media tool used.

Retention period: Depends on the social media platforms used Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What is social media?

In addition to our website, we are also active on various social media platforms. In this context, user data may be processed so that we can specifically target users who are interested in us via social networks. Furthermore, elements of a social media platform may be embedded directly into our website. This is the case, for example, when you click on a so-called social media button on our website and are redirected directly to our social media presence. The term “social media” refers to websites and apps through which registered members can create content, share content publicly or within specific groups, and network with other members.

Why do we use social media? For years, social media platforms have been the place where people communicate and connect online. Through our social media presence, we can introduce our products and services to interested parties. The social media elements integrated into our website help you quickly and easily access our social media content. The data stored and processed through your use of a social media channel is primarily intended to enable web analytics. The goal of these analytics is to develop more precise and personalized marketing and advertising strategies. Depending on your behavior on a social media platform, the analyzed data can be used to draw relevant conclusions about your interests and create so-called user profiles. This also enables the platforms to present you with tailored advertisements. In most cases, cookies are placed in your browser for this purpose to store data about your usage behavior. We generally assume that we remain the data controller under data protection law, even when we use the services of a social media platform. However, the European Court of Justice has ruled that, in certain cases, the operator of the social media platform may be jointly responsible with us within the meaning of Article 26 of the GDPR. Where this is the case, we will make a separate note of it and operate on the basis of a relevant agreement. The key provisions of the agreement are then set forth below for the platform in question. Please note that when you use social media platforms or our embedded features, your data may also be processed outside the European Union, as many social media channels—such as Facebook or Twitter—are U.S.-based companies. As a result, you may no longer be able to assert or enforce your rights regarding your personal data as easily.

We maintain company profiles on Instagram and Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). If you visit or interact with our profiles, Meta collects device and analytics data. We only use simple external links to these platforms on our website (no two-way tracking social plugins). Legal basis: Art. 6(1)(f) GDPR.

What data is processed?

Exactly which data is stored and processed depends on the respective social media platform provider. However, it typically includes data such as phone numbers, e- email addresses, data you enter into a contact form, user data such as which buttons you click, who you like or follow, when you visited which pages, information about your device, and your IP address. Most of this data is stored in cookies. Specifically, if you have a profile on the social media platform you’re visiting and are logged in, data may be linked to your profile. All data collected via a social media platform is also stored on the providers’ servers. Consequently, only the providers have access to the data and can provide you with the relevant information or make changes. If you want to know exactly what data is stored and processed by the social media providers and how you can object to data processing, you should carefully read the company’s respective privacy policy. If you have questions about data storage and processing or wish to exercise your rights in this regard, we recommend that you contact the provider directly.

Duration of Data Processing

We provide information on the duration of data processing below, to the extent that we have further details. For example, the social media platform Facebook stores data until it is no longer needed for its own purposes. However, customer data that is matched with a user’s own data is deleted within two days. In general, we process personal data only for as long as is absolutely necessary to provide our services and products. If required by law—as is the case with accounting, for example—this retention period may be extended.

Right to Object

You also have the right and the option at any time to withdraw your consent to the use of cookies or third-party providers, such as embedded social media elements. You can do this either through our cookie management tool or via other opt-out functions. For example, you can also prevent data collection via cookies by managing, disabling, or deleting cookies in your browser. Since social media tools may use cookies, we also recommend that you review our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Legal Basis

If you have consented to the processing and storage of your data through embedded social media elements, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). In general, if on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in maintaining fast and effective communication with you or other customers and business partners. However, we only use these tools to the extent that you have given your consent. Most social media platforms also set cookies in your browser to store data. We therefore recommend that you carefully read our privacy policy regarding cookies and review the privacy policy or cookie policy of the respective service provider. You can find information on specific social media platforms—if available—in the following sections.

Payment Providers Introduction

Payment Providers Privacy Policy Summary Data Subjects:

Website visitors Purpose:

To enable and optimize the payment process on our website

Data Processed: Data such as name, address, bank details (account number, credit card number, passwords, TANs, etc.), IP address, and contract details.

You can find more details in the documentation for the respective payment provider tool.

Retention period: Depends on the payment provider used Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

What is a payment provider?

We use online payment systems on our website that enable us and you to complete a secure and seamless payment process. In the course of this, personal data may, among other things, be sent to, stored by, and processed by the respective payment provider. Payment providers are online payment systems that allow you to place an order via online banking. In this process, the payment is processed by the payment provider you have selected. We then receive notification of the completed payment. Any user with an active online banking account that includes a PIN and TAN can use this method. There are very few banks that do not offer or accept such payment methods.

Why do we use payment providers on our website?

Of course, we want to offer the best possible service through our website and our integrated online store so that you feel comfortable on our site and take advantage of our offers. We know that your time is valuable and that payment processing, in particular, must be fast and seamless. For these reasons, we offer you a variety of payment providers. You can choose your preferred payment provider and pay in the way you’re used to.

What data is processed?

Exactly which data is processed depends, of course, on the specific payment provider. However, generally speaking, data such as your name, address, and banking information (account number, credit card number, passwords, TANs, etc.) is stored. This data is necessary to carry out a transaction at all. In addition, certain contractual data and user data—such as when you visit our website, which content you’re interested in, or which subpages you click on. Most payment providers also store your IP address and information about the computer you’re using. The data is generally stored and processed on the payment providers’ servers. We, as the website operator, do not receive this data. We are only informed whether the payment was successful or not. For identity and credit checks, payment providers may forward data to the appropriate authority. The terms and conditions and privacy policies of the respective provider always apply to all payment transactions. Therefore, please always review the payment provider’s Terms and Conditions and Privacy Policy. You also have the right at any time, for example, to have data deleted or corrected. Please contact the respective service provider regarding your rights (right of withdrawal, right to access, and right to object).

Duration of Data Processing

We provide information on the duration of data processing below, to the extent that we have further details. In general, we process personal data only for as long as is strictly necessary to provide our services and products. If required by law—as is the case with accounting, for example—this retention period may be exceeded. For instance, we retain accounting documents related to a contract (invoices, contract documents, bank statements, etc.) for 10 years (Section 147 of the German Fiscal Code [AO]) and other relevant business records for 6 years (Section 247 of the German Commercial Code [HGB]) from the date they are generated.

Right to Object

You always have the right to access, correct, and delete your personal data. If you have any questions, you may also contact the data controller of the payment provider used at any time. Contact information can be found either in our specific privacy policy or on the website of the respective payment provider. You can delete, disable, or manage cookies used by payment providers for their functions in your browser. The process varies depending on which browser you use. Please note, however, that doing so may prevent the payment process from working properly.

Legal Basis

We therefore use other payment service providers in addition to traditional banks and credit institutions to process contractual or legal relationships (Art. 6(1)(b) GDPR) . The privacy policies of the individual payment providers (such as Amazon Payments, Apple Pay, or Discover) provide you with a detailed overview of data processing and data storage. In addition, you can always contact the respective data controllers if you have any questions regarding data protection. Information about specific payment providers—where available—can be found in the following sections.

What payment provider we use

For payment processing, we use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When you make a payment or open a payment link, your payment details, contact information, and IP address are processed directly by Stripe to complete the transaction and prevent fraud. Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (fraud prevention).

External Online Platforms Introduction

External Online Platforms Privacy Policy Summary Data Subjects:

Website visitors or visitors to external online platforms

Purpose: Presentation and optimization of our services, contacting visitors, prospective customers

Data Processed: Data such as phone numbers, email addresses, contact information, user behavior data, information about your device, and your IP address.

You can find more details on the respective platform used.

Retention period: Depends on the platforms used Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are external online platforms? To offer our services or products outside of our website, we also use external platforms. These are mostly online marketplaces such as Amazon or eBay. In addition to our responsibility for data protection, the privacy policies of the external platforms we use also apply. This is especially the case when our products are purchased through the platform—that is, when a payment transaction takes place. Furthermore, most platforms also use your data to optimize their own marketing activities. For example, the platform can use the data it collects to tailor advertisements precisely to the interests of customers and website visitors.

Why do we use external online platforms?

In addition to our website, we also want to offer our products on other platforms to reach more customers. External online marketplaces such as Amazon, eBay, or Digistore24 provide large e-commerce sites that offer our products to people who may not be familiar with our website. It may also happen that embedded elements on our site redirect users to an external online platform. Data processed and stored by the online platform in question is used by the company both to log the payment transaction and to conduct web analytics. The goal of these analyses is to develop more precise and personalized marketing and advertising strategies. Depending on your behavior on a platform, the analyzed data can be used to draw appropriate conclusions about your interests and create so-called user profiles. This also enables the platforms to present you with customized advertisements or products. In most cases, cookies are placed in your browser for this purpose to store data about your usage behavior. Please note that when you use these platforms or our integrated features, your data may also be processed outside the European Union, since online platforms—such as Amazon or eBay—are U.S. companies. As a result, you may no longer be able to easily assert or enforce your rights regarding your personal data.

What data is processed?

Exactly which data is stored and processed depends on the specific external platform. However, it usually includes data such as phone numbers, email addresses, information you enter into a contact form, user data (e.g., which buttons you click, when you visited which pages), information about your device, and your IP address. Very often, most of this data is stored in cookies. If you have your own profile on an external platform and are logged in there, data can be linked to that profile. The collected data is stored on the servers of the platforms used and processed there. You can find out exactly how an external platform stores, manages, and processes data in its respective privacy policy. If you have questions about data storage and processing or wish to exercise your rights in this regard, we recommend that you contact the platform directly.

Duration of Data Processing

We provide information on the duration of data processing below, to the extent that we have further details. For example, Amazon stores data until it is no longer needed for its own purposes. In general, we process personal data only for as long as is strictly necessary to provide our services and products.

Right to Object

You also have the right and the option to revoke your consent to the use of cookies at any time. You can do this either through our cookie management tool or via the opt-out features on the respective external platform. Furthermore, you can prevent data collection via cookies by managing, disabling, or deleting cookies in your browser. Since cookies may be used, we also recommend that you review our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective external platforms.

Legal Basis

If you have consented to the processing and storage of your data by external platforms, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). In general, if consent has been given, your data is also stored and processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR) in maintaining prompt and effective communication with you or other customers and business partners. If we have embedded elements from external platforms on our website, we use them only to the extent that you have given your consent. You can find information on specific external platforms—if available—in the following sections.

Survey and Questionnaire Systems Introduction

Survey and Polling Systems Privacy Policy Summary Data Subjects:

Website visitors Purpose: Analysis of surveys on the website

Data Processed: Contact information, device data, duration and time of access, IP addresses.

You can find more details about this in the information provided for each survey and questionnaire system used.

Retention period: Depends on the tool used Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interests)

What are survey and questionnaire systems? We also like to conduct various surveys and questionnaires via our website. These are always evaluated anonymously. A survey or questionnaire system is a tool integrated into our website that asks you questions (for example, about our products or services), which you can answer if you choose to participate. Your answers are always evaluated anonymously. However, with your consent to data processing, personal data may also be stored and processed.

Why do we use survey and questionnaire systems?

We want to offer you the best products and services in our industry. Surveys provide us with valuable feedback from you and help us understand what you expect from us and our services. Based on these anonymous analyses, we can tailor our products and services to best meet your needs and expectations. Furthermore, this information helps us target our advertising and marketing efforts more effectively toward those individuals who are genuinely interested in what we have to offer.

What data is processed?

Personal data is processed only when necessary for technical implementation or when you have consented to the processing of personal data. In such cases, your IP address may be stored so that, for example, the survey can be displayed in your browser. Cookies may also be used so that you can easily resume your survey at a later time. If you have consented to data processing, contact information such as your email address or phone number may be processed in addition to your IP address. Data that you enter into an online form, for example, is also stored and processed. Some providers also store information about the web pages you’ve visited (on our website), when you started and finished the survey, and various technical details about your computer.

How long is data stored?

How long data is processed and stored depends primarily on the tools we use. You can learn more about data processing for each tool below. The providers’ privacy policies typically specify exactly which data is stored and processed and for how long. As a general rule, personal data is processed only for as long as necessary to provide our services. When data is stored in cookies, the retention period varies greatly. The data may be deleted immediately after you leave a website, but it may also remain stored for several years. Therefore, you should examine each individual cookie in detail if you want to know more about data storage. In most cases, you’ll also find helpful information about individual cookies in the privacy policies of the respective providers.

Right to Object

You also have the right and the option to revoke your consent to the use of cookies or embedded survey systems at any time. You can do this either through our cookie management tool or via other opt-out features. For example, you can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser. Since survey systems may use cookies, we also recommend that you review our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should read the privacy policies of the respective tools.

Legal Basis

The use of survey systems requires your consent, which we have obtained via our cookie popup. According to Article 6(1)(a) of the GDPR (Consent), this consent constitutes the legal basis for the processing of personal data, as may occur during collection via survey and polling systems. In addition to your consent, we have a legitimate interest in conducting surveys on our topic. The legal basis for this is Article 6(1)(f) of the GDPR (Legitimate Interests). However, we only use these tools if you have given your consent. Since survey systems use cookies, we also recommend that you read our general privacy policy regarding cookies. To find out exactly which of your data is stored and processed, you should review the privacy policies of the respective tools. Information on the individual survey systems is provided—where available—in the following sections.

Web Design Introduction

Web Design Privacy Policy Summary Data Subjects:

Website visitors Purpose: To improve the user experience

Data Processed: The specific data processed depends heavily on the services used.

In most cases, this includes IP address, technical data, language settings, browser version, screen resolution, and browser name.

You can find more details in the descriptions of the respective web design tools used.

Retention Period: Depends on the tools used Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What Is Web Design? We use various tools on our website that support our web design. Web design is not, as is often assumed, merely about making our website look attractive, but also about functionality and performance. Of course, achieving the right visual appeal for a website is also one of the primary goals of professional web design. Web design is a subfield of media design and deals with the visual, structural, and functional design of a website. The goal of web design is to enhance your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. User experience encompasses all the impressions and experiences a website visitor has while on a website. Usability is a subset of user experience. It refers to how user-friendly a website is. The primary focus here is on ensuring that content, subpages, or products are clearly structured so that you can find what you’re looking for quickly and easily. To provide you with the best possible experience on our website, we also use third-party web design tools. The category “Web Design” in this Privacy Policy therefore includes all services that enhance the design of our website. These may include, for example, fonts, various plugins, or other integrated web design features.

Why do we use web design tools?

How you take in information on a website depends heavily on the website’s structure, functionality, and visual appeal. That’s why a high-quality, professional web design has become increasingly important to us as well. We’re constantly working to improve our website and view this as an added service for you, our website visitors. Furthermore, an attractive and functional website also offers economic benefits for us. After all, you’ll only visit us and take advantage of our offerings if you feel completely at ease.

What data is stored by web design tools?

When you visit our website, web design elements may be embedded in our pages that can also process data. Exactly what data this involves depends, of course, depends heavily on the tools used. Below, you can see exactly which tools we use for our website. For more detailed information about data processing, we also recommend that you read the respective privacy policies of the tools we use. In most cases, these policies explain what data is processed, whether cookies are used, and how long the data is retained. For example, fonts such as Google Fonts automatically transmit information such as language settings, IP address, browser version, browser screen resolution, and browser name to Google’s servers.

Duration of Data Processing

How long data is processed varies greatly and depends on the web design elements used. If cookies are used, for example, the retention period can range from just one minute to several years. Please educate yourself on this matter. To do so, we recommend reviewing our general section on cookies as well as the privacy policies of the tools used. There you will generally find out exactly which cookies are used and what information is stored in them. Google Font files, for example, are stored for one year. This is intended to improve a website’s loading time. As a general rule, data is only retained for as long as is necessary to provide the service. Data may also be stored for longer periods if required by law.

Right to Object

You also have the right and the option to revoke your consent to the use of cookies or thirdparty providers at any time. You can do this either through our cookie management tool or via other opt-out features. You can also prevent data collection by cookies by managing, disabling, or deleting cookies in your browser. However, some data—particularly related to web design elements (most commonly fonts)—cannot be deleted quite so easily. This is the case when data is automatically collected the moment a page is loaded and transmitted to a third-party provider.

Legal Basis

If you have consented to the use of web design tools, this consent serves as the legal basis for the corresponding data processing. According to Article 6(1)(a) of the GDPR (Consent), this consent constitutes the legal basis for the processing of personal data, as may occur when such data is collected by web design tools. We also have a legitimate interest in improving the web design of our website. After all, this is the only way we can provide you with an attractive and professional website. The corresponding legal basis for this is Article 6(1)(f) of the GDPR (Legitimate Interests). However, we only use web design tools to the extent that you have given your consent. We would like to emphasize this point once again here. Information on specific web design tools—if available—can be found in the following sections.

Online Booking Systems Introduction

Online Booking Systems Privacy Policy Summary Data Subjects:

Website visitors Purpose: To improve the user experience and organization

Data Processed: The specific data processed depends heavily on the services used.

In most cases, this includes IP addresses, contact and payment information, and/or technical data.

You can find more details in the descriptions of the respective tools used.

Retention Period: Depends on the tools used Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What is an online booking system?

To enable you to make bookings through our website, we use one or more booking systems. This makes it very easy to schedule appointments online. A booking system is a software application integrated into our website that displays available resources (such as open appointment slots) and allows you to book directly online and, in most cases, make payments as well. You are probably already familiar with such booking systems from the restaurant or hotel industries. However, such systems are now used in a wide variety of industries. Depending on the tool and settings, booking systems can be used both internally by us and by customers like you. In the process, personal data about you is typically collected and stored. In most cases, the booking process works as follows: On our website, you’ll find the booking system where you can book an appointment for a service directly with a click of the mouse and by entering your information—and in most cases, pay right away. You may be able to enter various personal details via a form. Please be aware that all data you enter may be stored and managed in a database.

Why do we use an online booking system?

In a sense, we also view our website as a free service for you. We want you to receive helpful information and feel completely at ease on our site. This also includes an online service that makes booking appointments or services as easy as possible for you. Gone are the days when you had to wait days for a booking confirmation via phone or email. With an online booking system, you can get everything done with just a few clicks and get back to other things. The system also makes it easier for us to manage all bookings and appointments. That’s why we consider such a booking system to be absolutely beneficial for both you and us.

What data is processed?

Of course, we cannot tell you exactly what data is processed in this general information text about the booking system. That always depends on the tool used and the functions and options it offers. In addition to the standard booking function, many booking systems also offer a range of other features. For example, many systems also have an integrated external online payment system (e.g., from Stripe, Klarna, or PayPal) and a calendar synchronization feature. Accordingly, depending on the features, different types and varying amounts of data may be processed. Typically, data such as your IP address, name, and contact information, technical details about your device, and the time of a booking are processed. If you also make a payment through the system, banking information such as account numbers, credit card numbers, passwords, TANs, etc., is stored and forwarded to the respective payment provider. We recommend that you carefully read the privacy policy of the tool you are using so that you know exactly which of your data is being processed.

Duration of Data Processing

Each booking system stores data for different lengths of time. For this reason, we cannot yet provide specific details here regarding the duration of data processing. In principle, however, personal data is always stored only for as long as is absolutely necessary to provide the services. Booking systems typically also use cookies, which store information for varying lengths of time. Some cookies are deleted immediately after you leave the page, while others may be stored for several years. You can learn more about this in our “Cookies” section. Please also review the respective privacy policies of the providers. These should explain how long your data will be stored in each specific case.

Right to Object

If you have consented to data processing by a booking system, you naturally always have the option and the right to revoke this consent. Please be aware at all times that you have rights regarding your personal data and that you can exercise these rights at any time. If you do not want your personal data to be processed, then no personal data may be processed. It’s that simple. The easiest way to revoke consent for data processing is through a cookie consent tool or other opt-out features provided. You can also manage data storage via cookies directly in your browser, for example. The lawfulness of data processing remains unaffected until you revoke your consent.

Legal Basis

If you have consented to the use of booking systems, this consent serves as the legal basis for the corresponding data processing. Pursuant to Article 6(1)(a) of the GDPR (Consent), it constitutes the legal basis for the processing of personal data, as may occur through booking systems.

Furthermore, we also have a legitimate interest in using booking systems because they allow us, on the one hand, to expand our customer service and, on the other hand, to optimize our internal booking processes. The corresponding legal basis for this is Article 6(1)(f) of the GDPR (Legitimate Interests). Nevertheless, we only use these tools to the extent that you have given your consent. We would like to emphasize this point once again here. Information on specific booking systems—if available—can be found in the following sections.

Miscellaneous Introduction

Miscellaneous Privacy Policy Summary Data Subjects:

Website visitors Purpose: To improve the user experience

Data Processed: The specific data processed depends heavily on the services used.

In most cases, this includes IP addresses and/or technical data.

You can find more details in the descriptions of the respective tools.

Retention Period: Depends on the tools used Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What falls under “Other”?

The “Other” category includes those services that do not fit into any of the categories listed above. These are generally various plugins and embedded elements that enhance our website. These functions are generally sourced from third-party providers and integrated into our website.

Why do we use other third-party providers?

With our website, we aim to offer you the best online experience in our industry. For quite some time now, a website has been more than just a business card for companies. Rather, it is a place designed to help you find what you’re looking for. To continually make our website even more interesting and helpful for you, we use various third-party services.

What data is processed?

Whenever elements are integrated into our website, your IP address is transmitted to the respective provider, stored, and processed there. This is necessary because otherwise the content would not be sent to your browser and consequently would not be displayed properly. Service providers may also use pixel tags or web beacons. These are small graphics on websites that can record a log file and generate analyses of that file. Providers use the information obtained to improve their own marketing efforts. In addition to pixel tags, such information (such as which button you click or when you visit a particular page) may also be stored in cookies. These cookies may contain not only analytical data about your web behavior but also technical information, such as your browser type or operating system. Some providers may also link the collected data to other internal services or to third-party providers. Each provider handles your data differently. Therefore, we recommend that you carefully read the privacy policies of the respective services. As a general rule, we strive to use only services that handle data protection with the utmost care.

Duration of Data Processing

We provide information on the duration of data processing below, to the extent that we have further details. In general, we process personal data only for as long as is strictly necessary to provide our services and products.

Legal Basis

If we ask for your consent and you agree to allow us to use the service, this serves as the legal basis for processing your data (Art. 6(1)(a) GDPR). In addition to your consent, we have a legitimate interest in analyzing the behavior of website visitors in order to improve our offerings both technically and economically. The legal basis for this is Article 6(1)(f) of the GDPR (Legitimate Interests). However, we only use these tools to the extent that you have given your consent.

Information about the specific tools—where available—can be found in the following sections.

Explanation of Terms Used

We always strive to draft our Privacy Policy as clearly and comprehensibly as possible. However, this is not always easy, particularly when dealing with technical and legal topics. It often makes sense to use legal terms (such as “personal data”) or specific technical terms (such as “cookies” or “IP address”). However, we do not wish to use them without explanation. Below you will find an alphabetical list of important terms used that we may not have addressed sufficiently in the privacy policy so far. If these terms are taken from the GDPR and are definitions, we will also cite the relevant GDPR texts here and add our own explanations where necessary.

All texts are protected by copyright.

Source: Privacy Policy created using the Privacy Policy Generator for Germany by AdSimple.

Be sure to also check out our sample privacy policy.