Privacy Policy

1. An overview of data pro­tection

General infor­mation

The fol­lowing infor­mation will provide you with an easy to navigate overview of what will happen with your per­sonal data when you visit this website. The term “per­sonal data” com­prises all data that can be used to per­so­nally identify you. For detailed infor­mation about the subject matter of data pro­tection, please consult our Data Pro­tection Decla­ration, which we have included beneath this copy.

Data recording on this website

Who is the respon­sible party for the recording of data on this website (i.e., the “con­troller”)?

The data on this website is pro­cessed by the ope­rator of the website, whose contact infor­mation is available under section “Infor­mation about the respon­sible party (referred to as the “con­troller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for ins­tance be infor­mation you enter into our contact form.

Other data shall be recorded by our IT systems auto­ma­ti­cally or after you consent to its recording during your website visit. This data com­prises pri­marily tech­nical infor­mation (e.g., web browser, ope­rating system, or time the site was accessed). This infor­mation is recorded auto­ma­ti­cally when you access this website.

What are the pur­poses we use your data for?

A portion of the infor­mation is gene­rated to gua­rantee the error free pro­vision of the website. Other data may be used to analyze your user pat­terns. If con­tracts can be con­cluded or initiated via the website, the trans­mitted data will also be pro­cessed for con­tract offers, orders or other order enquiries.

What rights do you have as far as your infor­mation is con­cerned?

You have the right to receive infor­mation about the source, reci­pients, and pur­poses of your archived per­sonal data at any time without having to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­tified or era­di­cated. If you have con­sented to data pro­cessing, you have the option to revoke this consent at any time, which shall affect all future data pro­cessing. Moreover, you have the right to demand that the pro­cessing of your data be rest­ricted under certain cir­cum­s­tances. Fur­thermore, you have the right to log a com­plaint with the com­petent super­vising agency.

Please do not hesitate to contact us at any time if you have ques­tions about this or any other data pro­tection related issues.

Ana­lysis tools and tools pro­vided by third parties

There is a pos­si­bility that your browsing pat­terns will be sta­tis­ti­cally ana­lyzed when your visit this website. Such ana­lyses are per­formed pri­marily with what we refer to as ana­lysis pro­grams.

For detailed infor­mation about these ana­lysis pro­grams please consult our Data Pro­tection Decla­ration below.

2. Hosting

We are hosting the content of our website at the fol­lowing pro­vider:

IONOS

The pro­vider is the IONOS SE, Elgen­dorfer Str. 57, 56410 Mon­tabaur, Germany (her­ein­after referred to as: IONOS). Whenever you visit our website, IONOS records various log­files along with your IP addresses. For details, please consult the data privacy policy of IONOS: https://www.ionos.de/terms-gtc/terms-privacy.

We use IONOS on the basis of Art. 6 (1)(f) GDPR. Our company has a legi­timate interest in pre­senting a website that is as depen­dable as pos­sible. If appro­priate consent has been obtained, the pro­cessing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­mation in the user’s end device (e.g., device fin­ger­printing) within the meaning of the TDDDG. This consent can be revoked at any time.

Data pro­cessing

We have con­cluded a data pro­cessing agreement (DPA) for the use of the above-men­­tioned service. This is a con­tract man­dated by data privacy laws that gua­rantees that they process per­sonal data of our website visitors only based on our ins­truc­tions and in com­pliance with the GDPR.

3. General infor­mation and man­datory infor­mation

Data pro­tection

The ope­rators of this website and its pages take the pro­tection of your per­sonal data very seriously. Hence, we handle your per­sonal data as con­fi­dential infor­mation and in com­pliance with the sta­tutory data pro­tection regu­la­tions and this Data Pro­tection Decla­ration.

Whenever you use this website, a variety of per­sonal infor­mation will be coll­ected. Per­sonal data com­prises data that can be used to per­so­nally identify you. This Data Pro­tection Decla­ration explains which data we collect as well as the pur­poses we use this data for. It also explains how, and for which purpose the infor­mation is coll­ected.

We herewith advise you that the trans­mission of data via the Internet (i.e., through e‑mail com­mu­ni­ca­tions) may be prone to security gaps. It is not pos­sible to com­pletely protect data against third-party access.

Infor­mation about the respon­sible party (referred to as the “con­troller” in the GDPR)

The data pro­cessing con­troller on this website is:

GCP German Cathodic Pro­tection GmbH
Am Luft­schacht 23
45307 Essen

Phone: +49 201 615187–0
E‑mail: email@gcp.de

The con­troller is the natural person or legal entity that single-han­­dedly or jointly with others makes decisions as to the pur­poses of and resources for the pro­cessing of per­sonal data (e.g., names, e‑mail addresses, etc.).

Storage duration

Unless a more spe­cific storage period has been spe­cified in this privacy policy, your per­sonal data will remain with us until the purpose for which it was coll­ected no longer applies. If you assert a jus­tified request for deletion or revoke your consent to data pro­cessing, your data will be deleted, unless we have other legally per­mis­sible reasons for storing your per­sonal data (e.g., tax or com­mercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General infor­mation on the legal basis for the data pro­cessing on this website

If you have con­sented to data pro­cessing, we process your per­sonal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special cate­gories of data are pro­cessed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of per­sonal data to third countries, the data pro­cessing is also based on Art. 49 (1)(a) GDPR. If you have con­sented to the storage of cookies or to the access to infor­mation in your end device (e.g., via device fin­ger­printing), the data pro­cessing is addi­tio­nally based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the ful­fillment of a con­tract or for the imple­men­tation of pre-con­­tractual mea­sures, we process your data on the basis of Art. 6(1)(b) GDPR. Fur­thermore, if your data is required for the ful­fillment of a legal obli­gation, we process it on the basis of Art. 6(1)© GDPR. Fur­thermore, the data pro­cessing may be carried out on the basis of our legi­timate interest according to Art. 6(1)(f) GDPR. Infor­mation on the relevant legal basis in each indi­vidual case is pro­vided in the fol­lowing para­graphs of this privacy policy.

Infor­mation on the data transfer to third-party countries that are not secure under data pro­tection law and the transfer to US com­panies that are not DPF-cer­­tified

We use, among other tech­no­logies, tools from com­panies located in third-party countries that are not safe under data pro­tection law, as well as US tools whose pro­viders are not cer­tified under the EU-US Data Privacy Framework (DPF). If these tools are enabled, your per­sonal data may be trans­ferred to and pro­cessed in these countries. We would like you to note that no level of data pro­tection com­pa­rable to that in the EU can be gua­ranteed in third countries that are insecure in terms of data pro­tection law.

We would like to point out that the US, as a secure third-party country, gene­rally has a level of data pro­tection com­pa­rable to that of the EU. Data transfer to the US is the­r­efore per­mitted if the reci­pient is cer­tified under the “EU-US Data Privacy Framework” (DPF) or has appro­priate addi­tional assu­rances. Infor­mation on transfers to third-party countries, including the data reci­pients, can be found in this Privacy Policy.

Reci­pients of per­sonal data

In the scope of our business acti­vities, we coöperate with various external parties. In some cases, this also requires the transfer of per­sonal data to these external parties. We only dis­close per­sonal data to external parties if this is required as part of the ful­fillment of a con­tract, if we are legally obli­gated to do so (e.g., dis­closure of data to tax aut­ho­rities), if we have a legi­timate interest in the dis­closure pur­suant to Art. 6 (1)(f) GDPR, or if another legal basis permits the dis­closure of this data. When using pro­cessors, we only dis­close per­sonal data of our cus­tomers on the basis of a valid con­tract on data pro­cessing. In the case of joint pro­cessing, a joint pro­cessing agreement is con­cluded.

Revo­cation of your consent to the pro­cessing of data

A wide range of data pro­cessing tran­sac­tions are pos­sible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without pre­judice to the lawfulness of any data coll­ection that occurred prior to your revo­cation.

Right to object to the coll­ection of data in special cases; right to object to direct adver­tising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PRO­CESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PRO­CESSING OF YOUR PER­SONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PRO­FILING BASED ON THESE PRO­VI­SIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PRO­CESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PRO­TECTION DECLA­RATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PER­SONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COM­PELLING PRO­TECTION WORTHY GROUNDS FOR THE PRO­CESSING OF YOUR DATA, THAT OUT­WEIGH YOUR INTE­RESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PRO­CESSING IS THE CLAIMING, EXER­CISING OR DEFENCE OF LEGAL ENTIT­LE­MENTS (OBJECTION PUR­SUANT TO ART. 21(1) GDPR).

IF YOUR PER­SONAL DATA IS BEING PRO­CESSED IN ORDER TO ENGAGE IN DIRECT ADVER­TISING, YOU HAVE THE RIGHT TO OBJECT TO THE PRO­CESSING OF YOUR AFFECTED PER­SONAL DATA FOR THE PUR­POSES OF SUCH ADVER­TISING AT ANY TIME. THIS ALSO APPLIES TO PRO­FILING TO THE EXTENT THAT IT IS AFFI­LIATED WITH SUCH DIRECT ADVER­TISING. IF YOU OBJECT, YOUR PER­SONAL DATA WILL SUB­SE­QUENTLY NO LONGER BE USED FOR DIRECT ADVER­TISING PUR­POSES (OBJECTION PUR­SUANT TO ART. 21(2) GDPR).

Right to log a com­plaint with the com­petent super­visory agency

In the event of vio­la­tions of the GDPR, data sub­jects are entitled to log a com­plaint with a super­visory agency, in par­ti­cular in the member state where they usually maintain their domicile, place of work or at the place where the alleged vio­lation occurred. The right to log a com­plaint is in effect regardless of any other admi­nis­trative or court pro­cee­dings available as legal recourses.

Right to data por­ta­bility

You have the right to have data that we process auto­ma­ti­cally on the basis of your consent or in ful­fillment of a con­tract handed over to you or to a third party in a common, machine-rea­­dable format. If you should demand the direct transfer of the data to another con­troller, this will be done only if it is tech­ni­cally fea­sible.

Infor­mation about, rec­ti­fi­cation and era­di­cation of data

Within the scope of the appli­cable sta­tutory pro­vi­sions, you have the right to demand infor­mation about your archived per­sonal data, their source and reci­pients as well as the purpose of the pro­cessing of your data at any time. You may also have a right to have your data rec­tified or era­di­cated. If you have ques­tions about this subject matter or any other ques­tions about per­sonal data, please do not hesitate to contact us at any time.

Right to demand pro­cessing rest­ric­tions

You have the right to demand the impo­sition of rest­ric­tions as far as the pro­cessing of your per­sonal data is con­cerned. To do so, you may contact us at any time. The right to demand rest­riction of pro­cessing applies in the fol­lowing cases:

• In the event that you should dispute the cor­rectness of your data archived by us, we will usually need some time to verify this claim. During the time that this inves­ti­gation is ongoing, you have the right to demand that we restrict the pro­cessing of your per­sonal data.
• If the pro­cessing of your per­sonal data was/is con­ducted in an unlawful manner, you have the option to demand the rest­riction of the pro­cessing of your data instead of demanding the era­di­cation of this data.
• If we do not need your per­sonal data any longer and you need it to exercise, defend or claim legal entit­le­ments, you have the right to demand the rest­riction of the pro­cessing of your per­sonal data instead of its era­di­cation.
• If you have raised an objection pur­suant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been deter­mined whose inte­rests prevail, you have the right to demand a rest­riction of the pro­cessing of your per­sonal data.

If you have rest­ricted the pro­cessing of your per­sonal data, these data – with the exception of their archiving – may be pro­cessed only subject to your consent or to claim, exercise or defend legal entit­le­ments or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the trans­mission of con­fi­dential content, such as purchase orders or inquiries you submit to us as the website ope­rator, this website uses either an SSL or a TLS encryption program. You can reco­gnize an encrypted con­nection by che­cking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is acti­vated, data you transmit to us cannot be read by third parties.

Rejection of unso­li­cited e‑mails

We herewith object to the use of contact infor­mation published in con­junction with the man­datory infor­mation to be pro­vided in our Site Notice to send us pro­mo­tional and infor­mation material that we have not expressly requested. The ope­rators of this website and its pages reserve the express right to take legal action in the event of the unso­li­cited sending of pro­mo­tional infor­mation, for ins­tance via SPAM mes­sages.

4. Recording of data on this website

Cookies

Our web­sites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored tem­po­r­arily for the duration of a session (session cookies) or they are per­ma­nently archived on your device (per­manent cookies). Session cookies are auto­ma­ti­cally deleted once you ter­minate your visit. Per­manent cookies remain archived on your device until you actively delete them, or they are auto­ma­ti­cally era­di­cated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party com­panies (so-called third-party cookies). Third-party cookies enable the inte­gration of certain ser­vices of third-party com­panies into web­sites (e.g., cookies for handling payment ser­vices).

Cookies have a variety of func­tions. Many cookies are tech­ni­cally essential since certain website func­tions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for pro­mo­tional pur­poses.

Cookies, which are required for the per­for­mance of elec­tronic com­mu­ni­cation tran­sac­tions, for the pro­vision of certain func­tions you want to use (e.g., for the shopping cart function) or those that are necessary for the opti­mization (required cookies) of the website (e.g., cookies that provide mea­surable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­ferent legal basis is cited. The ope­rator of the website has a legi­timate interest in the storage of required cookies to ensure the tech­ni­cally error-free and opti­mized pro­vision of the operator’s ser­vices. If your consent to the storage of the cookies and similar reco­gnition tech­no­logies has been requested, the pro­cessing occurs exclu­sively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the accep­tance of cookies only in spe­cific cases. You may also exclude the accep­tance of cookies in certain cases or in general or activate the delete-function for the auto­matic era­di­cation of cookies when the browser closes. If cookies are deac­ti­vated, the func­tions of this website may be limited.

Which cookies and ser­vices are used on this website can be found in this privacy policy.

CCM19

Our website uses CCM19 to obtain your consent for the storage of certain cookies on your device or for the use of spe­cific tech­no­logies and to document the former in a data pro­tection com­pliant manner. The pro­vider of this tech­nology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany (her­ein­after referred to as “CCM19”).

When you access our website, a con­nection with the servers of CCM19 is estab­lished to obtain your consent and other decla­ra­tions related to the use of cookies. Sub­se­quently, CCM19 will store a cookie in your browser to be able to allocate the granted consent or revo­cation. The data gene­rated using this system will be archived by us until you ask us to delete it, delete the CCM19 cookie yourself or the purpose for the archiving of the data no longer applies. This shall be without pre­judice to any man­datory sta­tutory archiving periods.

We use CCM19 to obtain the consent man­dated by law for the use of cookies. The legal basis for this is Art.6 (1)(1)(f) GDPR.

Data pro­cessing

We have con­cluded a data pro­cessing agreement (DPA) for the use of the above-men­­tioned service. This is a con­tract man­dated by data privacy laws that gua­rantees that they process per­sonal data of our website visitors only based on our ins­truc­tions and in com­pliance with the GDPR.

Server log files

The pro­vider of this website and its pages auto­ma­ti­cally collects and stores infor­mation in so-called server log files, which your browser com­mu­ni­cates to us auto­ma­ti­cally. The infor­mation com­prises:

• The type and version of browser used
• The used ope­rating system
• Referrer URL
• The hostname of the accessing com­puter
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The ope­rator of the website has a legi­timate interest in the tech­ni­cally error free depiction and the opti­mization of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inquiries to us via our contact form, the infor­mation pro­vided in the contact form as well as any contact infor­mation pro­vided therein will be stored by us in order to handle your inquiry and in the event that we have further ques­tions. We will not share this infor­mation without your consent.

The pro­cessing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the exe­cution of a con­tract or if it is necessary to carry out pre-con­­tractual mea­sures. In all other cases the pro­cessing is based on our legi­timate interest in the effective pro­cessing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The infor­mation you have entered into the contact form shall remain with us until you ask us to era­dicate the data, revoke your consent to the archiving of data or if the purpose for which the infor­mation is being archived no longer exists (e.g., after we have con­cluded our response to your inquiry). This shall be without pre­judice to any man­datory legal pro­vi­sions, in par­ti­cular retention periods.

Request by e‑mail, tele­phone, or fax

If you contact us by e‑mail, tele­phone or fax, your request, including all resulting per­sonal data (name, request) will be stored and pro­cessed by us for the purpose of pro­cessing your request. We do not pass these data on without your consent.

These data are pro­cessed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the ful­fillment of a con­tract or is required for the per­for­mance of pre-con­­tractual mea­sures. In all other cases, the data are pro­cessed on the basis of our legi­timate interest in the effective handling of inquiries sub­mitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after com­pletion of your request). Man­datory sta­tutory pro­vi­sions – in par­ti­cular sta­tutory retention periods – remain unaf­fected.

5. Ana­lysis tools and adver­tising

Google Tag Manager

We use the Google Tag Manager. The pro­vider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to inte­grate tracking or sta­tis­tical tools and other tech­no­logies on our website. The Google Tag Manager itself does not create any user pro­files, does not store cookies, and does not carry out any inde­pendent ana­lyses. It only manages and runs the tools inte­grated via it. However, the Google Tag Manager does collect your IP address, which may also be trans­ferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website ope­rator has a legi­timate interest in the quick and uncom­pli­cated inte­gration and admi­nis­tration of various tools on his website. If appro­priate consent has been obtained, the pro­cessing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­mation in the user’s end device (e.g., device fin­ger­printing) within the meaning of the TDDDG. This consent can be revoked at any time.

The company is cer­tified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure com­pliance with European data pro­tection stan­dards for data pro­cessing in the US. Every company cer­tified under the DPF is obliged to comply with these data pro­tection stan­dards. For more infor­mation, please contact the pro­vider under the fol­lowing link: https://www.dataprivacyframework.gov/participant/5780.

Google Ana­lytics

This website uses func­tions of the web ana­lysis service Google Ana­lytics. The pro­vider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ana­lytics enables the website ope­rator to analyze the behavior pat­terns of website visitors. To that end, the website ope­rator receives a variety of user data, such as pages accessed, time spent on the page, the uti­lized ope­rating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place.

Fur­thermore, Google Ana­lytics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Ana­lytics uses various modeling approaches to augment the coll­ected data sets and uses machine learning tech­no­logies in data ana­lysis.

Google Ana­lytics uses tech­no­logies that make the reco­gnition of the user for the purpose of ana­lyzing the user behavior pat­terns (e.g., cookies or device fin­ger­printing). The website use infor­mation recorded by Google is, as a rule trans­ferred to a Google server in the United States, where it is stored.

The use of these ser­vices occurs on the basis of your consent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data trans­mission to the US is based on the Standard Con­tractual Clauses (SCC) of the European Com­mission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is cer­tified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure com­pliance with European data pro­tection stan­dards for data pro­cessing in the US. Every company cer­tified under the DPF is obliged to comply with these data pro­tection stan­dards. For more infor­mation, please contact the pro­vider under the fol­lowing link: https://www.dataprivacyframework.gov/participant/5780.

IP anony­mization

Google Ana­lytics IP anony­mization is active. As a result, your IP address will be abbre­viated by Google within the member states of the European Union or in other states that have ratified the Con­vention on the European Eco­nomic Area prior to its trans­mission to the United States. The full IP address will be trans­mitted to one of Google’s servers in the United States and abbre­viated there only in excep­tional cases. On behalf of the ope­rator of this website, Google shall use this infor­mation to analyze your use of this website to generate reports on website acti­vities and to render other ser­vices to the ope­rator of this website that are related to the use of the website and the Internet. The IP address trans­mitted in con­junction with Google Ana­lytics from your browser shall not be merged with other data in Google’s pos­session.

Browser plug-in

You can prevent the recording and pro­cessing of your data by Google by down­loading and installing the browser plugin available under the fol­lowing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­mation about the handling of user data by Google Ana­lytics, please consult Google’s Data Privacy Decla­ration at: https://support.google.com/analytics/answer/6004245?hl=en.

Google Signals

We use Google Signals. Whenever you visit our website, Google Ana­lytics records, among other things, your location, the pro­gression of your search and YouTube pro­gression as well as demo­graphic data (site visitor data). This data may be used for cus­to­mized adver­tising with the assis­tance of Google Signal. If you have a Google account, your site visitor infor­mation will be linked to your Google account by Google Signal and used to send you cus­to­mized pro­mo­tional mes­sages. The data is also used to compile anony­mized sta­tistics of our users’ online pat­terns.

Con­tract data pro­cessing

We have exe­cuted a con­tract data pro­cessing agreement with Google and are imple­menting the stringent pro­vi­sions of the German data pro­tection agencies to the fullest when using Google Ana­lytics.

6. Plug-ins and Tools

Google Fonts (local embedding)

This website uses so-called Google Fonts pro­vided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a con­nection to Google’s servers will not be estab­lished in con­junction with this appli­cation.

For more infor­mation on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Decla­ration under: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use “Google reCAPTCHA” (her­ein­after referred to as “reCAPTCHA”) on this website. The pro­vider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., infor­mation entered into a contact form) is being pro­vided by a human user or by an auto­mated program. To determine this, reCAPTCHA ana­lyzes the behavior of the website visitors based on a variety of para­meters. This ana­lysis is trig­gered auto­ma­ti­cally as soon as the website visitor enters the site. For this ana­lysis, reCAPTCHA eva­luates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor move­ments initiated by the user). The data tracked during such ana­lyses are for­warded to Google.

reCAPTCHA ana­lyses run entirely in the back­ground. Website visitors are not alerted that an ana­lysis is underway.

Data are stored and ana­lyzed on the basis of Art. 6(1)(f) GDPR. The website ope­rator has a legi­timate interest in the pro­tection of the operator’s web­sites against abusive auto­mated spying and against SPAM. If appro­priate consent has been obtained, the pro­cessing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­mation in the user’s end device (e.g., device fin­ger­printing) within the meaning of the TDDDG. This consent can be revoked at any time.

For more infor­mation about Google reCAPTCHA please refer to the Google Data Privacy Decla­ration and Terms Of Use under the fol­lowing links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

The company is cer­tified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure com­pliance with European data pro­tection stan­dards for data pro­cessing in the US. Every company cer­tified under the DPF is obliged to comply with these data pro­tection stan­dards. For more infor­mation, please contact the pro­vider under the fol­lowing link: https://www.dataprivacyframework.gov/participant/5780.

Cle­anTalk

This website uses the anti-spam plugins of Cle­anTalk. The pro­vider is Cle­anTalk Inc, 711 S Carson Street, Suite 4, Carson City, NV, 89701, USA (her­ein­after referred to as “Cle­anTalk”).

The purpose of using Cle­anTalk is to protect our website against spam acti­vities (such as unso­li­cited ads, mes­sages, or comments). To achieve this, Cle­anTalk records a variety of per­sonal data, such as the IP address, email address, nickname of the senders of mes­sages, infor­mation about the tech­nology of Java­Script in the sender’s browser and any text copy entered.

This infor­mation will be trans­ferred to a Cle­anTalk server in the EU and will be archived there.

For security reasons and to fend off spam, your data will be pro­cessed by the Cle­anTalk Cloud Service and will be archived for a maximum of 31 days in log files. Once this period ends, the data will be deleted entirely.

Our company uses Cle­anTalk on the basis of Art. 6 (1)(f) GDPR. The website ope­rator has a legi­timate interest in pro­tecting the operator’s website from spam acti­vities as effec­tively as pos­sible. If per­tinent consent has been requested from you, pro­cessing will occur exclu­sively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG if the consent includes the archiving of cookies or access to infor­mation the user’s device as defined in the TDDDG. Such consent may be revoked at any time.

The data transfer to the United States is based on the standard con­tract clauses of the EU Com­mis­sions. For details, please visit: https://cleantalk.org/publicoffer#privacy.

Data pro­cessing

We have con­cluded a data pro­cessing agreement (DPA) for the use of the above-men­­tioned service. This is a con­tract man­dated by data privacy laws that gua­rantees that they process per­sonal data of our website visitors only based on our ins­truc­tions and in com­pliance with the GDPR.

SolidWP

We have inte­grated SolidWP into this website. The pro­vider is iThemes Media LLC, 1720 South Kelly Avenue Edmond, OK 73013, USA (her­ein­after referred to as “SolidWP”).

SolidWP pro­tects our website against unde­si­rable access or mali­cious cyber-attacks. For this purpose, SolidWP records, among other things, your IP address, the time, and source of login attempts and log files (e.g., the uti­lized browser). SolidWP is installed locally on our servers.

SolidWP transmits IP addresses of recurring atta­ckers to a central database of SolidWP in the US (Network Brute Force Pro­tection) to prevent such attacks in the future.

The use of SolidWP is based on Art. 6(1)(f) GDPR. The website ope­rator has a legi­timate interest in pro­tecting its website opti­mally against cyber-attacks. If appro­priate consent has been obtained, the pro­cessing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­mation in the user’s end device (e.g., device fin­ger­printing) within the meaning of the TDDDG. This consent can be revoked at any time.