Introduction
With the following data protection declaration, we would like to inform you about the types of your personal data Data (hereinafter also referred to as „data“) we process for which purposes and to what extent. The Data protection declaration applies to all processing of personal data carried out by us, both in frame the provision of our services and, in particular, on our websites, in mobile applications and within external online presences, such as our social media profiles (summarized below designated as „online offer“).
The terms used are not gender specific.
Table of Contents
- Introduction
- Responsible
- Overview of processing
- Relevant legal bases
- Security Measures
- Transmission of personal data
- Data processing in third countries
- Deletion of data
- Use of cookies
- Business Benefits
- Provision of the online offer and web hosting
- Blogs and publication media
- Contact and request management
- Newsletters and electronic notifications
- Advertising communication via e-mail, post, fax or telephone
- Web analysis, monitoring and optimization
- Online Marketing
- Presence in social networks (social media)
- Plugins and embedded functions and content
- Change and update of the privacy policy
- Rights of data subjects
- Definition of terms
Responsible
Managing director: Aliye Jemal
Address: 89 Lancaster Rd, Enfield EN2 0DW
E-Mail: [email protected]
Telephone: +441992238012
Imprint: www.https://zara-enfield.com//imprint/
Overview of processing
The following overview summarizes the types of data processed and the purposes for which they are processed refers to the persons concerned.
Types of data processed
- Inventory data.
- Payment details.
- Contact details.
- Content data.
- Contract data.
- Usage data.
- Meta/Communication Data.
- Event data (Facebook).
Categories of data subjects
- Customers.
- Prospects.
- Communication partner.
- Users.
- Business and contractual partners.
Purposes of processing
- Provision of contractual services and customer service.
- Contact requests and communication.
- Security measures.
- Direct marketing.
- Reach measurement.
- Tracking.
- Office and organizational procedures.
- Conversion measurement.
- Managing and responding to requests.
- Feedback.
- Marketing.
- Profiles with user-related information.
- Provision of our online offer and user-friendliness.
- Information technology infrastructure.
Relevant legal bases
Below you will find an overview of the legal bases of the GDPR, on the basis of which we process personal data Data to process. Please note that in addition to the provisions of the GDPR, national data protection regulations in may apply to your or our country of residence or domicile. Should there also be more specific legal bases in individual cases be relevant, we will inform you of this in the data protection declaration.
- Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR) – The data subject has their consent to the processing of their personal data for one or more specific purposes specific purposes.
- Performance of a contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR) – The Processing is necessary for the performance of a contract to which the data subject is party or for Implementation of pre-contractual measures required, which take place at the request of the data subject.
- Legal obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR) – The processing is for Compliance with a legal obligation to which the controller is subject.
- Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR) – The processing is for Currency the legitimate interests of the person responsible or a third party, unless the Interests or fundamental rights and freedoms of the data subject relating to the protection of personal data require, prevail.
In addition to the data protection regulations of the General Data Protection Regulation, national regulations apply privacy in UK. This includes in particular the law on the protection against misuse of personal data in the Data processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special regulations on the law on Information, the right to erasure, the right to object, the processing of special categories personal data, for processing for other purposes and for transmission and automated decision-making in Individual case including profiling. It also regulates data processing for the purposes of Employment relationship (§ 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. Furthermore, state data protection laws the apply to individual federal states.
Safety measures
We meet in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to rights and freedoms more natural Persons take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk guarantee.
The measures include, in particular, securing the confidentiality, integrity and availability of data by Control of physical and electronic access to the data, as well as access related to them input, forwarding, ensuring availability and their separation. We also have procedures set up, which enables the rights of data subjects to be exercised, the deletion of data and reactions to the Danger of the data. Furthermore, we already take the protection of personal data into account in the development or selection of hardware, software and procedures in accordance with the principle of data protection Technical design and through data protection-friendly default settings.
SSL encryption (https): In order to protect your data transmitted via our online offer, we use a SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address line yours Browsers.
Transmission of personal data
As part of our processing of personal data, it happens that the data is sent to other companies, legally independent organizational units or persons or communicated to them be disclosed. The recipients of this data can be, for example, service providers commissioned with IT tasks or Providers of services and content that are integrated into a website. In such case note we the legal requirements and, in particular, conclude corresponding contracts or agreements that protect serve your data, with the recipients of your data.
Data processing in third countries
If we process data in a third country (i.e., outside the European Union (EU), the European economic area (EEA)) process or the processing in the context of the use of third party services or disclosure or transmission of data to other persons, bodies or companies, this only takes place in the harmony with the legal requirements.
Subject to express consent or contractually or legally required transmission to process or do we only leave the data in third countries with a recognized level of data protection, contractual Obligation through so-called standard protection clauses of the EU Commission, if certifications are available or binding process internal data protection regulations (Articles 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as their processing permitted consents are revoked or other permissions no longer apply (e.g. if the purpose of the processing of this data has been omitted or is not required for the purpose). Unless the data is deleted will, because they are required for other and legally permissible purposes, their processing is limited to these purposes limited. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data the must be kept for commercial or tax reasons or their storage to assert, exercise or defense of legal claims or to protect the rights of another natural or legal entity is required.
Our data protection information may also contain further information on the storage and deletion of data, the apply with priority to the respective processing.
Use of cookies
Cookies are small text files or other memory notes that store information on end devices and Read information from the end devices. E.g. the login status in a user account, the contents of a shopping cart in an e-shop, store the content called up or the functions used of an online offer. cookies be able also be used for different purposes, e.g. for purposes of functionality, security and Comfort of online offers and the creation of analyzes of visitor flows.
Notes on consent: We use cookies in accordance with legal regulations. Therefore, we obtain prior consent from users, except where not required by law is. In particular, consent is not required if the information is saved and read out, so also of cookies, which are absolutely necessary in order to provide the users with one of the services they have expressly requested To provide telemedia service (i.e. our online offer). The revocable consent will be across from clearly communicated to the users and contains the information on the respective cookie use.
Notes on the legal basis under data protection law: On which data protection law The legal basis for us processing the personal data of users with the help of cookies depends on whether we Ask users for consent. If users consent, the legal basis for processing is yours Data the declared consent. Otherwise, the data processed using cookies will be based on our legitimate interests (e.g. in the commercial operation of our online offer and improving its usability) or if this is part of the fulfillment of our contractual obligations duties takes place if the use of cookies is necessary to fulfill our contractual obligations. to We will clarify the purposes for which the cookies are processed by us in the course of this data protection declaration or as part of our consent and processing processes.
Storage period: In terms of storage period, the following types of cookies are used distinguished:
- Temporary cookies (also: session or session cookies): Temporary cookies no later than deleted after a user has left an online offer and his end device (e.g. browser or mobile application) has closed.
- Permanent cookies: Permanent cookies remain even after the end device is closed saved. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the data collected with the help of cookies the Users are used to measure reach. If we do not provide users with explicit information on the type and Inform users of the storage period of cookies (e.g. when obtaining consent). assume that cookies are permanent and the storage period can be up to two years.
General information on revocation and objection (opt-out): Users can delivered Revoke consent at any time and also object to processing in accordance with the legal Insert requirements in Art. 21 GDPR. Users can also object via their browser settings explain, e.g. by deactivating the use of cookies (which also affects the functionality of our online services may be limited). An objection to the use of cookies Online marketing purposes can also be carried out via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
Further information on processing, procedures and services:
- Processing of cookie data based on consent: We implement a procedure to the Cookie consent management, in the context of which the user consents to the use of cookies, or the processing and providers mentioned in the context of the cookie consent management procedure can be obtained and managed and revoked by users. Here the declaration of consent saved in order not to have to repeat their query again and the consent according to the being able to prove a legal obligation. The storage can be server-side and/or in a cookie (so-called opt-in cookie, or using comparable technologies) in order to consent to a To be able to assign users or their devices. Subject to individual information about the providers of Cookie management services, the following notices apply: The duration of the storage of consent may vary until amount to two years. Here, a pseudonymous user identifier is formed and with the time the Consent, information on the scope of the consent (e.g. which categories of cookies and/or service provider) as well as the browser, system and end device used.
Business services
We process data from our contractual and business partners, e.g. customers and interested parties (summary referred to as „contractual partner“) in the context of contractual and comparable legal relationships and therewith related measures and in the context of communication with the contractual partners (or pre-contractual), e.g. to to answer inquiries.
We process this data in order to fulfill our contractual obligations. These include in particular the Obligations to provide the agreed services, any update obligations and remedy Warranty and other service disruptions. In addition, we process the data to protect our Rights and for the purpose of the administrative tasks associated with these obligations, as well as the business organization. In addition, we process the data on the basis of our legitimate interests in proper processing and business management as well as security measures to protect our contractual partners and of our business operations against misuse, endangerment of your data, secrets, information and rights (e.g. to the involvement of telecommunications, transport and other auxiliary services, as well as subcontractors, banks, Tax- and legal advisors, payment service providers or tax authorities). To the extent permitted by applicable law, we provide the Data by contractual partners to third parties only insofar as this is necessary for the aforementioned purposes or for fulfilment legal obligations is required. About other forms of processing, e.g. for marketing purposes the contractual partners within the framework of this data protection declaration.
We will inform the contractual partners before or within the framework of which data is required for the aforementioned purposes the Data collection, e.g. in online forms, through special identification (e.g. colors) or symbols (e.g. asterisk or similar), or in person.
We delete the data after the expiry of statutory warranty and comparable obligations, i.e., as a matter of principle after 4 years, unless the data is stored in a customer account, e.g. for as long as they the end must be kept for legal reasons of archiving. The legal retention period is at documents relevant to tax law as well as trading books, inventories, opening balance sheets, annual accounts, the work instructions and other organizational documents required to understand these documents and Accounting documents ten years as well as commercial and business letters received and reproductions of those sent Commercial and business letters six years. The period begins at the end of the calendar year in which the last Entry made in the book, the inventory, the opening balance sheet, the financial statements or the management report drawn up, the commercial or business letter has been received or sent, or the accounting document has been created is, furthermore, the recording has been made or the other documents have been created.
Insofar as we use third-party providers or platforms to provide our services, they apply proportionately in between users and providers the terms and conditions and data protection notices of the respective third-party providers or platforms.
- Types of data processed: Inventory data (e.g. names, addresses); payment details (e.g. bank details, invoices, payment history); Contact information (e.g. email, phone numbers); contract data (e.g. Subject of the contract, term, customer category); Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
- Persons affected: customers; Interested persons; Business and contractual partners.
- Purposes of processing: Provision of contractual services and customer service; Safety measures; contact requests and communication; office and organizational procedures; administration and responding to inquiries; Conversion measurement (measurement of the effectiveness of marketing measures); profiles with user-related information (creating user profiles).
- Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Legal obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR); Legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR).
Further information on processing, procedures and services:
- Economic analysis and market research: For business reasons and around To be able to recognize market trends, the wishes of contractual partners and users, we analyze them present Data on business transactions, contracts, inquiries, etc., being included in the group of data subjects Contractual partners, interested parties, customers, visitors and users of our online offer. The analyzes are carried out for the purpose of business evaluations, marketing and market research (e.g. to determine customer groups with different characteristics). We can, if present, the profiles of registered users together with their information, e.g. on services used, consider. The analyzes serve us alone and are not disclosed externally, unless they are anonymous analyzes with summarized, i.e. anonymous values. Furthermore, we are considerate the privacy of the users and process the data for analysis purposes as pseudonymously as possible and, if makeable, anonymous (e.g. as aggregated data); Legal basis: Legitimate interests (Art. 6 Section. 1 S. 1 lit. f) GDPR).
- Shop and e-commerce: We process the data of our customers in order to enable them to choose Acquisition or ordering of the selected products, goods and related services, as well as their pay and to enable delivery or execution. If necessary for the execution of an order, set We use service providers, in particular postal, freight forwarding and shipping companies, to arrange the delivery or execution perform towards our customers. We use the services of to process the payment transactions banks and payment service providers. The required information is as such within the framework of Order- or comparable acquisition process and include the delivery or provision and billing required information and contact information to be able to hold any consultation; Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR).
- Agency services: We process the data of our customers as part of our contractual services, including e.g. conceptual and strategic advice, campaign planning, Software- and design development/consulting or maintenance, implementation of campaigns and processes, handling, server administration, data analysis/consulting services and training services; Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR).
- Artistic and literary services: We process the data of our clients, around them the selection, acquisition or commissioning of the selected services or works as well as related ones To enable activities as well as their payment and delivery or execution or provision. The required information is as such in the context of the contract, order or comparable of the conclusion of the contract and include the information required for delivery and billing as well as Contact information to be able to hold any consultations; Legal bases: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO).
- Project and development services: We process the data of our customers as well as Clients (hereinafter uniformly referred to as „customers“) to enable them to select, purchase or Commissioning of the selected services or works and related activities as well as their payment and To enable provision or execution or provision. The required information is as such in the context of the contract, order or comparable of the conclusion of the contract and include the information required for the provision of services and billing as well as contact information in order to be able to hold any consultations. As far as we have access to information of end customers, employees or other persons, we process them in accordance with the legal and contractual requirements; Legal basis: Performance of contract and pre-contractual Requests (Art. 6 Para. 1 S. 1 lit. b) GDPR).
- Offering software and platform services: We process the data of our users, registered and any test users (hereinafter referred to as „users“) to you to be able to provide our contractual services and, on the basis of legitimate interests, to To ensure the security of our offer and to be able to develop it further. The required information are identified as such within the framework of the contract, order or comparable contract conclusion and include the information required for the provision of services and billing as well as contact information in order to to be able to hold consultations; Legal basis: Performance of contract and pre-contractual Requests (Art. 6 Para. 1 S. 1 lit. b) GDPR).
Provision of the online offer and web hosting
We process user data in order to be able to provide our online services to them. To this purpose we process the IP address of the user, which is necessary to enable the content and functions of our Online services to the browser or the end device of the user.
- Types of data processed: Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
- Persons affected: users (e.g. website visitors, users of online services).
- Purposes of processing: Provision of our online offer and user-friendliness; Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.); Security Measures.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing, procedures and services:
- Provision of online offer on rented storage space: For the provision of our online offer, we use storage space, computing capacity and software that we receive from a corresponding Rent or otherwise obtain server providers (also referred to as “web hosts”); Legal bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
- Collection of access data and log files: Access to our online offer is in the form of from so-called „server log files“. The address and name of the server log files can be added retrieved Websites and files, date and time of retrieval, amounts of data transferred, notification of successful retrieval, Browser type and version, the user’s operating system, referrer URL (the previously visited page) and im As a rule, IP addresses and the requesting provider belong. The server log files can be used for security purposes, e.g. to avoid overloading the to avoid servers (especially in the case of abusive attacks, so-called DDoS attacks) and to others to ensure server utilization and stability; Legal bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Deletion of data: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further storage is required for evidentiary purposes is until the final Clarification of the respective incident excluded from the deletion.
Blogs and publication media
We use blogs or comparable means of online communication and publication (hereinafter „Publication Medium“). The data of the readers are used for the purposes of the publication medium only insofar processed, than for its presentation and communication between authors and readers or for security reasons is required. For the rest, we refer to the information on the processing of visitors to our publication medium within the framework of this data protection notice.
- Types of data processed: Inventory data (e.g. names, addresses); Contact details (e.g. e-mail, phone numbers); Content data (e.g. entries in online forms); Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
- Persons affected: users (e.g. website visitors, users of online services).
- Purposes of processing: Provision of contractual services and customer service; feedback (e.g. collecting feedback via online form); Provision of our online offer and user-friendliness; Safety measures; Management and response to inquiries.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing, procedures and services:
- Comments and Contributions: When users leave comments or other contributions, they can their IP addresses are stored on the basis of our legitimate interests. This is at our Safety in case someone leaves illegal content in comments and posts (insults, forbidden political propaganda etc.). In this case we can even for the comment or contribution concerned and are therefore interested in the identity of the author. Furthermore, we reserve the right to use the information provided by users on the basis of our legitimate interests for the purpose of to process spam detection. On the same legal basis, we reserve the right, in the case of surveys, to use the IP addresses of users for whose Duration and use cookies to avoid multiple votes. The personal information provided in the comments and posts, any contact and Website information as well as the content information will be stored by us until the user objects continuous saved; Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Contact and request management
When contacting us (e.g. via contact form, e-mail, telephone or via social media) as well as in frame existing user and business relationships, the details of the requesting persons are processed to the extent that this is possible to the Answering the contact requests and any requested measures is required.
Answering contact requests and managing contact and request data within the framework of contractual or pre-contractual relationships takes place to fulfill our contractual obligations or to answer from (Pre)contractual inquiries and otherwise on the basis of legitimate interests in answering the Inquiries and maintenance of user and business relationships.
- Types of data processed: contact details (e.g. e-mail, telephone numbers); content data (e.g. entries in online forms); Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
- Persons affected: Communication partners.
- Purposes of processing: Provision of contractual services and customer service; contact requests and communication; managing and responding to inquiries; Feedback (e.g. collecting feedback via online form); Provision of our online offer and user-friendliness.
- Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing, procedures and services:
- Contact form: When users use our contact form, email or other communication channels contact us, we process the data communicated to us in this context for processing of communicated concern. For this purpose we process personal data in the context of pre-contractual and contractual business relationships, insofar as this is necessary for their fulfillment and otherwise basis our legitimate interests and the interests of the communication partners in answering the Issue and our legal retention requirements; Legal basis: performance of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) DSGVO), legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Newsletters and electronic notifications
We only send newsletters, e-mails and other electronic notifications (hereinafter „newsletter“) the Consent of the recipient or a legal permission. If as part of a subscription to the newsletter whose Contents are specifically described, they are decisive for the consent of the user. Incidentally included our Newsletter Information about our services and us.
In order to register for our newsletter, it is generally sufficient if you enter your e-mail address. we However, you can ask for a name so that we can address you personally in the newsletter, or other information, if these are necessary for the purposes of the newsletter.
Double opt-in procedure: Registration for our newsletter takes place in one step so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you can request the confirmation will be asked for your registration. This confirmation is necessary so that no one can log in with someone else’s e-mail address can register. Registrations for the newsletter are logged in order to ensure that the registration process is carried out in accordance with the to be able to prove legal requirements. This includes the storage of the registration and Confirmation time as well as the IP address. Likewise, the changes of your at the shipping service provider saved data is logged.
Deletion and restriction of processing: We can use the unsubscribed e-mail addresses until to store them for three years on the basis of our legitimate interests before we delete them for a formerly given to be able to prove consent. The processing of this data is based on the purpose of a possible defense against claims limited. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed. In the case of obligations to permanently observe contradictions we reserve the right to store the e-mail address in a blacklist (so-called „Blocklist“).
The registration process is logged on the basis of our legitimate interests for the purposes of Evidence of its due process. As far as we use a service provider to send e-mails give an order, this is based on our legitimate interests in an efficient and secure shipping system.
Content:
Information about us, our services, promotions and offers.
- Types of data processed: Inventory data (e.g. names, addresses); Contact details (e.g. e-mail, phone numbers); Meta/communication data (e.g. device information, IP addresses); usage data (e.g. websites visited, interest in content, access times).
- Persons affected: Communication partners.
- Purposes of processing: Direct marketing (e.g. by email or post).
- Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
- Possibility of objection (opt-out): You can unsubscribe from our newsletter at any time cancel, i.e. revoke your consent or object to further receipt. A link to termination of the newsletter can be found either at the end of each newsletter or else you can use one of the above specified Use contact options, preferably e-mail.
Further information on processing, procedures and services:
- Measurement of opening and click rates: The newsletters contain a so-called „web beacon“, i.e. a pixel-sized file that is downloaded from our server when the newsletter is opened or, if we have one Use shipping service provider, from whose server is retrieved. As part of this retrieval, first technical information, such as information about the browser and your system, as well as your IP address and the Time of retrieval collected. This information is used to technically improve our newsletter based on the technical data or of the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address are used) or the access times. This analysis also includes determining whether the Newsletter be opened, Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Advertising communication via e-mail, post, fax or telephone
We process personal data for the purpose of advertising communication, which is carried out via various channels, e.g. e-mail, telephone, post or fax, in accordance with the legal requirements.
The recipients have the right to revoke their consent at any time or to revoke advertising communication object at any time.
After revocation or objection, we save the data required to prove the previous authorization to the Contact or sending up to three years after the end of the year of the revocation or objection on the Basis of our legitimate interests. The processing of this data is limited to the purpose of a possible defense limited by claims. On the basis of the legitimate interest, the revocation or objection user to be observed permanently, we also store the data required to avoid being contacted again Data (e.g. email address, telephone number, name, depending on the communication channel).
- Types of data processed: Inventory data (e.g. names, addresses); Contact details (e.g. e-mail, phone numbers).
- Persons affected: Communication partners.
- Purposes of processing: Direct marketing (e.g. by email or post).
- Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR); Legitimate Interests (Art. 6 paragraph 1 sentence 1 lit. f) GDPR).
Web analysis, monitoring and optimization
The web analysis (also referred to as „reach measurement“) is used to evaluate the flow of visitors to our website online offering and may track behavior, interests, or demographic information about visitors, such as the Age or gender, as pseudonymous values. With the help of the range analysis, we can e.g. detect, at which time our online offer or its functions or contents are used most frequently or to invite reuse. We can also understand which areas need optimization.
In addition to web analysis, we can also use test procedures, e.g. to check different versions of our to test and optimize the online offer or its components.
Unless otherwise stated below, profiles, i.e. a usage process, can be created for these purposes summarized data is created and information is stored in a browser or in a terminal device and off be read from this. The information collected includes, in particular, websites visited and those used there Elements and technical information, such as the browser used, the computer system used and information about times of use. If users consent to the collection of their location data from us or from the providers of the from If you have agreed to the services we use, location data can also be processed.
The IP addresses of the users are also saved. However, we use an IP masking procedure (i.e., Pseudonymization by shortening the IP address) to protect users. Generally, in the context of web analysis, A/B testing and optimization no clear user data (e.g. e-mail addresses or names) is stored, but pseudonyms. This means that we and the providers of the software used do not know the actual identity the users, but only the information stored in their profiles for the purposes of the respective procedures.
- Types of data processed: Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
- Persons affected: users (e.g. website visitors, users of online services).
- Purposes of processing: Reach measurement (e.g. access statistics, detection returning visitor); Profiles with user-related information (creating user profiles); tracking (e.g. interest/behavioral profiling, use of cookies); Provision of our online offer and ease of use.
- Security measures: IP masking (pseudonymization of the IP address).
- Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Further information on processing, procedures and services:
- Google Analytics: Web analysis, range measurement and measurement of user flows; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR); Site:https://marketingplatform.google.com/intl/de/about/analytics; Privacy Policy:https://policies.google.com/privacy; Order processing agreement: https://business.safety.google/adsprocessorterms; Standard Contractual Clauses (Warranty Level of data protection when processing in third countries): https://business.safety.google/adsprocessorterms; Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of Ads: https://adssettings.google.com/authenticated; More information: https://privacy.google.com/businesses/adsservices (types of processing and the data processed).
Online Marketing
We process personal data for online marketing purposes, including in particular the marketing of Advertising space or display of advertising and other content (collectively referred to as „Content“) based potential interests of users and measuring their effectiveness.
For these purposes, so-called user profiles are created and stored in a file (so-called „cookie“) or Similar procedures are used, by means of which the information relevant to the presentation of the aforementioned content users are saved. This information can include, for example, viewed content, visited websites, used Online networks, but also communication partners and technical information, such as the browser used, the used computer system and information on usage times and functions used. Provided users in the survey of their If you have consented to location data, these can also be processed.
The IP addresses of the users are also saved. However, we use the ones that are available IP masking process (i.e. pseudonymization by shortening the IP address) to protect users. Generally will no clear user data (e.g. e-mail addresses or names) as part of the online marketing process saved, but pseudonyms. This means that we and the providers of the online marketing process do not know the actual one identity of the users, but only the information stored in their profiles.
The information in the profiles is usually stored in the cookies or by means of similar processes. This Cookies can later generally also be used on other websites that use the same online marketing process, read and analyzed for the purpose of displaying content and supplemented with other data to the be stored on the server of the online marketing process provider.
On an exceptional basis, plain data can be assigned to the profiles. This is the case if the users are e.g. members of a social network whose online marketing methods we use and the network the profiles of user associated with the above information. We ask you to note that users with the providers additional Agreements, e.g. through consent during registration.
In principle, we only receive access to summarized information about the success of our advertisements. However, we can use so-called conversion measurements to check which of our online marketing processes have led to a so-called conversion, i.e. e.g. to the conclusion of a contract with us. The conversion measurement will used solely to analyze the success of our marketing measures.
Unless otherwise stated, please assume that cookies used will last for a period of two years.
- Types of data processed: Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
- Persons affected: users (e.g. website visitors, users of online services).
- Purposes of processing: Reach measurement (e.g. access statistics, detection returning visitor); Tracking (e.g. interest/behavioral profiling, use of cookies); Marketing; Profiles with user-related information (creating user profiles); conversion measurement (Measurement the effectiveness of marketing measures).
- Security measures: IP masking (pseudonymization of the IP address).
- Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
- Possibility of objection (opt-out): We refer to the data protection notices of the respective Providers and the options for objection specified for the providers (so-called „opt-out“). Unless explicit Opt-out option was given, there is the possibility that you use cookies in the settings turn off your browser. However, this can limit the functions of our online offer. we therefore also recommend the following opt-out options, which are summarized in the respective areas are offered in a targeted manner: a) Europe: https://www.youronlinechoices.eu. b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Cross-Territory: https://optout.aboutads.info.
Further information on processing, procedures and services:
- Google Ads and conversion measurement: We use the online marketing process „Google Ads“ to to place advertisements in the Google advertising network (e.g., in search results, in videos, on websites, etc.), so that they are displayed to users who have a presumed interest in the ads (so-called „Conversion“). We also measure the conversion of the ads. However, we only learn the anonymous total number of users the clicked on our ad and went to a page with a so-called „conversion tracking tag“. were forwarded. However, we do not receive any information with which users can identify themselves to let; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR); Site: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy More information: Types of Processing and the processed data: https://privacy.google.com/businesses/adsservices Data Processing Conditions between Controllers and Standard Contractual Clauses for Third Country Transfers from Data: https://business.safety.google/adscontrollerterms
Presence in social networks (social media)
We maintain online presences within social networks and process user data in this context, around to communicate with the users active there or to offer information about us.
We would like to point out that user data is processed outside of the European Union be able. This can result in risks for the user, because e.g. the enforcement of the rights of the user could be made more difficult.
Furthermore, user data within social networks is usually used for market research and advertising purposes processed. For example, based on usage behavior and the resulting interests of users User profiles are created. The usage profiles can in turn be used, for example, to display advertisements switch inside and outside of the networks that presumably correspond to the interests of the users. to this For this purpose, cookies are usually stored on the users‘ computers, in which the usage behavior and the User interests are saved. Furthermore, in the usage profiles, data can also be stored independently of the devices used by users (especially if the users are members of the respective platforms are and are logged in to them).
For a detailed description of the respective forms of processing and the possibility of objection (opt-out) we refer to the data protection declarations and information provided by the operators of the respective networks.
Also in the case of requests for information and the assertion of data subject rights, we would like to point out that this am can be asserted most effectively with the providers. Only the providers have access to the Data the user and can directly take appropriate measures and provide information. Should you still need help need, then you can contact us.
- Types of data processed: contact details (e.g. e-mail, telephone numbers); content data (e.g. entries in online forms); Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses).
- Persons affected: users (e.g. website visitors, users of online services).
- Purposes of processing: contact requests and communication; Feedback (e.g. collecting feedback via online form); Marketing.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Further information on processing, procedures and services:
- Instagram: Social network; Service Provider: Meta Platforms Ireland limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal basis: Authorized parties Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Website: https://www.instagram.com Privacy Policy: https://instagram.com/about/legal/privacy
- Facebook pages: Profiles within the social network Facebook – We are shared with Meta Platforms Ireland Limited for the collection (but not further processing) of data from visitor responsible for our Facebook page (so-called „fan page“). This data includes information about the species from Content that users view or interact with, or that they make actions (see “Things Done and Provided by You and Others” in the Facebook Data Policy: https://www.facebook.com/policy), as well Information about the devices used by users (e.g. IP addresses, operating system, browser type, language settings, cookie data; see under „Device Information“ in the Facebook Data Policy: https://www.facebook.com/policy). Like in the Facebook Data Policy explained under „How do we use this information?“, collects and uses Facebook Information also to provide analysis services, so-called „site insights“, for site operators, with it Get these insights into how people are interacting with their pages and with those connected to them content to interact. We have entered into a special agreement with Facebook („Information on Page Insights“, https://www.facebook.com/legal/terms/page_controller_addendum), in particular regulates which security measures Facebook must observe and in which Facebook declares its willingness has to fulfill the rights of those affected (i.e. users can, for example, send information or requests for deletion directly to Facebook judge). The rights of users (in particular to information, deletion, objection and complaints with responsible supervisory authority) are not restricted by the agreements with Facebook. Find more hints located in the „Page Insights Information“ (https://www.facebook.com/legal/terms/information_about_page_insights_data); Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal basis: Legitimate interests (Article 6 (1) sentence 1 lit. f) GDPR); Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy Standard contractual clauses (ensuring the level of data protection when processing in third countries): https://www.facebook.com/legal/EU_data_transfer_addendum More information: Agreement of joint responsibility: https://www.facebook.com/legal/terms/information_about_page_insights_data. the Joint responsibility is limited to the collection and transmission of data to Meta Platforms Ireland Limited, an EU based company. The further processing of the data lies in the sole responsibility of Meta Platforms Ireland Limited, in particular the transmission of the data to the parent company Meta Platforms, Inc. in the USA (on the basis of the agreement between Meta Platforms Ireland Limited and Meta Platforms, Inc. Standard Contractual Clauses).
- TikTok: Social network / video platform; Service Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; Legal basis: Authorized parties Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Site:Privacy Policy: https://www.tiktok.com/de/privacy-policy
- YouTube: Social network and video platform; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043; Legal basis: Legitimate interests (Art. 6 Paragraph 1 S. 1 lit. f) GDPR); Privacy Policy: https://policies.google.com/privacy Opt-out option: https://adssettings.google.com/authenticated
- Xing: Social network; Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; Legal basis: Legitimate interests (Article 6 (1) sentence 1 lit. f) GDPR); Website: https://www.xing.de; Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung
Plugins and embedded functions and content
We integrate functional and content elements into our online offer that are provided by the servers of their respective Offerer (hereinafter referred to as „third-party provider“). These may be graphics, videos, for example or trade city maps (hereinafter collectively referred to as „Content“).
The integration always requires that the third-party providers of this content process the IP address of the user, there they could not send the content to their browser without the IP address. The IP address is thus for the Display of this content or functions required. We strive to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also so-called pixel tags (invisible graphics, also known as „web beacons“) for statistical or use for marketing purposes. The „pixel tags“ can provide information such as visitor traffic on the pages this website, are evaluated. The pseudonymous information can also be stored in cookies on the device user are stored and, among other things, technical information about the browser and the operating system referring websites, the time of visit and other information on the use of our online offer as well as with such information from other sources.
- Types of data processed: Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses); Inventory data (e.g. names, addresses); Contact information (e.g. email, phone numbers); Content data (e.g. entries in online forms); Event data (Facebook) („Event data“ is data that is stored, for example, via Facebook pixels (via apps or on other Because of) may be transmitted by us to Facebook and relate to individuals or their actions; To the Data include e.g. B. Information about visits to websites, interactions with content, functions, installations of Apps, purchases of products, etc.; the event data is used to create target groups for content and Advertising information (Custom Audiences) processed; Event data does not contain the actual content (such as B. written comments), no login information and no contact information (i.e. no names, email addresses and telephone numbers). Event data will be deleted by Facebook after a maximum of two years, the target groups formed from them with the deletion of our Facebook account).
- Persons affected: users (e.g. website visitors, users of online services).
- Purposes of processing: Provision of our online offer and user-friendliness; Provision of contractual services and customer service; Profiles with user-related information (creating from user profiles); Marketing.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); consent (Art. 6 paragraph 1 sentence 1 lit. a) GDPR).
Further information on processing, procedures and services:
- Facebook plugins and content: Facebook social plugins and content – e.g. content such as images, videos or texts and buttons, with which users can access the content of this online offer can share within Facebook. The list and appearance of the Facebook social plugins can be found here can be viewed: https://developers.facebook.com/docs/plugins/ – We are in partnership with Meta Platforms Ireland Limited for collection or receipt as part of a transmission (but not further Processing) of „event data“ that Facebook uses the Facebook social plugins (and embedding functions for content) that is carried out on our online offer, collects or as part of a transmission following Purposes, jointly responsible: a) Display of content and advertising information that the alleged correspond to the interests of users; b) Delivery of commercial and transactional messages (e.g. Addressing users via Facebook Messenger); c) Improving ad delivery and personalization from Functions and content (e.g. improving the recognition of which content or advertising information is suspected the correspond to the interests of the users). We have a special agreement with Facebook („Additive for those responsible“, https://www.facebook.com/legal/controller_addendum), which is regulated in particular will, which security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in the facebook itself has declared its willingness to fulfill the rights of the data subject (i.e. users can, for example, request information or Deletion Requests directly to Facebook). Note: When Facebook provides us with metrics, analytics and reports (the are aggregated, d. H. do not receive any information on individual users and are anonymous to us), then takes place this Processing not within the framework of joint responsibility, but on the basis of a order processing contract („data processing conditions“, https://www.facebook.com/legal/terms/dataprocessing) , the „Data Security Terms“ (https://www.facebook.com/legal/terms/data_security_terms) and with regard to the Processing in the USA on the basis of standard contractual clauses („Facebook EU data transfer addendum, https://www.facebook.com/legal/EU_data_transfer_addendum). The rights of users (in particular for information, deletion, objection and complaint to the competent supervisory authority). by not restricted by the agreements with Facebook; Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal bases: Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR); Website: https://www.facebook.com Privacy Policy: https://www.facebook.com/about/privacy.
- Google Fonts (obtained from Google Server): Obtaining fonts (and symbols) for the purpose of a technically safe, maintenance-free and efficient use of fonts and symbols with regard to timeliness and loading times, their uniform representation and consideration of possible licensing issues restrictions. The provider of the fonts is informed of the IP address of the user so that the fonts in the browser of user can be made available. In addition, technical data (language settings, Screen resolution, operating system, hardware used) that are required for the provision of the writings are necessary depending on the devices used and the technical environment; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Site: https://fonts.google.com/ Privacy Policy: https://policies.google.com/privacy
- Google Fonts (provided on our own server): Fonts („Google Fonts“) for the purpose of one user-friendly presentation of our online offer; Service Provider: The Google Fonts will hosted on our server, no data is transmitted to Google; Legal bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
- Google Maps: We integrate the maps of the service “Google Maps” from the provider Google. to the processed data may include, in particular, IP addresses and location data of the users, which, however, Not collected without their consent (usually as part of the settings on their mobile devices). will; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Site: https://cloud.google.com/maps-platform Privacy Policy: https://policies.google.com/privacy Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of Ads: https://adssettings.google.com/authenticated.
- Instagram plugins and content: Instagram plugins and content – This can include content how Pictures, videos or texts and buttons with which users can access the content of this online offer within can share from Instagram. – We are in partnership with Meta Platforms Ireland Limited for collecting or the Receipt as part of a transmission (but not further processing) of „event data“ that Facebook using Instagram functions (e.g. embedding functions for content) that are available on our online offer executed, collected or received as part of a transmission for the following purposes, together Responsible: a) Display of content and advertising information that is in the presumed interests of users correspond; b) Delivery of commercial and transaction-related messages (e.g. addressing users via Facebook Messenger); c) improving ad delivery and personalization of features and content (e.g. improving the recognition of which content or advertising information is presumed to be in the interests of the user correspond). We have entered into a special agreement with Facebook („Addendum for Responsible“, https://www.facebook.com/legal/controller_addendum), which regulates in particular which security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill the rights of the data subject (i.e. user can e.g. B. Send information or deletion requests directly to Facebook). Note: If Facebook us readings, Provides analytics and reports (which are aggregated, i.e. do not contain information about individual users and are anonymous to us), then this processing does not take place within the framework of joint responsibility, but on the basis of an order processing contract („data processing conditions“, https://www.facebook.com/legal/terms/dataprocessing) , the „Data Security Terms“ (https://www.facebook.com/legal/terms/data_security_terms) and with regard to the Processing in the USA on the basis of standard contractual clauses („Facebook EU data transfer addendum, https://www.facebook.com/legal/EU_data_transfer_addendum). The rights of users (in particular for information, deletion, objection and complaint to the competent supervisory authority). by not restricted by the agreements with Facebook; Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Website: https://www.instagram.com; Privacy Policy: https://instagram.com/about/legal/privacy.
- LinkedIn plugins and content: LinkedIn plugins and content- This can include content such as images, videos or Texts and buttons that users use to access content from this online offering within LinkedIn share be able; Service Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Legal bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Website: https://www.linkedin.com; Privacy Policy:https://www.linkedin.com/legal/privacy-policy; Order processing contract: https://legal.linkedin.com/dpa; Standard contractual clauses (ensuring the level of data protection when processing in third countries): https://legal.linkedin.com/dpa; Possibility of objection (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. MyFonts: fonts; data processed as part of the font retrieval is the identification number of the Webfont project (anonymized), the URL of the licensed website linked to a customer number is over the identify licensees and the licensed web fonts, and the referrer URL; the anonymous one Webfont project identification number is stored in encrypted log files with such data for 30 days to the determine monthly number of page views, saved; After such extraction and storage the number of page views, the log files are deleted; Service Provider: Monotype Imaging Holdings inc, 600 Unicorn Park Drive, Woburn, Massachusetts 01801; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.myfonts.co; Privacy Policy: https://www.myfonts.com/info/legal/#Privacy.
- YouTube videos: video content; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain views CA 94043, United States; Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of Ads: https://adssettings.google.com/authenticated.
- Vimeo: Video content; Service Provider: Vimeo Inc., Attention: Legal department 555 West 18th Street New York, New York 10011, USA; Legal basis: Authorized parties Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://vimeo.com; Privacy Policy: https://vimeo.com/privacy Possibility of objection (opt-out): We would like to point out that Vimeo Google Analytics insert can and refer to the privacy policy (https://policies.google.com/privacy) and the Opt-out options for Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=de) or Google’s settings for the use of data for marketing purposes (https://adssettings.google.com/).
Change and update of the privacy policy
We ask you to inform yourself regularly about the content of our data protection declaration. We match those data protection declaration as soon as the changes to the data processing carried out by us make this necessary do. We will inform you as soon as the changes require your part to cooperate (e.g. consent). or other individual notification is required.
Where we provide addresses and contact information of companies and organizations in this data protection declaration specify, please note that the addresses can change over time and ask for the information to check contact.
Rights of data subjects
As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 21 GDPR yield:
- Right to object: You have the right to object on grounds relating to your particular situation result, at any time against the processing of personal data concerning you, which is based on Art. 6 Section. 1 lit. e or f GDPR to file an objection; this also applies to a reference to these provisions assisted profiling. Will the personal data concerning you be processed for direct advertising to operate, you have the right to object at any time to the processing of data concerning you submit personal data for the purpose of such advertising; this also applies to profiling, so far it is related to such direct mail.
- Right to withdraw consent: You have the right to withdraw consent at any time to revoke.
- Right of access: You have the right to request confirmation as to whether Data are processed and for information about this data as well as for further information and copy of Data according to the legal requirements.
- Right to rectification: In accordance with the statutory provisions, you have the right to completion of the data concerning you or the correction of incorrect data concerning you demand.
- Right to erasure and restriction of processing: In accordance with the legal Specifications the right to demand that data concerning you be deleted immediately, or alternatively after To demand a restriction of the processing of the data in accordance with the legal requirements.
- Right to data portability: You have the right to data concerning you that you give us have provided, in accordance with the legal requirements in a structured, common and machine-readable format or request its transmission to another person in charge.
- Complaint to the supervisory authority: Without prejudice to another administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your usual place of residence, your place of work or the place of the alleged infringement if you consider that the processing concerns you personal data violates the requirements of the GDPR.
Definitions of Terms
This section gives you an overview of the ones used in this privacy policy terms. Many of the terms are taken from the law and defined above all in Art. 4 GDPR. the legal definitions are binding. The following explanations, on the other hand, are primarily intended to understanding serve. The terms are sorted alphabetically.
- Conversion measurement: The conversion measurement (also known as „visit action evaluation“) is a procedure with which the effectiveness of marketing measures can be determined. For this purpose, in rule a cookie on the user’s devices within the websites on which the marketing measures take place, saved and then retrieved again on the target webpage. For example, we can understand whether the ads placed by us on other websites were successful.
- Personal Information: “Personal Information” means any information relating to a identified or identifiable natural person (hereinafter „data subject“); as a natural person is considered to be identifiable, who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (e.g. cookie) or can be identified to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of these are natural persons.
- Profiles with user-related information: The processing of „profiles with user-related Information“, or „profiles“ for short, includes any type of automated processing of personal data Data, which consists in using this personal data to analyze certain personal aspects, the relate to a natural person (depending on the type of profile creation, different Information regarding demographics, behavior and interests, such as interaction with websites and their content, etc.), to analyse, evaluate or predict them (e.g. interests in certain content or products, click behavior on a website or location). For the purpose of Cookies and web beacons are often used for profiling.
- Reach measurement: Reach measurement (also known as web analytics) is used for Evaluation of the flow of visitors to an online offer and can determine the behavior or interests of the visitors certain information, such as the content of websites. With the help of the range analysis For example, website owners can see at what time visitors visit their website and what content they are looking for itself interested. This enables them, for example, to adapt the website content better to the needs of their visitors to adjust. Pseudonymous cookies and web beacons are often used for range analysis purposes to recognize recurring visitors and thus to obtain more precise analyzes of the use of an online offer.
- Tracking: One speaks of „tracking“ when the behavior of users over several online offers can be traced. Usually are used with regard to Online offers behavior and interest information in cookies or on servers of the providers of the tracking technologies (so-called profiling). This information can then be used e.g. used to show users advertisements that are likely to be of their interest correspond.
- Responsible person: The „responsible person“ is the natural or legal person Authority, Establishment or other body that alone or jointly with others decides on the purposes and means of processing of personal data decides.
- Processing: „Processing“ means any with or without the aid of automated processes performed operation or any such series of operations related to personal data. The term reaches far and covers practically every handling of data, be it the collection, evaluation, storage, the Submission or Deletion.