We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:
Krajinovic Data Visualization & Information Design
represented by the Owner Katica Krajinovic
Hellesweg 4
73635 Rudersberg
Phone: +4915563180270
E-mail: hello@katicakrajinovic.com
Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.
When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.
All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.
On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.
The GDPR allows data processing in three cases in particular:
We collect inventory data (for example name, address and e-mail address, possibly services used) insofar as they are required for establishing, defining or amending a contract between us and the user.
We also collect usage data (for example visits to the website, interest in products) to allow the user to use the services on our website and to invoice them. We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time. The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR. Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:
This data will only be used for statistical purposes and do not allow us to identify you as a user.
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.
The right to object to advertisement is governed by our text regarding consent:
You may request us to transfer the data stored about you in machine-readable form.
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency hier here you find a list of agencies).
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.
Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.
Your data will generally only remain stored for as long as the purpose of the relevant data processing requires it. Storage beyond that is mainly possible when it is still necessary for us to pursue our rights or for our other legitimate interests or if we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files, which is generally 6 years, but may last up to 10 years).
We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user.
This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment).
Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.
We also collect usage data to allow users to use the services on our website. These may consist of: usage information (for example visited websites or parts, duration of visit, interest in services), content data (for example data, text, images, sounds, videos entered or uploaded by you), meta data (for example identity of your device, location, IP address).
We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.
The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.
Our Website is presented in the Internet by a service provider. We use the service https://www.gohighlevel.com, 400 North Saint Paul St.
Suite 920
Dallas, Texas 75201.
We have concluded a data processing agreement with our provider.
With this contract, our provider is obliged to process the data according to our instructions.
You can find more information on data processing at our provider in his privacy policy at https://www.gohighlevel.com/privacy-policy.
The legal basis for this data processing is on the one hand our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, and, on the other hand, our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 (b) GDPR.
Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:
This data will only be used for statistical purposes and do not allow us to identify you as a user.
Insofar as we send advertising, we do so exclusively within the scope of Section 7 (3) of the German Act Against Unfair Competition (UWG) or on the basis of your consent.
Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.
For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus an adequate extra time for potential interruptions of the limitation period.
For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.
Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular the tax-law requirements to keep records, usually for 6 or even 10 years.
We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law.
Transfer of customer data may either
If your data are transferred to third parties, this is mentioned in this privacy policy.
Insofar as we transfer personal data to countries outside the European Union, in particular the USA, in accordance with the provisions set out below, we will only carry out such a transfer where an adequate level of data protection, appropriate safeguards or your consent, and thus a transfer permitted under the GDPR, is in place.
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.
The right to object to advertisement is governed by our text regarding consent:
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time.
You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.
You may request us to transfer the data stored about you in machine-readable form.
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.
When you enter data on our website, whether in a contact form, during the registration process, when you log in or for payment purposes, the website, where you enter the data, is encrypted. Thus, third parties can not read what you enter. You will recognise the encryption by the lock symbol in your browser and by the URL beginning with “https“ instead of “http“.
When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.
Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.
Basis for this storage is the safeguarding of our legitimate interests in regard to communication with interested users pursuant to Art. 6 para. 1 (f) GDPR and in the case of inquiries prior to entering into a contract also the performance of a contract pursuant to Art. 6 para (b) GDPR.
Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).
If you register on our website, we will ask for compulsory and potentially also non-compulsory data in accordance with our registration form for the purposes listed hereinafter.
Your data will be entered in an encrypted manner, so that third parties cannot read your data while being entered.
The legal basis for this storage is our legitimate interest in communication with interested users in accordance with Art. 6 para. 1 (f) GDPR and also the storage of contractual data in accordance with Art. 6 para. 1 (b) GDPR in case of contracts, including non-remunerated ones.
Your data will remain stored for as long as you remain registered, particularly as long as the storage is still required to perform the contract, to pursue our rights or for our other legitimate interests or for as long as we are required by law to store your data (for example pursuant to tax-law requirements to store documents).
If you register for a webinar, we will ask for your data according to our registration form, because we like to address you personally. We will only use your data to inform you about the implementation of the webinar as well as possibly about information which is necessary for the webinar to be carried out (for example change of date, participation requirements, technical details) and materials (like slides, content information).
When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “legal notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.
If you register for our membership area, we will ask for data in accordance with our registration form, because we do not permit the anonymous use of our services. We will only use your data to provide you with the information necessary for using the membership area (news, news in the membership area and technical information).
When you registered, we informed you that you can object to the use of your e-mail address for future advertisement at any time and without any fees by clicking the unsubscribe link included in every e-mail or by sending us an e-mail to the e-mail address listed in the “Legal Notice” section without any further formal requirement. We retain the right to send you ads for similar products, unless you object.
If you subscribe to the newsletter offered on our page, we will inform you in detail about the information we will send you, which of your data will be stored and for what it will be used. We will not pass on your data to third parties and we will only use it for mailing the newsletter.
We will only mail you the newsletter if you have provided us with prior consent. To that purpose, you will receive an e-mail from us with a link and further details and we will ask for your consent. By confirming that link, you declare your consent to receive the newsletter and advertisement from us.
The basis for the storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant us when you register for the newsletter. You may withdraw that consent at any time, for which any notice to us, without any formal requirement, is sufficient (for example through the contact form or by e-mail or by using the link to unsubscribe, which is included in each e-mail). This withdrawal has no effect on the legality of the data processing carried out up to that point.
Because we are legally required to record your consent as part of the double opt-in, your subscription to the newsletter, the mailing of our consent e-mail and your consent by clicking on the link will be recorded and stored with location and time as well as with your IP address.
For mailing the newsletter, we use (as part of our legitimate interest in a technologically perfect processing of our customer data and analysis) the provider
https://kit.com/.
Thus, your data will be forwarded to the USA.
In our newsletter, we will also explicitly ask you to provide your consent to transmitting data to our newsletter provider and to the USA. You will declare this consent by clicking on the link, but you may revoke it at any time.
For the handling of your data by our newsletter provider, we refer you to our newsletter provider's privacy policy (insert link).
Our newsletter provider will only use your data for mailing the newsletter and for evaluating that mailing on our behalf.
In addition to that, our newsletter provider will only use your data to improve its own service.
But our newsletter provider will not use the data to contact you directly or to pass on your data to third parties.
The mails used by our newsletter provider contains a “web beacon“, which will inform our newsletter provider about the opening of the newsletter and/or the clicking on a link contained therein by you. As part of that process, information regarding your browser, your location and your IP address will be transmitted to our newsletter provider. This information will be used to optimise our communication with you.
Our newsletter provider will also use this data, but only in a pseudonymous form (meaning that they cannot identify you) to analyse and optimise their own services. Your data will never be used by the newsletter provider in order to contact you.
Your data will remain stored for as long as you are in our mailing list, as long as the storage is required to enforce our rights or as long as it is necessary for our legitimate interests or as long as we are required by law to keep your data stored.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a subsidiary of LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA. With the Shariff method, LinkedIn will only learn of your IP address and your visit to our website once you have clicked on the button.
If you confirm the plugin while being logged into LinkedIn, LinkedIn may attribute your use to your user account.
The data collected by Linkedin may be transferred by Linkedin to countries outside of the EU, in particular to the USA.
However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
Further information can be found in LinkedIn's privacy policy at: https://www.LinkedIn.com/legal/privacy-policy?_l=de_DE. For the general approach to cookies and their deactivation as well as regarding the passing of data to third parties, particularly to the USA, we refer you to our general information in this Privacy Policy.
Our website uses links to our presence in the social network of YouTube by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. It is just a normal link. Thus, when you open our site, YouTube will not learn of your visit to our website. But once you click on the link, you will be led to YouTube, allowing YouTube to learn that you have visited out site.
The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA.
However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
You may find further information in YouTube’s privacy policy at
https://www.google.de/intl/de/policies/privacy/.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR we use YouTube, a service provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland in order to embed videos.
To protect your data, we have installed a two-click solution. That way, Google won't learn about your visit once you access our website, but only once you actually click the button. If you confirm the plugin while being logged in at YouTube, Google may attribute your use to your user account.
The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA.
However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.
You may find further information in YouTube’s privacy policy at
https://www.google.de/intl/de/policies/privacy/.
Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.
Based on our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the calendar of Calendly https://calendly.com/de, a service offered by Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA, to make appointments.
Thus, the data you enter while making an appointment will be passed to Calendly. Your data will be transmitted to the USA in that process.
You can find more information about the privacy policy of Calendly at https://calendly.com/legal/privacy-notice.
We have entered into a contract on data processing with Calendly, according to which Calendly will only process your data according to our instructions.
Additionally we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses.
According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework.
This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
In order to arrange an appointment, we ask for the data requested in the Calendly form and we collect your IP address at the time of entry.
This data will not be passed to third parties by us or by Calendly and only serves statistical purposes and for arranging appointments.
Data entry will be encrypted, preventing third parties from reading your data while you enter it. You will find more information about the data collected by Calendly and how they process your data in the privacy policy of Calendly .
Your data will remain stored as long as the reason for the appointment is still relevant, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for other legitimate interests of ours or as long as we are required by law to keep your data stored (for example by tax-law requirements on the keeping of records). If the appointment passes without any consequences, your data will be deleted.
If you choose one of the payment options of our partner PayPal, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, the data entered by you when ordering will be sent to PayPal in order to facilitate the contractual payment.
Detailed information about this can be found in the privacy policy of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
The legal basis for passing on your data to PayPal is primarily the processing of your contractual data according to Art. 6 para. 1 (b) GDPR as well as our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR.
Based on our legitimate interest in a technologically flawless online presence and its economically efficient design and optimization according to Art. 6 para. 1 lit. f GDPR and - as far as the storage of data for the initiation or from the conclusion of a contract with you is concerned - on the basis of the permission to process contractual data according to Art. 6 para. 1 lit. b GDPR, we use the integrated hosting and email marketing solution provided by ConvertKitt LLC, 750 W Bannock St #761, Boise, ID 83702, USA (hereinafter "Convertkit").
Convertkit Newsletter
We use Convertkit for our newsletter and mailings as part of our legitimate interest in providing commercially-efficient customer communications. If you order the newsletter offered on our site, we will inform you in detail about the kind of information you will receive, which data of yours is stored and what it is used for. We will not pass on your data to third parties and will only use it for mailing the newsletter.
We will only send the newsletter to you if you have previously given us your consent to do so. For this purpose, you will receive an e-mail from us with a link and more detailed instructions and a request for your consent. By clicking on this link, you agree to receive the newsletter and advertising from us.
The basis for the storage is your consent according to Art. 6 para. 1 lit. a GDPR, which you give us with the registration for the newsletter. You can revoke this consent at any time by sending us an informal message (e.g. by contact form or e-mail or unsubscribe link in every e-mail). This revocation does not affect the legality of the data processing carried out up to that point.
Since we are legally required to log your consent as part of the so-called double opt in, your ordering of the newsletter, the sending of our consent mail and your consent by clicking on the link will be logged and stored according to place and time as well as with your IP address.
The data used by Convertkit contains a "web-beacon" that sends the opening of the newsletter and/or the activation by you through a link contained therein to Convertkit. This transmits information about your browser, location and IP address to Convertkit. This information is used to optimize how we interact with you.
Furthermore, our newsletter provider also uses this data, but only in pseudonymous form (i.e. without enabling your identification) to analyze and optimize its own service. However, your data will never be used by the provider to contact you.
Your data will remain stored as long as they are stored in our e-mail list, as long as the storage is necessary for us to pursue our rights or for our other legitimate interests, or as long as we are required by law to retain your data.
Convertkit Hosting / E-Mail Marketing
Based on our legitimate interest in a technologically flawless online offering and its economically efficient design and optimization, we use Convertkit for hosting our website pursuant to Art. 6 lit. f GDPR. Convertkit collects usage data in the same way as any other hoster. This includes identified and unidentifiable data on the occasion of your visit to our website. This is either provided to Convertkit or collected automatically through the use of Convertkit services ("non-personal data").
Non-personally identifiable information does not allow Convertkit to determine from whom the information originated. Non-personal data is technological and usage information, such as visitors' and service users' browsing and clickstream behavior, session heatmaps and scrolls, and non-identifying data about the user's or visitor's device used, operating system, browser, screen resolution, language and keyboard settings, internet service provider, referring/exit pages, date/time stamp, and so on.
However, as a hoster, Convertkit also collects data that can identify a person with a manageable amount of effort ("personal data").
This personal data is in principle all data that you enter on the occasion of using the website.
It may include contact information (such as email address or phone number), billing information (name, billing address, payment method, and bank account information), browser or user session information (IP address, geographic location, and/or unique terminal identifier), information about related third-party accounts (such as the email address or username for a related PayPal, Google, or Facebook account), scanned identification documents provided to us (such as an ID, driver's license, passport, or official company registration documents), and any other personally identifiable information.
Convertkit also takes physical, electronic and procedural safeguards to protect your personal information.
We also use Convertkit as an e-mail marketing system on the basis of permission to process contractual data.
In this case, we store all data that you have transmitted to us for the purpose of initiating or concluding a contract, in particular your name, your contact data, payment data, if applicable, as well as purchased products.
This data remains stored by us as long as we still need it for the processing of the contract (in particular warranty period) or for a legally prescribed storage period (in particular tax-relevant data).
In the context of both types of use of Convertkit, your data may be transferred to the USA. We have concluded a data processing agreement with Convertkit, according to which Convertkit will only process your data according to our instructions.
This agreement also provides that the transfer of data to the USA by Convertkit will only occur under the standard contractual clauses.
Furthermore this provider is certified according to the EU-US Data Privacy Framework.
This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.
If you would like to learn more about Convertkit's privacy arrangements, please use the following link: https://convertkit.com/privacy.
Within the scope of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization pursuant to Art. 6 para. 1 lit. f GDPR, as well as – insofar as it concerns the storage of data for the initiation or conclusion of a contract with you – on the basis of the permission to process contractual data pursuant to Art. 6 para. 1 lit. b GDPR, we use offers the following features:
Hosting & funnel/website builder
- CMS (content management system)
- Contact and survey forms
- Calendar and appointment booking
- Newsletter and bulk email dispatch (via Mailgun)
- Tracking and analysis
- CRM (customer relationship management)
- Chat software incl. conversation AI
Of these, we use the following features:
Based on our legitimate interest in a technically flawless online offer and its economically efficient design and optimization, we use for hosting our website and funnel pages as well as a central CRM system. In doing so, collects usage data in the same way as any other hoster. This is identified and unidentifiable data on the occasion of your visit to our website. It is either provided to or collected automatically through the use of services ("non-personal data").
On the basis of non-personal data, it is not possible for to determine from whom the data originates. Non-personal data is technical and usage information, such as the browsing and clickstream behaviour of visitors and users of services, session heatmaps and scrolls, as well as non-identifying data about the device used, operating system, browser, screen resolution, language and keyboard settings, internet service provider, referring/exit pages, date/time stamp, etc. of the user or visitor.
As a hoster, however, also collects data that can identify a person with manageable effort ("personal data").
This personal data is in principle all data that you enter on the occasion of using the website.
This may include contact data (such as email address or telephone number), billing data (name, billing address, payment method and bank details), data relating to a browser or usage session (IP address, geographic location and/or unique identifier of the end device), data relating to connected third-party accounts, as well as any other personal data.
On the basis of the permission to process contractual data, we also use as a customer relationship management system. Here we store all data that you have transmitted to us for the initiation or conclusion of a contract, in particular your name, your contact data as well as booked products. This data remains stored by us as long as we still need it for the processing of the contract (in particular warranty periods) or a retention is legally prescribed.
We use as part of our legitimate interest in economically efficient customer communication for contact and survey forms on our website. receives all data that you enter in our forms and also collects usage data. For this, we refer to our general presentation on contact forms.
We use as part of our legitimate interest in economically efficient customer communication for appointment scheduling on our website.
To book an appointment, the personal data you enter (e.g. name, email address, telephone number) as well as your IP address are recorded within the scope of general technical logging. This data serves exclusively to organise the appointments and is not passed on to third parties by us or , except where this is necessary to carry out the appointment (e.g. to the provider's sub-processors).
Your data is transmitted in encrypted form, so that third parties cannot read your data at any time.
At we store the booked appointments together with the data you have entered, so that the appointments can be planned and kept. This is done either on the basis of our legitimate interest in smooth appointment scheduling pursuant to Art. 6 para. 1 lit. f GDPR or – insofar as the appointment serves the preparation or performance of a contract – for the processing of contractual data pursuant to Art. 6 para. 1 lit. b GDPR.
Where applicable, we ask for your consent to rate us after the appointment. In this way, on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, we can offer you a better service. You can revoke this consent at any time free of charge; a short notice to us (e.g. by contact form or email) is sufficient. This does not affect the lawfulness of the data processing carried out up to that point.
Your data remains stored as long as the reason for the appointment is still relevant, in particular as long as it is required for the fulfilment or performance of the contract, for the pursuit of legal claims by us or for our other legitimate interests, or as long as we are legally obliged to retain it (e.g. tax retention periods).
We use for our newsletter and email dispatch as part of our legitimate interest in economically efficient customer communication.
If you order the newsletter offered on our site, we will inform you in detail about what we inform you about, which data of yours is stored and what it is used for. We will not pass on your data to third parties and will only use it for sending the newsletter.
We will only send the newsletter to you if you have previously given us your consent to do so. For this purpose, you will receive an email from us with a link and more detailed instructions and a request for your consent. By clicking on this link, you agree to receive the newsletter and advertising from us.
The basis for the storage is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you give us when registering for the newsletter. You can revoke this consent at any time; an informal message to us is sufficient (e.g. by contact form or email or the unsubscribe link in every email). This revocation does not affect the lawfulness of the data processing carried out up to that point.
The data used by — or by the email service Mailgun employed for this purpose — contains a "web beacon" that sends the opening of the newsletter and/or your activation of a link contained therein to . In the process, information about your browser, your location and your IP address is transmitted to . This information is used to optimise how we interact with you.
For dispatch, uses the US email service Mailgun as a sub-processor; in the process, dispatch, open and click data as well as your IP address are transferred to the USA (EU-US Data Privacy Framework or standard contractual clauses).
Furthermore, our newsletter provider also uses this data, but only in pseudonymous form (i.e. without enabling your identification) to analyse and optimise its own service. However, your data will never be used by it to contact you.
Your data remains stored as long as it is stored in our email list, as long as the storage is still necessary for the pursuit of legal claims by us or for our other legitimate interests, or as long as we are legally obliged to retain your data.
As part of our legitimate interest in legally sound and economically efficient contract processing pursuant to Art. 6 para. 1 lit. f GDPR, as well as – insofar as it concerns the conclusion or performance of a contract – on the basis of the permission to process contractual data pursuant to Art. 6 para. 1 lit. b GDPR, we use the form and signature function of .
This allows you to fill in documents (e.g. contracts, declarations of consent, questionnaires) online and sign them electronically. For this purpose, collects the data you enter, your IP address, the date and time of the signature as well as any uploaded files.
Insofar as we process special categories of personal data (e.g. health information), we do so exclusively on the basis of your explicit consent, for the purpose of health care or medical treatment, or for another legitimate purpose pursuant to Art. 9 para. 2 GDPR. This sensitive data is deleted automatically after four weeks at the latest, unless one of these purposes precludes deletion.
We use to ask you by email for a voluntary online review after a service has been completed. In doing so, we process your email address, your name as well as the review link. The legal basis is either our legitimate interest in authentic feedback management pursuant to Art. 6 para. 1 lit. f GDPR or your prior consent pursuant to Art. 6 para. 1 lit. a GDPR, insofar as we obtain it. There is no obligation to submit a review.
Based on our legitimate interest in a technically flawless online offer and its economically efficient design and optimization, we also use to analyse our website.
For the analysis, uses certain techniques, in particular cookies that are stored on your computer, and trigger links. These store information about the use of our services, which we use to improve our offer. The data is collected by only in pseudonymous form and is not combined with other personal data about you. It is not possible for us to identify you as a visitor to our website by this means.
If you would like to deactivate tracking by on our website, you can do so at any time via the settings in our cookie banner (opt-out).
Within our account, we manage various user roles (e.g. administrator, support staff). In doing so, processes the respective logins, roles and activities of the users in order to ensure secure access control. The legal basis for this is our legitimate interest in a data protection-compliant assignment of permissions pursuant to Art. 6 para. 1 lit. f GDPR.
To connect external systems, we use webhooks or the open API of . Depending on the configuration, certain user or transaction data is transmitted in encrypted form to the respective recipient. The legal basis is generally the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR or our legitimate interest in efficient system integration pursuant to Art. 6 para. 1 lit. f GDPR. We will provide you with a list of the specific third-party providers connected upon request.
For video conferences, webinars and online meetings we use the service "Zoom". The provider is Zoom Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.
When you take part in a meeting or webinar, Zoom processes the data required for this purpose — in particular your (display) name, your email address, information about your device and your connection and, depending on your selection and the features of the meeting, audio, video and chat content.
This processing serves to enable the meeting you wish to attend.
Where we ask you separately for your consent — for example for a recording — we process the data concerned solely on that basis; you may withdraw any consent given at any time with effect for the future.
In this context, data may be transferred to Zoom in the USA. An appropriate basis for this exists: the European Commission has determined that accordingly certified companies in the USA ensure an adequate level of data protection; Zoom is certified accordingly. In addition, contractual safeguards are in place to protect your data.
Further information on how Zoom handles your data can be found in Zoom's privacy statement at https://www.zoom.com/en/trust/privacy/privacy-statement/.
Beside our website, we also use fan page(s) on social media platforms.
Above, we have already informed you about the data processing on our website and we have in particular made sure that the fact alone that you access our website is not yet forwarded to the social media platform.
Following the ECJ ruling dated 5 June 2018 about social media presences, we want to inform you about the data processing during your visit to our social media fan page(s):
On the basis of our legitimate interest in a timely customer communication pursuant to Art. 6 para. 1 (f) GDPR as well as for advertising and public relations purposes, we present ourselves and our offers on social media fan page(s).
Our social media fan page(s) usually can be accessed online independently of you having a user account with the relevant platform or not. But in either case, your data will be processed by the social media platform.
Each time the social media platform is accessed, your IP address will be collected and stored. Usually, a cookie will also be placed on your page, which will save your visit and further data about your visit to the social media platform.
If you are logged in with the social media platform, your visit will also be spotted by a cookie or through other technological means and will be attributed to your user account.
Thus, the social media platform is usually able to analyse your user behaviour.
In this process, a user profile with your interests is generated, which the social media platform will use to provide you with a user experience tailored to your interests, in particular advertisement tailored to your interests within and outside of the social media platform – even across different devices, if applicable.
Your data may also be used for market research.
For the details, we refer you to the following privacy policies of the social media platform(s) used by us.
We can usually also use the data of the social media platform in order to allow you to use our fan page in accordance with your interests or to approach you with advertising.
When you interact with our fan page and if you are logged in with the relevant social media platform, according to the social media page's terms of use, we can usually also recognise your user profile and see your content.
If you do not want this, we point you to our explanations about cookies above, with general information about cookies and their deactivation. There, we have laid out in general terms how you can prevent or limit cookies being stored on your devices. Further information about the respective social media platform can be found hereinafter.
According to the aforementioned ECJ ruling dated 5 June 2018, we are always jointly responsible for our social media fan page(s) together with the relevant social media platform.
This means that you may also exercise your general rights, which we have listed in detail above under the heading “Users' Rights”, against us. To that purpose, we refer you to our contact details at the beginning of this Privacy Policy.
Please keep in mind, though, that we have no conclusive knowledge of the exact scope of the processing of your data by the social media platform and have even less influence on it. Therefore, we kindly ask you to contact the relevant social media platform in the first place regarding your rights.
We generally leave your data on the social media platform and do not import it onto our server. But if that should occur, our general information regarding the storage period will apply.
Further information about the processing of your data and the storage period on the social media platform can be found in the respective privacy policy of the social media platform, which we have listed hereinafter.