Privacy Policy

Data Protection Manager

Name: TÜV SÜD Akademie GmbH Datenschutz Consulting Services

Address: Westendstraße 160, 80339 München

Email Address: [email protected]
​​​​​​​

As of: April 15, 2025

Basic Information on Data Processing and Legal Basis

1. This privacy policy explains to you the type, scope, and purpose of the processing of personal data within our online offering and the associated websites, functions, and content (hereinafter referred to together as “online offering” or “website”). The privacy policy applies independently of the domain, systems, platforms, and devices used (such as desktop or mobile) on which the online offering is presented.
    
2. The terms used, such as “personal data” or “processing”, refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
    
3. The personal data of the user processed within the framework of this online offering includes file data (such as name and address of customers, contract data (such as services taken advantage of, name of processors, payment information), use data (such as the websites of our online offering visited, interest in our products) and content data (such as entries into the contact form).
    
4. The term “user” includes all categories of persons affected by the data processing. This includes our business partners, customers, interested parties, and other visitors to our online offering.
    
5. We process the personal data of the user only, adhering to the applicable data protection regulations. This means that the data of the users will only be processed with legal consent. This means in particular, when the data processing is required to perform our contractual services (such as processing of orders) and online services or is legally required, if there is consent from the user, and based on our legitimate interests (such as in the interest of analysis, optimization and economic operation and security of our online offering in terms of Article 6 (1) GDPR, in particular in measuring scope, creation of profiles for advertising and marketing purposes and for the collection of access data and use of the services of third party providers.
   ​​​​​​​
6. We note, that the legal basis for the consent in Article 6 (1) (a) and Article 7 GDPR, the legal basis of the processing for fulfilment of our services and the implementation of contractual measures Article is 6 (1) (b) GDPR, the legal basis f or the processing for fulfilment of our legal obligations Article 6 (1) (c) GDPR and the legal basis for the processing for preserving our legitimate interests is Article 6 (1) (f) GDPR.

Security Measures

1. We take organizational, contractual, and technical security measures in line with the state of the art of technology to ensure that the provisions of the data protection laws are upheld and to protect the data processed by us from accidental or intentional manipulations, loss, destruction, or access by unauthorized persons.
   ​​​​​​​
2. The security measures include the encrypted transfer of data between your browser and our server.

Forwarding of Data to Third Parties and Third-Party Suppliers

1. Forwarding of data to third parties only occurs within the frame­work of the legal regulations. We only provide the user data to third parties if required based on Article 6 (1) (b) GDPR for contrac­tual purposes or based on legitimate interests according to Article 6 (1) (f) GDPR for economic and effective operation of our business.
    
2. If we use subcontractors to provide our services, we take the appropriate legal precautions and relevant technical and organizational measures to ensure the protection of the personal data pursuant to the applicable legal regulations.
   ​​​​​​​
3. If, within the framework of this privacy policy, content, tools, or other resources from other suppliers (hereinafter called “third-party suppliers”) are used and their headquarters are located in another country, we assume that a data transfer occurs to the country in which the third-party supplier is headquartered. Third-party countries are countries in which the GDPR is not directly applicable law, meaning fundamentally countries outside of the EU or the European Economic Area. The transfer of data to third-party states is either done when there is a suitable data protection level, consent by the user, or there is another type of legal permission.

Provision of Contractual Services

1. We process file data (such as names and addresses and contact data of users), contractual data (such as services ordered, names of contacts, payment information) to fulfil our contractual obligations and services according to Article 6 (1) (b) GDPR.
    
2. As an option, users may create a user account to be able to review their member­ship type and the number of their licenses. The required obligatory information of the users is provided within the framework of registration. The user accounts are not public and cannot be indexed by search engines. When users cancel their user accounts, the data regarding the user account is deleted, except if storage is required for commercial or tax reasons according to Article 6 (1) (c) GDPR. It is up to the user to secure their data after successful cancellation before the end of the contract. We are authorized to permanently delete all user data saved during the term of the contract.
    
3. The IP address and the time of the relevant user action will be saved within the frame­work of the registration and subsequent logins and availing of our online services. Saving is done based on our legitimate interests as well as those of the user to protect against abuse and unauthorized use. Forwarding of these data to third parties is generally not done, except if required to fulfil our claims or there is a legal obligation to do so according to Article 6 (1) (c) GDPR.
   ​​​​​​​
4. We process usage data (such as the websites of our online offering visited, interest in our products) and content data (such as entries in the contact form or user profile) for advertising purposes in a user profile to provide, for example, product information based on their previous ordered services.

Contact Information

1. When contacting us (via contact form or email), the user's information is processed to process the contact request and its completion according to Article 6 (1) (b) GDPR.
    
2. The user information may be stored in our customer service relationship management system ("CRM System") or a comparable request organization.
    
3. We use the "Pipedrive" CRM system from the provider Pipedrive at 460 Park Ave South, New York, NY 10016, USA, based on our legitimate interests (efficient and rapid processing of user inquiries). For this, we have concluded a contract with help scout with so-called standard clauses, in which help scout is obligated to process the user data only according to our instructions and maintain the EU data protection level.
    
4. We use Fastbill, from the provider FastBill GmbH, Wildunger Str. 6, 60487 Frankfurt am Main, for billing based on our legitimate interests (efficient and rapid processing of user inquiries). For this, we have concluded a contract with help scout with so-called standard clauses, in which Help Scout is obligated to process the user data only according to our instructions and maintain the EU data protection level.

Comments and Contributions

1. If users leave comments or other contributions, their IP addresses are saved for 7 days based on our legitimate interest in terms of Article 6 (1) (f) GDPR.
   ​​​​​​​
2. That is done for our security, in case anyone has left illegal content in comments and contribu­tions (insults, prohibited political propaganda, etc.). In this case, we can be held accountable for the comment or contribu­tion and are therefore interested in the identity of the writer.

Collection of Access Data and Logfiles

1. Based on our legitimate interests in terms of Article 6 (1) (f) GDPR, we collect data about every access to the server on which this service is located (so-called server logfiles). Access data includes the name of the website queried, file, date, and time of the query, transferred data quantity, report of successful query, browser type with version, operating system of the user, referrer URL (the page previously visited), IP address, and requesting provider.
   ​​​​​​​
2. Logfile information is saved for a maximum of 7 days for security reasons (such as clarification of abuse or fraudulent action) and then deleted. Data that are required to be stored for longer for evidentiary purposes are exempted from deletion until the case is ultimately clarified.

Cookies & Determination of Scope

1. Cookies are information transferred from our web server or the web servers of third parties to the web browser of the users and saved there for later queries. Cookies can be small files or other types of stored information.
    
2. We use "session cookies", which are only deposited for the duration of the current visit to our online presence (such as to save your login status or to use the shopping cart function and thus making possible the use of our online offering). In a session cookie, a randomly created unique identification number is deposited, a so-called session ID. In addition, a cookie contains information about its origin and how long it should be stored. These cookies cannot save any other data. Session cookies are deleted when you end your visit to our online offering and log out, for example.
    
3. The users are informed of the use of cookies within the framework of pseudonymic determination of scope within the framework of this privacy policy.
    
4. If the user does not want cookies to be saved on their computer, they are requested to deactivate the relevant option in the system settings of their browser. Saved cookies can be deleted in the browser's system settings. The exclusion of cookies may lead to function limitations for this online offering.
    
5. You can object to the use of cookies that serve for the determination of scope and advertising purposes via the deactivation site of the Network Advertising Initiative (http://optout.networkadvertising.org/) and on the American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/​​​​​​​).

Google Analytics

1. Based on your consent (Article 6 (1) (a) GDPR), we use Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about the user's use of the online offer is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to analyse the use of our online offering, to create reports on the activities within this online offering, and to inform us of the use of this online offering and the services associated with internet use. Pseudonymized use profiles of the users can be created from the processed data.
    
2. We use Google Analytics in order to only show our advertise­ments within the advertising services of Google and its partners only to those users who have shown interest in our online offering or who have certain characteristics (such as interest in certain subjects or products determined by the websites visited), which we send to Google (so-called "remarketing" or "Google Analytics Audiences"). Using the remarketing audience, we want to ensure that our advertisements are relevant to the user's interests and are not annoying.
    
3. We use Google Analytics only with activated IP anonymization. This means that your IP address is truncated by Google within the member states of the European Union or in other contractual states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.
    
4. The IP address collected from your browser within the framework of Google Analytics will not be consolidated with other Google data. The users can prevent the storage of cookies using a relevant setting of their browser software. The users can also prevent the collection of the data related to their use of the online offering created by the cookie being collected by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the link below: http://tools.google.com/dlpage/gaoptout?hl=de.
   ​​​​​​​
5. Additional information on the use of data by Google, settings, and objection options can be found on the Google websites: www.google.com/intl/de/policies/privacy/partners ("Data use by Google on your use of websites or apps of our partners "), www.google.com/policies/technologies/ads("Data use for advertising purposes"), www.google.de/settings/ads ("Managing information that Google uses to show you advertisements").

Google-Re/Marketing-Services

1. We use the marketing and remarketing services ("Google Marketing Services" for short) of Google Inc., 1600 Amphitheater Parkway, Mountain View, based on your consent (Article 6 (1) (a) GDPR), CA 94043, USA ("Google").
    
2. The Google Marketing Services allows us to display advertisements in a targeted manner on our website, to present users with only the advertise­ments that may potentially interest them. If a user is shown advertise­ments for products that they have shown interest in on other websites, we call this "remarketing". For this purpose, when querying our and other websites on which Google Marketing Services is active, Google immediately assigns a code from Google, and so-called (re)marketing tags (invisible graphics or code, also called "web beacons") are integrated into the website. Using these, an individual cookie, a small file, is stored on the user's computer (technologies comparable to cookies may also be used). Various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com, can deposit the cookies. This file notes which websites the user visits, the content they are interested in, and which offers they clicked on, as well as technical information about the browser and operating system, referring websites, visit time, and other information on the use of the online offering. The IP address of the user is also collected, whereby we notify within the framework of Google Analytics that the IP address within member states of the European Union or in other contractual states of the Treaty on the European Economic Area will be truncated, and only in cases of exception sent as a whole to a Google server in the USA and truncated there. The IP address will not be linked to the user's data within other offers from Google. The present information can also be linked to such information from other sources by Google. If the user then visits other websites, advertising fit for their interests can be displayed.
    
3. The user data is processed under a pseudonym within the frame­work of Google Marketing Services. That means that Google saves and processes the name or email address of the user, but processes the relevant cookie-related data using a pseudonymized user profile. That means that from the viewpoint of Google, the advertise­ments are not administered for concretely identified persons, but only for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly authorized Google to process this data without pseudony­mization. The information collected by Google Marketing Services is sent to Google and stored on Google's servers in the USA.
    
4. The online advertising program "Google AdWords" is one of the Google Marketing Services we use. In the case of Google AdWords, every AdWords customer receives a different "conversion cookie". Cookies can thus not be traced via the websites of AdWords customers. The information collected using cookies is used to create conversion statistics for AdWords customers who have decided to use conversion tracking. The AdWords customers can see the total number of users who have clicked on their advertisement and who were forwarded to a page equipped with a conversion tracking tag. They do not receive any information that can be used to identify a user personally.
    
5. We can include advertising from third parties using the Google Marketing Service "DoubleClick". DoubleClick uses cookies with which Google and its partner websites are able to change the display of advertise­ments based on the visits of users to this website or other websites on the internet.
    
6. We can include advertising from third parties using the Google Marketing Service "AdSense". AdSense uses cookies with which Google and its partner websites are able to change the display of advertise­ments based on the visits of users to this website or other websites on the internet.
    
7. We can also use the "Google Optimizer" service. Google Optimizer allows us to see how various changes affect a website within the framework of so-called "A/B testing" (such as changes to entry fields, design, etc.). Cookies are deposited on the users' devices for test purposes. Only the pseudonymized user data is processed.
    
8. In addition, we can use "Google Tag Manager" to include Google Analytics and marketing services on our website and manage them.
    
9. You will find additional information on the use of data for marketing purposes by Google at the overview page: www.google.com/policies/technologies/ads. Google's privacy policy can be found at www.google.com/policies/privacy​​​​​​​.
    
10. If you wish to object to this interest-based advertising by Google Marketing Services, you can use the Google settings and opt-out function: http://www.google.com/ads/preferences.

Google Fonts

1. We use Google Fonts based on legitimate interests (Article 6 (1) (f) GDPR).
    
2. Google Fonts is an interactive directory with more than 800 fonts that Google makes available for free use. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com.
    
3. With each request from Google Fonts, information such as IP address, language settings, browser screen resolution, browser version, and browser name is automatically transmitted to the Google servers.
   ​​​​​​​
4. To learn more about Google Fonts and other issues, visit developers.google.com/fonts/faq. To learn what data is collected by Google and what it is used for, visit www.google.com/intl/de/policies/privacy/.

Hubspot

1. We use HubSpot based on your consent (Article 6 (1) (a) GDPR). HubSpot (25 First Street, Cambridge, MA 02141 USA) is a provider of a marketing and sales software based in the US with subsidaries in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland) and Germany (HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany).
    
2. HubSpot is a service platform. The service used is an integrated software solution that allows us to manage customer data and cover various aspects of our online marketing. That includes, among other things, the analysis of landing pages and reporting. In the process, so-called "web beacons" are used, and cookies are stored on the terminal device you use.
    
3. The following personal data may be collected: IP address, geographical location, type of browser, duration of visit, pages viewed, and contextual information.
    
4. The collected information, as well as the content of our website, is stored on the servers of our software partner HubSpot. We use HubSpot to analyze the use of our website. This allows us to constantly optimize our website and make it more user-friendly. We also use information to determine which of our company's services are of interest to customers and newsletter subscribers and to contact them for advertising purposes. In addition, we use the evaluation to optimize our web offer for you.
    
5. We only use your IP address in a shortened version.
    
6. The cookies have a usual lifetime of 13 months. In addition, we delete the personal data collected via HubSpot as soon as the purpose for which they were collected has been achieved, unless the deletion conflicts with legal retention periods.
    
7. The information generated by the cookie about the use of the online offer by users may also be transmitted to a Google server in the USA and stored there. The processing is based on EU standard contractual clauses. Through this, HubSpot offers a guarantee of compliance with European data protection law.
    
8. You can revoke your consent at any time. More information about how HubSpot works can be found in the privacy policy of HubSpot Inc.
    
9. HubSpot meets the minimum requirements for legally compliant commissioned data processing by concluding the EU-standard contractual clauses. There is also a data processing agreement (DPA) in place with HubSpot. This ensures that Hubspot only uses the user data within the scope of the EU data protection standards, exclusively for processing the requests, and does not pass them on to third parties. Further information can be found in HubSpot's privacy policy.

LinkedIn Inside Tag

1. We use the LinkedIn Inside Tag based on your consent (Article 6 (1) (a) GDPR). LinkedIn (100 W Maude, Sunnyvale, CA 94085 USA) is a social network for business contacts with a subsidiary in the EU (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) and is owned by Microsoft.
    
2. The LinkedIn Inside Tag creates a cookie in your web browser, which enables the collection of, among other things, the following data: IP address, timestamp, page events (e.g., page views, URL, referrer-URL), device properties, and browser properties.
   ​​​​​​​
3. LinkedIn anonymizes the data within 7 days. Within 90 days, the data is deleted by LinkedIn. Page operators do not receive personal data collections, only aggregate reports on the demographics of their audience and the performance of their ads. Page operators receive criteria such as: Industry, job title, company size, career level, and location of site visitors. In addition, LinkedIn provides retargeting capabilities. We can use this data to display targeted ads outside of our website without identifying you as a website visitor. For more information on data protection at LinkedIn, please refer to the LinkedIn privacy policy.

Jetpack (WordPress Stats)

1. Based on our legitimate interests, (meaning the interest in the analysis, optimization and economic operation of our online offering in terms of Article 6 (1) (f) GDPR), we use the plugin Jetpack (here the sub-function "Wordpress Stats"), which includes a tool for statistical analysis of the visitor accesses from Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. Jetpack utilizes so-called "Cookies", text files that are saved on your computer and that enable an analysis of your use of the website.
    
2. The information created by the cookie on your use of this online offering is saved on a server in the USA. This enables the creation of user profiles from the processed data, which is only used for analysis and not for advertising purposes. You can find additional information in the privacy policy of Automattic: https://automattic.com/privacy/ and information on Jetpack cookies: https://jetpack.com/support/cookies/.

Statcounter

1. Based on our legitimate interests (meaning the interest in the analysis, optimization, and economic operation of our online offering in terms of Article 6 (1) (f) GDPR), we use Statcounter. This web analysis service includes a tool for statistical analysis of visitor access and is operated by Statcounter, Guinness Enterprise Centre, Taylor's Lane, Dublin 8, Ireland. Statcounter utilizes so-called "Cookies", text files which are saved on your computer and which enable an analysis of your use of the website.
   ​​​​​​​
2. The information created by the cookie on your use of this online offering is saved on a Statcounter-operated server. This enables the creation of user profiles from the processed data, which is only used for analysis and not for advertising purposes. You can find additional information in the knowledge base of Statcounter https://statcounter.com/support/knowledge-base/314/.

Matomo

1. We use Matomo, an open-source software, on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offer, testing a data protection-friendly alternative within the meaning of Article 6 (1) (f) GDPR) for the statistical evaluation of visitor access. The Matomo software provider is OnnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.
    
2. Matomo can be used with or without cookies. The information generated by the cookie or other process about your use of the website is stored on our servers.
    
3. Your IP address will be anonymized immediately after processing and before storage.
    
4. For more information on the privacy settings of the Matomo software, see the following link: matomo.org/docs/privacy/.
   ​​​​​​​
5. The data will be deleted as soon as it is no longer required for our recording purposes. In our case, this happens after 380 days.

Newsletter

1. The following information is provided to inform you of the content of our newsletter and subscription, dispatch, and statistical analysis procedures, as well as your rights to opt out. If you subscribe to our newsletter, you are consenting to the receipt and the procedure described.
    
2. Content of the newsletter: We send the newsletter, emails, and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or with a legal permission. To the extent that within the registration for the newsletter, this content is concretely defined, it represents the user's consent. In addition, our newsletters contain information on our products, offers, specials, and our company.
    
3. Double opt-in and protocolling: The subscription to our newsletter is done in a so-called double opt-in procedure. That means that you will receive an email after subscription, requesting confirmation of your subscription. This confirmation is necessary to prevent anyone from registering with someone else's email address. The subscriptions to the newsletter are recorded to be able to trace the subscription process according to the legal requirements. This includes storing the registration and confirmation time as well as the IP address. The changes to the data you entered are also saved by the dispatch service provider.
    
4. Dispatch services provider: Our newsletter is sent using Inxmail GmbH, Wentzingerstr. 17 D-79106 Freiburg/GERMANY, hereinafter referred to as the "dispatch service provider". You can find the data protection provisions of the dispatch services provider here: www.inxmail.de/datenschutz.
    
5. In addition, the dispatch service provider can use this data in pseudonymized form for its own information, meaning without assigning it to a user, for optimization or improvement of its own services, such as for technical optimization of the dispatch and display of the newsletter, or for statistical purposes to determine which countries the recipients come from. The dispatch service provider does not use the data of our newsletter recipients to subscribe them themselves or forward it to third parties.
    
6. Registration data: Your email address is sufficient to subscribe to the newsletter. Optionally, we request that you enter your name for a personal salutation in the newsletters.
    
7. Statistical collection and analyses: The newsletter contains a so-called "web beacon", meaning a pixel-sized file that is called up by our server when you open the newsletter. During this query, initially, technical information is collected about your browser and your system, as well as your IP address and time of query. This information is used for technical improvement of the service using the technical data or the target groups and their reading behaviour using the query location (using the IP address) or the access times. The statistical collection also involves the determination of whether the newsletter is opened, when it was opened, and which links were clicked. This information can be assigned to the individual newsletter recipients for technical reasons. It is neither our intention nor that of our dispatch service provider to observe any individual user. The analyses serve to recognize the reading habits of our users and to adapt our content to them, or to provide different content according to the interests of our users.
    
8. The use of the dispatch service provider, implementation of the statistical collection and analyses, as well as the protocolling of the registration procedure, are done based on our legitimate interest according to Article 6 (1) (f) GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system that serves our commercial interests and meets the expectations of the users.
   ​​​​​​​
9. Cancellation/Revocation: You can unsubscribe from our newsletter at any time, meaning you may revoke your consent. At the same time, your consent to the dispatch by the dispatch service provider and the statistical analyses is also deleted. A separate revocation of consent to dispatch by the dispatch service provider or the statistical analysis is unfortunately not possible. There is an unsubscribe link to cancel the newsletter at the end of each newsletter. If users have only registered for the newsletter and have cancelled this subscription, their personal data will be deleted.

Hotjar

We use Hotjar, a web analytics service provided by Hotjar Ltd. ("Hotjar"), to analyze user behavior on our website and improve the user experience. Hotjar uses cookies and other technologies to collect information about user behavior on our website, but without capturing personally identifiable information. The data collected by Hotjar is transmitted to and stored on a Hotjar server. Hotjar processes this data on our behalf to generate reports on user activities on the website and to provide other services related to website activity and internet usage. Hotjar ensures that data processing is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR). That includes ensuring adequate security measures and protecting the rights of data subjects. For more information about data processing by Hotjar, please refer to their privacy policy: Hotjar Privacy Policy. You can prevent Hotjar from collecting your data by enabling the do-not-track setting in your browser or by deactivating Hotjar at the following link: Hotjar Opt-out Link. Please note that this may result in some features and services on our website not functioning properly.

1. Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Article 6 (1) (f) GDPR), we use Hotjar. This web analytics service integrates a tool for statistical analysis of user behavior on our website and is operated by Hotjar Ltd, St Julians Business Centre, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. Hotjar uses so-called "cookies," text files that are stored on your computer and enable an analysis of your use of the website.
   ​​​​​​​
2. The information generated by the cookie about your use of this online offer is stored on a server operated by Hotjar. The processed data can be used to create user profiles, which are used for analysis purposes only and not for advertising purposes. Further information can be found in Hotjar's knowledge base at https://www.hotjar.com/legal/policies/terms-of-service​​​​​​​.

Inclusion of Services and Content of Third Parties

1. Within our online offering, based on our legitimate interests (meaning interests in the analysis, optimization and economic operation of our online offering in terms of Article 6 (1) (f) GDPR) we use content or services of third parties to include their content and services such as videos or texts (hereinafter called "content"). This always assumes that the third-party providers of this content are aware of the IP address of the users, because without this IP address, they could not send the content to the browsers. The IP address is thus required for the display of this content. We try only to use such content, the providers of which use the IP address only for the provision of the content. Third-party providers can also use so-called pixel tags (invisible graphics, also called web beacons) for statistical or marketing purposes. Through "pixel tags", information such as the visitor traffic on the pages of this website can be analysed. The pseudonymized information can also be saved in the form of cookies on the user device and contain information including technical information on the browser and operating system, referring websites, visiting time, and other information on use of our online offering, as well as be associated with such information from other sources.
    
2. The following example provides an overview of third-party providers as well as their content, in addition to links to their privacy policies, which contain additional information on the processing of data and, as mentioned here, your options for objecting (so-called opt-out):
   ​​​​​​​
   • If our customers use the payment services of third parties (such as PayPal), the terms and conditions and privacy policy of the relevant third-party provider apply, which can be found on the relevant websites and transaction applications.
   • Maps of the "Google Maps" service of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
   • Videos of the "YouTube" platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
   • External Code of the JavaScript framework "jQuery", provided by the third-party provider jQuery Foundation, jquery.org.

Users' Rights

1. Users have the right to receive their information upon request, which is saved about them.
    
2. In addition, users have the right to report incorrect data, limitation of processing, and deletion of their personal data, if applicable, to exercise their rights and in the case of assumption of illegal data processing, to lodge a complaint to the responsible oversight authorities.
   ​​​​​​​
3. Users may also revoke consent with effect from the future.

Data Deletion

1. The data we store is deleted as soon as it is no longer needed for its intended purpose, and if the deletion does not violate any legal storage requirements. If the user's data is not deleted because it is required for a legally required purpose, the processing of this data is limited. That means that the data are locked and not processed for any other purposes. This applies, for example, to user data that must be stored for commercial or taxation purposes.
   ​​​​​​​
2. According to the legal provisions, the storage is set for 6 years according to Article 257 (1) of the Commercial Code (commercial registers, inventories, opening balances, annual reports, business letters, accounting records, etc.) as well as 10 years according to Article 147 (1) of the Tax Code (accounts, diagrams, financial reports, accounting records, business letters, documents relevant for taxation, etc.).

Right to Objection

Users can withdraw their consent to the future processing of their personal data at any time according to the legal provisions. The objection can be made in particular against the processing for the purpose of direct advertising.

Privacy Policy Changes

1. We reserve the right to change the privacy policy due to changed legal bases or if there are changes to the service and data processing. That applies only to statements on data processing. If user consent is required or parts of the privacy policy contain provisions on the contractual relationship with the users, the changes are only made with user consent.
   ​​​​​​​
2. The users are asked to check the privacy policy content regularly.