Privacy Statement

1) Information on collecting personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following sections we will inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Berlin Tourismus & Kongress GmbH, Schöneberger Str. 15, 10963 Berlin, Germany, Phone: 030/ 25 00 23 33, Fax: 030/ 25 00 24 24, E-mail: hallo [at] visitBerlin.de.. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The data controller has appointed a data protection officer, who can be contacted as follows: TÜV Rheinland i-sec GmbH, Mr. Oliver Gröger, Alboinstraße 56, 12103 Berlin, Germany, datenschutz [at] visitBerlin.de.

1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the data controller). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website
During the purely informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (server log files). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time accessed
- Quantity of data sent in bytes
- Source/link from which you reached the page
- Browser used
- Operating system used
- IP address used (if necessary in anonymised form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of our legitimate interest to improve the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

3) Cookies

In order to make the visit to our website more appealing and to enable the use of certain functions, we use cookies on various sub-pages.

These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and enable your browser to be recognised the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

Sometimes cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b of the GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a of the GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f of the GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visited.

You can use the selection in our Consent Tool (Section 11.1) to choose which cookies may be used by our website and also change this selection at any time during your visit to the website, insofar as they are not essential cookies.

Please note that you can additionally set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. This can be found for each browser via the following links:

Internet Explorer: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/

Please note that if you do not accept essential cookies, the functionality of our website may be limited.

4) Making contact

Personal data is collected when you make contact with us (e.g. by contact form or e-mail). Which data is collected when you use a contact form is apparent from the contact form itself. This data is stored and used exclusively for the purpose of answering your request or for making contact, and the associated technical administration. The legal basis for the processing of data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f of the GDPR. If you make contact with a view to concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b of the GDPR. Your data will be deleted after the final processing of your request. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and provided there are no legal obligations to retain the data.

5) Data processing when opening a customer account and for contract processing

In accordance with Art. 6 para. 1 lit. b of the GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of executing a contract or opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the data controller. We store and use the data provided by you for the purpose of processing the contract. After complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to a further use of your data or a legally permitted further use of data has been reserved on our part.

After completing your order and using our products or services, we will send you a one-off email asking you to rate your experience. This e-mail is used exclusively for quality assurance and improvement of our offers and does not contain any advertising content. For this purpose, your personal data, in particular your e-mail address, may be transmitted to a service provider commissioned for this purpose, who supports us in sending the evaluation requests. The basis for processing the data is our legitimate interest pursuant to Art. 6 para.1 lit. f GDPR. The data processing for sending the evaluation request will be for quality assurance and improvement of our services. If you do not wish to receive an evaluation request, you can object to the processing of your personal data for this purpose at any time. To do so, please contact us using the contact details above.

6) Use of customer data for direct advertising

6.1 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you e-mail offers for similar goods or services to those you have already purchased from our range. In accordance with § 7 para. 3 of the Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 para. 1 lit. f of the GDPR. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with future effect by notifying the data controller named at the beginning. In this case, you will only be charged transmission costs according to the base rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

6.2 Advertising by post

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you as part of the contractual relationship – your title, academic degree, year of birth and your profession, industry or business name in accordance with Art. 6 para. 1 lit. f of the GDPR and to use it to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the data controller.

7) Data processing for order processing

7.1 In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b of the GDPR.

7.2 Use of payment service providers (payment services)

- Datatrans

If you opt for credit card payment through the payment service provider ConCardis, the payment will be handled by the payment service provider Datatrans AG, Kreuzbühlstrasse 26, CH-8008 Zurich (Switzerland), to whom we will pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) letter b GDPR. Your data will be passed on for the sole purpose of payment handling with the payment service provider Datatrans and only to the extent that this is necessary.

You can obtain further information at the following Internet address:

https://www.datatrans.ch/en/privacy-policy/

- Paypal

If you pay via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – purchase on account or payment by instalments via PayPal, we shall pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b of the GDPR and only insofar as this is necessary for the payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – purchase on account or payment by instalments via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data privacy policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

8) Use of social media: videos

8.1 Use of Vimeo videos

On our website, we use plugins from the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA, with your consent. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there.

If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (such as pressing a video start button), this information is also transmitted directly to a Vimeo server and stored there.

The described data processing operations are carried out in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of Vimeo's legitimate interest in market research and the needs-based design of the Vimeo service.

If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out from Vimeo before visiting our website.

The purpose and scope of data collection and the further processing and use of data by Vimeo as well as your related rights and settings options for protecting your privacy, can be found in the Vimeo privacy policy: https://vimeo.com/privacy

In the case of videos from Vimeo that are embedded on our site, the Google Analytics tracking tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo's own tracking, to which we have no access and which cannot be influenced by our site. Google Analytics uses cookies for tracking, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will generally be transmitted to one of Google's servers. This may also result in a transmission to the servers of Google LLC in the USA.

This processing is carried out in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of Vimeo's legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

As far as legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a of the GDPR for the processing of your data as described above. You can revoke your consent at any time with future effect. To exercise your right of revocation, deactivate this service in the Cookie Consent Tool provided on the website.

8.2 Use of YouTube videos

With your consent, this website uses the YouTube embedding function to display and play videos of the YouTube provider, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded YouTube videos is started, the YouTube provider uses cookies to collect information about user behaviour. According to information from YouTube, these are used, for example, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of Google’s legitimate interests in the insertion of personalised advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles; you must contact YouTube to exercise this right. Within the scope of using YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.

Irrespective of whether the embedded videos are played or not, a connection to the Google network is established each time this website is opened, which may trigger further data processing operations without our influence.
Further information on data protection in regard to YouTube can be found in the provider's privacy policy at: https://policies.google.com/privacy?hl=en-GB&gl=de

9) Online marketing

9.1 Use of Google Ads conversion tracking

On our website, we use the Google Ads online advertising program and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") with your consent. We use the Google Ads service to draw attention to our attractive offers with the help of advertising media (Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across Google Ads customers' websites. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients will learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in the tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under the keyword "user settings". You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising in accordance with Art. 6 para. 1 lit. f of the GDPR. In the context of the use of Google Ads, there may also be a transmission of personal data to the servers of Google LLC in the USA.

You can obtain further information about Google's data protection policy at the following Internet address: https://policies.google.com/privacy?hl=en-GB&gl=de

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?hl=en-GB

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

9.2 Google Ads Remarketing

On our website, we use the functions of Google Ads Remarketing with your consent, using these to advertise for this website in the Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f of the GDPR.
Further data processing will only take place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalise the ads you view on the web. In this case, if you are logged into Google while viewing pages on our website, Google will use your data together with Google Analytics data to create and define targeting lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data in order to form target groups. In the context of the use of Google Ads Remarketing, personal data may also be transmitted to Google LLC servers in the USA.

You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plugin available at the following link:

https://www.google.com/settings/ads/onweb/

Further information and the data protection regulations regarding advertising and Google can be viewed here:

https://policies.google.com/technologies/ads?hl=en-GB

9.3 Bing Ads (Microsoft Corporation)

This website uses the conversion tracking technology Bing Ads from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads installs a cookie on your computer if you were directed to our website by a Microsoft Bing ad. Cookies are small text files that are stored on your end device. These cookies expire after 180 days and are not used to personally identify you. If the user visits specific pages of this website and the cookie has not yet expired, Microsoft and we are able to detect that the user clicked on the ad and was directed to this page (conversion page). Any processing of personal data is conducted in accordance with Art. 6 para. 1 f) GDPR on the basis of our justified interest in effective marketing.

The information obtained with the conversion cookie serves to generate conversion statistics, i.e., to determine how many users visit a conversion page after clicking on an ad. This tells us the total number of users who have clicked on our ad and were directed to a page with a conversion tracking tag. However, we do not learn any information that can be used to personally identify users. If you do not wish to be included in the tracking, you can decline by deactivating Bing Ads conversion tracking in your Internet browser user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for consumers from the EU http://www.youronlinechoices.com/de/praferenzmanagement/ to inspect whether marketing cookies from Microsoft are installed in your browser and deactivate them.

The following webpage provides further information on the data protection conditions of Microsoft Bing Ads: https://privacy.microsoft.com/de-de/privacystatement

If legally required, we have obtained your consent for such processing of your data according to Art. 6 para. 1 a) GDPR. You can revoke your consent at any time with effect for the future. Please follow the instructions herein for exercising your right to revocation of consent.

9.4 Bing Ads (Microsoft Corporation) Universal Event Tracking

This website uses the universal event tracking of the conversion tracking technology Bing Ads from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA).

A tag is integrated into each page of our website for purposes of universal event tracking. The tag interacts with the conversion cookie installed by Microsoft Bing Ads. This interaction lets us understand user behaviour on our website. The information logged in this manner is sent to Microsoft Bing Ads to facilitate the statistical documentation and evaluation of certain predefined goals such as purchases or leads in order to align our content in a manner tailored to user interests. The tags are never used to personally identify users.

If the forwarding of information about user behaviour to Microsoft Bing Ads includes personal user data, this is conducted in accordance with Art. 6 para. 1 f) GDPR on the basis of our justified interest in the statistical evaluation of the success of product advertisements in Microsoft Bing Ads and the user’s buying behaviour, thereby serving to optimise our online presence.

If you do not wish to be included in the tracking, you can decline by deactivating Bing Ads conversion tracking in your Internet browser user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for consumers from the EU http://www.youronlinechoices.com/de/praferenzmanagement/ to inspect whether marketing cookies from Microsoft are installed in your browser and deactivate them.

The following webpage provides further information on the data protection conditions of Microsoft Bing Ads: https://privacy.microsoft.com/de-de/privacystatement

9.5 Facebook Pixel for the creation of Custom Audiences with extended data matching (without cookie consent tool)

Within our online offer, Facebook Pixel of the Facebook social network is used in advanced data matching mode. Facebook Pixel is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

On the basis of his/her explicit consent, when a user clicks on an advertisement played on Facebook and placed by us, an addition is added to the URL of our linked page by Facebook Pixel. Then, after redirection, this URL parameter is inscribed in the user's browser via a cookie that our linked page sets itself. In addition, this cookie collects specific customer data, such as the e-mail address, which we collect on our website linked to the Facebook ad during transactions such as purchase transactions, account logins or registrations (advanced data matching). The cookie is then read by Facebook Pixel and allows the data, including specific customer data, to be forwarded to Facebook.

With the help of Facebook Pixel with advanced data matching, it is possible for Facebook, on the one hand, to precisely determine the visitors to our online offer as a target group for the display of advertisements (Facebook Ads). Accordingly, we use Facebook Pixel with advanced data matching to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (Custom Audiences). With the help of Facebook Pixel with advanced data matching, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a pestering effect. This allows us to further evaluate the effectiveness of the Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (conversion). Compared to the standard variant of Facebook Pixel, the advanced data matching feature helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All submitted data is stored and processed by Facebook, therefore a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy (https://www.facebook.com/about/privacy/) . The data may enable Facebook and its partners to place ads on and off Facebook.

These processing operations are carried out exclusively with the granting of explicit consent in accordance with Art. 6 para. 1 a of the GDPR.

Consent to the use of Facebook Pixel may only be given by users who are older than 16 years of age. If you are younger, we ask you to ask your legal guardians for permission.

The information generated by Facebook is usually transmitted to a Facebook server and stored there. This may also involve transmission to the servers of Facebook Inc. in the USA. You can revoke your consent at any time with future effect. To exercise your right of revocation, remove the tick next to the setting for the "Facebook Pixel" in the "Cookie Consent Tool" embedded on the website.

9.6 The Trade Desk

On our website, we use the tracking and retargeting technology of The UK Trade Desk Ltd. 10th Floor, 1 Bartholomew Close London EC1A 7BL United Kingdom ("The Trade Desk"). This function is used to present interest-based advertisements to website visitors as part of The Trade Desk's advertising network. The website visitor's browser stores cookies, which are text files placed on your computer that allow the website visitor to be recognised when they visit websites that are part of The Trade Desk's advertising network. On these pages, the visitor may then be presented with advertisements that relate to content that the visitor has previously viewed on websites that use The Trade Desk's tracking as well as retargeting technology. According to The Trade Desk, it collects pseudonymous data during this process.

Further information on The Trade Desk's retargeting technology, The Trade Desk's privacy policy and opt-out options can be found at: https://www.thetradedesk.com/general/privacy

The legal basis for the data processing associated with this is Art. 6 para. 1 a) of the GDPR in conjunction with consent. This consent can be revoked at any time with future effect.

10) Web analysis services
10.1 Google (Universal) Analytics

On our website, we use Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), with your consent. Google (Universal) Analytics uses cookies, which are text files placed on your device, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will generally be transmitted to one of Google's servers. This may also result in a transmission to the servers of Google LLC in the USA.

This website exclusively uses Google (Universal) Analytics with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes direct personal references. As a result of the extension, your IP address is first shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google LLC server in the USA and shortened there. Google will use such data on our behalf to interpret your use of the website, to compile reports on website activities and to provide us with other services connected with the website and internet use. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.

All processing described above, in particular the setting of Google Analytics cookies for reading out information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a of the GDPR. Without this consent, Google Analytics will not be used during your visit to our website.

You can revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service in the Cookie Consent Tool provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google refers to standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en-GB&gl=de.

10.2 Google Analytics 4

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), to analyse the website activity.

While using Google Analytics 4, it is standard practice to employ the so-called "cookies". Cookies are text files that are stored on your terminal device and facilitate an analysis of your website activity. The information collected by cookies about your website activity (including the IP address transmitted by your terminal device, truncated by the last digits, as explained below) is usually transmitted to a Google server and stored and processed there. This may also lead to the transmission of information to the servers of Google LLC, which is based in the USA, and to further processing of the information there.

When using Google Analytics 4, the IP address transmitted by your terminal device during your browsing of the website is always collected and processed automatically and by default only in an anonymised manner, so that the information collected cannot be directly traced back to a person. This automatic anonymisation is carried out by Google by truncating the IP address transmitted by your terminal device to the last few digits within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA).

Google uses this and other information on our behalf to evaluate your website activity, compile reports on your website activity and usage patterns, and to provide other services relating to your website activity and internet usage. In this context, the IP address transmitted and truncated by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be stored for 2 months and then deleted.

Google Analytics 4 also facilitates the creation of statistics containing statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the aid of information from third-party providers via a special function known as "demographic characteristics". As a result, it is possible to determine and distinguish between groups of website users in order to optimise the targeting of marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus also not to an individual. All data collected via the "demographic characteristics" function is kept for two months and then deleted.

All of the processing described above, namely the setting of Google Analytics cookies for the storage and reading of information on the end device used by you for the website activity, will only take place if you have given us your express consent to do so pursuant to Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR). Without your consent, Google Analytics 4 will not be used during your website activity. You can revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service in the Cookie Consent Tool provided on the website.

In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (the so-called "cross-device tracking"). If you have activated "personalised ads" in your Google account settings and linked your internet-enabled end devices to your Google account, Google can analyse usage patterns across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR). Here, the logins and device types of all website users who were logged into a Google account and carried out a conversion are taken into account. The data reveals, among other things, the device on which you clicked on an ad for the first time and the device on which the relevant conversion took place. We do not receive any personal data from Google, but merely statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalised ads" function in the settings of your Google account and thus turning off the cross-device analysis in connection with Google Signals.

If you wish to do so, please follow the instructions provided on this page:
https://support.google.com/ads/answer/2662922?hl=de

For more information on Google Signals, please visit the following link:
https://support.google.com/analytics/answer/7532985?hl=de

We have concluded an order processing agreement with Google for our use of Google Analytics 4, which obligates Google to protect the data of our website users and not to pass it on to third parties.

So as to ensure the adherence to the European level of data protection, also in the event of any transfer of data from the EU or EEA to the USA and any potential further processing there, Google invokes the standard contractual clauses of the European Commission, all of which we have contractually agreed with Google.

For additional legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, please visit the following link: https://policies.google.com/privacy?hl=de&gl=de

For details on the processing triggered by Google Analytics 4 and Google's handling of data from websites, please click here: https://policies.google.com/technologies/partner-sites

10.3 Matomo (formerly Piwik)

On our website, data is collected and stored with your consent using the web analysis service software Matomo (www.matomo.org), a service of the provider InnoCraft Ltd., 7 Waterloo Quay, PO625, 6140 Wellington, New Zealand, ("Matomo") on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 para. 1 lit. f of the GDPR. Pseudonymised user profiles can be created and evaluated from this data for the same purpose. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor's Internet browser. The cookies enable, among other things, the recognition of the Internet browser. The data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.

If you do not agree with the storage and evaluation of this data from your visit, then you can object to the storage and use for the future at any time by mouse click. In this case, an opt-out cookie will be stored in your browser, with the result that Matomo will not collect any session data. Please note that if you delete your cookies completely, the opt-out cookie will also be deleted and you may have to reactivate it.

11) Tools and other services

11.1 - Consent tool

This website uses the consentmanager cookie consent tool to obtain effective user consent for cookies and cookie-based applications that require consent.

By integrating a corresponding JavaScript code, users are shown a banner when they visit the page in which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. In doing so, the tool blocks the setting of all cookies requiring consent until the respective user grants the corresponding consent by setting a check mark. This ensures that such cookies are only set on the respective user's device if consent has been granted.

This data processing is carried out in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Further legal basis for the described data processing is furthermore Art. 6 para. 1 lit. c of the GDPR. As the data controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

11.2 Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visually display geographical information. By using this service, you will be shown various locations, and it will be easier for you to find them.

Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there when you visit those sub-pages in which the Google Maps map is integrated; this information may also be transmitted to Google LLC servers in the USA. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to have your data associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and analysis are carried out in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://policies.google.com/terms?hl=en-GB&gl=de, and the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on Google's website (Google Privacy Policy): https://policies.google.com/privacy?hl=en-GB&gl=de

11.3 Use of Microsoft Clarity

We use the ‘Microsoft Clarity’ service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter ‘Microsoft Cla-rity’). Microsoft Clarity is a web analytics tool that provides insights into user behaviour on websites by tracking interactions such as clicks, scrolls and session replays.

Microsoft Clarity is a web analytics tool that helps us to better understand and improve the use of our website. The following data may be collected and processed when using Microsoft Clarity
Usage behaviour (e.g. clicks, scrolling behaviour), Technical data (e.g. browser type, operating system, screen resolution), Referrer URL (the pre-viously visited page), Pages visited and their order and IP address. How-ever, your IP address is anonymised before it is saved so that it cannot be traced back to you personally. Some of the data is personal data.

The data collected is used for the purpose of analysing website usage and optimising our offering, improving the user-friendliness of our website and analysing and rectifying errors.
Where legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the ‘Cookie Consent Tool’ provided on the website.

The data collected is transmitted to Microsoft Clarity and processed by Microsoft. Microsoft is a company based in the USA. There is an adequate level of data protection through the standard contractual clauses of the European Union. Microsoft Clarity uses cookies to enable website usage to be analysed. Coo-kies are small text files that are stored on your end device. You can prevent the storage of cookies by setting your browser software accordingly; how-ever, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

The data collected by Microsoft Clarity is stored for a maximum period of 12 months and then automatically deleted. Of course, you can object to data processing at any time. If you have any questions about the use and processing of data, you can contact us at any time. You can find Microsoft's privacy policy here: https://privacy.microsoft.com/de-de/privacystatement

12) Rights of data subjects

12.1 The applicable data protection law grants you comprehensive data subject rights with respect to the data controller responsible for processing your personal data (rights of access and intervention) about which we inform you below:

- Right to information in accordance with Art. 15 of the GDPR: In particular, you have a right of access concerning your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or is disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of any right to rectification, erasure, restriction of processing, objection to processing, complaining to a supervisory authority, the source of your data if it was not collected from you by us, the existence of any automated decision making including profiling and if necessary important information on the logic involved and the scope concerning you and the desired effects of such processing as well as your right to notification about which guarantees exist as per Art. 46 of the GDPR on transferring your data to third countries;

- Right to rectification in accordance with Art. 16 of the GDPR: You have a right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us;

- Right to erasure in accordance with Art. 17 of the GDPR: You have the right to demand erasure of your personal data subject to the provisions of Art. 17 para. 1 of the GDPR. However, this right shall not apply in particular if the processing is necessary to exercise the right to free expression of opinion and to information, to fulfil any legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- Right to restriction of processing in accordance with Art. 18 of the GDPR: You have the right to demand restriction of the processing of your personal data as long as the accuracy of our data disputed by you is reviewed, if you reject erasure of your data on account of unreliable data processing and instead demand restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims, after we no longer require such data once it has achieved its purpose or if you have submitted an objection for reasons pertaining to your specific situation, unless it is yet to be determined whether our legitimate reasons prevail;

- Right to information in accordance with Art. 19 of the GDPR: If you have asserted the right to rectification, erasure or restriction of processing to the data controller, this entity is obliged to inform all the recipients to whom the personal data concerning you has been disclosed of such rectification or erasure of data or restriction of processing, unless this proves to be impossible or is associated with disproportionate costs. You have the right to be informed of such recipients.

- Right to data portability in accordance with Art. 20 of the GDPR: You have the right to receive your personal data which you have made available to us in a structured, accessible and machine-readable format or to demand transmission to another data controller insofar as this is technically feasible;

- Right to revoke consent given in accordance with Art. 7 para. 3 of the GDPR: You have the right to withdraw your consent to the processing of data at any time with future effect. In the event of withdrawal, we will immediately delete the data concerned, unless further processing can be legally based on processing that does not require consent. The withdrawal of the consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal;

- Right to lodge a complaint in accordance with Art. 77 of the GDPR: If you are of the opinion that the processing of personal data concerning you is in breach of the GDPR, you have – regardless of any other administrative or legal remedy – the right to complain to a supervisory authority, particularly in the member state of your place of residence, your workplace or the place of the presumed infringement.

12.2 RIGHT TO OBJECT

IF AS PART OF THE BALANCING OF INTERESTS WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREVAILING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO SUBMIT AN OBJECTION TO SUCH PROCESSING WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION.

IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING GROUNDS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR THE PURPOSE OF DIRECT ADVERTISING.

13) Duration of storage of personal data

The duration of the storage of personal data is measured on the basis of the respective legal basis, the processing purpose and - if relevant - also on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent in accordance with Art. 6 para. 1 lit. a of the GDPR, this data is stored until the person concerned revokes his or her consent.

If there are statutory retention periods for data that is processed within the scope of legal obligations or similar obligations on the basis of Art. 6 para. 1 lit. b of the GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance of the contract or the initiation of the contract and/or there is no legitimate interest on When processing personal data on the basis of Art. 6 para. 1 lit. f of the GDPR, this data is stored until the data subject exercises his or her right to object in accordance with Art. 21 para. 1 of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is for the purpose of asserting, exercising or defending legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f of the GDPR, this data will be stored until the data subject exercises his or her right to object in accordance with Art. 21 para. 2 of the GDPR.

Unless stated otherwise in the other information in this statement about specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or processed.

Version: November 2024