Privacy Policy


Below, we inform you about the processing of your personal data in connection with your use of our online offering.


Controller

COM.Create GmbH

Körberheide 101
48157 Münster

Phone: +49 (0) 251 59 06 45 72
Email: hello@com-create.com


Contact person

If you have any questions about data protection, please contact us using the contact details provided above.


Retention period

We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have asked for your consent and you have given it, we delete your personal data when you withdraw your consent and no other legal basis for processing applies.

We delete your personal data if you object to the processing and there are no overriding legitimate grounds for the processing, or if you object to processing for direct marketing purposes or to profiling related to such direct marketing.

If deletion is not possible because processing is still required to comply with a legal obligation (statutory retention periods, etc.) to which we are subject, or for the establishment, exercise, or defense of legal claims, we will restrict the processing of your personal data.

Further information on the retention period can also be found in the following sections.


Your rights

You have the following rights regarding your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw your consent to the processing of your personal data at any time if you have given us such consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.


Provision of your personal data

The provision of your personal data is generally neither required by law nor by contract and is not necessary for the conclusion of a contract. You are generally not obliged to provide your personal data. If this should nevertheless be the case, we will inform you separately when collecting your personal data (for example, by marking mandatory fields in input forms).

Failure to provide your personal data will regularly mean that we cannot process your personal data for one of the purposes described below and that you cannot use an offer associated with the respective processing (example: without providing your email address, you will not receive our newsletter).


Web hosting

We use external services for web hosting. These services may have access to personal data that is processed in the context of using our online offering. Further information about the services used, the scope of data processing, and the technologies and procedures used with each service can be found in the additional information about the services we use at the end of this section and under the links provided there.

Google Cloud
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/
Further information & privacy: https://policies.google.com/?hl=en and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Webflow
Provider: Webflow, Inc., United States of America.
Website: https://webflow.com/hosting
Further information & privacy: https://webflow.com/legal/privacy and https://webflow.com/legal/eu-privacy-policy
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Web server log files

We process your personal data to display our online offering to you and to ensure the stability and security of our online offering. In doing so, information (for example, requested item, accessed URL, operating system, date and time of the request, browser type and version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT), and/or HTTP status code) is stored in so-called log files (access logs, error logs, etc.).

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the proper display of our online offering and the assurance of the stability and security of our online offering.


Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this by the “https://” string and the lock symbol in your browser’s address bar.


Contacting us

If you contact us, we process your personal data in order to handle your inquiry.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is handling your inquiry. If processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract, the legal basis for processing is also Art. 6(1)(b) GDPR.

We use external services to provide and maintain our email inboxes. These services may have access to personal data processed in connection with contacting us. Further information about the services used, the scope of data processing, and the technologies and procedures used with each service can be found below in the additional information about the services we use and under the links provided there:

Gmail
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.com/intl/en/gmail/about/
Further information & privacy: https://policies.google.com/?hl=en and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

To support the handling of your inquiry, we use support systems (appointment booking systems, live chats, ticket systems/ helpdesks, etc.) and employ external services for this purpose. These services may have access to personal data processed when you contact us via a support system. Further information about the services used, the scope of data processing, and the technologies and procedures used with each service can be found below in the additional information about the services we use and under the links provided there:

Calendly
Provider: Calendly, LLC, United States of America.
Website: https://calendly.com/
Further information & privacy: https://calendly.com/privacy, https://calendly.com/security and https://help.calendly.com/hc/en-us/articles/360007032633

Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Cookies & similar technologies

Cookies are used. Cookies are text information stored on your device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are deleted only after a certain period.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following statements on cookies therefore also apply to similar technologies. The same applies to further processing activities related to cookies and similar technologies (analytics & marketing, etc.). This applies in particular to any consent you may have given for the use of cookies. Such consent also extends to other technologies and to further processing activities related to cookies and similar technologies.

Cookies can be used to enable the use of certain functions. Cookies can also be used to measure the reach of our online offering, to design it to meet needs and interests, and thereby to optimize our online offering and our marketing. Cookies may be set by us and by external services.

We use a consent tool to manage the cookies used and the related consents. Details of the cookies used (purpose, storage period, any external service, etc.) and the consent tool can be found in the following sections and in the consent tool we use.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies used and the related consents. Depending on the purpose of processing, our legitimate interests can be found in the following sections.

You can prevent the storage of cookies by adjusting your browser settings. Below you will find links for common browsers with further information on managing cookie settings:
- Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
- Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
- Internet Explorer / Edge: https://support.microsoft.com/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari: https://support.apple.com/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/latest/web-preferences/#cookies
- Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

Further opt-out options can be found at the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools and https://optout.aboutads.info/?c=2&lang=EN.

If you prevent the storage of cookies, this may impair the proper functioning of our online offering. If you delete all cookies, the above settings will also be lost and must be set again.

Furthermore, you can enable your browser’s “Do Not Track” function to indicate that you do not wish to be tracked. Below are links for common browsers with further information on the “Do Not Track” setting:
- Firefox: https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature
- Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
- Internet Explorer / Edge: https://support.microsoft.com/windows/use-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
- Opera: https://help.opera.com/latest/security-and-privacy/
- Safari has not supported the “Do Not Track” function since February 2019. In Safari, you can prevent cross-site tracking via: https://support.apple.com/guide/safari/sfri40732/12.0/mac
- Yandex: https://yandex.com/support/browser/personal-data-protection/ytp.html

You can also withdraw or manage your consents regarding the cookies used in the consent tool we use.


Analytics & Marketing

We process your personal data to measure the reach of our online offering, to tailor it to needs and interests, and thereby to optimize our online offering and our marketing.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the optimization of our online offering and our marketing.

We use external services for analytics and marketing. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures used for each service, as well as whether profiling takes place when using the respective services and, where applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the additional information on the services we use at the end of this section and under the links provided there.

Further information on cookies & similar technologies can be found above.

Google Ads Conversion Tracking
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/1722022?hl=de
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Google Ads Enhanced Conversions
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/9888656?hl=de
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Google Analytics
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Further information & privacy: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Google Analytics 4
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/analytics/answer/10089681?hl=de
Further information & privacy: https://support.google.com/analytics/answer/6004245?hl=de, https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Google Remarketing
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/2453998
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Google Tag Manager
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/tagmanager/answer/6102821?hl=de
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

LinkedIn Conversion Tracking
Provider: If you are in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are outside the EU, the EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/conversion-tracking
Further information & privacy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

LinkedIn Insight Tag
Provider: If you are in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are outside the EU, the EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://business.linkedin.com/de-de/marketing-solutions/insight-tag
Further information & privacy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Microsoft Advertising
Provider: Microsoft Ireland Operations Limited, Ireland. Microsoft Ireland Operations Limited is a subsidiary of Microsoft Corporation, United States of America.
Website: https://about.ads.microsoft.com/de-de
Further information & privacy: https://privacy.microsoft.com/de-de/ and https://www.microsoft.com/de-de/trust-center/privacy
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Social Media Presences

We maintain social media presences with external services in order to communicate with users there and thereby to optimize our online offering and our marketing.

This privacy policy also applies to the following social media presences:
- Facebook: https://www.facebook.com/COMCreate-192849388936095
- Instagram: https://www.instagram.com/com.create/
- LinkedIn: https://www.linkedin.com/company/com-create
- YouTube: https://www.youtube.com/channel/UCUh2BxgkLkuVAqwurKjQVUQ
- WhatsApp Business

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the optimization of our online offering and our marketing.

When using external services, profiling (for advertising purposes, personalized information, etc.) may also occur. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures used for each service, as well as whether profiling takes place when using the respective services and, where applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the additional information on the services we use at the end of this section and under the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com
The provider and we are joint controllers. We have concluded a corresponding agreement with the provider. You can view this agreement at https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendum.
Further information & privacy: https://developers.facebook.com/docs/plugins/, https://www.facebook.com/legal/terms/information_about_page_insights_data, https://www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.instagram.com
Further information & privacy: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

LinkedIn
Provider: If you are in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are outside the EU, the EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information & privacy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

WhatsApp
Provider: If users live in a country in the European Economic Area (which also includes the European Union) and any other included country or territory (together referred to as the European Region), the service is provided by WhatsApp Ireland Limited, Ireland. If users live in any country outside the European Region, the service is provided by WhatsApp LLC, United States of America.
Website: https://www.whatsapp.com/
Further information & privacy: https://www.whatsapp.com/privacy, https://www.whatsapp.com/legal/ and https://www.whatsapp.com/legal/privacy-policy-eea
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.youtube.com
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Social Media Content/Plugins

We use social media content/plugins from external services to display content and functions of the external services to you and thereby to optimize our online offering and our marketing.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the optimization of our online offering and our marketing.

When using external services, profiling (for advertising purposes, personalized information, etc.) may also occur. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures used for each service, as well as whether profiling takes place when using the respective services and, where applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the additional information on the services we use at the end of this section and under the links provided there.

LinkedIn
Provider: If you are in the EU, the European Economic Area (EEA), or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are outside the EU, the EEA, or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information & privacy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Safeguard: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Fonts & Scripts

We use fonts and scripts from external services to display our online offering to you and to ensure that fonts and scripts are always up to date.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the proper display of our online offering and the provision of up-to-date fonts and scripts.

When using external services, profiling (for advertising purposes, personalized information, etc.) may also occur. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures used for each service, as well as whether profiling takes place when using the respective services and, where applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the additional information on the services we use at the end of this section and under the links provided there.

Google Fonts
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://fonts.google.com/
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Maps

We use maps from external services to show you our location and to enable the use of additional functions of these external services in connection with the maps.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is to facilitate the use of maps.

When using external services, profiling (for advertising purposes, personalized information, etc.) may also occur. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures used for each service, as well as whether profiling takes place when using the respective services and, where applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the additional information on the services we use at the end of this section and under the links provided there.

Google Maps
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.de/maps
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Review Platforms

We use review platforms and process your personal data to have our services evaluated and thus to optimize our online offering and our marketing.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the optimization of our online offering and our marketing.

If we or the review platforms we use have asked for your consent and you have given it, we or the review platforms we use process your personal data to remind you to submit a review. The legal basis for processing is Art. 6(1)(a) GDPR.

Further information about the review platforms we use, the scope of data processing, and the technologies and procedures used when using the respective review platforms can be found in the additional information about the review platforms we use at the end of this section and under the links provided there.

Google Customer Reviews
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/merchants/answer/7124326?hl=de
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Applications

If you apply to us, we process your personal data in order to conduct the application process and make a decision regarding the establishment of an employment relationship. After the application process has ended, we restrict the processing of your personal data and delete or destroy it no later than 6 months after you receive the rejection, or return your application documents to you and delete or destroy any copies, unless you have consented to our continued use of your personal data.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the proper conduct of the application process and, where applicable, the defense against claims based on the rejection of an application. If the processing is necessary for the decision on the establishment of an employment relationship, the legal basis for processing is also Section 26(1) sentence 1 BDSG.


CAPTCHAs

We use CAPTCHAs to protect our online offering against abusive, machine-based and/or automated entries (for example in forms) and to prevent any misuse.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the protection of our online offering and the prevention of misuse.

We use external services to provide CAPTCHAs. This may also involve profiling. Profiling may also take place across services and devices. Further information on the services used, the scope of data processing, and the technologies and procedures used for each service, as well as whether profiling takes place when using the respective services and, where applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the additional information on the services we use at the end of this section and under the links provided there.

Google reCAPTCHA
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://cloud.google.com/security/products/recaptcha
Further information & privacy: https://policies.google.com/?hl=de and https://business.safety.google/privacy/
The transfer of personal data to third countries depends on the respective Google service and is carried out under various EU Standard Contractual Clauses, where offered by Google. Further information on this and Google’s responsibility can be found here: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there. The provider participates in the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision of the European Commission, ensures an adequate level of data protection.


Comments

If you leave comments via the functions provided (on blog posts, products, etc.), we process your personal data to be able to display your comments and to prevent any misuse.

If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest is the proper display of your comments and the prevention of misuse.

 

This privacy policy was created with the configurator of getLaw.de.

Kontakt