Data protection

Name and contact details of the controller
The controller within the meaning of the GDPR and other national data protection laws as well as other data protection regulations is
Limbach Group SE
Im Breitspiel 15
69126 Heidelberg
Phone: +49 (0)6221 18530
Fax: +49 (0) 6221 1853374
E-mail: datenschutz@limbachgruppe.com

Contact details of the data protection officer
Jan Alkemade
Alkemade IT-Security e.K.
Egerländer Str. 9
61239 Ober-Mörlen
Phone: +49 6002 939593
E-mail: jan.alkemade@alkemade-it.de

1 Scope of the processing of personal data

We process personal data of online training platform visitors only to the extent necessary to provide a functional website and our content and services.

2 Legal basis for the processing of personal data

In accordance with Art. 13 GDPR, we inform you of the legal basis for the processing of your personal data. If the legal basis is not stated in the privacy policy, the following applies:

Insofar as the processing of personal data is based on the consent of the data subject, Art. 6 para. 1 lit. a GDPR is the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR is the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR is the legal basis.

If the processing of personal data is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for the processing is Article 6(1)(f) GDPR.

3 Data erasure and storage duration

The personal data of the data subject will be erased or their processing restricted as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The processing or deletion of the data will also be restricted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

1. log files

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in log files. The following information is collected without any action on your part and stored until it is automatically deleted

IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
the website from which access was made (referrer URL)
browser used and, if applicable, the operating system of your computer,
Name of your access provider,
The amount of data retrieved.

The aforementioned data is processed by us for the following purposes

Ensuring a smooth connection setup of the online offer,
Ensuring convenient use of the online training platform,
General optimization of the online training platform,
Evaluation of system security and stability,
ensuring the security of our information technology systems and for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR (legitimate interest of the controller). Our legitimate interest arises from the data collection purposes listed above. The temporary storage of the IP address by the system is necessary to technically enable access to the online training platform. For this purpose, the IP address of the user (visitor) must remain stored for the duration of the session. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. The data is not analyzed for marketing purposes in this context.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the online training platform website, this is the case when the respective session (i.e. the visit to the website) has ended.
If the data is stored in log files, this is the case after thirty days at the latest. Data may be stored for longer than this (e.g. for security reasons such as investigating misuse or fraud and for evidence purposes). In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing end device (client).

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

2. cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device, they do not contain viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you deactivate cookies completely, you may not be able to use all the functions of our website.

Objection option: If you do not wish to use cookies or wish to delete existing cookies, you can deactivate and remove them via your Internet browser. Further information on deleting or disabling cookies can be found in the help texts for your browser or on the Internet, for example by searching for "deactivate cookies" or "delete cookies".

Use of cookies

a. Description and scope of data processing

Cookies are text files that are stored in the internet browser or by the internet browser on the user's end device. When a user accesses a website, a cookie can be stored in the browser environment or on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies

Language settings,
log-in information.

b. Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website may not be available without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
We require cookies for the following applications

Log-in information of the user, if applicable
to analyze the surfing behavior of the user

The user data collected by technically necessary cookies is not used to create user profiles.

c. Legal basis for data processing

The legal basis for the use of cookies, which are absolutely necessary for the operation of this website, is a legitimate interest on our part pursuant to Art. 6 para. 1 lit. f GDPR. For all other cookie types, we require your consent in accordance with Art. 6 para. 1 lit. a GDPR, which we obtain from you at the relevant points. Further information on data processing requiring consent can be found in the relevant sections of this privacy policy.

d. Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted by you at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

3. encryption / security information

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in the browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties. We also use suitable technical and organizational security measures to protect your data against manipulation, loss or unauthorized access by third parties. Our security measures are continuously improved in accordance with the state of the art.

E-mails sent over the Internet without additional security measures (encryption) are generally considered insecure. If you communicate with us by e-mail without additional confidentiality protection, we assume that you are aware of this technical circumstance and allow us to reply to you by simple e-mail. However, this does not apply to communication by e-mail, insofar as this concerns special categories of personal data within the meaning of Art. 9 para. 1 GDPR.

Contact form and email communication

There are contact forms on our website that can be used to contact us electronically. At the time the message is sent, the following data is stored in addition to the information entered

The IP address of the user,
date and time.

It is also possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will not be passed on to third parties in this context. Your data will only be used to process the conversation.

a. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. If the contact is aimed at the conclusion of a contract or the booking of a training event, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

b. Purpose of the data processing

The processing of the personal data from the respective input mask serves us solely to process the establishment of contact and, when creating the user account, to process your training booking. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

c. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

d. Possibility of objection and removal

If the legal basis is based on your consent, you can revoke this consent at any time with effect for the future. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

A declaration of revocation or the amendment, correction and updating of such data can be made in writing, by fax or by e-mail to the Limbach Group SE at datenschutz@limbachgruppe.com.

In this case, all personal data stored in the course of making contact will be deleted in accordance with the legal requirements.

Customer database / CRM system

As a so-called processor for our subsidiaries/MVZ companies, we maintain a Group-wide customer database and have concluded contracts with our subsidiaries/MVZ companies in accordance with Art. 28 GDPR. The customer database is used by our subsidiaries/MVZ companies to implement customer relationship management (hereinafter: CRM) in order to systematically manage relationships and interactions with existing or potential customers. We would also like to link your data provided via the online training platform with our CRM system for use for the following sales purposes, provided that you consent to this in accordance with Art. 6 para. 1 lit. a GDPR at the appropriate point during your user registration:

Registration data from the platform is used to identify or, if necessary, transfer the online training platform user in the CRM;
User behaviour on the platform (registered for which event, participated in which event, use/download of training materials and videos) will be mapped in the CRM in order to support the invitation process and the implementation of training courses by the sales force of our Group subsidiaries/MVZ laboratory companies and to optimize them for you;
Employees of the training providers use the aforementioned information in on-site customer meetings with training participants in order to remind them to book an event once they have been invited or to address the topic of the event in a customer meeting after participation, and thus to ask for suggestions and/or criticism.

If you contact us via the online training platform and/or book a training event via this platform, you can give us your consent for the aforementioned CRM data processing before submitting the corresponding process by ticking the corresponding "consent box". The same applies if you subscribe to our newsletter or make use of our download offer.

We process your data in our customer database for as long as you are in regular contact with us, for example because you subscribe to a newsletter or book an event or, if applicable, use the laboratory services of one of our subsidiaries. If there is no longer an active customer relationship, we will store your personal data for a period of 3 years since the last customer contact. Irrespective of this, we will end the linking of your data provided on the online training platform and the CRM evaluation in connection with this as soon as you have revoked your consent and there are no statutory retention obligations to prevent deletion.

1. web analysis

a. eTracker

We use the services of etracker GmbH, based in Hamburg, Germany(www.etracker.com), to analyze usage data. We do not use cookies for web analysis by default. If we use analysis and optimization cookies, we will obtain your explicit consent separately in advance (cookie banner). If this is the case and you give your consent, cookies are used to enable a statistical analysis of the reach of this website, to measure the success of our online marketing measures and test procedures, e.g. to test and optimize different versions of our online offering or its components. Cookies are small text files that are stored by the Internet browser on the user's end device. etracker cookies do not contain any information that enables a user to be identified.

The data generated with etracker is processed and stored by etracker on behalf of the provider of this website exclusively in Germany and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited and certified in this respect and has been awarded the ePrivacyseal data protection seal of approval.

Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit. f (safeguarding our legitimate interests, taking due account of the interests worthy of protection and the fundamental rights and freedoms of visitors to our website) of the General Data Protection Regulation (GDPR). Our concern in this sense is the optimization of our online offer and our website. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymized or pseudonymized as soon as possible. No other use, merging with other data or disclosure to third parties takes place.

You can object to the data processing described above at any time by clicking on the slider. The objection has no negative consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.

Further information on data protection at etracker can be found here.

2. other services

a. OpenStreetMap and Geoapify

Our website uses OpenStreetMap. You can find more information about OpenStreetMap at https://www.openstreetmap.de

We also use the services of KEPTAGO LTD, N. Nikolaidi & T. Kolokotroni, Onisiforou Center, 2nd floor, 8011 Paphos, Cyprus ("Geoapify") on our website to provide interactive map and location functions.

When you use these functions, your browser transmits data to Geoapify. This includes in particular

IP address
Date and time of the request
Internet address (URL) called up and request parameters (e.g. coordinates or addresses)
Location data, if applicable, provided you actively release this data
technical information required for delivery (e.g. browser type, operating system)

The data is processed for the purpose of displaying geographical information in a user-friendly manner. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interest). If location data is processed, this is done exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can revoke at any time with effect for the future.

Geoapify processes data predominantly within the European Union and also uses external technical service providers (e.g. content delivery networks) to deliver its services. In this context, data may also be transferred to countries outside the EU in individual cases. In these cases, Geoapify ensures an adequate level of data protection through appropriate guarantees within the meaning of Art. 44 et seq. GDPR.

Log data that is generated during use is only stored for the technically necessary period and then deleted.

Detailed information can be found in Geoapify's privacy policy:
https://www.geoapify.com/privacy-policy

b. Social media presence

1. links to social media

On our website you will find links to our presences on LinkedIn, Facebook and Instagram. Only by clicking on the respective link will you leave our website and reach the pages of the respective providers. Please note that the data protection provisions of the respective platform apply from this point onwards.

2. social media presences

We maintain social media presences in order to present our services and communicate with you as a customer or interested party.

User data is also processed outside the European Union, particularly in the USA. This may result in risks for users, for example by making it more difficult to enforce users' rights. We would also like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

The networks and platforms will generally process user data for market research and advertising purposes and create user profiles based on user behavior and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that are intended to correspond to the presumed interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Data can also be stored in the user profiles independently of the devices used by the users (especially if the users are registered and logged in to the respective platforms).

The legal basis for the processing of users' personal data is our legitimate interest in an effective company presentation and modern communication with users in accordance with Art. 6 para. 1 lit. f GDPR. If users are asked by the respective platform providers to consent to data processing (i.e. to give their consent, e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a GDPR.

With regard to joint data processing, there are agreements with the respective operators of the social networks on joint responsibility in accordance with Art. 26 GDPR. These are provided by the platform providers and automatically apply to the use of our social media pages:

LinkedIn: Page Insights Joint Controller Addendum
Meta (for Facebook & Instagram): Page Insights Addendum

Please also note the respective data protection guidelines and notices of the providers named below, which can be accessed via the link below, as well as the data processing and opt-out options available there:

In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly.

1. information, correction, restriction, deletion

You can request confirmation from us as the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you can request the following information from the controller

the purposes for which the personal data are processed
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed
the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period
the existence of the right to rectification or erasure of personal data concerning you, the right to restriction of processing by the controller or the right to object to such processing
the existence of the right to lodge a complaint with a supervisory authority
all available information about the origin of the data if the personal data is not collected from the data subject
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you are transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

You have the right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.

You may request the restriction of the processing of personal data concerning you under the following conditions

if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data,
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead,
the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
if you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

Right to erasure

a. Obligation to erase

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies

the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
you withdraw your consent on which the processing was based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and where there is no other legal ground for the processing
you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR
the personal data concerning you have been processed unlawfully
the deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject
the personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

b. Information to third parties

Where the controller has made the personal data concerning you public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c. Exceptions

The right to erasure does not apply if the processing is necessary

to exercise the right to freedom of expression and information
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
for the establishment, exercise or defense of legal claims.

2. information, data portability, right to object, withdrawal of consent

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed about these recipients.

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons may not be impaired by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures that use technical specifications.

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

3. automated decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or performance of, a contract between you and the controller, is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
Where the decision is not based on legal provisions, the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

4. right of appeal to the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR or another legal basis for the protection of personal data.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
The supervisory authority responsible for data protection for the controller is
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Prof. Dr. Tobias Keber
Lautenschlagerstraße 20
70173 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de/

If we disclose personal data to other persons and companies (processors or third parties) as part of the processing of personal data, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers in accordance with Art. 6 para. 1 lit. b GDPR is required to fulfill the contract with you), you have consented to this, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of an order processing contract, this is done on the basis of Art. 28 GDPR.

1. integration of service providers

We use within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DS-GVO) content or service offers from third-party providers in order to integrate their content and services, such as videos or interactive maps (hereinafter uniformly referred to as "content").

This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.

2. web hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offering.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of an order processing contract).

3. data protection websites of third parties

This website may contain hyperlinks to third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot assume any responsibility or guarantee for third-party content or data protection conditions. Please check the applicable data protection conditions before you transmit personal data to these websites. The operators of linked websites are solely responsible for their content. When the link was created, there was no indication that the content of the page to be accessed did not comply with the statutory provisions or was contrary to public decency. We request that you notify us immediately if a third-party site to which we provide a hyperlink does not comply or no longer complies with legal provisions or morality. The license and terms of use of the respective operator of the website apply.

1. objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

2. change to our data protection regulations

We change our security and data protection measures as required by technical developments or legal changes and adapt the data protection declaration accordingly. Please therefore refer to the latest version.

Status of the privacy policy: May 21, 2026