3.7 Analytics and Tracking Tools 

 

3.7.1 Google Analytics We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to recognize users and analyze their behavior on the website. These cookies are set exclusively with prior consent, which can be revoked at any time via our cookie consent tool. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided that the consent covers the storage of or access to information on the user’s device. The data collected by Google Analytics is generally transmitted to Google servers in the United States and stored there. Since July 10, 2023, there has been an adequacy decision by the European Commission for the United States, and Google LLC is certified under the EU-US Data Privacy Framework. Since Google servers are located worldwide and data transfer to third countries (e.g., Singapore) is possible, the Standard Contractual Clauses (SCCs) of the EU Commission are applied. Additionally, IP anonymization is used, whereby IP addresses within the EU and the European Economic Area (EEA) are truncated, thereby preventing the direct identification of an individual. Through the Google Ads Data Processing Terms, Google commits to complying with data protection regulations and provides analytics on website usage. These terms apply to companies subject to the GDPR or comparable data protection laws (e.g., the California Consumer Privacy Act, CCPA). Users can prevent data collection by using a browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de The retention period for the collected data depends on the individual settings in Google Analytics. The maximum lifespan of a cookie is two years. Further information on data processing by Google: https://support.google.com/analytics/answer/6004245?hl=de Contact for further questions: support-deutschland@google.com 

 

3.7. 2 Google Consent Mode We use Google Consent Mode to control Google services based on the user’s consent. Depending on the consent granted, either all functions of these services are enabled or only limited data processing takes place. Even if consent is denied, anonymized data processing may occur via Consent Mode. We use Advanced Consent Mode, which enables a more precise analysis of our marketing measures, provided the user has consented to the use of cookies pursuant to Art. 6(1)(a) GDPR. Additionally, processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in the targeted control and optimization of Google services requiring consent. Further information on Google Consent Mode: https:/ /support.google.com/analytics/answer/9976101

 

3.7.3 Google Maps We use Google Maps, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When Google Maps is accessed, the user’s IP address is collected and typically stored on servers in the United States.

This occurs regardless of whether a map is actively used or not. Google may use Google Fonts for a consistent display, which are loaded from the user’s browser cache. Google Maps sets cookies, but these are only stored with explicit consent. This consent may be revoked at any time. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25( 1 TDDDG, provided that the consent relates to access to end devices or the storage of cookies. The Standard Contractual Clauses (SCC) of the EU Commission apply to data transfers to the United States. Further information: https://privacy.google.com/businesses/gdprcontrollerterms/ https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ https://policies.google.com/privacy?hl=de

 

3.7.4 YouTube We embed YouTube videos on our website. YouTube is a platform for hosting and playing videos and is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a video is played, a connection is established with YouTube’s servers. In doing so, YouTube may set cookies to store user preferences and display personalized advertising. The information collected is also used for video statistics, user-friendliness, and fraud prevention. The legal basis for this data processing is Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided that consent covers the storage of information or access to end devices. Consent may be revoked at any time. Further information: https://policies.google.com/privacy?hl=de 

 

3.7.5 Google Conversion Tracking Our website uses Google Conversion Tracking, an analytics tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool measures the effectiveness of advertisements. Cookies are set to determine how many users perform specific actions on the website. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided that access to end devices or the storage of cookies is involved. Consent may be revoked at any time. Data is deleted as soon as it is no longer required for analysis purposes. Further information: https://policies.google.com/privacy?hl=de

 

3.7.6 Google Ads Remarketing We use Google Ads Remarketing on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to assign visitors to our website to a specific target group and display personalized ads to them based on this.

This is done using cookies, which are only set with your explicit consent. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Further information: https://www.google.com/settings/ads/onweb/ https://policies.google.com/technologies/ads?hl=de

 

3.7.7 Google Tag Manager We use Google Tag Manager, a management tool for various tracking services, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager itself does not set cookies and does not process data for analysis. It serves exclusively to manage and implement other tools that are controlled through it. However, the user’s IP address may be collected and, under certain circumstances, forwarded to Google servers in the U.S. Processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in efficiently managing various tracking services. Further information: https://policies.google.com/privacy?hl=de

 

3.7.8 Google Ads On our website, we use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service enables us to place targeted ads in Google Search or the Google Display network. Conversion tracking is used to track whether users perform a specific action on the website after clicking on an advertisement. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Since data may be transferred to the United States, the Standard Contractual Clauses (SCC) of the European Commission apply. Further information: https://privacy.google.com/businesses/controllerterms/mccs/ 

3.7.9 Google AdSense Our website uses Google AdSense, an advertising integration service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For non-personalized advertising, only context-related information (e.g., page content or location) is used. Google AdSense sets cookies that serve to prevent fraud and abuse. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Since data may be transferred to the United States, the Standard Contractual Clauses (SCC) of the European Commission apply. Further information: https://privacy.google.com/businesses/controllerterms/mccs/ https://adssettings.google.com/authenticated https://policies.google.com/technologies/ads

 

3.7.10 Google DoubleClick Our website uses Google DoubleClick, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google DoubleClick enables interest-based advertising to be displayed across the entire Google advertising network. Cookies are used to deliver ads based on users’ interests. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Further information: https://policies.google.com/technologies/ads https://adssettings.google.com/authenticated

 

3.7.11 Meta Pixel We use the Meta Pixel on our website, a tracking tool provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This tool allows us to track user behavior after a click on a Facebook advertisement. The collected data is stored and processed by Meta, which enables a link to the Facebook user profile. Meta Pixel uses cookies for its own advertising purposes. The collected data may be transferred to the United States and other third countries. Since data transfer to the United States is possible, the Standard Contractual Clauses (SCC) of the European Commission apply. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. To the extent that personal data is collected by Meta Pixel and transferred to Meta Platforms Ireland Limited, this is done within the framework of joint controllership pursuant to Art. 26 GDPR. This joint controllership relates exclusively to the collection and transfer of data to Meta. A corresponding agreement on joint data processing is available at the following link: https:/ /www.facebook.com/legal/controller_addendum Responsibility for further data processing within Meta lies with Meta itself. This means that users must exercise their data subject rights directly with Meta. Further information: https://de-de.facebook.com/about/privacy/ https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen http://www.youronlinechoices.com/de/praferenzmanagement/ https://www.facebook.com/legal/EU_data_transfer_addendum https://de-de.facebook.com/help/566994660333381

 

3.7.12 Facebook Conversion API We use the Facebook Conversion API on our website, an analytics service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. This tool allows us to track website visitors’ interactions and transmit this data to Facebook. This enables us to optimize the performance of our advertising campaigns on Facebook.

The collected information may also be transferred to third countries, including the United States. In this context, the Standard Contractual Clauses (SCC) of the European Commission apply. Further information: https://www.facebook.com/ legal/EU_data_transfer_addendum https://de-de.facebook.com/help/566994660333381 Data processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. When personal data is collected on our website via the Meta Pixel and transmitted to Facebook, this is done on the basis of joint controllership pursuant to Art. 26 GDPR. This joint responsibility extends exclusively to the collection and transmission of the data. A corresponding agreement on joint processing exists: https://www.facebook.com/legal/controller_addendum We are responsible for providing privacy information and ensuring the legally compliant integration of this tool, while Facebook is responsible for data security within its platform. Data subjects’ rights regarding data stored by Facebook must be exercised directly with Facebook. Further details: https://de-de.facebook.com/about/privacy/ 

 

3.7.13 Facebook Custom Audiences Our website uses Facebook Custom Audiences, an analytics tool provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. If a website visitor gives their consent, personal data may be collected and transmitted to Facebook. This makes it possible to display targeted advertisements to specific user groups. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Since data may be transferred to the United States, the Standard Contractual Clauses (SCCs) of the European Commission apply. Further information: https://www.facebook.com/legal/terms/customaudience https://www.facebook.com/legal/terms/dataprocessing

 

3.7.14 LinkedIn Insight Tag On our website, we use the LinkedIn Insight Tag, a web analytics service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This tool enables us to gain insights into the behavior of our website visitors. If users are registered with LinkedIn, we can analyze information about their professional background to optimize targeted advertising campaigns. The Insight Tag also enables cross-device conversion tracking and retargeting. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided that consent covers the storage of cookies or access to the user’s device. Direct user identifiers are anonymized after seven days, while pseudonymized data is deleted within 180 days. Since data may be transferred to the United States, the Standard Contractual Clauses (SCC) of the European Commission apply.

Further information: https://www.linkedin.com/legal/l/dpa https://www.linkedin.com/legal/l/eu-sccs https://de.linkedin.com/legal/l/cookie-table

 

3.7.15 Pinterest Tag Our website uses the Pinterest Tag, a tracking service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. This tool allows us to track interactions on our website in order to display relevant ads to users within the Pinterest advertising network. The Pinterest Tag uses cookies to identify users and analyze their behavior. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as it concerns the storage of information or access to end devices. Data may be transferred to the United States or other third countries. In such cases, the Standard Contractual Clauses (SCC) of the European Commission apply. Further information: https://policy.pinterest.com/de/privacy-policy https://help.pinterest.com/de/business/article/track-conversions-with-pinterest-tag

 

3.7.16 Google AdMob Our website uses Google AdMob, a mobile advertising platform provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. AdMob enables the display of advertisements in mobile apps and supports various formats such as banner, video, and interstitial ads. Google may use the advertising ID of the device, cookies, or comparable technologies for personalized advertising. Processing is carried out in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Additionally, there is a legitimate interest pursuant to Art. 6(1)(f) GDPR, as we wish to generate revenue with our mobile app. Further information: https://policies.google.com/privacy?hl=de

 

 

3.7.18 TikTok Analytics Our website uses TikTok Analytics, a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. TikTok Analytics provides us with aggregated and anonymized statistical data to analyze the use of our TikTok business profile. The data collected includes, among other things, demographic information such as age, gender, location, device type, language settings, as well as interactions such as “likes,” comments, shared content, and video views. In addition, TikTok measures the reach and performance of our content, including external visits to our profile via other websites or apps. TikTok Analytics may set cookies. The processing of this data is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG,

insofar as the storage of information or access to end devices is concerned. Additionally, pursuant to Art. 6(1)(f) GDPR, there is a legitimate interest in the analysis and optimization of our online presence. Further information: https://www.tiktok.com/legal/page/eea/privacy-policy/de

 

July 3, 2019 TikTok Pixel Our website uses the TikTok Pixel, provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The TikTok Pixel allows us to track user behavior on our website and analyze it specifically for advertising purposes. In doing so, personal data such as IP address, user ID, pages visited, time spent on the site, and interactions with our website are processed. The collected data is used to analyze user behavior and optimize our marketing activities. Processing takes place only with the user’s consent pursuant to Art. 6(1)(a) GDPR. 1(a) of the GDPR. TikTok Pixel uses cookies to analyze and track user behavior, which can be revoked at any time. Data may be transferred to third countries, in particular the United States. In doing so, the Standard Contractual Clauses (SCCs) of the European Commission are used to ensure an adequate level of data protection. Further information on data processing: https://www.tiktok.com/legal/page/eea/privacy-policy/de

 

July 3, 2020 Google Search Console Our website uses Google Search Console, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Search Console helps us monitor and improve the indexing and visibility of our website in Google search results. Various performance data, such as click counts, access statistics, and technical errors, are processed in this context. The purpose of this use is to optimize search engine rankings (SEO) and to technically improve our website. This data is processed on the basis of Art. 6(1)(f) GDPR, as there is a legitimate interest in monitoring and improving website performance. Google Search Console does not set any cookies on our website. However, data may be transferred to the United States. The Standard Contractual Clauses (SCC) of the European Commission are used for this purpose. Further information: https://policies.google.com/privacy 

 

3.8 Social Media Plugins

 

3.8.1 Facebook Our website contains social media elements from Facebook, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. When this social media element is activated, the browser establishes a direct connection to the Facebook servers. In doing so, the user’s IP address is transmitted to Facebook. If the user has a Facebook account, the visit to our website can be linked to that account. Data processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the storage of or access to information on the end device is concerned. Consent may be revoked at any time.

If personal data is collected via Facebook plugins and transmitted to Meta, there is joint responsibility between us and Meta Platforms Ireland Limited pursuant to Art. 26 GDPR. This is limited to the collection and transmission of the data. A joint processing agreement is available at: https://www.facebook.com/legal/controller_addendum We are responsible for providing privacy information and ensuring the legally compliant integration of the plugin, while Facebook is responsible for the security of the stored data. Users may exercise their data subject rights directly with Facebook. When data is transferred to the U.S., the Standard Contractual Clauses (SCCs) of the European Commission apply. Further information: https://www.facebook.com/legal/EU_data_transfer_addendum https://de-de.facebook.com/help/ 566994660333381 https://www.facebook.com/policy.php https://de-de.facebook.com/privacy/explanation

 

3.8.2 Instagram Our website integrates Instagram elements provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. As soon as the social media element is activated, the website visitor’s browser establishes a direct connection to Instagram’s servers. In doing so, the user’s IP address is transmitted to Instagram. If an active Instagram user account exists, the platform can link the visit to this website with the user profile. As the website operator, we have no access to the transmitted data and receive no information about its content. The processing of the data is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the storage of or access to information on the end device is concerned. Consent may be revoked at any time. If personal data is collected by Instagram or Facebook and forwarded to Meta, there is joint responsibility between us and Meta Platforms Ireland Limited pursuant to Art. 26 GDPR. This responsibility is limited to the collection and transmission of the data. A corresponding agreement on joint data processing is available at: https://www.facebook.com/legal/controller_addendum The website operator provides the privacy information and ensures the secure integration of the tool. However, Meta is responsible for the security of the stored data. When data is transferred to the U.S., the Standard Contractual Clauses (SCC) of the EU Commission apply. Further information: https://www.facebook.com/legal/EU_data_transfer_addendum https://de-de.facebook.com/help/566994660333381 https://www.facebook.com/policy.php https://instagram.com/about/legal/privacy

 

3.8.3 LinkedIn Our website contains LinkedIn elements provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. When the social media element is activated, the website visitor’s browser establishes a direct connection to the LinkedIn servers, thereby transmitting the user’s IP address.

If the user is logged in to LinkedIn, LinkedIn can associate the visit to this website with the corresponding account. We, as the website operator have no influence over the scope of the data transmitted. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Since data may be transferred to the U.S., the Standard Contractual Clauses (SCCs) of the EU Commission apply. Further information: https://www.linkedin.com/ legal/privacy-policy 

 

3.8.4 Pinterest Our website uses Pinterest elements provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. When the social media element is activated, a direct connection to the Pinterest servers in the U.S. is established. In the process, the IP address, browser information, the date and time of the request, and cookies are transmitted to Pinterest. If a user has a Pinterest account, the visit to this website may be linked to that account. As the website operator, we have no access to the transmitted data. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Further information: https://policy.pinterest.com/de/privacy-policy

 

3.8.5 TikTok Our website contains TikTok elements provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. As soon as the social media element is activated, the browser establishes a direct connection to the TikTok servers. In doing so, the user’s IP address is transmitted to TikTok. If a TikTok account exists, TikTok may link the visit to this website with the user profile. As the website operator, we have no access to the transmitted data. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. When data is transferred to the U.S., the Standard Contractual Clauses (SCC) of the European Commission are used. Further information: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE https://ads.tiktok.com/i18n/official/policy/controller-to-controller

 

3.8.6 WhatsApp Channels Our website links to our WhatsApp Channel, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Through WhatsApp Channels, subscribers can receive information and updates directly via WhatsApp. Users can follow a channel and receive content published there, such as text messages, images, videos, or links. Since channels are public, all subscribers can view their content. WhatsApp collects data on the use of the channels, including reactions and preferred content. Processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Further information: https://www.whatsapp.com/legal/channels-privacy-policy-eea?lang=de

 

3.9 Social Media Profiles In addition to our website, we maintain company profiles on various social networks to present our company and interact with users. We also use social media platforms to place advertisements and job postings. The following sections explain what data is collected when interacting with our profiles.

 

 

3.9.1 LinkedIn Company Profile We maintain a company profile on LinkedIn, accessible at https://www.linkedin.com/. This service is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. a) Interaction with our company profile When you visit our LinkedIn profile and interact with us, personal data may be processed. This applies, on the one hand, to publicly visible profile data, and on the other hand, information that users submit in comments, posts, or direct messages. If you “like,” share, or comment on content, we can view your user profile along with the associated public information. Processing is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in providing relevant content and facilitating user communication on LinkedIn. If your interaction with our LinkedIn profile is related to a contractual inquiry or the implementation of pre-contractual measures, the processing is based on Article 6(1)(b) of the GDPR. b) LinkedIn Page Insights LinkedIn provides us with anonymized Page Insights containing aggregated data on interactions with our company profile. This information includes: • Number of visitors and their interactions with posts • Statistics on “Likes,” comments, and shared content • Demographic analyses regarding age, industry, or location. This data is provided to us in aggregated form. No personal data of individual LinkedIn members is disclosed. When we run ads on LinkedIn, we also receive statistics on the reach of the ads and on the target audiences that interact with them. However, personal data is only shared if the user has expressly consented to this. In addition, we can analyze which of our ads have led to purchases or other actions in order to measure the effectiveness of our advertising efforts. The processing of this data is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in optimizing our content in a targeted manner and strategically tailoring our advertising. Joint controllership with LinkedIn When processing personal data within the scope of Page Insights, we and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are jointly responsible in accordance with Art. 26(1) GDPR. To this end, a joint data processing agreement has been concluded, which can be viewed at the following link: https://legal.linkedin.com/pages-joint-controller-addendum Contacting LinkedIn LinkedIn is responsible for compliance with data protection regulations.

Users can exercise their data subject rights directly with LinkedIn. Contact LinkedIn’s Data Protection Officer: https://www.linkedin.com/help/linkedin/ask/TSO-DPO Further privacy information from LinkedIn: https://www.linkedin.com/legal/privacy-policy

 

3.9.2 Processing by LinkedIn When you visit our LinkedIn company profile, LinkedIn may process personal data on its own. This processing is the sole responsibility of LinkedIn, without our influence or notification. For more information on data processing by LinkedIn, please visit: https://de.linkedin.com/legal/privacy-policy

 

3.9.3 LinkedIn Ads Our website uses LinkedIn Ads to place targeted ads that can be seen by a broad audience on LinkedIn. LinkedIn uses cookies for this purpose to collect personal data and analyze user behavior. This information is used to analyze the effectiveness of our advertising campaigns and to optimize ads for specific user groups. Cookies are only set with your explicit consent. The legal basis for processing is Art. 6(1)(a) GDPR. Furthermore, pursuant to Art. 6(1)(f) GDPR, there is a legitimate interest in efficiently designing and improving our advertising strategy on LinkedIn. Consent may be revoked at any time.

 

3.10 Facebook We operate a Facebook fan page accessible via https://www. facebook.com/. The service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

 

 

3.10.1 Interaction with our company profile When users visit our Facebook profile or interact with us, personal data may be processed. This includes: • Publicly visible profile information • Data from posts, comments, or direct messages If users “like,” share, or comment on content, we may view the user’s profile and the associated public information. Processing is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in providing relevant content and interacting with users. If the interaction with our Facebook profile is related to a contractual inquiry or the implementation of pre-contractual measures, processing is carried out in accordance with Art. 6(1)(b) GDPR. 

 

3.10.2 Facebook Page Insights According to Meta’s Privacy Policy, Meta also collects and processes information to provide so-called Page Insights for Facebook Page administrators. These aggregated statistics include data on: • Interactions with our Page (e.g., clicks, likes, subscriptions) • Page views and reach of our posts • Demographic information such as age, gender, and location This data is available to us only in anonymized form—it is not possible to identify individual persons. The purpose of these analyses is to optimize our content and ads so that we can shape our company profile more effectively and improve our reach. The processing of this data is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in analyzing and optimizing our Facebook presence.

Joint controllership with Meta: When processing Page Insights data, we and Meta Platforms Ireland Limited are jointly responsible pursuant to Art. 26 GDPR. A corresponding agreement on joint data processing is available at: https://www.facebook.com/legal/terms/page_controller_addendum 

 

3.10.3 Processing of Personal Data and Cookies by Meta When accessing a Facebook page, the user’s IP address is transmitted to Meta. Additionally, Meta stores information about the device used (e.g., as part of the login notification), which may allow the IP address to be associated with individual users. If a user is logged into Facebook, a cookie containing the Facebook ID is stored on their device. This cookie enables Facebook to track visits to the page and provide personalized content or advertising. Personal data can be managed or deleted in Facebook’s Privacy Center: https:/ /www.facebook.com/privacy/center Further information on Facebook’s privacy policy: http://de-de.facebook.com/about/privacy

 

3.11 Instagram We operate an Instagram profile provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For more information on Instagram’s processing of personal data, please visit: https://www.instagram.com/about/legal/privacy

 

3.11.1 Interaction with our company profile on Instagram When you visit our Instagram profile and interact with us, personal data is processed. This includes: • Publicly available information on your profile • Data you submit in comments, posts, or direct messages When you like or share content, we can view your user profile with the publicly visible information. The processing of this data is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in providing relevant content and enabling the use of our Instagram profile. If the interaction takes place in the context of a contractual inquiry or for the purpose of taking pre-contractual measures, the processing is based on Article 6(1)(b) of the GDPR.

 

3.11.2 Insights According to Meta’s Privacy Policy (available here), Meta provides us with so-called Insights data. These aggregated statistics contain information on: • The number of users who interact with our posts, videos, or ads • The types of interaction with our content, websites, or services • The composition of the target audience that interacts with our posts We receive only aggregated reports, without access to the personal data of individual users. Using filters, we can evaluate reach based on specific criteria (e.g., time period, demographic characteristics). Processing is carried out in accordance with Article 6(1)(f) of the GDPR, as we have a legitimate interest in analyzing and optimizing our content and ads. Joint controllership with Meta In the processing of Insights data, there is joint controllership between us and Meta Platforms Ireland Limited pursuant to Art. 26(1) GDPR. A corresponding agreement has been concluded and is available here:

https://www.facebook.com/legal/terms/page_controller_addendum Further privacy information and contact details for Meta: • Online contact: https://www.facebook.com/help/contact/1650115808681298 • Data Protection Officer: https://www.facebook.com/help/contact/540977946302970 • General Instagram Privacy Policy: https://privacycenter.instagram.com/policy 

 

3.11.3 Threads We also use the features of Threads, another platform from Meta Platforms Inc. Data collected: • IP address, application used, and device data • Location information and mobile carrier • Websites visited and interactions with Threads content This information is associated with Meta and may be transferred to third countries outside the EU. We have no control over the data processing and sharing by Threads. Further information: https://help.instagram.com/769983657850450/?helpref=uf_share https://privacycenter.instagram.com/policy 

 

3.12 Pinterest We operate a Pinterest profile provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

 

3.12.1 Joint Responsibility We are jointly responsible with Pinterest for the processing of certain data. The underlying agreement can be viewed here: https://business.pinterest.com/de/pinterest-advertising-services-agreement/rest-of-apac/ Contact the Data Protection Officer: https://help.pinterest.com/de/data-protection-officer-contact-form

 

3.12.2 Data Processing by Pinterest When you visit our Pinterest page, Pinterest processes, among other things: • Log data (IP address, search history, browser settings, date/time) • Device information (e.g., operating system, device type) Further details: https://policy.pinterest.com/de/privacy-policy Pinterest also sets cookies that can be linked to your account. Information on this: https://policy.pinterest.com/de/cookies

 

3.12.3 Data processing by us When users communicate with us via our Pinterest profile, we process: • Message content and usernames • Comments and other public interactions Our processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in provide our content and interact with users. Pinterest Analytics: Pinterest provides us with anonymized statistical reports to evaluate user behavior. This data is not personally identifiable.

 

3.12.4 Disclosure of Data We do not transfer user messages to third parties.

 

However, Pinterest may share data. Further information: https://policy.pinterest.com/de/privacy-policy

 

3.12.5 Retention Period Messages stored by us are deleted after the statutory retention period expires. Pinterest itself governs data retention in its own privacy policy: https://policy.pinterest.com/de/privacy-policy

 

3.13 TikTok We operate a TikTok channel provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Our TikTok channel serves to showcase our company and interact with the TikTok community. Further information on data processing by TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de

 

 

3.13.1 Interaction with our TikTok channel Users have the option to interact with our TikTok channel via their TikTok account, for example by liking, commenting on, or sharing posts. In doing so, we collect the associated profile data, including username and profile picture. We use this information to improve our content and tailor it to the interests of our target audience. Additionally, users can send us direct messages. Here, too, the sender’s username and profile picture are visible to us. The processing of this data is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in optimizing our TikTok channel and interacting with users. This communication enables us to answer questions, gather feedback, and further develop our content in a targeted manner. Comments, likes, and direct messages remain stored on our TikTok channel indefinitely, unless they are deleted by the users themselves.

 

3.13.2 TikTok Analytics TikTok provides us with aggregated statistics to evaluate interactions with our channel. This data includes, among other things: • Follower growth • Video and profile views • Likes, comments, and shared content • Average watch time and full video views • Traffic sources (e.g., via the profile or the “For You” feed) • Demographic distribution of viewers • Follower activity times These statistics are provided to us exclusively in aggregated form, so that no conclusions can be drawn about individual users. Further information on TikTok Analytics: https://www.tiktok.com/ creators/creator-portal/en-us/tiktok-content-strategy/understanding-your-analytics This data is processed in accordance with Art. 6(1)(f) GDPR, as we have a legitimate interest in analyzing and optimizing our channel. Joint controllership with TikTok The processing of personal data in the context of TikTok analytics is carried out under joint controllership with TikTok Technology Limited,

in accordance with Art. 26(1) GDPR. Further information on joint processing is available here: Contact TikTok: • Online inquiry: https://privacytiktok.zendesk.com/hc/en-us/requests/new • Mailing address: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland • Privacy inquiries: https://www.tiktok.com/legal/report/DPO

 

3.13.3 Processing of Personal Data by TikTok TikTok processes users’ personal data, including: • IP address, location data, time zone settings • Device and network information (e.g., operating system, screen resolution, audio settings, mobile carrier) • App and browser versions • Interactions with content (e.g., likes, messages, profile views) If a user is logged in, this data is associated with the TikTok account. For more information on data processing by TikTok, please visit: https://www.tiktok.com/legal/page/eea/privacy-policy/de

 

3.14 WhatsApp Channel Our company operates a WhatsApp channel provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Through this channel, we share information and relevant updates in the form of text messages, links, images, or videos. Since WhatsApp channels are public, any user can subscribe to them and view their content. WhatsApp collects the following information about users: • Reactions to content • Preferred language settings • Subscribed channels As the channel operator, we do not have access to subscribers’ personal data. Further information on data processing by WhatsApp: https://www.whatsapp.com/legal/channels-privacy-policy-eea?lang=de_DE

 

3.14.1 YouTube Our company operates a YouTube channel provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

 

3.14.2 Data processing by us We use YouTube to publish video content and interact with viewers. In doing so, we process statistics and interaction data provided to us by YouTube, including: • Number of channel visitors • Viewing times of our videos • Likes, comments, and subscriptions Additionally, user profiles are visible when users comment on or subscribe to our content. Processing is carried out in accordance with Art. 6(1)(f) GDPR, as we have a legitimate interest in optimizing our content and communicating with viewers. 

 

3.14.3 Data Processing by YouTube YouTube collects the following personal data during visits to our channel: • IP address and location data • Device information (operating system, screen resolution, network information) • Interaction data (videos viewed, likes, comments, subscriptions) This data is stored and processed using cookies or similar tracking technologies. YouTube uses this data for: • Operating and improving the platform • Personalized advertising • Analysis of user behavior YouTube’s processing of this data is based, among other things, on the consent users provide by accepting the YouTube Cookie Policy. Data Transfer to Third Countries Data collected by YouTube may be shared with third parties or transferred to non-EU countries, including the United States.

Google LLC is certified under the EU-U.S. Data Privacy Framework to ensure an adequate level of data protection. Further information on data processing by YouTube: https://policies.google.com/privacy?hl=de&gl=de

 

 

3.15 Google Business Profile Our company uses a Google Business Profile to provide information about our company. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

 

3.15.1 Data Processing by Google The content and features of the Google Business Profile are used at your own risk. This includes, in particular, social and interactive features such as commenting, sharing, rating, or sending direct messages. When users visit our Google Business Profile or interact with us, Google collects various data, including the visitor’s IP address and potentially additional information about the device used (e.g., via cookies or tracking technologies). Google may use the collected data to provide statistical analyses to us as the operator. In doing so, information may be transferred to countries outside the European Union. If users contact us via direct message through the Google Business Profile or other Google services, there is a possibility that these messages will be processed by Google automatically or manually. We therefore recommend that you do not transmit any sensitive personal data via these channels. Use of the service is subject to Google’s privacy policy, to which the user has already consented by using the service. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de

 

3.15.2 Data processing by us As the operator of the Google Business Profile, we do not collect any additional personal data from the use of this Google service. If users contact us or leave a review, we process only: • Publicly visible profile data • The content of the review or comment Processing is carried out in accordance with Art. 6(1)(f) GDPR, as we have a legitimate interest in presenting our company and offering the opportunity to review our services.

 

 

3.16 Third-Party Content 3.16.1 Google Fonts On our website, we use Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Fonts enables a consistent display of fonts on our website. When the page is accessed, a connection is established with Google’s servers, which does not result in the storage of cookies. However, the visitor’s IP address is transmitted and may be used for analytical purposes. Processing is carried out with consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as this concerns access to the user’s device. Consent may be revoked at any time.

Further details: https://developers.google.com/fonts/faq?hl=de https://policies.google.com/privacy?hl=de

 

3.16.2 Adobe Fonts Our website uses Adobe Fonts, a service provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA. Adobe Fonts enables consistent font display. When you visit our website, your browser establishes a connection to Adobe’s servers in the USA. No cookies are set in this process, but the visitor’s IP address is recorded. Processing is based on Art. 6(1)(a) GDPR (consent). This consent may be revoked at any time. Additionally, we have a legitimate interest pursuant to Art. 6(1)(f) GDPR in the uniform display of our website. Since data is transferred to the U.S., the EU Commission’s Standard Contractual Clauses (SCC) are applied. Further information: https://www.adobe.com/de/privacy/eudatatransfers. html https://www.adobe.com/de/privacy/policies/adobe-fonts.html

 

3.16.3 OpenStreetMap We use OpenStreetMap on our website, an open-source project operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cambridge, UK. When the maps are loaded, a connection is established with the OpenStreetMap servers. No tracking cookies are used in this process, but the visitor’s IP address may be recorded to display the maps correctly. The legal basis for processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in providing geographic information. Further details: https://wiki.osmfoundation.org/wiki/Privacy_Policy

 

3.16.4 Google reCAPTCHA This website uses Google reCAPTCHA, a security service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of this service is to distinguish human input from automated bots. When you visit the website, an automatic analysis takes place that collects various user data and transmits it to Google. The legal basis for the processing is Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be revoked at any time. Further information: https://policies.google.com/privacy?hl=de

 

3.16.5 Google Drive Our website uses Google Drive, a cloud storage service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Drive enables the secure storage, sharing, and synchronizing files. Uploaded files are transmitted and stored in encrypted form. Google may set cookies for data collection and storage, which are used only with the user’s consent.

Consent may be revoked at any time (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Additionally, pursuant to Art. 6(1)(f) GDPR, there is a legitimate interest in the secure management of files. When data is transferred to the U.S., Standard Contractual Clauses (SCC) of the European Commission are applied. The data is stored until the user requests deletion or the purpose of storage no longer applies. Further information: https://policies.google.com/privacy 

 

3.16.6 Google APIs We use Google API services on our website. These are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google APIs enable the integration of various Google services such as Google Maps, Google Analytics, and other applications that support functions such as map display, data analysis, or authentication processes. When using Google APIs, various types of personal data are processed, including, in particular, IP addresses, location data, device information, and usage behavior. The processing of this data serves to provide advanced features on our website, optimize the user experience, and further develop our services through the integration of third-party services. The processing of this data is based on our legitimate interest pursuant to Art. 6( 1(f) of the GDPR. Google APIs may use cookies, particularly for analysis and tracking purposes. These cookies are only activated with the prior consent of users, which may be revoked at any time. The legal basis for this is Art. 6(1)(a) of the GDPR. Data transfers to third countries, in particular to the United States, are possible. To ensure an adequate level of data protection, Google uses the Standard Contractual Clauses (SCCs) of the European Commission. The retention period for the collected data depends on the respective processing purpose or statutory retention periods. Further information is available here: Google Privacy Policy.

 

3.16.7 Google Sheets Our website uses Google Sheets, a cloud-based spreadsheet service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Sheets enables the creation and editing of spreadsheets in real time, allowing multiple users to work on the documents simultaneously. In doing so, technical data such as IP address, browser information, and interactions with the integrated content are collected, and the information entered by users themselves is processed. The data is processed to provide and improve the collaborative features of Google Sheets. The legal basis for the processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Google Sheets uses cookies and similar technologies to analyze the use of the platform and improve user-friendliness. These cookies are only set with prior consent, which can be revoked at any time. The legal basis for this is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Data is transferred to the United States.

Google LLC uses the EU Commission’s Standard Contractual Clauses (SCCs) to ensure data protection. The retention period for the data depends on the respective purpose or statutory retention periods. Further information is available here: Google Privacy Policy.

 

3.17 Audio and Video Conferences 

 

3.17.1 Zoom For internal communication and communication with our customers, we use the online conferencing service Zoom, provided by Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. When using Zoom for audio or video communication, personal data is processed, including all information provided by the user as well as metadata related to the conference. Additionally, technical information necessary for the functionality of the online communication is stored. All files shared within the platform are stored on the provider’s servers. Zoom may use cookies, which are activated only with the user’s explicit consent. This consent may be revoked at any time. The legal basis for this is Art. 6(1)(a) a GDPR. The legal basis for data processing in the context of contractual or pre-contractual communication is Art. 6(1)(b) GDPR. Furthermore, there is a legitimate interest in simplifying communication pursuant to Art. 6(1)(f) 1(f) GDPR. The retention period for the data depends on the respective purpose or legal requirements. For data transfers to the U.S., the Standard Contractual Clauses (SCCs) of the European Commission are used. Further information: Zoom Privacy Policy. 

 

3.17.2 Google Meet For online meetings, we use Google Meet, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using Google Meet for video or audio communication, personal data is processed, including information provided by the user, conference metadata, and technical information regarding the functionality of the service. All files shared within the tool are stored on the provider’s servers. Google Meet may set cookies, which are activated only with prior consent. This consent may be revoked at any time. The legal basis for this is Art. 6(1)(a) GDPR. The legal basis for data processing in the context of contractual or pre-contractual communication is Art. 6(1)(b) GDPR. Additionally, there is a legitimate interest in simplifying communication pursuant to Art. 6(1)(f) GDPR. The retention period depends on the respective processing purpose or legal requirements. Further information: Google Privacy Policy.

 

3.17.3 FaceTime We use FaceTime, a service provided by Apple Inc., Infinite Loop, Cupertino, CA 95014, USA, to communicate with our customers and internally. FaceTime enables video and audio calls between users of iOS or iPadOS devices, Macs, or WebRTC browsers. With an Apple Watch, only audio calls are possible.

Communication takes place with end-to-end encryption. Apple does not store the content of the conversations. The Apple ID, phone number, or email address is displayed to the contacted individuals. Apple may collect certain usage metadata, including information about the participants of a call and network settings, without, however, accessing personally identifiable content. This data may be stored for up to 30 days. In addition, FaceTime communicates with Apple servers to check the availability of other users, whereby phone numbers and email addresses linked to an account are also stored for a maximum of 30 days. The processing of this data is based on Art. 6(1)(b) GDPR, provided it is necessary for the performance of a contract or for the implementation of pre-contractual measures. Alternatively, processing is carried out in accordance with Art. 6(1)(f) GDPR, if the use of FaceTime is intended to simplify corporate communication and thus constitutes our legitimate interest. The retention period for the data depends on the necessity of its use. Data is deleted when there is no longer a purpose for storage or when a data subject requests deletion. Statutory retention periods remain unaffected. Further information: Apple Privacy Policy 

​