Privacy policy

With the following privacy policy, we would like to inform you about what types of your personal data (hereinafter also referred to as "data") we process, for what purposes and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer").

Status: October 25, 2023

Sandra von Gneisenau Salon GmbH
Burgkmairstr.38
80686 Munich
Germany
Authorized representatives:
Sandra Gräfin Neidhardt von Gneisenau

E-mail address: datenschutz@sandravongneisenau.de
Phone: +49 (0)89 / 998 2950 60
Imprint: https://www.sandravongneisenau.de/impressum

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Inventory data (names, addresses, etc.).
Content data (text entries, photographs, videos).
Contact data (e-mail, telephone numbers).
Meta/communication data (device information, IP addresses).
Usage data (websites visited, interest in content, access times).
Contract data (subject matter of contract, term, customer category).
Payment data (bank details, invoices, payment history).

Employees (employees, applicants, former employees).
Business and contractual partners.
Interested parties.
Communication partners.
Customers.
Users (website visitors, users of online services).
Participants in sweepstakes and contests.

Providing our online offering and user experience.
Visitor action evaluation.
Office and organization procedures.
Direct marketing (by e-mail or post).
Conducting sweepstakes and contests.
Interest-based and behavioral marketing.
Contact requests and communication.
Conversion measurement (measuring the effectiveness of marketing measures).
Profiling (creating profiles of users).
Remarketing.
Reach measurement (access statistics, recognition of returning visitors).
Security measures.
Tracking (interest/behavior-based profiling, cookies).
Contractual performance and service.
Managing and responding to requests.

In the following, we share the legal basis of the General Data Protection Regulation (GDPR) on the basis of which we process personal data. Please note that in addition to the regulations of the DSGVO, the national data protection regulations in your or our country of residence and domicile may apply.
‍
- Consent (Art. 6 para. 1 p. 1 lit. a DSGVO) - The data subject has given his/her consent to the processing of personal data relating to him/her for one or more specific purposes.
- Performance of a contract and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO) - Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures at the data subject's request.
‍ - Legal obligation (Art. 6 (1) p. 1 lit. c. DSGVO) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Legitimate interests (Art. 6 (1) p. 1 lit. f. DSGVO) - Processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
‍Nationaldata protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Germany. These include, in particular, the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission, as well as automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for employment purposes (Section 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships as well as the consent of employees. Furthermore, state data protection laws of the individual federal states may apply.

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as the access, input, disclosure, safeguarding of availability and their separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and the response to data threats. Furthermore, we take the protection of personal data into account as early as the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings.

TLS/SSL encryption(https): We use SSL encryption to protect your data transmitted via our online offering. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser.

In the course of our processing of personal data, it may happen that the data is transferred to other bodies, companies, legally independent organizational units or persons or that it is disclosed to them. Recipients of this data may include, for example, payment institutions in the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.

Cookies" are small files that are stored on users' devices. Within the cookies, different information can be stored. The information can include, for example, the language settings on a website, the login status, a shopping cart, or where a video was watched.

Cookies are also generally used when a user's interests or behavior (e.g., viewing certain content, using functions, etc.) are stored in a user profile via individual websites. These profiles are used, for example, to display ads to users that match their potential interests. This process is also referred to as "tracking", i.e. tracking the potential interests of users. The term cookies also includes other technologies that perform the same functions as cookies (e.g., when users' details are stored using pseudonymous online identifiers, also referred to as "user IDs").

Insofar as we use cookies or "tracking" technologies, we will inform you about this in our privacy policy.

Notes on legal basis: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for the processing of your data is your declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g., in a business operation of our online offer and its improvement) or if the use of cookies is necessary to fulfill our contractual obligations.

Revocation and objection (opt-out) : Regardless of whether processing is based on consent or legal permission, you have the option at any time to revoke any consent you have given or to object to the processing of your data by cookie technologies (collectively referred to as "opt-out").

You can initially declare your objection by means of your browser settings, e.g. by deactivating the use of cookies (although this may also restrict the functionality of our online offering).

An objection to the use of cookies for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/ or generally at http://optout.aboutads.info.

Further information on objection options, you will also receive in the context of the information on the respective processing in this privacy policy.

- Types of data processed: Usage data (websites visited, interest in content, access times), meta/communication data (device information, IP addresses).
‍ - Data subjects: Users (website visitors, users of online services).
‍ - Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

We process data of our contractual and business partners, e.g. customers and of interested parties (collectively referred to as "contractual partners") within the scope of contractual and comparable legal relationships as well as related measures and communication with the contractual partners (or pre-contractual), e.g. to answer inquiries.

We process this data for the fulfillment of our contractual obligations, securing our rights and for purposes of the administrative tasks associated with this information as well as the entrepreneurial organization. In this context, we only pass on the data of the contractual partners to third parties within the framework of the applicable law to the extent that this is necessary for the aforementioned purposes or for the fulfillment of legal obligations or with the consent of the contractual partners (e.g. to participating telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about further processing, e.g. for marketing purposes, within the scope of this data protection declaration.

We inform the contractual partners which data is required for the aforementioned purposes before or within the scope of data collection, e.g. in online forms by means of special marking (e.g. colors), or symbols (e.g. asterisks or similar), or personally.

We delete the data after the expiry of statutory warranty and comparable obligations, i.e. generally after 4 years, unless the data is stored in a customer account e.g. as long as it must be kept for legal archiving reasons (eg, as a rule, 10 years for tax purposes). In the case of data disclosed to us by the contractual partner as part of an order, we delete the data in accordance with the specifications of the order, generally after the end of the order.

Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.

Craft services: We process the data of our customers as well as clients (hereinafter uniformly referred to as "customers") in order to enable them to select, acquire, or commission the selected services or works as well as related activities, as well as their payment and delivery, or execution or performance.

The required information is identified as such in the context of the conclusion of the order, purchase order, or comparable contract and includes the information required for delivery and billing as well as contact information in order to be able to hold any consultations.

- Types of data processed: inventory data (names, addresses, etc.), payment data (bank details, invoices, payment history), contact data (e-mail, telephone numbers), contract data (subject matter of the contract, term, customer category).
- Data subjects: Interested parties, business and contractual partners.
‍-Purposes of processing: Contractual performance and service, contact requests and communication, office and organizational procedures, administration and response to requests.
- Legal basis: Contractual performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legal obligation (Art. 6 para. 1 p. 1 lit. c. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

In the context of contractual and other legal relationships, due to legal obligations or otherwise on the basis of our legitimate interests, we offer the data subjects efficient and secure payment options and use other payment service providers in addition to banks and credit institutions (collectively "payment service providers").
The data processed by the payment service providers includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums as well as the contract, totals and recipient-related information. The information is required to carry out the transactions. However, the data entered is only processed by the payment service providers and stored by them. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is to check identity and creditworthiness. Please refer to the payment service providers' terms and conditions and data protection notices.

Payment transactions are subject to the terms and conditions and data protection notices of the respective payment service providers, which can be accessed on the respective websites or transaction applications. We also refer to these for further information and the assertion of rights of revocation, information and other rights of data subjects.

- Processed data types: Inventory data (names, addresses, etc.), payment data (bank details, invoices, payment history), contract data (subject matter of the contract, duration, customer category), usage data (websites visited, interest in content, access times), meta/communication data (device information, IP addresses).
- Data subjects: Customers, interested parties.
- Purposes of processing: Contractual performance and service.
- Legal bases: Contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

‍Services usedand service providers:
‍
- VRPayment: Payment services; service provider: VR Payment GmbH, Saonestraße 3a, 60528 Frankfurt am Main, Germany; Privacy Policy: https://www.vr-payment.de/datenschutz-haftung
- Mastercard: Payment services; Service provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Website: https://www.mastercard.de/de-de.html; Privacy Policy: https://www.mastercard.de/de-de/datenschutz.html.
- PayPal: Payment services; Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Website: https://www.paypal.com/de; Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
- Visa: Payment services; Service provider: Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, UK; Website: https://www.visa.de; Privacy Policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

When contacting us (e.g. via contact form, email, telephone or via social media), the information of the inquiring persons is processed as far as this is necessary to answer the contact inquiries and any requested measures.

The answering of contact inquiries in the context of contractual or pre-contractual relations is carried out for the fulfillment of our contractual obligations or answering of (pre)contractual inquiries and otherwise based on the legitimate interests in answering the inquiries.

- Types of data processed: inventory data (names, addresses, etc.), contact data (e-mail, telephone numbers), content data (text input, photographs, videos).
- Data subjects: Communication partners.
- Purposes of processing: contact requests and communication.
‍-Legal basis: Contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Wir setzen zu Zwecken der Kommunikation Messenger-Dienste ein und bitten daher die nachfolgenden Hinweise zu der Funktionsfähigkeit der Messenger, der Verschlüsselung, Nutzung der Metadaten der Kommunikation und Ihren Widerspruchsmöglichkeiten zu beachten.

Sie können uns auch auf alternativen Wegen, z.B. via Telefon oder E-Mail kontaktieren. Bitte nutzen Sie die Ihnen mitgeteilten Kontaktmöglichkeiten oder nutzen die angegebenen Kontaktmöglichkeiten innerhalb unseres Onlineangebotes.

Im Fall der Verschlüsselung einer Ende-zu-Ende von Inhalten (d.h. der Inhalt Ihrer Nachricht und Anhänge) weisen wir darauf hin, dass die Kommunikationsinhalte (d.h. der Inhalt der Nachricht und angehängte Bilder) Ende-zu-Ende verschlüsselt werden. Das bedeutet, dass der Inhalt der Nachrichten nicht einsehbar ist, nicht einmal durch die Messenger-Anbieter selbst. Sie sollten immer eine aktuelle Version der Messenger mit aktivierter Verschlüsselung nutzen, damit die Verschlüsselung der Nachrichteninhalte sichergestellt ist.

Wir weisen unsere Kommunikationspartner jedoch zusätzlich darauf hin, dass die Anbieter der Messenger zwar nicht den Inhalt sehen, aber in Erfahrung bringen können, dass und wann Kommunikationspartner mit uns kommunizieren sowie technische Informationen zum verwendeten Gerät der Kommunikationspartner und je nach Einstellungen ihres Gerätes auch Standortinformationen (sog. Metadaten) verarbeitet.

‍Hinweise zu Rechtsgrundlagen: Sofern wir Kommunikationspartner um eine Erlaubnis vor der Kommunikation mit ihnen via Messenger bitten, ist die Rechtsgrundlage unserer Verarbeitung ihrer Daten deren Einwilligung. Im Übrigen, falls wir nicht um eine Einwilligung bitten und sie z.B. von sich aus Kontakt mit uns aufnehmen, nutzen wir Messenger im Verhältnis zu unseren Vertragspartnern sowie im Rahmen der Vertragsanbahnung als eine vertragliche Maßnahme und im Fall anderer Interessenten und Kommunikationspartner auf Grundlage unserer berechtigten Interessen an einer schnellen und effizienten Kommunikation und Erfüllung der Bedürfnisse unser Kommunikationspartner an der Kommunikation via Messengern. Ferner weisen wir Sie darauf hin, dass wir die uns mitgeteilten Kontaktdaten ohne Ihre Einwilligung nicht erstmalig an die Messenger übermitteln.

‍Widerruf, Widerspruch und Löschung: Sie können jederzeit eine erteilte Einwilligung widerrufen oder der Kommunikation mit uns via Messenger jederzeit widersprechen. Im Fall der Kommunikation via Messenger löschen wir die Nachrichten entsprechend unseren generellen Löschrichtlinie (d.h. z.B. wie oben beschrieben nach Ende vertraglicher Beziehungen, Archivierungsvorgaben, etc.) und sonst sobald wir davon ausgehen können, etwaige Auskünfte der Kommunikationspartner beantwortet zu haben, wenn kein Rückbezug auf eine vorhergehende Konversation zu erwarten ist und der Löschung keine gesetzlichen Aufbewahrungspflichten entgegenstehen.

‍Vorbehalt des Verweises auf andere Kommunikationswege: Zum Abschluss möchten wir darauf hinweisen, dass wir uns aus Gründen Ihrer Sicherheit vorbehalten, Anfragen über Messenger nicht zu beantworten. Das ist der Fall, wenn z.B. Vertragsinterna besonderer Geheimhaltung bedürfen oder eine Antwort über den Messenger den formellen Ansprüchen nicht genügt. In solchen Fällen verweisen wir Sie auf adäquatere Kommunikationswege.

– Verarbeitete Datenarten: Kontaktdaten (E-Mail, Telefonnummern), Nutzungsdaten (besuchte Webseiten, Interesse an Inhalten, Zugriffszeiten), Meta-/Kommunikationsdaten (Geräte-Informationen, IP-Adressen), Inhaltsdaten (Texteingaben, Fotografien, Videos).
– Betroffene Personen: Kommunikationspartner.
– Zwecke der Verarbeitung: Kontaktanfragen und Kommunikation, Direktmarketing (per E-Mail oder postalisch).
– Rechtsgrundlagen: Einwilligung (Art. 6 Abs. 1 S. 1 lit. a DSGVO), Berechtigte Interessen (Art. 6 Abs. 1 S. 1 lit. f. DSGVO).

‍Eingesetzte Dienste und Diensteanbieter:

– Facebook-Messenger: Facebook-Messenger mit Ende-zu-Ende Verschlüsselung (die Ende-zu-Ende-Verschlüsselung des Facebook-Messengers setzt eine Aktivierung voraus, sofern sie nicht standardmäßig aktiviert sein sollte); Dienstanbieter: https://www.facebook.com, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland, Mutterunternehmen: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Datenschutzerklärung: https://www.facebook.com/about/privacy; Privacy Shield (Gewährleistung Datenschutzniveau bei Verarbeitung von Daten in den USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Widerspruchsmöglichkeit (Opt-Out): https://www.facebook.com/settings?tab=ads.

– WhatsApp: WhatsApp Messenger mit Ende-zu-Ende Verschlüsselung; Dienstanbieter: WhatsApp Inc. WhatsApp Legal 1601 Willow Road Menlo Park, California 94025, USA; Website: https://www.whatsapp.com/; Datenschutzerklärung: https://www.whatsapp.com/legal; Privacy Shield (Gewährleistung Datenschutzniveau bei Verarbeitung von Daten in den USA): https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG&status=Active.

The surveys and questionnaires we conduct (hereinafter "surveys") are evaluated anonymously. Personal data is only processed insofar as this is necessary for the provision and technical implementation of the survey (e.g. processing of the IP address in order to display the survey in the user's browser or to enable a resumption of the survey with the help of a temporary cookie (session cookie)) or users have given their consent.

Notes on legal basis: If we ask participants to consent to the processing of their data, this is the legal basis for the processing, otherwise the processing of participants' data is based on our legitimate interests in conducting an objective survey.

- Types of data processed: contact data (email, phone numbers), content data (text inputs, photographs, videos), usage data (web pages visited, interest in content, access times), meta/communication data (device information, IP addresses).
- Data subjects: Communication partners.
- Purposes of processing: contact requests and communication, direct marketing (by e-mail or post).
- Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

In order to provide our online offer securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security services and technical maintenance services.

The data processed in the course of providing the hosting service may include all information relating to the users of our online service that is generated in the course of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online offers to browsers, and all entries made within our online offer or from websites.

E-mail sending and hosting: The web hosting services we use also include the sending, receipt and storage of e-mails. For these purposes, the addresses of the recipients and senders, as well as further information regarding the e-mail dispatch (e.g. the providers involved) and the contents of the respective e-mails are processed. The aforementioned data may also be processed for SPAM detection purposes. Please note that e-mails are generally not sent encrypted on the Internet. As a rule, e-mails are encrypted in transit, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore not assume any responsibility for the transmission path of the e-mails between the sender and the reception on our server.

‍Collection ofaccess data and log files: We ourselves (or our web hosting provider) collect data on each access to the server (so-called server log files) on a basis. The server log files may include the address and name of the web pages and files accessed, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.

The server log files may be used, on the one hand, for security purposes, e.g. to prevent server overload (especially in the event of abusive attacks, so-called DDoS attacks) and, on the other hand, to ensure the utilization of the servers and optimization of their stability.

- Types of data processed: Content data (text input, photographs, videos), usage data (web pages visited, interest in content, access times), meta/communication data (device information, IP addresses).
- Data subjects: Users (website visitors, users of online services).
- Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

We use software services accessible via the Internet and executed on the servers of their providers (so-called "cloud services", also referred to as "software as a service") for the following purposes: document storage and management, calendar management, e-mail dispatch, spreadsheets and presentations, exchange of documents, content and information with specific recipients or publication of web pages, forms or other content and information, as well as chats and participation in audio and video conferences.

In this context, personal data may be processed and stored on the servers of the providers to the extent that these are part of communication processes with us or are otherwise processed by us as set out in the context of this privacy policy. This data may include, in particular, master data and contact data of users, data on transactions, contracts, other processes and their contents. The providers of the cloud services also process usage data and metadata used by them for security purposes and service optimization.

Insofar as we use the cloud services to make documents and content available to other users or publicly accessible websites, forms or the like, the providers of the cloud services may process such data. documents and content, the providers may store cookies on the users' devices for web analytics purposes or to remember users' settings (e.g., in the case of media control).

‍Noteson legal basis: If we ask for consent to use the cloud services, the legal basis for processing data for online marketing purposes is consent. Furthermore, their use may be a component of our (pre)contractual services, provided that the use of the cloud services has been agreed within this framework. Otherwise, user data is processed based on our legitimate interests (i.e. interest in efficient and secure management and collaboration processes.).

- Types of data processed: inventory data (names, addresses, etc.), contact data (email, phone numbers), content data (text input, photographs, videos), usage data (web pages visited, interest in content, access times), meta/communication data (device information, IP addresses).
- Data subjects: Customers, employees (employees, applicants, former employees), interested parties, communication partners.
- Purposes of processing: office and organizational procedures.

‍Services usedand service providers:

- Microsoft OneDrive: cloud storage services (e.g. Office 365); service providers: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA; website: http://microsoft.com/de-de; privacy policy: https://privacy.microsoft.com/de-de/privacystatement, security notices: https://www.microsoft.com/de-de/trustcenter; Privacy Shield (ensuring level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active.

We send newsletters, e-mails and other electronic notifications (hereinafter "newsletter") only with the consent of the recipients or a legal permission. Insofar as the contents of the newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Apart from that, our newsletters contain information about our services and us.

To subscribe to our newsletters, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name, for the purpose of a personal address in the newsletter, or further details if these are required for the purposes of the newsletter.

Double opt-in procedure: Registration for our newsletter is always carried out in a so-called double opt-in process. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged.

Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove consent previously given. The processing of this data will be limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the event of obligations to permanently observe objections, we reserve the right to store the e-mail address in a blacklist for this purpose alone.

The logging of the registration process is carried out on the basis of our legitimate interests for the purpose of proving its proper course. Insofar as we commission a service provider with the dispatch of e-mails, this is done on the basis of our legitimate interests in an efficient and secure dispatch system.

Notes on legal basis: The newsletter is dispatched on the basis of the recipients' consent or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and insofar as this is permitted by law, e.g. in the case of existing customer advertising. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests to prove that it was carried out in accordance with the law.

‍Contents:
Information about us, our services, promotions and offers.

- Types of data processed: inventory data (names, addresses, etc.), contact data (email, phone numbers), meta/communication data (device information, IP addresses).
- Data subjects: Communication partners.
- Purposes of processing: direct marketing (by e-mail or post).
- Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

‍Option to object(opt-out): You can cancel receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can otherwise use one of the above contact options, preferably e-mail, for this purpose.

We process personal data of participants of sweepstakes and contests only in compliance with the relevant data protection provisions to the extent that the processing is contractually necessary for the provision, implementation and execution of the sweepstakes, the participants have consented to the processing or the processing serves our legitimate interests (e.g.., in the security of the sweepstakes or the protection of our interests against misuse through the possible collection of IP addresses when submitting sweepstakes entries).If, as part of the sweepstakes, entries from participants are published (e.g., as part of a vote or presentation of the sweepstakes entries, or the winners or reporting on the sweepstakes), we point out that the names of the participants may also be published in this context. Participants can object to this at any time

If the competition takes place within an online platform or a social network (e.g. Facebook or Instagram, hereinafter referred to as "online platform"), the usage and data protection provisions of the respective platforms also apply. In these cases, we point out that we are responsible for the information provided by the participants within the scope of the sweepstakes and that inquiries with regard to the sweepstakes should be directed to us.

The participants' data will be deleted as soon as the sweepstakes or the contest has ended and the data is no longer required to inform the winners or because queries regarding the sweepstakes are to be expected. In principle, participants' data will be deleted no later than 6 months after the end of the sweepstakes. Winners' data may be retained for longer in order, for example, to answer queries about the prizes or to fulfill the prize services; in this case, the retention period depends on the type of prize and is up to three years for items or services, for example, in order to be able to process warranty claims. Furthermore, the participants' data may be stored for a longer period, e.g. in the form of reporting on the competition in online and offline media.

If data was also collected for other purposes as part of the competition, its processing and the retention period is based on the data protection information for this use (e.g., in the case of registration for the newsletter as part of a competition).

- Types of data processed: inventory data (names, addresses, etc.), content data (text entries, photographs, videos).
- Data subjects: Participants of sweepstakes and contests.
- Purposes of processing: Conducting sweepstakes and contests.
- Legal basis: Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO).

Web analytics (also referred to as "reach measurement"), is used to evaluate the flow of visitors to our online offering and may include their behavior, interests or demographic information, such as age or gender as pseudonymous values. With the help of reach analysis, we can recognize, for example, at what time our online offer or its functions or content are most frequently used or invite re-use, as well as which areas require optimization.

In addition to web analysis, we may also use test procedures, for example, to test different versions of our online offer.For example, to test and optimize different versions of our online offer or its components.

For these purposes, so-called profiles of the users may be created and stored in a file (so-called "cookie") or similar procedures, in which the, for the aforementioned analyses relevant information about the user. This information may include, for example, content viewed, web pages visited and elements used there and technical information such as the browser used, computer system used and information on usage times. If users have consented to the collection of their location data, this may also be processed, depending on the provider.

The IP addresses of users are also stored. However, we use an existing IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. Generally, in the context of web analysis, A/B testing and optimization, no clear data of the users (such as e-mail addresses or names) are stored, but pseudonyms. This means that we, as well as the providers of the software used, do not know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.

Notes on legal basis: If we ask the users for their consent (e.g. in the context of a so-called "cookie banner consent"), the legal basis for the processing of data for online marketing purposes is the consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer. In this regard, we refer to the note on the use of cookies in this privacy policy.

- Data subjects: Users (website visitors, users of online services).
- Purposes of processing: reach measurement (access statistics, recognition of returning visitors), tracking (interest/behavior-based profiling, cookies), visit action evaluation, profiling (creating profiles of users).
- Security measures: IP masking (pseudonymization of the IP address).
- Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Wir verarbeiten personenbezogene Daten zu Zwecken des Onlinemarektings, womit insbesondere die Darstellung von werbenden und sonstigen Inhalten (zusammenfassend als “Inhalte” bezeichnet) anhand potentieller Interessen der Nutzer sowie Messung ihrer Effektivität umfasst wird.

Zu diesen Zwecken werden sog. Profile der Nutzer angelegt und in einer Datei (sog. “Cookie”) oder ähnlichen Verfahren, in denen die, für die Darstellung der vorgenannten Inhalte relevante Angaben zum Nutzer, gespeichert werden. Zu diesen Angaben können z.B. betrachtete Inhalte, besuchte Webseiten, genutzte Onlinenetzwerke, aber auch Kommunikationspartner und technische Angaben, wie der verwendete Browser, verwendetes Computersystem sowie Angaben zu Nutzungszeiten gehören. Sofern Nutzer in die Erhebung ihrer Standortdaten eingewilligt haben, können auch diese verarbeitet werden.

Es werden ebenfalls die IP-Adressen der Nutzer gespeichert. Jedoch nutzen wir vorhandene IP-Masking-Verfahren (d.h., Pseudonymisierung durch Kürzung der IP-Adresse) zum Schutz der Nutzer. Generell werden im Rahmen des Onlinemarketingverfahren keine Klardaten der Nutzer (wie z.B. E-Mailadressen oder Namen) gespeichert, sondern Pseudonyme. D.h. wir, als auch die Anbieter der Onlinemarketingverfahren kennen nicht die tatsächlich Identität der Nutzer, sondern nur die in deren Profilen gespeicherten Angaben.

Die Angaben in den Profilen werden im Regelfall in den Cookies oder ähnlichen Verfahren gespeichert. Diese Cookies können später, generell auch auf anderen Webseiten die dasselbe Onlinemarketingverfahren einsetzen, ausgelesen und zu Zwecken der Darstellung von Inhalten analysiert, als auch mit weiteren Daten ergänzt gespeichert und auf dem Server des Onlinemarketingverfahrensanbieters gespeichert werden.

Ausnahmsweise können Klardaten den Profilen zugeordnet werden. Das ist der Fall, wenn die Nutzer z.B. Mitglieder eines soziales Netzwerks sind, dessen Onlinemarketingverfahren wir einsetzen und das Netzwerk die Profile der Nutzer im den vorgenannten Angaben verbindet. Wir bitten zu beachten, dass Nutzer mit den Anbietern zusätzliche Abreden, z.B. durch Einwilligung im Rahmen der Registrierung, treffen können.

Wir erhalten grundsätzlich nur Zugang zu zusammengefassten Informationen über den Erfolg unserer Werbeanzeigen. Jedoch können wir im Rahmen sog. Konversionsmessung prüfen, welche unserer Onlinemarketingverfahren zu einer sog. Konversion geführt haben, d.h. z.B. zu einem Vertragsschluss mit uns. Die Konversionsmessung wird alleine zu der Erfolgsanalyse unserer Marketingmaßnahmen verwendet.

‍Hinweise zu Rechtsgrundlagen: Sofern wir die Nutzer um deren Einwilligung bitten (z.B. im Rahmen einer so genannten “Cookie-Banner-Einwilligung”), ist die Rechtsgrundlage der Verarbeitung von Daten zu Zwecken des Onlinemarketings die Einwilligung. Ansonsten werden die Daten der Nutzer auf Grundlage unserer berechtigten Interessen (d.h. Interesse an der Analyse, Optimierung und wirtschaftlichem Betrieb unseres Onlineangebotes verarbeitet. Wir verweisen hierzu auf die Hinweis zum Einsatz von Cookies in dieser Datenschutzerklärung.

‍Verarbeitete Datenarten: Nutzungsdaten (besuchte Webseiten, Interesse an Inhalten, Zugriffszeiten), Meta-/Kommunikationsdaten (Geräte-Informationen, IP-Adressen).

– Betroffene Personen: Nutzer (Websitebesucher, Nutzer von Onlinediensten), Interessenten.
– Zwecke der Verarbeitung: Tracking (Interessens-/verhaltensbezogenes Profiling, Cookies), Remarketing, Besuchsaktionsauswertung, Interessenbasiertes und verhaltensbezogenes Marketing, Profiling (Erstellen von Profilen der Nutzer), Konversionsmessung (Messung der Effektivität von Marketingmaßnahmen), Reichweitenmessung (Zugriffsstatistiken, Erkennung wiederkehrender Besucher).
– Sicherheitsmaßnahmen: IP-Masking (Pseudonymisierung der IP-Adresse).
– Rechtsgrundlagen: Einwilligung (Art. 6 Abs. 1 S. 1 lit. a DSGVO), Berechtigte Interessen (Art. 6 Abs. 1 S. 1 lit. f. DSGVO).
– Widerspruchsmöglichkeit (Opt-Out): Wir verweisen auf die Datenschutzhinweise der jeweiligen Anbieter und die zu den Anbietern angegebenen Widerspruchsmöglichkeiten (sog. \”Opt-Out\”). Sofern keine explizite Opt-Out-Möglichkeit angegeben wurde, besteht zum einen die Möglichkeit, dass Sie Cookies in den Einstellungen Ihres Browsers abschalten. Hierdurch können jedoch Funktionen unseres Onlineangebotes eingeschränkt werden. Wir empfehlen daher zusätzlich die folgenden Opt-Out-Möglichkeiten, die zusammenfassend auf jeweilige Gebiete gerichtet angeboten werden: a) Europa: https://www.youronlinechoices.eu. b) Kanada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Gebietsübergreifend: http://optout.aboutads.info.

‍Eingesetzte Dienste und Diensteanbieter:

– Google Analytics: Google Analytics; Dienstanbieter: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Mutterunternehmen: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Datenschutzerklärung: https://policies.google.com/privacy; Privacy Shield (Gewährleistung Datenschutzniveau bei Verarbeitung von Daten in den USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Widerspruchsmöglichkeit (Opt-Out): Opt-Out-Plugin: http://tools.google.com/dlpage/gaoptout?hl=de, Einstellungen für die Darstellung von Werbeeinblendungen: https://adssettings.google.com/authenticated.

Wir unterhalten Onlinepräsenzen innerhalb sozialer Netzwerke, um mit den dort aktiven Nutzern zu kommunizieren oder um dort Informationen über uns anzubieten.

Wir weisen darauf hin, dass dabei Daten der Nutzer außerhalb des Raumes der Europäischen Union verarbeitet werden können. Hierdurch können sich für die Nutzer Risiken ergeben, weil so z.B. die Durchsetzung der Rechte der Nutzer erschwert werden könnte. Im Hinblick auf US-Anbieter die unter dem Privacy-Shield zertifiziert sind oder vergleichbare Garantien eines sicheren Datenschutzniveaus bieten, weisen wir darauf hin, dass sie sich damit verpflichten, die Datenschutzstandards der EU einzuhalten.

Ferner werden die Daten der Nutzer innerhalb sozialer Netzwerke im Regelfall für Marktforschungs- und Werbezwecke verarbeitet. So können z.B. aus dem Nutzungsverhalten und sich daraus ergebenden Interessen der Nutzer Nutzungsprofile erstellt werden. Die Nutzungsprofile können wiederum verwendet werden, um z.B. Werbeanzeigen innerhalb und außerhalb der Netzwerke zu schalten, die mutmaßlich den Interessen der Nutzer entsprechen. Zu diesen Zwecken werden im Regelfall Cookies auf den Rechnern der Nutzer gespeichert, in denen das Nutzungsverhalten und die Interessen der Nutzer gespeichert werden. Ferner können in den Nutzungsprofilen auch Daten unabhängig der von den Nutzern verwendeten Geräte gespeichert werden (insbesondere wenn die Nutzer Mitglieder der jeweiligen Plattformen sind und bei diesen eingeloggt sind).Für eine detaillierte Darstellung der jeweiligen Verarbeitungen und der Widerspruchsmöglichkeiten (Opt-Out), verweisen wir auf die jeweiligen Datenschutzerklärungen und Angaben der Betreiber der jeweiligen Netzwerke.

Auch im Fall von Auskunftsanfragen und der Geltendmachung von Betroffenenrechten, weisen wir darauf hin, dass diese am effektivsten bei den Anbietern geltend gemacht werden können. Nur die Anbieter haben jeweils Zugriff auf die Daten der Nutzer und können direkt entsprechende Maßnahmen ergreifen und Auskünfte geben. Sollten Sie dennoch Hilfe benötigen, dann können Sie sich an uns wenden.

– Verarbeitete Datenarten: Bestandsdaten (Namen, Adressen, etc.), Kontaktdaten (E-Mail, Telefonnummern), Inhaltsdaten (Texteingaben, Fotografien, Videos), Nutzungsdaten (besuchte Webseiten, Interesse an Inhalten, Zugriffszeiten), Meta-/Kommunikationsdaten (Geräte-Informationen, IP-Adressen).
– Betroffene Personen: Nutzer (Websitebesucher, Nutzer von Onlinediensten).
– Zwecke der Verarbeitung: Kontaktanfragen und Kommunikation, Tracking (Interessens-/verhaltensbezogenes Profiling, Cookies), Remarketing, Reichweitenmessung (Zugriffsstatistiken, Erkennung wiederkehrender Besucher).
– Rechtsgrundlagen: Berechtigte Interessen (Art. 6 Abs. 1 S. 1 lit. f. DSGVO).

‍Eingesetzte Dienste und Diensteanbieter:
‍
– Instagram : Dienstanbieter: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Datenschutzerklärung: http://instagram.com/about/legal/privacy.
– Facebook: Dienstanbieter: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland, Mutterunternehmen: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Datenschutzerklärung: https://www.facebook.com/about/privacy; Privacy Shield (Gewährleistung Datenschutzniveau bei Verarbeitung von Daten in den USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Widerspruchsmöglichkeit (Opt-Out): Einstellungen für Werbeanzeigen: https://www.facebook.com/settings?tab=ads; Zusätzliche Hinweise zum Datenschutz: Vereinbarung über gemeinsame Verarbeitung personenbezogener Daten auf Facebook-Seiten: https://www.facebook.com/legal/terms/page_controller_addendum, Datenschutzhinweise für Facebook-Seiten: https://www.facebook.com/legal/terms/information_about_page_insights_data.
– YouTube: Dienstanbieter: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Mutterunternehmen: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Datenschutzerklärung: https://policies.google.com/privacy; Privacy Shield (Gewährleistung Datenschutzniveau bei Verarbeitung von Daten in den USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Widerspruchsmöglichkeit (Opt-Out): https://adssettings.google.com/authenticated.
- PInterest: Dienstanbieter: Pinterest Europe Ltd.Palmerston House, 2nd FloorFenian StreetDublin 2, Ireland; Datenscherklärung: https://www.pinterest.de/settings/privacy/

We use services, platforms and software from other providers (hereinafter referred to as "third-party providers") for the purposes of organizing, managing, planning and providing our services. When selecting the third-party providers and their services, we observe the legal requirements.

In this context, personal data may be processed and stored on the servers of the third-party providers. This may include various data that we process in accordance with this privacy policy. This data may include, in particular, master data and contact data of users, data on transactions, contracts, other processes and their content.

If users are referred to the third-party providers or their software or platforms in the course of communication, business or other relationships with us, the third-party providers may process usage data and metadata processed by them for security purposes, service optimization or marketing purposes. We therefore ask you to observe the privacy notices of the respective third-party providers.

‍Notes on legal basis: If we ask users for their consent to the use of third-party providers, the legal basis for processing data for online marketing purposes is consent. Furthermore, their use may be a component of our (pre)contractual services, provided that the use of the third-party providers has been agreed within this framework. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services.).

- Types of data processed: inventory data (names, addresses, etc.), contact data (e-mail, telephone numbers), content data (text input, photographs, videos), usage data (web pages visited, interest in content, access times), meta/communication data (device information, IP addresses).
- Data subjects: Communication partners, users (website visitors, users of online services).
- Legal grounds: Consent (Art. 6 para. 1 p. 1 lit. a DSGVO), Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not required for the purpose).

If the data is not deleted because it is required for other and legally permissible purposes, its processing will be limited to these purposes. That is, the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.

Further information on the deletion of personal data can furthermore be found in the context of the individual data protection notices of this privacy policy.

We ask you to regularly inform yourself about the content of our privacy policy. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

- Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
- Right to withdraw consent: You have the right to withdraw any consent you have given at any time.
- Right to information: You have the right to request confirmation as to whether the data in question is being processed and to information about this data as well as further information and a copy of the data in accordance with the legal requirements.
- Right to rectification: You have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you in accordance with the legal requirements.
- Right to erasure and restriction of processing: In accordance with the legal requirements, you have the right to demand that the data in question be erased immediately or, alternatively, to demand that the processing of the data be restricted in accordance with the legal requirements.
- Right to data portability: You have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format in accordance with the legal requirements or to request its transmission to another controller. - Complaint to the supervisory authority: You also have the right to lodge a complaint with the competent supervisory authority in accordance with the statutory provisions.

In diesem Abschnitt erhalten Sie eine Übersicht der in dieser Datenschutzerklärung verwendeten Begrifflichkeiten. Viele der Begriffe sind dem Gesetz entnommen und vor allem im Art. 4 DSGVO definiert. Die gesetzlichen Definitionen sind verbindlich. Die nachfolgenden Erläuterungen sollen dagegen vor allem dem Verständnis dienen. Die Begriffe sind alphabetisch sortiert.

– Besuchsaktionsauswertung: “Besuchsaktionsauswertung” (englisch “Conversion Tracking”) bezeichnet ein Verfahren, mit dem die Wirksamkeit von Marketingmaßnahmen festgestellt werden kann. Dazu wird im Regelfall ein Cookie auf den Geräten der Nutzer innerhalb der Websites, auf denen die Marketingmaßnahmen erfolgen gespeichert und dann erneut auf der Zielwebsite abgerufen (z.B. können wir so nachvollziehen, ob die von uns auf anderen Webseiten geschalteten Anzeigen erfolgreich waren)
– IP-Masking: Als „IP-Masking” wird eine Methode bezeichnet, bei der das letzte Oktett, d.h. die letzten beiden Zahlen einer IP-Adresse gelöscht werden, damit die IP-Adresse nicht mehr der eindeutigen Identifizierung einer Person dienen können. Daher ist das IP-Masking ein Mittel zur Pseudonymisierung von Verarbeitungsverfahren, insbesondere im Onlinemarketing.
– Interessenbasiertes und verhaltensbezogenes Marketing: Von interessens- und/oder verhaltensbezogenem Marketing spricht man, wenn potentielle Interesse von Nutzern an Anzeigen und sonstigen Inhalten möglichst genau vorbestimmt werden. Dies geschieht anhand von Angaben zu deren Vorverhalten (z.B. Aufsuchens und Verweilens auf bestimmten Webseiten, Kaufverhaltens oder Interaktion mit anderen Nutzern), die in einem sog. Profil gespeichert werden. Zu diesen Zwecken werden im Regelfall Cookies eingesetzt.  
– Konversionsmessung: Konversionsmessung ist ein Verfahren, mit dem die Wirksamkeit von Marketingmaßnahmen festgestellt werden kann. Dazu wird im Regelfall ein Cookie auf den Geräten der Nutzer innerhalb der Websites, auf denen die Marketingmaßnahmen erfolgen gespeichert und dann erneut auf der Zielwebsite abgerufen (z.B. können wir so nachvollziehen, ob die von uns auf anderen Webseiten geschalteten Anzeigen erfolgreich waren).
– Profiling: Als „Profiling“ wird jede Art der automatisierten Verarbeitung personenbezogener Daten bezeichnet, die darin besteht, dass diese personenbezogenen Daten verwendet werden, um bestimmte persönliche Aspekte, die sich auf eine natürliche Person beziehen (je nach Art des Profilings gehören dazu Informationen betreffend das Alter, das Geschlecht, Standortdaten und Bewegungsdaten, Interaktion mit Webseiten und deren Inhalten, Einkaufsverhalten, sozialen Interaktionen mit anderen Menschen), zu analysieren, zu bewerten oder um sie vorherzusagen (z.B. die Interessen an bestimmten Inhalten oder Produkten, das Klickverhalten auf einer Webseite oder den Aufenthaltsort). Zu Zwecken des Profilings werden häufig Cookies und Web-Beacons eingesetzt.
– Reichweitenmessung : Die Reichweitenmessung (auch als Web Analytics bezeichnet) dient der Auswertung der Besucherströme eines Onlineangebotes und kann das Verhalten oder Interessen der Besucher an bestimmten Informationen, wie z.B. Inhalten von Webseiten umfassen. Mit Hilfe der Reichweitenanalyse können Websiteinhaber z.B. erkennen, zu welcher Zeit Besucher ihre Webseite besuchen und für welche Inhalte sie sich interessieren. Dadurch können sie z.B. die Inhalte der Webseite besser auf die Bedürfnisse ihrer Besucher optimieren. Zu Zwecken der Reichweitenanalyse werden häufig pseudonyme Cookies und Web-Beacons eingesetzt, um wiederkehrende Besucher zu erkennen und so genauere Analysen zur Nutzung eines Onlineangebotes zu erhalten.
– Remarketing: Vom „Remarketing“, bzw. „Retargeting“ spricht man, wenn z.B. zu Werbezwecken vermerkt wird, für welche Produkte sich ein Nutzer auf einer Webseite interessiert hat, um den Nutzer auf anderen Webseiten an diese Produkte, z.B. in Werbeanzeigen, zu erinnern.
– Tracking: Vom „Tracking“ spricht man, wenn das Verhalten von Nutzern über mehrere Onlineangebote hinweg nachvollzogen werden kann. Hierbei werden im Regelfall im Hinblick auf die genutzten Onlineangebote Verhaltens- und Interessensinformationen in Cookies oder auf Servern der Anbieter der Trackingtechnologien gespeichert (sog. Profiling). Diese Informationen können anschließend z.B. dazu eingesetzt werden, um den Nutzern Werbeanzeigen anzuzeigen, die mutmaßlich deren Interessen entsprechen.
– Verarbeitung: “Verarbeitung” ist jeder mit oder ohne Hilfe automatisierter Verfahren ausgeführten Vorgang oder jede solche Vorgangsreihe im Zusammenhang mit personenbezogenen Daten. Der Begriff reicht weit und umfasst praktisch jeden Umgang mit Daten, sei es erheben, auswerten, speichern, übermitteln oder löschen.

‍Erstellt mit Datenschutz-Generator.de von Dr. jur. Thomas Schwenke