Privacy Policy

Data Privacy Notice

Thank you for visiting our website and for your interest in our company.

We understand data privacy as a customer-oriented quality feature. The protection of your personal data and the protection of your personal rights are important to us. With this data privacy notice, we would like to inform all visitors to our website transparently about the type, scope and purpose of the personal data we collect, use and process and to inform you of the rights to which you are entitled.

It is generally possible to use our website without providing personal data. However, if you make use of our company's services via our website, it may be necessary to process your personal data. The data collected automatically when you visit our website or the personal data you enter when using our services will be processed in accordance with the current statutory provisions on the protection of personal data. If it is necessary to process your personal data and there is no legal basis for such processing, we always obtain your consent for the required purpose of the processing. As the controller, we have established technical and organizational measures to ensure the highest possible level of protection of your personal data. However, we would like to report that data transmission via the World Wide Web can generally have security gaps.

If you would like to make use of our company's services and do not wish to transmit data via the World Wide Web, you also have the option of contacting us by telephone.

1. Contact details of the controller

The controller within the meaning of the General Data Protection Regulation is

Design Offices GmbH
Königstorgraben 11
90402 Nuremberg
Telephone: +49(0)911323950
E-mail address: info@designoffices.de

The data protection officer is appointed:

Stephan Hartinger
Coseco GmbH
Tel.: +49(0)8232 80988-70
E-Mail: datenschutz@coseco.de

2. Collection of general access information

Each time you visit our website, server log file information that your browser transmits to us is automatically recorded. These are

  • IP address (Internet Protocol address) of the accessing computer

  • the website from which you visit us (referrer)

  • the page you visit on our website

  • the date and duration of the visit

  • browser type and browser settings

  • operating system

We would like to report that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:

  • to improve the attractiveness and usability of our websites,

  • to detect technical problems on our website at an early stage.

  • to deliver the content of our website correctly,

  • and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack.

This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.

3. Collection and disclosure of personal data

We only use your personal data for the purposes stated on this data privacy information page.

The following input masks exist on our website for the collection of personal data:

3.1 Performance Buildings

Our website offers the option of online booking. We use the service of Performance Buildings, Limmatquai 4, 8001 Zurich, Switzerland for the use and request.

We process the following personal data provided in the course of registration:

  • salutation

  • name and surname

  • phone number

  • company

  • company e-mail

  • adress

  • ZIP CODE

  • place

We collect this data to provide our services, to comply with our legal obligations, to respond to enforcement requests, to protect our rights and interests (or those of users or third parties) and to detect malicious or fraudulent activity.

In addition, we collect the data for the following purposes: Analytics, contacting the user, login and authentication and managing support and contact requests. Users can find more detailed information on these processing purposes and the personal data used for each purpose in the "Detailed information on the processing of personal data" section of this document.

In addition, the personal data will be transmitted to us, Design Offices GmbH, for contact purposes. This data will only be used to organize and carry out the requested booking and will not be passed on to third parties. Further information on the data protection practices of Performance Buildings can be found at: https://performancebuildings.ch/

As a user, you are responsible for all personal data of third parties that you disclose to us and confirm that you are legally authorized to transfer personal data of any third parties to Design Offices.

The data is processed by us and the location requested in the online booking.

3.2 Mollie B.V.

When using the online booking function on the website, we offer you the option of paying online. For this we use the service of Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, The Netherlands. Mollie B.V. uses "cookies" that are stored on your computer.

You can prevent the collection of your data by Mollie B.V. at any time at https://www.mollie.com/de/privacy. You can find the data privacy notice of Mollie B.V. at: https://www.mollie.com/de/privacy

3.3 CleverReach

If you would like to receive the newsletter offered on the website with regular information about our offers and products, we need your e-mail address. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed to us that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive future newsletters. By confirming, you give us your consent in accordance with Article 6 (1) (a) GDPR that we may use your personal data for the purpose of sending you the desired newsletter.

When you register for the newsletter, in addition to the e-mail address required for sending the newsletter, we store the IP address you used to register for the newsletter as well as the date and time of registration and confirmation in order to be able to trace possible misuse at a later date and to document your consent.

You can withdraw your consent to receive the newsletter at any time by clicking on the link provided in every newsletter or by sending an email to the controller named above (or to newsletter@designoffices.de). Once you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or the continued processing is permitted on another legal basis.

We use the services of our processor CleverReach GmbH & Co KG, Schafjückenweg 2, 26180 Rastede, Germany, to send the newsletter. We transmit the e-mail address and name to CleverReach for the purpose of sending the newsletter. CleverReach organizes and analyses the sending of our newsletter. We have concluded a data processing agreement within the meaning of Article 28 GDPR with CleverReach, in which we oblige CleverReach to protect our customers' data and not to pass it on to third parties. Further information on data privacy at CleverReach can be found at https://www.cleverreach.com/de/datenschutz/

3.4 Softgarden

If you provide us with personal data as part of the application process, it will be stored for collection, processing and/or use.

You can find a detailed data privacy notice for the application process at the following link: https://designoffices.softgarden.io/de/data-security

3.5 Clickmeeting

If you would like to register for a webinar offered by us, we need your e-mail address, first name, surname and company. We ask for this information in the registration form so that we can register you for the respective webinar.

We use the services of our processor ClickMeeting to conduct a webinar. The provider is ClickMeeting Spółka z ograniczoną odpowiedzialnością with its registered office at ul. Arkońska 6/A4, 80-387 Gdańsk, Poland.

When using ClickMeeting, various categories of participant data are processed. The data collected is stored on servers in Europe (Warsaw, Frankfurt, London and Strasbourg), with ClickMeeting deciding which server to use depending on the user's location. The scope of the data also depends on the data you provide before or when participating in a webinar.

As a rule, the following data is processed:

  • IP address

  • first and last name

  • e-mail

  • company

  • location data

  • web browser data

  • IP data of the device

  • In addition, data that you may provide in the chat history

The processing of the data collected serves to conduct webinars and to ensure smooth, functional and successful participation in them.

Personal data processed in connection with participation in webinars will not be passed on to third parties unless they are intended to be passed on. The provider of ClickMeeting necessarily receives knowledge of the above-mentioned data insofar as this is provided for in our data processing agreement with ClickMeeting.

To participate in a webinar, you enter into an agreement with us to conduct the webinar. The data processing activity for the implementation of a webinar is therefore carried out for the provision of our contractual services on the legal basis of Article 6 (1) (b) GDPR.

If it is necessary to obtain consent for certain processing operations, the personal data voluntarily provided by you in this context will be processed in accordance with Article 6 (1) (a) GDPR. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

Otherwise, the data processing activity is based on legitimate interests in accordance with Article 6 (1) (f) GDPR. The legitimate interests arise from the purposes for data processing activities mentioned.

Details on data processing activities can be found in ClickMeeting's data privacy notice at https://clickmeeting.com/de/legal.

3.6 Contact by e-mail

When you contact us by email, we collect and store your email address and the information from your request. We delete this data after storage is no longer required, or restrict processing if there are statutory retention obligations.

The purpose of the survey is to communicate with you. The e-mail address and other information from the request are processed in order to be able to answer your e-mail request.

The processing is carried out to fulfill the contract in accordance with Article 6 (1) (b) GDPR and on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR. The legitimate interest is based on the above-mentioned purposes.

3.7 Use of the online contact form

We use contact forms on several subpages. When you contact us via an online contact form, the data you provide (your e-mail address and the information from your message) is collected and stored by us. We delete this data after storage is no longer necessary or restrict processing if there are statutory retention obligations.

The contact form is used to contact us quickly and easily and is a service provided by us. Your e-mail address is collected in order to send us your request and answer it.

On certain subpages of our website, which present the various locations, we offer an online inquiry form as an additional service. We collect personal data via this form. We delete this data after storage is no longer required, or restrict processing if there are statutory retention obligations.

When you contact us via the online inquiry form, only your e-mail address is required. In addition, you can enter the following data voluntarily:

  • salutation

  • first name

  • surname

  • phone number

  • company

  • if applicable, further personal data from the request details

The inquiry form is used to contact us quickly and easily and is a service provided by us. Your e-mail address is collected in order to send us your request and to be able to reply to you. Your title and name are collected so that we can address you personally. Your telephone number is collected to enable us to contact you more quickly.

The processing is carried out to fulfill the contract in accordance with Article 6 (1) (b) GDPR and on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR. The legitimate interest is based on the above-mentioned purposes.

3.8 Matterport Inc.

Our website uses the services of our processor Matterport Inc, 352 E. Java Dr. Sunnyvale, CA 94089, USA. When a Matterport 3D tour is accessed via our website, a connection to the Matterport servers is established. The IP address, browser version and displaying device, origin and destination URL and the ID of the 3D tour are transmitted to the Matterport servers in the USA. The use of Matterport is in the interest of an appealing presentation of our online offers.

If you have a Matterport account and are logged in, you enable Matterport to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Matterport account.

In order to meet the requirements for the transfer of personal data outside the EU, we have concluded a Standard Contractual Clauses with the provider Matterport.

The legal basis for the processing of personal data is our legitimate interest in the proper presentation of the website and its functions in accordance with Article 6 (1) (f) GDPR.

Further information on how Matterport implements the GDPR and handles user data can be found in Matterport's data privacy notice at https://matterport.com/legal/privacy-policy/

4. Use of cookies and local storage

This website uses the following types of cookies and local storage, the scope and function of which are explained below:

  • transient cookies

  • persistent cookies/local storage

4.1 Transient cookies

Transient cookies are automatically deleted when you close the browser. In particular, they include session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you close the browser.

4.2 Persistent cookies/local storage

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser. The local memory can be deleted by scripts or manually.

4.3 Specific cookies used

Cookie/local storage

Category

Provider

Procedure

Test_cookie

Statistics

Google

1 day

__Host-next-auth.crsf-token

Necessary

www.designoffices.de

Session

__Secure-next-auth.callback-url

Necessary

www.designoffices.de

Session

Nextauth.message

Necessary

www.designoffices.de

Persistent

CONSENT

Statistics

Google

2 years

CookieConsent

Necessary

Cookiebot

1 year

li_gc

Marketing

LinkedIn

180 days

bscookie

Marketing

LinkedIn

1 year

sc_anonymous_id

Necessary

Matterport

Persistent

lidc

Preferences

LinkedIn

1 day

maps/gen_204

Preferences

www.designoffices.de

Session

_ga

Statistics

Google

2 years

_ga_#

Statistics

Google

2 years

_hjAbsoluteSessionInProgress

Statistics

Hotjar

1 day

OpanonConsent

Statistics

Hotjar

1 year

_hjFirstSeen

Statistics

Hotjar

1 day

_hjIncludedInSessionSample_#

Statistics

Hotjar

1 day

_hjSession_#

Statistics

Hotjar

1 day

_hjSessionUser_#

Statistics

Hotjar

1 year

_hjTLDTest

Statistics

Hotjar

Session

AnalyticsSyncHistory

Statistics

LinkedIn

30 days

ln_or

Statistics

LinkedIn

1 day

_pk_id#

Statistics

matomo.melantech.io

1 year

_pk_ref#

Statistics

matomo.melantech.io

6 months

_pk_ses#

Statistics

matomo.melantech.io

1 day

_hjRecordingEnabled

Statistics

www.designoffices.de

Session

_hjRecordingLastActivity

Statistics

www.designoffices.de

Session

hjActiveViewportIds

Statistics

www.designoffices.de

Persistent

hjViewportId

Statistics

www.designoffices.de

Session

td

Statistics

www.designoffices.de

Session

_fbp

Marketing

Meta Platforms, Inc.

3 months

_gcl_au

Marketing

Google

3 months

IDE

Marketing

Google

1 year

pagead/landing

Marketing

Google

Session

bcookie

Marketing

LinkedIn

1 year

li_sugr

Marketing

LinkedIn

3 months

UserMatchHistory

Marketing

LinkedIn

30 days

MUID

Marketing

Microsoft

1 year

_uetsid

Marketing

Microsoft

1 day

_uetvid

Marketing

Microsoft

1 year

LAST_RESULT_ENTRY_KEY

Marketing

YouTube

Session

LogsDatabaseV2:V#||LogsRequestsStore

Marketing

YouTube

Persistent

nextId

Marketing

YouTube

Session

remote_sid

Marketing

YouTube

Session

requests

Marketing

YouTube

Session

ServiceWorkerLogsDatabase#SWHealthLog

Marketing

YouTube

Persistent

TESTCOOKIESENABLED

Marketing

YouTube

1 day

VISITOR_INFO1_LIVE

Marketing

YouTube

180 days

YSC

Marketing

YouTube

Session

yt.innertube::nextId

Marketing

YouTube

Persistent

ytidb::LAST_RESULT_ENTRY_KEY

Marketing

YouTube

Persistent

YtIdbMeta#databases

Marketing

YouTube

Persistent

yt-remote-cast-available

Marketing

YouTube

Session

yt-remote-cast-installed

Marketing

YouTube

Session

yt-remote-connected-devices

Marketing

YouTube

Persistent

yt-remote-device-id

Marketing

YouTube

Persistent

yt-remote-fast-check-period

Marketing

YouTube

Session

yt-remote-session-app

Marketing

YouTube

Session

yt-remote-session-name

Marketing

YouTube

Session

_uetsid

Marketing

www.designoffices.de

Persistent

_uetsid_exp

Marketing

www.designoffices.de

Persistent

_uetvid

Marketing

www.designoffices.de

Persistent

_uetvid_exp

Marketing

www.designoffices.de

Persistent

pagead/1p-user-list/#

Marketing

www.designoffices.de

Session

VISITOR_PRIVACY_METADATA

Marketing

www.designoffices.de

180 days

4.4 Purposes

The use of cookies and local storage serves:

  • to display and use the website without restrictions,

  • to optimize user-friendliness and ease of use,

  • to derive purely statistical information,

  • to set preferences (e.g. language or region),

  • to evaluate user habits (tracking) and

  • direct mail marketing.

4.5 Legal basis of the processing

The legal basis for data processing activities using cookies or storage in local memory may be either a legitimate interest on our part or the consent of the user.

We have a legitimate interest in the use of cookies in accordance with Article 6 (1) (f) GDPR and § 25 (2) TTDSG, in particular in the use of strictly necessary cookies (see "necessary" above). No consent is required for this.

Consent is required for the use of all other types of cookies (e.g. marketing and statistics cookies) (Article 6 (1) (a) GDPR and § 25 (1) TTDSG), which can be given via the cookie banner displayed on our websites.

4.6 Possibility of rejecting cookies

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a report always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

5. Application and use of tracking and analysis tools and social plugins

5.1 Google

Unless otherwise stated in this data privacy notice, the operator of all Google services mentioned here is Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland ("Google").

5.1.1 Google Tag Manager

The "Google Tag Manager" service is used on this website. The Tag Manager is a tool for managing so-called tags, which are used for tracking in online marketing. The Tag Manager itself does not process any personal data, as it is used purely to manage other services - e.g. Google Analytics, etc.

Further information on the Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/use-policy.html

5.1.2 Google Ads and Google Conversion Tracking

This website uses the "Google Ads" service from Google. This service has the purpose of so-called "conversion tracking", i.e. we can recognize what happened after you clicked on one of our ads. Cookies are set for this purpose, which have a limited validity (30 days) and do not contain any personal data. It is therefore not possible to personally identify the user. The controller is Google. Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

In principle, your data will be processed in the EU if it is still personal. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/. The personal data transmitted by your browser as part of Google Ads will not be merged with other Google data.

The legal basis for the processing of your data and the storage of cookies by Google Ads is your consent in accordance with Article 6 (1) (a) GDPR. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page. If you want to prevent this tracking altogether, you can use the following link: https://support.google.com/ads/answer/7395996?hl=de.

5.1.3 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland, ("Google").

Google Analytics 4 uses so-called "cookies" (see point 4.2 above), text files which are stored on your computer and which enable your use of the website to be analyzed. The following data is processed for this purpose:

  • pages accessed

  • your behavior on the pages (e.g. length of stay, clicks, scrolling behavior)

  • your approximate location (country and city)

  • your IP address (in abbreviated form, so that no clear assignment is possible)

  • technical information such as browser, internet provider, end device and screen resolution

  • source of origin of your visit (i.e. via which website or advertising medium you came to us)

In principle, your data will be processed in the EU if it is still personal. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/. The personal data transmitted by your browser as part of Google Analytics will not be merged with other Google data.

When Google Analytics 4 is used, the IP is truncated by default, thus excluding any direct personal reference. If the data collected about you is therefore personally identifiable, it is immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the processing of your data and the storage of cookies by Google Analytics 4 is your consent in accordance with Article 6 (1) (a) GDPR. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

5.1.4 Google Maps

On this website we use Google Maps, a map service provided by Google.

This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under 4.2 (Use of cookies) of this declaration is transmitted. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

In principle, your data will be processed in the EU if it is still personal. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/. The personal data transmitted by your browser in the context of Google Maps will not be merged with other Google data.

The legal basis for the processing of personal data is your consent in accordance with Article 6 (1) (a) GDPR, which you have given on our website. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's data privacy notices. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

5.2 LinkedIn conversion tracking

On our website, we use the analysis and conversion tracking technology of the LinkedIn platform, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2 Ireland ("LinkedIn"). With the aforementioned LinkedIn technology, you can be shown more relevant advertising based on your interests. We also receive aggregated and anonymous reports from LinkedIn about advertising activity and information about how you interact with our website.

LinkedIn uses cookies for this purpose. These cookies are used to uniquely identify a web browser on a specific computer, are valid for 30 days and do not contain any personal data and are therefore not used to personally identify our website users. The cookie is used to analyze how you interact with our website (e.g. which website you came to us from, how long you stayed on our website, which offers you were interested in) and whether or not you are a member of the LinkedIn platform. The information collected using the cookie is used to compile the aforementioned anonymous statistics and reports and to display advertising based on your interests.

The legal basis for the processing of personal data is your consent in accordance with Article 6 (1) (a) GDPR, which you have given on our website. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

Regardless of whether you are a registered member of the LinkedIn platform or not, you can object to the analysis of your usage behavior by LinkedIn and the display of interest-based recommendations ("opt-out") by clicking on the "Reject on LinkedIn" (for LinkedIn members) or "Reject" (for other users) field at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Please note that opting out of such advertising does not remove ads from the pages you visit. It simply means that the ads you are shown are not necessarily tailored to your personal interests.

Further information on data privacy at LinkedIn can be found at https://de.linkedin.com/legal/privacy-policy.

5.3 Facebook pixel and "Facebook Custom Audiences"

On this website, we use the Facebook Pixel from Facebook, a social media network of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Meta"). The website also uses the remarketing function "Custom Audiences" of Meta Platforms Inc ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when they visit the Facebook social network or other websites that also use the process.

We use the marketing tool via a so-called Facebook pixel, which is integrated on our website. When you visit our website, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding website of our Internet presence or have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to find out and store your IP address and other identifying features. You can find out how the Facebook pixel is used for advertising campaigns at https://www.facebook.com/business/learn/facebook-ads-pixel.

In principle, your data will be processed in the EU if it is still personal. For the exceptional cases in which personal data is transferred to the USA, Meta has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/. The personal data transmitted by your browser to Meta will not be merged with other Meta data.

The legal basis for the processing of personal data is your consent in accordance with Article 6 (1) (a) GDPR, which you have given on our website. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

You can change your settings for advertisements on Facebook at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen if you are logged into Facebook. You can deactivate the "Facebook Custom Audiences" function (here) and for logged-in users at https://www.facebook.com/settings/?tab=ads#_.

For more information about Facebook's data processing activities, please visit https://www.facebook.com/about/privacy.

5.4 Integration of YouTube videos

We have integrated the YouTube service provided by Google into our website. This allows YouTube videos that are stored on http://www.YouTube.com to be played directly from our website. These are integrated in "extended data privacy mode". This means that data about you as a user will be transmitted to YouTube even if you do not play the videos. We have no influence on this data transfer.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists.

If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

In principle, your data will be processed in the EU if it is still personal. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/. The personal data transmitted by your browser to Google will not be merged with other Google data.

The legal basis for the processing of personal data is your consent in accordance with Article 6 (1) (a) GDPR, which you have given on our website. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the data privacy notice. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

5.5 Instagram

Our website also uses so-called social plugins ("plugins") from Instagram, offered by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Meta"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website.

In principle, your data will be processed in the EU if it is still personal. For the exceptional cases in which personal data is transferred to the USA, Meta has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/. The personal data transmitted by your browser to Google will not be merged with other Meta data.

The legal basis for the processing of personal data is your consent in accordance with Article 6 (1) (a) GDPR, which you have given on our website. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. You can find more information on this in Instagram's data privacy notice at https://instagram.com/about/legal/privacy/.

5.6 Salesviewer

This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes.

For this purpose, a javascript-based code is used to collect company-related data and use it accordingly. The data collected with this technology is encrypted using a non-reversible one-way function (so-called hashing). The data is immediately pseudonymized and is not used to personally identify the visitor to this website.

The data stored in the context of Salesviewer will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

The legal basis for the processing of personal data is your consent in accordance with Article 6 (1) (a) GDPR, which you have given on our website. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent the collection by SalesViewer® within this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click on this link again.

5.7 Google Fonts

This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. When you access a page, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. As a result, Google becomes aware that this website has been accessed via your IP address.

If your browser does not support Google Fonts, a standard font will be used by your computer.

In principle, your data will be processed in the EU if it is still personal. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/. The personal data transmitted by your browser to Google will not be merged with other Google data.

The legal basis for the processing of personal data is your consent in accordance with Article 6 (1) (a) GDPR, which you have given on our website. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page.

Further information on the handling of the transferred data can be found in the provider's data privacy notice at https://policies.google.com/privacy.

5.8 Hotjar

This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com). We have concluded a data processing agreement ("DPA") with Hotjar Ltd. in accordance with Article 28 GDPR.

Hotjar is a tool for analyzing your user behavior on our website. Hotjar allows us to record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you remain with the mouse pointer in a certain position. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website visitors prefer to look at.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your entries in a contact form (so-called conversion funnels).

Hotjar can also be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings.

Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They are used to make our website more user-friendly, effective and secure. In particular, these cookies can be used to determine whether our website has been visited with a specific end device or whether the Hotjar functions have been deactivated for the browser in question. Hotjar cookies remain on your device until you delete them.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

The legal basis for the processing of your data and the storage of cookies by Hotjar is your consent in accordance with Article 6 (1) (a) GDPR. You can withdraw or amend this consent at any time by clicking on the icon with the safety pin on it at the bottom left side of this page. You can also deactivate Hotjar altogether in your browser by following the instructions at: https://www.hotjar.com/opt-out.

For more information about Hotjar and the data collected, please refer to Hotjar's data privacy notice at https://www.hotjar.com/privacy.

6. Deletion, blocking and duration of storage of personal data

We process and store your personal data only for the period of time required to achieve the respective storage purpose or as provided for by the various retention periods stipulated by law.

After a storage purpose has ceased to exist or after the retention period prescribed by law has expired, the personal data is routinely blocked for further processing or deleted in accordance with the statutory provisions.

7. Data protection rights of the data subject

If you have any questions about your personal data, you can contact us in writing at any time. You have the following rights under the GDPR:

  • The right to information (Article 15 GDPR)

  • The right to rectification (Article 16 GDPR)

  • The right to erasure (Article 17 GDPR)

  • The right to restriction (Article 18 GDPR)

  • The right to data portability (Article 20 GDPR)

  • The right to object (Article 21 GDPR)

  • Right to withdraw consent under data protection law (Article 7 (3) GDPR)

  • Right of appeal to the data protection supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG Federal Data Protection Act)

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), P.O. Box 1349, 91504 Ansbach, phone: +49 (0) 981 180093-0, poststelle@lda.bayern.de

8. Legal basis of the processing

When processing personal data for which we obtain the consent of the data subject, Article 6 (1) (a) GDPR serves as the legal basis.

Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required for the performance of an agreement to which the data subject is a party. This provision also includes processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 (1) (b) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 (1) (f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the conduct of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.

9. Transmission of data to third parties

We generally do not sell user data. A transfer to third parties beyond the scope described in this data privacy notice only takes place if this is necessary for the processing of the respective requested service.

We only transfer data if there is a legal obligation to do so. This is the case if state institutions (e.g. law enforcement authorities) request information in writing or if a court order has been issued.

A transfer of personal data to so-called third countries outside the EU/EEA does not take place except in the cases mentioned in this data privacy notice.

10. Legal or agreement provisions on the provision of personal data and possible consequences of non-provision

We hereby point out that the provision of personal data is required by law in certain cases (e.g. tax regulations) or may result from contractual regulations (e.g. information on the contractual partner). For example, in order to conclude a contract, it may be necessary for the data subject/contractual partner to provide their personal data so that we can process their request (e.g. order) in the first place. An obligation to provide personal data arises above all when concluding a contract. If no personal data is provided in this case, the agreement with the data subject cannot be concluded. Before the data subject provides personal data, the data subject can contact our data protection officer or the controller. The data protection officer or controller will then clarify to the data subject whether the provision of the required personal data is required by law or contract or is necessary for the conclusion of the agreement and whether the data subject's concerns give rise to an obligation to provide the personal data or what consequences the failure to provide the requested data will have for the data subject.

11. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling in our business relationships.

12. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries or booking information that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

13. Data protection information regarding video and photo recordings

We are the organizer of numerous events. As part of the events, photo and/or video recordings (hereinafter referred to as "recordings") may be made of you as a participant. Against this background, we inform you below in accordance with Article 13 GDPR about the processing of your personal data:

13.1 Purposes of data processing activities and legal basis

The recordings are made and used for the purposes of our public relations work. The legal basis for processing is Article 6 (1) (a) GDPR if you have consented to the processing of your recordings or Article 6 (1) (f) GDPR if we have a legitimate interest in processing the data.

13.3 Categories of personal data

Recordings of the participants, place and time of the recordings

13.4 Recipients of the personal data

We may commission internal and external photographers to take the photographs. If we commission an external photographer, they will only process your personal data in accordance with our instructions.

13.5 Storage period

Recordings that are not used after the event will be deleted immediately. The recordings used will be stored for a maximum period of three years and then deleted.

13.6 Rights of the person depicted

If you are photographed during an event, you have the rights against us listed in section 7.