Privacy policy
We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the allcolor Malerbedarf GmbH. The use of the Internet pages of the allcolor Malerbedarf GmbH is possible without any indication of personal data. However, if a person concerned wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the allcolor Malerbedarf GmbH. By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this privacy policy. As the controller, the allcolor Malerbedarf GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

A. General information
1. name and address of the controller:

allcolor Malerbedarf GmbH
Siemensstrasse 9
91183 Abenberg - Germany
Telephone: +49 (9178) 9801-0
Fax: +49 (9178) 9801-30
E-mail: info@allcolor.de
Website: www.gaffer-tape.de

For further information about our company, please refer to the legal notice on our website www.gaffer-tape.de/gaffer_en/impressum.

2. name and address of the data protection officer:
Any data subject can contact our data protection officer at any time with questions or suggestions regarding data protection.

His contact details are:

allcolor Malerbedarf GmbH
Chr. Leichtenstern
Siemensstraße 9
91183 Abenberg - Germany
E-Mail: datenschutz@allcolor.de

3. legal basis for data processing:
In principle, any processing of personal data is prohibited by law and is only permitted if the data processing falls under one of the following justifications:
- Art. 6 para. 1 sentence 1 lit. a GDPR ("consent"): Where the data subject has voluntarily, in an informed and unambiguous manner, indicated by a statement or other unambiguous affirmative act that he or she consents to the processing of personal data relating to him or her for one or more specific purposes;
- Art. 6 para. 1 sentence 1 lit. b GDPR: If the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- Art. 6 para. 1 sentence 1 lit. c GDPR: If the processing is necessary for compliance with a legal obligation to which the controller is subject (e.g. a statutory retention obligation);
- Art. 6 para. 1 sentence 1 lit. d GDPR: Where processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- Art. 6 para. 1 sentence 1 lit. e GDPR: If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
or
- Art. 6 para. 1 sentence 1 lit. f GDPR ("Legitimate interests"): Where processing is necessary for the purposes of the legitimate (in particular legal or economic) interests pursued by the controller or by a third party, except where such interests are overridden by the interests or rights of the data subject which require protection of personal data (in particular where the data subject is a minor).

The storage of information in the end user's terminal equipment or access to information that is already stored in the terminal equipment is only permitted if it is covered by one of the following justifications:
- Section 25 (1) TDDDG: If the end user has consented on the basis of clear and comprehensive information. Consent must be given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR;
- Section 25 para. 2 no. 1 TDDDG: If the sole purpose is to carry out the transmission of a communication over a public telecommunications network or
- Section 25 para. 2 no. 2 TDDDG: If the storage or access is absolutely necessary so that the provider of a telemedia service can provide a telemedia service expressly requested by the user.

For the processing operations we carry out, we indicate the applicable legal basis in each case below. Processing can also be based on several legal bases.

4 Data erasure and storage duration:
For the processing operations carried out by us, we indicate below how long the data will be stored by us and when it will be deleted or blocked. Unless an explicit storage period is specified below, your personal data will be erased or blocked as soon as the purpose or legal basis for storage no longer applies. Your data will only be stored on our servers in Germany.

However, your data may be stored beyond the specified period in the event of an (impending) legal dispute with you or other legal proceedings or if storage is provided for by statutory provisions to which we are subject as the controller (e.g. Section 257 HGB, Section 147 AO). If the storage period prescribed by the statutory provisions expires, the personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.

5 Data security:
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties (e.g. TLS encryption for our website), taking into account the state of the art, the implementation costs and the nature, scope, context and purpose of the processing as well as the existing risks of a data breach (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments.

We will be happy to provide you with more detailed information on request. Please contact our data protection officer (see A. 2).

6. cooperation with processors:
We use external service providers to process our business transactions (e.g. for the areas of IT, logistics, telecommunications, sales and marketing). These service providers only act in accordance with our instructions and are contractually obliged to comply with data protection regulations within the meaning of Art. 28 GDPR.

7. conditions for the transfer of personal data to third countries: As part of our business relationships, your personal data may be transferred or disclosed to third party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing takes place exclusively for the fulfillment of contractual and business obligations and to maintain your business relationship with us (legal basis is Art. 6 para. 1 lit. b or lit. f in each case in conjunction with. Art. 44 et seq. GDPR). We will inform you about the respective details of the transfer at the relevant points below.

The European Commission certifies that some third countries have data protection standards comparable to the EEA standard by means of so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible via binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data pursuant to Art. 46 para. 1, 2 lit. c GDPR (the standard contractual clauses of 2021 are available at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D0915&locale-en), certificates or recognized codes of conduct. Please contact our data protection officer (see A. 2. if you would like more information on this).

8. no automated decision-making (including profiling):
We do not intend to use personal data collected from you for any automated decision-making process (including profiling).

9. legal obligation to transfer certain data:
We may be subject to a specific legal or statutory obligation to provide the lawfully processed personal data to third parties, in particular public authorities (Art. 6 para. 1 sentence 1 lit. c GDPR).

10. your rights:
ou can assert your rights as a data subject with regard to your processed personal data at any time by contacting us using the contact details provided at the beginning under A. 2. As the data subject, you have the right to:

- to request information about your data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect data or the completion of your data stored by us
- in accordance with Art. 17 GDPR, to request the erasure of your data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful;
- in accordance with Art. 20 GDPR, to receive your data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller ("data portability")
- pursuant to Art. 21 GDPR, to object to the processing if the processing is based on Art. 6 para. 1 sentence 1 lit. e or lit. f GDPR. This is particularly the case if the processing is not necessary for the performance of a contract with you. If it is not an objection to direct advertising, we ask you to explain the reasons why we should not process your data as we have done when exercising such an objection. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing;
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given (even before the GDPR came into force, i.e. before 25.5.2018) - i.e. your voluntary, informed and unequivocal declaration or other unambiguous confirmatory act that you consent to the processing of the personal data concerned for one or more specific purposes - at any time, if you have given such consent. As a result, we may no longer continue the data processing that was based on this consent in the future and
- in accordance with Art. 77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data in our company, for example to the data protection supervisory authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, email: poststelle@lda.bayern.de.

11. changes to the data protection information:
As part of the further development of data protection law and technological or organizational changes, our data protection notices are regularly reviewed to determine whether they need to be adapted or supplemented. This data protection notice was last updated in March 2024

B. Visiting our website www.gaffer-tape.de

1. explanation of the function:
Information about our company and the services we offer can be found in particular at www.gaffer-tape.de. When you visit our website, your personal data may be processed.

2. processed personal data:
Collection of general data and information (log data) Our website collects a series of general data and information each time it is accessed by a data subject or an automated system. This general data and information is stored in the server log files. The following can be recorded:

- the browser types and versions used
- the operating system used by the accessing system
- the website from which an accessing system accesses our website
- the sub-websites which are accessed via an accessing system on our website
- the date and time of access to the website - an internet protocol address
- the Internet service provider of the accessing system and other similar data and information used for security purposes in the event of attacks on our systems

When using this general data and information, allcolor Malerbedarf GmbH does not draw any conclusions about the data subject. This information is required exclusively to correctly deliver the contents of our website, to optimize the contents of our website and the advertising for it, to ensure the long-term functionality of our IT systems and the technology of our website and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. Therefore, allcolor Malerbedarf GmbH analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject. This data is not passed on to third parties unless there is a legal obligation to pass it on or it serves the purpose of criminal prosecution. Your data will only be processed for as long as is necessary to achieve the above-mentioned processing purposes. The legal basis for the processing of log data is Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR.

Communication via e-mail, post, fax or telephone (contact form data)
We process personal data for the purposes of advertising communication or for processing customer inquiries, which can be carried out via various channels, such as e-mail, telephone, post or fax, in accordance with the legal requirements. Recipients have the right to withdraw their consent at any time or to object to promotional communication at any time. After revocation or objection, we store the data required to prove the previous authorization for contacting or sending for up to three years after the end of the year of revocation or objection on the basis of our legitimate interests. The processing of this data is limited to the purpose of a possible defense against claims. On the basis of the legitimate interest in permanently observing the revocation or objection of the user, we also store the data required to avoid renewed contact (e.g. depending on the communication channel, the e-mail address, telephone number, name). The legal basis for the processing of contact form data is Art. 6 para. 1 sentence lit. b or lit. f GDPR.

- Scope and purpose of data collection
If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes during interviews, etc.) insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application. Outside the company, personal data is processed exclusively on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by host providers or web agencies. Personal data will not be transferred to countries outside the European Union. If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.

- Retention period of the data
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies. Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.

3. transfer of personal data to third parties; basis for justification
The following categories of recipients, which are usually processors (see A. 6), may receive access to your personal data:

- Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR, unless they are processors;
- Government agencies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the disclosure is then Art. 6 para. 1 sentence 1 lit. c GDPR;
- Persons employed to carry out our business operations or contract processing (e.g. transport companies, auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures).

The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR. For the guarantees of an appropriate level of data protection when transferring data to third countries, see A. 7. In addition, we only pass on your personal data to third parties if you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4 Use of cookies, web analytics and social media plugins
a) Cookie
The Internet pages of allcolor Malerbedarf GmbH use cookies. Cookies are text files that are placed and stored on a computer system via an internet browser. They are used to make the website more user-friendly and effective overall. Cookies can contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that are not personally identifiable. However, cookies cannot directly identify a user.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, a distinction is made between cookies:

Essential or necessary cookies
They are only set by the website operator in order to display the content correctly and to maintain the basic functions. They can therefore neither be activated nor deactivated and are always permitted without extra consent. Cookies ensure the operation of the website. For example, the shopping cart in the purchase process, login data or language settings are also supported by cookies.

Functional cookies
Functional cookies improve the use of the website through additional content or other fonts in Web 2.0. For example, videos from YouTube or social media can be integrated into the site in this way and represent added value for the user. Login data, user name or language selection are also saved. However, the information is anonymized and does not store any personal data. However, the use of functional cookies must be actively consented to.

Statistical cookies - to optimize the site
Performance cookies serve a central measurement procedure and the analysis of user behavior. They check exactly how users arrived at the website and how they moved around the site. Operators also receive information on how long users stay on the site and which areas they have clicked on. The data helps to further optimize the offer and the site itself.

The interests of the user are also determined from the movement on the page, the clicks and the scrolling with the mouse. It is possible to trace which search terms ultimately led to a visit to the site. The cookies relate not only to the main page, but also to the subpages. In addition, the country, region and city of access are stored. You must also actively agree to these cookies. However, no personal data, such as your IP address, is stored. This means that surfing behavior cannot be traced back to an individual user. The purpose of storing cookies is to analyze and improve the performance of the website (e.g. with Google Analytics).

Marketing cookies - analyze user behavior
Marketing cookies store precise user data and analyze the user's behavior over a longer period of time. They are also known as targeting cookies and are used by the website operator itself and by third parties. The aim is to identify interests in topics and products and to display targeted advertisements or product suggestions. The advertisements displayed on a website are then based on the user's interests and are more likely to entice them to make a purchase.

User behavior is recorded across domains. So if you visit an online store and then continue browsing, you may later see advertisements from the online store. Consent is always required for these cookies. It is therefore possible to simply object to marketing cookies.

b) Cookie policy
For more information about which cookies we use and how you can manage your cookie settings and disable certain types of tracking, please see our cookie settings.

c) Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

The web analysis is used to evaluate the flow of visitors to our online offer and may include behavior, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, recognize at what time our online offer or its functions or content are most frequently used or invite reuse. We can also understand which areas require optimization. In addition to web analysis, we may also use test procedures, e.g. to test and optimize different versions of our online offering or its components. Unless otherwise stated below, profiles, i.e. data summarized for a usage process, can be created for these purposes and information can be stored in a browser or in a terminal device and read out from it. The information collected includes, in particular, websites visited and the elements used there as well as technical information such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data from us or from the providers of the services we use, location data may also be processed. The IP addresses of users are also stored. However, we use an IP masking procedure (i.e. pseudonymization by shortening the IP address) to protect users. In general, no clear user data (such as e-mail addresses or names) is stored in the context of web analysis, A/B testing and optimization, but pseudonyms. This means that neither we nor the providers of the software used know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.

- IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

- Browser plugin
SYou may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

- Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website:
Deactivate Google Analytics. You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

- Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

- Demographic characteristics with Google Analytics
This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

- Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=en.

Google My Business
Our pages use functions of Google My Business. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Collection and disclosure of information: You can use the Google My Business button to publish information worldwide. The Google My Business button allows you and other users to receive personalized content from Google and our partners. Google stores both the information you have provided for content in Google My Business and information about the page you viewed when you clicked on Google My Business. Your Google My Business content may be displayed as a reference along with your profile name and photo in Google services, such as in search results or in your Google profile, or elsewhere on websites and advertisements on the Internet. Google records information about your Google My Business activities in order to improve Google My Business services for you and others. To be able to use the Google My Business button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name can also replace another name that you have used when sharing content via your Google account. The identity of your Google profile may be displayed to users who know your e-mail address or have other identifying information about you. Use of the information collected: In addition to the uses explained above, the information you provide will be used in accordance with the applicable Google privacy policy https://policies.google.com/privacy. Google may publish summarized statistics about users' Google My Business activities or share them with users and partners, such as publishers, advertisers or affiliated websites.

Google Analytics 4
We use Google Analytics to measure and analyze the use of our online offering on the basis of a pseudonymous user identification number. This identification number does not contain any unique data, such as names or email addresses. It is used to assign analysis information to an end device in order to recognize which content users have called up within one or more usage processes, which search terms they have used, which they have called up again or which they have interacted with our online offering. The time of use and its duration are also stored, as well as the sources of the users who refer to our online offering and technical aspects of their end devices and browsers. Pseudonymous profiles of users are created with information from the use of various devices, whereby cookies may be used. Analytics provides higher-level geographic location data by collecting the following metadata based on IP searches: "city" (and the derived latitude and longitude of the city), "continent", "country", "region", "subcontinent" (and the ID-based equivalents). To ensure the protection of user data in the EU, Google receives and processes all user data via domains and servers within the EU. The IP address of users is not logged and is shortened by the last two digits by default. The IP address is shortened on EU servers for EU users. In addition, all sensitive data collected from users in the EU is deleted before it is collected via EU domains and servers; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Data processing agreement: https://business.safety.google/adsprocessorterms/; Standard contractual clauses (Safeguarding the level of data protection when processing data in third countries): https://business.safety.google/adsprocessorterms; Opt-out: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for the display of advertisements: https://adssettings.google.com/authenticated; Further information: https://privacy.google.com/businesses/adsservices (Types of processing and data processed).

Google Tag Manager
Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate other services into our online offering (please refer to further information in this privacy policy). The Tag Manager itself (which implements the tags) does not create user profiles or store cookies, for example. Google only learns the IP address of the user, which is necessary to run the Google Tag Manager; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Data processing agreement: https://business.safety.google/adsprocessorterms; Standard contractual clauses (Safeguarding the level of data protection when processing data in third countries): https://business.safety.google/adsprocessorterms.

d) Social media plugins
We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below.

Social networks such as Facebook, Google+ etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations.

- In detail
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or have been logged in. Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

- Legal basis
Our social media presences are intended to ensure the widest possible presence on the internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).

- Controller and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook). Please note that, despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

- Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions, in particular retention periods, remain unaffected. We have no influence on the storage period of your data that is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Facebook
We have a profile on Facebook. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified in accordance with the EU-US Privacy Shield.

We have concluded an agreement with Facebook on joint processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads. Details can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

Instagram
We have a profile on Instagram. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal data, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875.

YouTube
This website embeds videos from YouTube. We have also set up a YouTube channel where you can watch videos from us. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

- Integration on the website
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube may store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts. If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=en. An opt-out is possible at: https://adssettings.google.com/authenticated. Information on the Privacy Shield (US data protection certificate) can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. You can also assert your usage rights directly with the provider.

- YouTube channel
You can subscribe to our channel to stay informed about new videos from us. According to your privacy settings, we can see that you have subscribed to our channel. If you make comments, likes or other interactions, you must comply with the provider's privacy policy. As the platform operator, YouTube processes the personal data of its users and visitors, creates statistics and, where applicable, user profiles and uses the data for advertising purposes. The data can also be used for market and opinion research. Your information is collected via cookies and can be supported by the fact that you are logged in to the platform. This processing is based on the legitimate interest of the controller pursuant to Art. 6 (1) lit. b GDPR to provide you with the best possible information about our service. As the operator of the company website, we have no influence on YouTube's processing. Further information on the processing of data by YouTube can be found at: https://policies.google.com/privacy. An opt-out is possible at: https://adssettings.google.com/authenticated. Information on the Privacy Shield (US data protection certificate) can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. You can also assert your rights of use directly with the provider.

Vimeo
This website embeds videos from the provider Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011.

- Integration on the website
We have embedded our videos with the so-called DNT parameters (DNT = Do Not Track) in order to provide you with a privacy-friendly view. When you play the videos, a connection to a Vimeo server is established. This transmits your IP address, the URL of the page visited and HTTP header information (e.g. the browser used, the operating system used, the resolution and the language set) to Vimeo. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. If you have logged in with an account from Facebook Ltd, Google Inc. or Apple Inc, Vimeo also receives access to the data of the selected account. When you use the service, such as clicking the start button of a video, this information is also assigned to your user account or one of the other accounts. You can prevent this assignment by logging out of your Vimeo user account and other user accounts of Facebook Ltd., Google Inc. or Apple Inc. before using our website and deleting the corresponding cookies from the companies. Further information on data processing and information on data protection by Vimeo can be found online at https://vimeo.com/privacy.