The person responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Sandra Büttner

YOUR RIGHTS AS A DATA SUBJECT

You can exercise the following rights at any time using the contact details provided by our data protection officer:

• Information about your data stored by us and its processing (Art. 15 DSGVO),
• Correction of incorrect personal data (Art. 16 DSGVO),
• deletion of your data stored by us (Art. 17 DSGVO),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
• objection to the processing of your data by us (Art. 21 DSGVO) and
• Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us your consent, you can revoke it at any time with effect for the future. You can contact a supervisory authority with a complaint at any time, e.g. the competent supervisory authority in the federal state in which you live or the authority responsible for us as the responsible body. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

COLLECTION OF GENERAL INFORMATION WHEN VISITING OUR WEBSITE

Nature and purpose of processing:

When you access our website, i.e. if you do not register or otherwise provide information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar. It is processed in particular for the following purposes:

• Ensuring a problem-free connection of the website,
• Ensuring a smooth use of our website,
• Evaluation of system security and stability, and
• for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.

Legal basis:

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Save Length;

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.

CONTACT FORM

Nature and purpose of processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR). By providing the contact form, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions. If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).

Recipient:

Recipients of the data are, if applicable, order processors.

Save Length;

Data will be deleted no later than 6 months after the request has been processed. If a contractual relationship is established, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

USE OF SCRIPT LIBRARIES (GOOGLE WEBFONTS)

Nature and purpose of processing:

In order to display our content correctly and graphically appealing across all browsers, we use "Google Web Fonts" from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google") to display fonts on this website. The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - although it is currently unclear whether and for what purposes - that the operator collects Google data in this case.

Save Length;

We do not collect any personal data by integrating Google Web Fonts. For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of personal data is neither legally nor contractually required. However, the correct display of the content may not be possible due to standard fonts.

Withdrawal of consent:

The programming language JavaScript is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

EMBEDDED YOUTUBE VIDEOS

Nature and purpose of processing:

We embed YouTube videos on some of our websites. The operator of the corresponding plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plug-in, a connection is established to YouTube servers. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. When a YouTube video is started, the provider uses cookies that collect information about user behavior. You can find more information about the purpose and scope of data collection and processing by YouTube in the provider's privacy policy. There you will also find more information about your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Calling up YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:

Anyone who has deactivated the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser. Further information on data protection at "YouTube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 Paragraph 1 Letter f of GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 Paragraph 1 Letter a of GDPR; the consent can be revoked at any time.

SOCIAL PLUGINS

Nature and purpose of processing:

Our websites use social plugins from the providers listed below. You can recognize the plugins by the fact that they are marked with the corresponding logo. These plugins may send information, which may also include personal data, to the service provider and may be used by them. We prevent the unconscious and unwanted collection and transmission of data to the service provider using a 2-click solution. To activate a desired social plugin, it must first be activated by clicking on the corresponding switch. Only when the plugin is activated does the collection of information and its transmission to the service provider occur. We do not collect any personal data ourselves using the social plugins or through their use. We have no influence on which data an activated plugin collects and how this data is used by the provider. At present, it must be assumed that a direct connection to the provider's services will be established and that at least the IP address and device-related information will be collected and used. It is also possible that the service providers will try to store cookies on the computer used. Please refer to the privacy policy of the respective service provider to find out which specific data is collected and how it is used. Note: If you are logged into Facebook at the same time, Facebook can identify you as a visitor to a specific page. We have integrated the social media buttons of the following companies on our website: Instagram - www.instagram.com Youtube - www.youtube.com Facebook - www.facebook.com Xing - www.xing.de LInkedin - www.linkedin.de

SSL ENCRYPTION

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

CHANGES TO OUR DATA PROTECTION REGULATIONS

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

QUESTIONS TO THE DATA PROTECTION OFFICER

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organisation directly: The data protection declaration was created with the help of activeMind AG, the experts for External data protection officers (Version #2019-04-10).