Data Privacy Policy

Privacy policy

1) Information on the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about how we handle your personal data when you use our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website in terms of the Data Protection Basic Regulation (DSGVO) is AURIO Musikverlag GmbH, Am Sonnenberg 13, 86424 Grünenbaindt, Germany, Tel.: 0821 89983020, E-Mail: post@aurio-verlag.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential contents (e.g. orders or inquiries to the responsible person), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

2) Data collection when visiting our website

When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called “server log files”). When you call up our website, we collect the following data, which are technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the site
  • Used Browser
  • Operating system used
  • IP address used (if necessary: in anonymised form)

Processing is carried out in accordance with Art. 6 Para. 1 letter f DSGVO on the basis of our justified interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal device and enable us to recognise your browser the next time you visit us (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data are also processed by individual cookies used by us, processing is carried out in accordance with Art. 6 Para. 1 letter b DSGVO either for the execution of the contract, in accordance with Art. 6 Para. 1 letter a DSGVO in the case of a granted consent or in accordance with Art. 6 Para. 1 letter f DSGVO to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for each browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that in case of non-approval

4) Making contact

Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f DSGVO. If your contact is aimed at the conclusion of a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case if it can be deduced from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5) Data processing when opening a customer account and for contract processing

In accordance with Art. 6 Para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide us with this information for the purpose of executing a contract or opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be done by sending a message to the above mentioned address of the responsible person. We store and use the data you provide us with to process the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us.

6) Use of your data for direct advertising

6.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will send you regular information about our offers. Your e-mail address is the only mandatory information for sending the newsletter. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you agree to receive newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. When you register for the newsletter, we save your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising in the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned above. After you have cancelled your subscription, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this declaration.

6.2 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers on similar goods or services from our product range by e-mail. In accordance with § 7 paragraph 3 UWG we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our justified interest in personalised direct advertising in accordance with Art. 6 Para. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the above-mentioned advertising purpose at any time with effect for the future by notifying the person responsible named at the beginning of this document. For this you will only incur transmission costs according to the basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will be immediately discontinued.

6.3 Newsletter dispatch via CleverReach

Our e-mail newsletters are sent by the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany (“CleverReach”), to whom we pass on the data you provided during the newsletter registration. This disclosure is carried out in accordance with Art. 6 para. 1 lit. f DSGVO and serves our legitimate interest in the use of a promotionally effective, secure and user-friendly newsletter system. The data you enter to subscribe to the newsletter (e.g. e-mail address) will be stored on the CleverReach servers in Germany or Ireland.

CleverReach uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the newsletters sent by e-mail contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. In this way it can be determined whether a newsletter message was opened and which links were clicked on, if applicable. Conversion tracking can also be used to analyse whether a previously defined action (e.g. purchase of a product on our website) was carried out after clicking on such links. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is only collected pseudonymously and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have entered into a contract with CleverReach with which we commit CleverReach to protect our customers’ data and not to pass it on to third parties.

You can read more information about CleverReach’s data analysis here:
https://www.cleverreach.com/de/funktionen/reporting-und-tracking/
You can view the CleverReach privacy policy here:
https://www.cleverreach.com/de/datenschutz/.

6.4 Advertising by letter post

On the basis of our justified interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the scope of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 Para. 1 letter f DSGVO and to use this information to send you interesting offers and information on our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.

6.5 Notification of availability of goods by e-mail

If we offer the possibility in our online shop for selected, temporarily unavailable items to inform you by e-mail about the time of availability, you can register for our e-mail notification service for the availability of goods. If you register for our e-mail notification service for the availability of goods, we will send you a one-time e-mail message about the availability of the item you have selected. Your e-mail address is the only mandatory information for sending this notification. The provision of further data is voluntary and may be used to contact you personally. We use the so-called double opt-in procedure for sending this notification. This means that we will only send you a corresponding notification if you have expressly confirmed to us that you agree to receive such a message. We will then send you a confirmation e-mail asking you to click on a link to confirm that you wish to receive such notification.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for our e-mail notification service on product availability, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for our e-mail notification service for product availability is used exclusively for the purpose of informing you about the availability of a particular item in our online shop. You can use the e-mail notification service

7) Data processing for order processing

7.1 In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the assigned credit institute within the scope of the payment processing, as far as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.

7.2 Use of special service providers for order processing and handling

– Amazon Fulfillment (FBA)
The order processing is carried out by the service provider “Amazon” (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg) within the framework of “Shipping by Amazon” (= Fulfillment by Amazon). Your personal data is passed on to Amazon exclusively for the purpose of processing your online order. The data is passed on in accordance with Art. 6 para. 1 lit. b DSGVO and only to the extent necessary for order processing. Details of Amazon’s data protection and its data protection declaration can be viewed at the following link: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

7.3 Transfer of personal data to shipping service providers

– German Post
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your e-mail address to Deutsche Post in accordance with Art. 6 Para. 1 letter a DSGVO prior to delivery of the goods for the purpose of coordinating a delivery date or to announce delivery, provided that you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. This information is only passed on to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with Deutsche Post or the delivery announcement is not possible.
The consent can be revoked at any time with future effect vis-à-vis the responsible person named above or vis-à-vis Deutsche Post.
– DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 letter a DSGVO before the goods are delivered for the purpose of coordinating a delivery date or to announce delivery, provided that you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO. This information is only passed on to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery announcement is not possible.
The consent can be revoked at any time with future effect vis-à-vis the above-mentioned responsible party or the transport service provider DHL.
– GLS
If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we will pass on your e-mail address to GLS in accordance with Art. 6 Para. 1 letter a DSGVO prior to delivery of the goods for the purpose of coordinating a delivery date or to announce delivery, provided that you have given your express consent to this in the ordering process.- Otherwise, we will only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO. The passing on is only carried out as far as this is necessary for the delivery of goods. In this case a prior coordination of the delivery date with GLS or the transmission of status information of the delivery of the consignment is not possible.
The consent can be revoked at any time with effect for the future against the above-mentioned responsible person or against the transport service provider GLS.
– UPS

If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany), we will pass on your e-mail address to UPS prior to delivery of the goods in accordance with Art. 6 Para. 1 letter a DSGVO for the purpose of coordinating a delivery date or to announce delivery, provided that you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO. This information is only passed on to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or the transmission of status information on the delivery of the consignment is not possible.
Consent may be revoked at any time with future effect vis-à-vis the person responsible as described above or vis-à-vis the transport service provider UPS.

7.4 Use of payment service providers (payment services)

– Amazon Pay
If you select the “Amazon Pay” payment method, the payment is processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter referred to as “Amazon Payments”), to whom we pass on the information you provided during the ordering process, together with the information about your order, in accordance with Art. 6 para. 1 lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find more information about Amazon Payments’ privacy policy at the following Internet address: https://pay.amazon.com/de/help/201751600
– Heidelpay
If you pay by credit card via Heidelpay!, the payment will be processed by the payment service provider Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter referred to as “Heidelpay”), to whom we will forward your data provided during the ordering process exclusively for the purpose of processing the payment in accordance with Art. 6 para. 1 lit. b DSGVO. The data will only be passed on to the extent that it is actually necessary for the processing of payment. Heidelpay will in turn transfer your data to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, in order to process the payment – if necessary for this purpose – in accordance with Art. 6 Paragraph 1 Letter b DSGVO.
If you select the payment method “purchase on account via Heidelpay” or “direct debit via Heidelplay”, you will be asked to provide your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the ordering process. In order to protect our legitimate interest in determining the solvency of our customers, we will forward this data in accordance with Art. 6 Para. 1 letter f DSGVO for the purpose of a credit assessment to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg (hereinafter “Heidelpay”). Heidelpay checks on the basis of the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option selected by you can be granted with regard to payment and/or bad debt risks. In accordance with Art. 6 Para. 1 letter f DSGVO, identity or creditworthiness information from the following credit agencies can also be included in the decision on the establishment or execution of a contractual relationship:
– SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
– CRIF Bürgel GmbH, Friesenweg 4, House 12, 22763 Hamburg
– Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
– Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
– UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
– Bisnode International Group, Robert-Bosch-Strasse 11, 64293 Darmstadt
– Regis24 GmbH, Wallstraße 58, 10179 Berlin
– Creditreform AG, Hellersbergstrasse 12, 41460 Neuss

The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to Heidelpay. However, Heidelpay may still be entitled to process your personal data if this is necessary for the contractual payment processing.
– Klarna
If a Klarna payment service is selected, the payment will be processed by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna). In order to enable the processing of the payment, your personal data (name, surname, street, house number, postcode, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, item, delivery method) will be passed on to Klarna for the purpose of identity and credit assessment, provided that you have expressly agreed to this in accordance with article 6 paragraph 1 letter a DSGVO during the ordering process. Here you can see to which credit agencies your data can be forwarded:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. Klarna uses the information obtained on the statistical probability of payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship.
You may withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still process your personal data if this is necessary to process your payment in accordance with the contract.
Your personal data will be processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s data protection regulations for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for persons concerned with a registered office in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.
– Paypal
In the case of payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) within the framework of the payment processing. The data will be passed on in accordance with Art. 6 para. 1 lit. b DSGVO and only to the extent necessary for the processing of payments.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 para. 1 lit. f DSGVO on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit assessment with regard to the statistical probability of non-payment to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. Further information on data protection, including information on the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process your payment in accordance with the contract.
– IMMEDIATELY
If you select the payment method “IMMEDIATELY”, the payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “IMMEDIATELY”), to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b DSGVO. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The passing on of your data takes place exclusively for the purpose of payment processing with the payment service provider IMMEDIATELY and only insofar as it is necessary for this purpose. You can find more information about the privacy policy of SOFORT at the following internet address: https://www.klarna.com/sofort/datenschutz.
– Stripe
If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provide during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. Your data will be passed on exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information about the data protection of Stripe can be found under the URL https://stripe.com/de/privacy#translation.

8) Use of rating and seal of approval graphics

Trusted Shops Trust Badge

To display our Trusted Shops seal of approval and to offer the Trusted Shops membership to buyers after an order, the Trusted Shops trust badge is integrated on this website.

This serves the protection of our in the context of a balancing of interests predominant entitled interests in an optimal marketing of our offer, art. 6 exp. 1 lit. f DSGVO. The Trustbadge and the services advertised thereby are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the trustbadge is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.

Other personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for use. In this case the contractual agreement met between you and Trusted Shops applies.

9) Use of social media: Social Plugins

9.1 Facebook plugins with Shariff solution

Our website uses so-called social plugins (“Plugins”) of the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

In order to increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only by using an HTML link in the page. This type of integration ensures that no connection to the Facebook servers is established when you call up a page of our website that contains such buttons. If you click on the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins there (if necessary after entering your login data).

For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to Facebook’s data protection information: https://www.facebook.com/policy.php

9.2 Instagram plugin as Shariff solution

On our website we use so-called social plugins (“Plugins”) of the Instagram online service, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

In order to increase the protection of your data when you visit our website, these buttons are not fully integrated as plug-ins, but are simply incorporated into the page using an HTML link. This type of integration ensures that no connection is made to Instagram’s servers when you access a page on our website containing such buttons. When you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plug-ins there (possibly after entering your login data).
Instagram LLC., located in the USA, is certified for the us-European “Privacy Shield” agreement, which guarantees compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights and settings options to protect your privacy, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/

10) Use of social media: videos

Use of Youtube videos

This website uses the Youtube embedding feature to display and play videos from the provider “Youtube”, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This uses the enhanced privacy mode, which, according to the provider, does not initiate the storage of user information until the video(s) is played. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “Youtube”, these serve, among other things, to collect video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your information is associated directly with your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of Google’s legitimate interests in the display of personalised advertising, market research and/or the needs-based design of its website. You have a right of objection to the creation of these user profiles, whereby you must contact YouTube to exercise this right. In the course of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Irrespective of any playback of the embedded videos, each time this website is accessed, a connection to the Google network is established, which may trigger further data processing operations without our influence.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

For more information on data protection at “YouTube”, please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the above-mentioned option to make an objection.

11) Online-Marketing

11.1 Use of Google Ads conversion tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to advertise our attractive offers on external websites with the help of advertising material (so-called Google Adwords). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad ad displayed by Google. Cookies are small text files that are stored on your end device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. As a result, cookies cannot be tracked across the websites of Google Ads customers. The information collected through the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you don’t want to participate in tracking, you can block this usage by disabling the Google Conversion Tracking cookie on your web browser under the keyword “User Preferences. You will then not be included in the conversion tracking statistics. We use Google Ads because of our legitimate interest in targeted advertising in accordance with Art. 6 para. 1 lit. f DSGVO. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can find more information about Google’s privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by making the appropriate setting in your browser software to prevent them or by downloading and installing the browser plug-in available under the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be used to a limited extent if you have deactivated the use of cookies.

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the above-mentioned option to make an objection.

11.2 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).

GMP uses cookies to serve ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to keep track of which ads are served in which browser, and to prevent them from being shown more than once. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f DSGVO.

In addition, GMP can use cookie IDs to record so-called conversions that relate to ad requests. This is the case, for example, when a user sees a GMP advertisement and later, using the same browser, calls up the advertiser’s website and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of these tools and therefore inform you as follows according to our state of knowledge: Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address. In the context of the use of GMP it can also come to a transmission of personal data to the servers of Google LLC. in the USA.

If you would like to object to this tracking procedure, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (see https://www.google.de/settings/ads). This setting will be deleted when you deactivate your cookies. Alternatively, you can contact the Digital Advertising Alliance at www.aboutads.info to learn more about setting cookies and to adjust your desired settings. Finally, you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the us European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

You can obtain further information about the data protection regulations of GMP by Google at the following Internet address: https://www.google.de/policies/privacy/

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the procedure described above for making an objection.

12) Tools and Miscellaneous

12.1 Lexoffice
For the handling of the accounting we use the service of the cloud-based accounting software “lexoffice” from Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg.
Lexoffice processes incoming and outgoing invoices as well as, if necessary, our company’s bank transactions in order to automatically capture invoices, match them to transactions and, in a partially automated process, create the financial accounting.
Insofar as personal data are also processed in this process, the processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our justified interest in the efficient organization and documentation of our business transactions.
Further information about lexoffice, the automated processing of data and the data protection regulations can be found at https://www.lexoffice.de/datenschutz/

12.2 Borlabs
This website uses the Cookie-Consent-Tool Borlabs of the provider Mr. Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (“Borlabs”), which sets two technically necessary cookies (“borlabsCookie” and “borlabsCookieUnblockConten “t) to store your cookie preference. The aforementioned processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in providing a cookie preference management system for website visitors.
The “Borlabs Cookie” does not process any personal data. In the “borlabsCookie” cookie your chosen preference is stored, which you selected when you entered the website. The “borlabsCookieUnblockContent” cookie stores which (external) media/content you want to have automatically unlocked at all times. If you wish to revoke these settings, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked again for your cookie preference.

12.3 – Adobe Fonts (Typekit)
This site uses web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (“Adobe”) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Adobe’s servers. This may also involve the transfer of personal information to Adobe’s servers in the United States. This is how Adobe knows that your IP address has been used to access our website. The use of Adobe fonts is in the interest of a consistent and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font from your computer will be used.
In the event that personal data is transferred to Adobe with its registered office in the USA, Adobe has certified itself for the us-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
For more information about Adobe Fonts, please visit https://fonts.adobe.com/ and read the Adobe Privacy Policy: https://www.adobe.com/de/privacy.html
– Google Web Fonts
This site uses so-called web fonts for the uniform display of fonts which are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
To do this, the browser you are using must connect to Google’s servers. This may also involve the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO. If your browser does not support Web Fonts, a standard font from your computer will be used.
In the event that personal data is transferred to Google LLC. with headquarters in the USA, Google LLC. has certified itself for the us-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and read Google’s privacy policy: https://www.google.com/policies/privacy/

12.4 Applications for job vacancies by e-mail

On our website we advertise currently vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.

In order to be included in the application process, applicants must provide us with all personal data required for a well-founded and informed assessment and selection together with their application by e-mail.
The required data includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific proof of the qualifications required for a position. Where appropriate, health-related information may also be required which, in the interests of social protection, must be given special consideration in the person of the applicant under labour and social law.

The components that an application must contain in order to be considered in each individual case and the form in which these components are to be sent by e-mail can be found in the respective job advertisement.

After receipt of the application sent using the specified e-mail contact address, the applicant data is stored by us and evaluated exclusively for the purpose of processing the application. For any queries arising in the course of processing the application, we will use either the e-mail address provided by the applicant with his or her application or a telephone number given.

The legal basis for these processing operations, including contact for queries, is generally Art. 6 para. 1 lit. b DSGVO in conjunction with § 26 para. 1 BDSG, in the sense of which the completion of the application procedure is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (e.g. health data such as information on the status of severely disabled persons) are requested from applicants in the course of the application procedure, processing is carried out in accordance with Art. 9 para. 2 lit. b. DSGVO so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this respect.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9, para. 1, letter h, FADP if it is carried out for purposes of preventive health care or occupational medicine, for assessing the applicant’s ability to work, for medical diagnosis, for health or social care or treatment or for the management of health or social care systems and services.

If, in the course of the evaluation described above, the applicant is not selected or withdraws his or her application prematurely, the data transmitted by e-mail and all electronic correspondence, including the original application e-mail, will be deleted after 6 months at the latest following notification. This period is calculated on the basis of our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to comply with our obligation to provide evidence in accordance with the regulations on the equal treatment of applicants.

In the event of a successful application, the data provided will be deleted on the basis of Art. 6 para. 1 lit. b DSGVO in conjunction with § 26 para. 1 BDSG for the purposes of the employment relationship.

12.5 – Wordfence
For security purposes, this website uses the “Wordfence” plugin, a service provided by Defiant Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”). The plugin protects the website and the IT infrastructure connected to it from unauthorized third-party access, cyber attacks, viruses and malware. Wordfence collects the IP addresses of users and, where applicable, other data about your behavior on our website (in particular URLs and header information) in order to identify and ward off illegitimate page access and threats. The IP address collected is compared with a list of known attackers. If the captured IP address is identified as a security risk, Wordfence can automatically block it from accessing the site. The information collected in this way is transferred to a Defiant Inc. server in the USA and stored there.
The data processing described is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interests in protecting the website from harmful cyber attacks and in maintaining structural and data integrity and security.
Defiant Inc. is (as of May 2018) in the process of certification for the us-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. Until the conclusion of this process, Defiant Inc. is relying on the standard data protection clauses pursuant to Art. 46 sentence 2 lit. c DSGVO as the legal basis for the transfer of data.
If visitors to the website have log-in rights, Wordfence also sets cookies (= small text files) on the visitor’s terminal device. With the help of the cookies, certain location and device information can be read out, enabling an assessment to be made as to whether the login-authorized access originates from an authorized person. At the same time, access rights can be evaluated via the cookies and released via a site-internal firewall according to the authorization level. Finally, the cookies are used to register irregular access by site administrators from new devices or new locations and to notify other administrators of such access.
These cookies are only set if a user has login rights. Wordfence will not set cookies for site visitors without login rights.
If personal data is processed via the cookies, the processing is carried out in accordance with Art. 6 Para.1 lit. f. DSGVO on the basis of our legitimate interest in preventing illegitimate access to the site administration and in defending against unauthorized administrator access.
We have concluded a Data Processing Agreement with Defiant Inc., by which we oblige the company to protect the data of site visitors and not to pass them on to third parties.
For more information about Defiant Inc.’s use of data for Wordfence, please refer to the Wordfence Privacy Policy at https://www.wordfence.com/privacy-policy/.

13) Rights of the data subject

13.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below:

  • Right of access under Art. 15 DSGVO: In particular, you have a right of access to your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of rectification, erasure, restriction of processing, opposition to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees provided under Art. 46 DPA when your data is transferred to third countries;
  • Right to correction in accordance with Art. 16 DSGVO: You have a right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;
  • Right to deletion in accordance with Art. 17 DSGVO: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • Right to limit processing pursuant to Art. 18 DSGVO: You have the right to request the limitation of the processing of your personal data for as long as the accuracy of your data which you dispute is verified, if you refuse to have your data deleted due to unauthorised data processing and instead request the limitation of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims, after we no longer require these data after the purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it is not yet clear whether our legitimate reasons outweigh the objection;
  • Right to information in accordance with Art. 19 DSGVO: If you have asserted the right to rectification, erasure or limitation of processing vis-à-vis the controller, the latter is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.
  • Right to data transfer in accordance with Art. 20 DSGVO: You have the right to receive the personal data you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible;
  • Right to revoke consents granted pursuant to Art. 7 para. 3 DSGVO: You have the right to revoke at any time, with effect for the future, any consent to the processing of data that you have once granted. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation;
  • Right of appeal under Art. 77 DSGVO: If you believe that the processing of personal data relating to you is in breach of the DPA, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged breach occurs.

13.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective legal retention period (e.g. retention periods under commercial and tax law).

When personal data are processed on the basis of express consent pursuant to Art. 6 para. 1 letter a DSGVO, these data are stored until the person concerned revokes his or her consent.

If there are legal retention periods for data which are processed within the framework of legal or similar obligations based on Art. 6 Para. 1 letter b DSGVO, these data are routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfilment or initiation of a contract and/or we have no justified interest in their further storage.

When personal data are processed on the basis of Art. 6 Para. 1 letter f DSGVO, these data are stored until the person concerned exercises his or her right to object in accordance with Art. 21 Para. 1 DSGVO, unless we can prove compelling reasons for processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.

When personal data are processed for the purpose of direct advertising on the basis of Art. 6 Para. 1 letter f DSGVO, these data are stored until the data subject exercises his or her right of objection under Art. 21 Para. 2 DSGVO.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted if they are no longer necessary for the purposes for which they were collected or otherwise processed.

© IT-Recht Kanzlei

DOCID: ##ITK-95384723ced7083b9e0326138c98de72##

 

Version: 202005061607