Privacy Policy

Privacy Policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the responsible party" in this privacy policy.

How do we collect your data?

Your data is collected partly by you providing it to us. This can be, for example, data you enter into a contact form.

Other data is automatically collected by our IT systems when you visit the website, either automatically or after your consent. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). This data collection happens automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request restriction of processing of your personal data under certain circumstances. Additionally, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions about data protection.

Analysis tools and third-party tools

When you visit this website, your surfing behavior can be statistically evaluated. This is mainly done with so-called analysis programs.

Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting

We host the contents of our website with the following provider:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter IONOS). When you visit our website, IONOS records various log files including your IP addresses. Details can be found in the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection legally required contract that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General notes and mandatory information

Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission on the internet (e.g., when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible entity

The responsible entity for data processing on this website is:

Scholz Schönmann GbR
Willibaldstr. 49
80689 Munich

represented by Jasper Scholz and Laura Schönmann

Phone: +491787159530
Email: info@the-designs.de

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, or similar).

Storage duration

Unless a more specific storage duration is stated within this privacy policy, your personal data will remain with us until the purpose for data processing ceases. If you assert a legitimate deletion request or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will occur after these reasons no longer apply.

General notes on the legal bases of data processing on this website

If you have consented to data processing, we process your personal data based on Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR if special categories of data according to Art. 9 para. 1 GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing also takes place based on Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing also takes place based on § 25 para. 1 TTDSG. Consent can be revoked at any time. If your data is necessary for contract fulfillment or pre-contractual measures, we process your data based on Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Art. 6 para. 1 lit. c GDPR. Data processing may also be based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. The applicable legal bases in each individual case are explained in the following paragraphs of this privacy policy.

Note on data transfer to data protection non-secure third countries and transfer to US companies not certified under the DPF

We use, among others, tools from companies based in data protection non-secure third countries as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. We point out that in data protection non-secure third countries, no data protection level comparable to the EU can be guaranteed.

We point out that the USA as a secure third country generally has a data protection level comparable to the EU. Data transfer to the USA is therefore permissible if the recipient holds a certification under the "EU-US Data Privacy Framework" (DPF) or has appropriate additional guarantees. Information on transfers to third countries including data recipients can be found in this privacy policy.

Recipients of personal data

In the course of our business activities, we cooperate with various external entities. Sometimes this requires transferring personal data to these external entities. We only transfer personal data to external entities if this is necessary for contract fulfillment, if we are legally obliged to do so (e.g., transfer of data to tax authorities), if we have a legitimate interest under Art. 6 para. 1 lit. f GDPR in the transfer, or if another legal basis permits the data transfer. When using processors, we only transfer personal data of our customers based on a valid contract for order processing. In the case of joint processing, a contract on joint processing is concluded.

The company holds a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards in data processing in the USA. Every company certified under the DPF commits to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke a previously given consent at any time. The legality of data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE APPLICABLE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA CONCERNING SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In case of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, especially in the member state of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract in a common, machine-readable format, either to yourself or to a third party. If you request direct transfer of the data to another controller, this will only be done as far as technically feasible.

Information, correction, and deletion

You have the right at any time, within the applicable legal provisions, to receive free information about your stored personal data, their origin and recipients, and the purpose of data processing, and if applicable, the right to correct or delete this data. For this and other questions regarding personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data. You can contact us at any time for this. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can request restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need them to assert, exercise, or defend legal claims, you have the right to request restriction of processing instead of deletion.
  • If you have lodged an objection under Art. 21 para. 1 GDPR, a balancing of interests between your interests and ours must be carried out. As long as it is not yet clear whose interests prevail, you have the right to request restriction of processing of your personal data.

If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for important public interest reasons of the European Union or a member state.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the change of the browser address line from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If there is an obligation to provide us with your payment data (e.g., account number for direct debit authorization) after concluding a paid contract, this data is required for payment processing.

Payment transactions via common payment methods (Visa/MasterCard, direct debit) are conducted exclusively over an encrypted SSL or TLS connection. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the lock icon in your browser bar.

With encrypted communication, your payment data transmitted to us cannot be read by third parties.

4. Data collection on this website

Cookies

Our websites use so-called "cookies." Cookies are small data packages and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or an automatic deletion by your web browser occurs.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart function or video display). Other cookies can be used to analyze user behavior or for advertising purposes.

Cookies required for the electronic communication process, to provide certain functions you desire (e.g., shopping cart function), or to optimize the website (e.g., cookies for measuring web audience) (necessary cookies) are stored based on Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for technically error-free and optimized provision of its services. If consent for storing cookies and comparable recognition technologies has been requested, processing is carried out exclusively based on this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); consent can be revoked at any time.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally, and to activate automatic deletion of cookies when closing the browser. Disabling cookies may restrict the functionality of this website.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Usercentrics

This website uses the consent technology from Usercentrics to obtain your consent for storing certain cookies on your device or for using certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter "Usercentrics").

When you enter our website, the following personal data is transmitted to Usercentrics:

  • Your consent(s) or the withdrawal of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your device
  • Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser to assign the consents given or their withdrawal to you. The data collected in this way is stored until you request deletion from us, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.

The Usercentrics banner on this website was configured with the help of eRecht24. You can recognize this by the eRecht24 logo appearing in the banner. To display the eRecht24 logo in the banner, a connection to the eRecht24 image server is established. The IP address is also transmitted but is stored only in anonymized form in the server logs. The eRecht24 image server is located in Germany with a German provider. The banner itself is provided exclusively by Usercentrics.

The use of Usercentrics is to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection legally required contract that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored with us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if requested; consent can be revoked at any time.

The data you enter in the contact form remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.

Inquiry via email, telephone, or fax

If you contact us by email, telephone, or fax, your inquiry including all personal data resulting from it (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if requested; consent can be revoked at any time.

The data you send us via contact inquiries remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – especially statutory retention periods – remain unaffected.

Calendly

On our website, you have the option to schedule appointments with us. For appointment booking, we use the tool "Calendly." The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter "Calendly").

For the purpose of booking an appointment, you enter the requested data and desired appointment in the provided form. The entered data is used for planning, conducting, and possibly for follow-up of the appointment. The appointment data is stored for us on Calendly's servers, whose privacy policy you can view here: https://calendly.com/de/pages/privacy.

The data you enter remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory legal provisions – especially retention periods – remain unaffected.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in as uncomplicated an appointment arrangement as possible with interested parties and customers. If corresponding consent has been requested, processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://calendly.com/pages/dpa.

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection legally required contract that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Registration on this website

You can register on this website to use additional functions on the site. The data entered for this purpose is used only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided completely. Otherwise, we will reject the registration.

For important changes, such as changes in the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you in this way.

The processing of the data entered during registration is for the purpose of carrying out the user relationship established by the registration and, if applicable, for initiating further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration is stored by us as long as you are registered on this website and is then deleted. Statutory retention periods remain unaffected.

5. Analytics Tools and Advertising

IONOS WebAnalytics

This website uses the analytics services of IONOS WebAnalytics (hereinafter: IONOS). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur. As part of the analyses with IONOS, visitor numbers and behavior (e.g., number of page views, duration of a website visit, bounce rates), visitor sources (i.e., from which page the visitor comes), visitor locations, as well as technical data (browser and operating system versions) can be analyzed. For this purpose, IONOS stores the following data in particular:

  • Referrer (previously visited website)
  • Requested website or file
  • Browser type and browser version
  • Operating system used
  • Device type used
  • Time of access
  • IP address in anonymized form (used only to determine the location of access)

According to IONOS, data collection is completely anonymized so that it cannot be traced back to individual persons. Cookies are not stored by IONOS WebAnalytics.

The storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior in order to optimize both its web offering and its advertising. If a corresponding consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

For more information on data collection and processing by IONOS WebAnalytics, please refer to the IONOS privacy policy at the following link: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection legally required contract that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

WP Statistics

This website uses the analytics tool WP Statistics to statistically evaluate visitor accesses. The provider is Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).

With WP Statistics, we can analyze the use of our website. WP Statistics collects, among other things, log files (IP address, referrer, browsers used, user origin, search engine used) and actions that website visitors have taken on the site (e.g., clicks and views).

The data collected with WP Statistics is stored exclusively on our own server.

The use of this analytics tool is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize both our web offering and our advertising. If a corresponding consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

IP Anonymization

We use WP Statistics with anonymized IP. Your IP address is shortened so that it can no longer be directly assigned to you.

6. Plugins and Tools

Adobe Fonts

This website uses web fonts from Adobe for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you access this website, your browser loads the required fonts directly from Adobe to display them correctly on your device. Your browser establishes a connection to Adobe's servers in the USA. This allows Adobe to learn that this website was accessed via your IP address. According to Adobe, no cookies are stored when providing the fonts.

The storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform display of the font on his website. If a corresponding consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.

More information about Adobe Fonts can be found at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.

The Adobe privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html

The company holds a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards in data processing in the USA. Every company certified under the DPF commits to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TNo9AAG&status=Active

7. eCommerce and Payment Providers

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data to establish, design, and change our contractual relationships. Personal data about the use of this website (usage data) is collected, processed, and used only to the extent necessary to enable or bill the user for the use of the service. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

The collected customer data is deleted after the order is completed or the business relationship ends and any applicable statutory retention periods have expired. Statutory retention periods remain unaffected.

Data transmission upon conclusion of contracts for services and digital content

We only transmit personal data to third parties if this is necessary for contract processing, for example to the credit institution commissioned with payment processing.

No further transmission of data takes place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your explicit consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Payment Services

We integrate payment services from third-party companies on our website. When you make a purchase with us, your payment data (e.g., name, payment amount, account details, credit card number) is processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The use of payment service providers is based on Art. 6 para. 1 lit. b GDPR (contract processing) as well as in the interest of a smooth, comfortable, and secure payment process (Art. 6 para. 1 lit. f GDPR). If your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consents can be revoked at any time for the future.

The following payment services / payment service providers are used on this website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

For details, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Apple Pay

The provider of the payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. You can find Apple's privacy policy at: https://www.apple.com/legal/privacy/de-ww/.

Google Pay

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find Google's privacy policy here: https://policies.google.com/privacy.

Stripe

The provider for customers within the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter "Stripe").

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.

Details can be found in Stripe's privacy policy at the following link: https://stripe.com/de/privacy.

8. Audio and Video Conferences

Data Processing

For communication with our customers, we use, among others, online conferencing tools. The specific tools we use are listed below. When you communicate with us via video or audio conference over the internet, your personal data is collected and processed by us and the provider of the respective conferencing tool.

The conferencing tools collect all data you provide/use to utilize the tools (email address and/or your phone number). Furthermore, the conferencing tools process the duration of the conference, start and end (time) of participation in the conference, number of participants, and other "context information" related to the communication process (metadata).

Additionally, the provider of the tool processes all technical data necessary to conduct the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, as well as the type of connection.

If content is exchanged, uploaded, or otherwise provided within the tool, this content is also stored on the servers of the tool providers. Such content includes in particular cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.

Please note that we do not have full control over the data processing operations of the tools used. Our options are primarily determined by the corporate policies of the respective provider. Further information on data processing by the conferencing tools can be found in the privacy policies of the respective tools, which we have listed below this text.

Purpose and Legal Basis

The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR). Where consent has been requested, the use of the respective tools is based on this consent; consent can be revoked at any time with effect for the future.

Storage duration

The data directly collected by us via the video and conferencing tools will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage duration of your data stored by the operators of the conferencing tools for their own purposes. For details, please refer directly to the operators of the conferencing tools.

Conferencing Tools Used

We use the following conferencing tools:

Zoom

We use Zoom. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. Details on data processing can be found in Zoom's privacy policy: https://zoom.us/de-de/privacy.html.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://zoom.us/de-de/privacy.html.

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection legally required contract that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in Microsoft Teams' privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

The company holds a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards in data processing in the USA. Every company certified under the DPF commits to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection legally required contract that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Google Meet

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on data processing can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

The company holds a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards in data processing in the USA. Every company certified under the DPF commits to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Order processing

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a data protection legally required contract that ensures that this service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.